This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa File: 35af7919-ac24-3711-b19c-92f730b0defb.roa (raw, json) Hash identifier: sNQoZwbPY/dx6d8sIVo9ABcRMZUlgWsELT/0yd6zSOs= Subject key identifier: DB:0B:3F:C1:86:B0:29:71:66:EA:30:29:B6:00:08:17:DB:7B:7D:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C4011391400493AA718FA3000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 397208 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:39:14:00:49:3a:a7:18:fa:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=fd5453d9-f221-486c-ad48-303ab153551a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:55:e7:bb:e9:c6:66:15:95:4c:cc:37:25: f4:9a:52:01:fa:5e:70:ff:2a:c7:8a:84:01:b3:4c: 5f:a8:d1:5e:de:76:ba:32:f3:bc:88:86:95:5d:58: 98:99:80:e9:35:1b:d3:71:95:68:f3:90:5d:c1:8f: 77:a2:84:1b:3f:f1:15:47:bc:c5:af:fb:8f:67:9e: 6d:16:41:7e:26:34:00:74:1f:70:8a:fd:3c:5b:ea: 4d:e5:98:b1:dc:8b:00:17:1b:fb:f6:56:ac:95:80: 95:8c:ef:38:fb:a5:01:63:d0:38:80:ec:3e:d7:42: df:ee:d5:80:9d:46:ea:69:a8:0b:84:03:14:6a:63: b3:f5:b3:5a:27:30:19:1c:c2:47:e2:fd:6d:c5:d0: 5b:eb:73:34:68:4d:ad:ea:73:76:72:d7:5b:f9:0d: 2a:4c:d6:aa:97:33:5f:ef:2f:ac:15:c2:cb:07:b3: b8:89:d8:b2:f5:ae:33:2e:99:8e:6d:80:c9:87:09: ce:28:81:1c:00:51:98:78:75:11:d8:76:15:22:15: 91:c1:c5:00:6f:19:e8:26:33:f9:6e:2b:df:43:0c: 38:fe:04:1f:5d:b0:fc:25:55:ea:85:45:7d:69:e4: bc:28:4b:f3:e8:63:07:d0:34:ca:65:09:4c:d8:3e: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0B:3F:C1:86:B0:29:71:66:EA:30:29:B6:00:08:17:DB:7B:7D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:57:32:f9:eb:4c:99:5d:47:09:99:4b:fe:e3:7e:27:dd:a3: 18:16:53:70:ec:f7:11:4b:ff:0a:eb:75:1e:6e:e1:b4:ef:2d: 15:8b:23:0b:31:9e:63:bc:ad:a6:02:50:e1:0f:50:e0:e1:12: c8:38:37:cf:21:89:e7:64:1e:d5:36:d0:ba:07:59:8d:8f:02: e3:b9:f4:0d:aa:38:53:06:b1:33:59:88:7d:5e:d4:d9:6e:35: 3e:2f:b4:73:a2:6c:48:bb:f9:be:43:34:d1:5e:6a:cd:72:e2: 0a:85:f8:f1:aa:8d:de:13:bc:f7:ea:5c:3b:f3:3e:28:ea:a7: 99:20:4a:65:b4:7a:99:a4:b8:b1:7a:cd:49:16:e5:64:1b:15: 90:4c:97:51:17:09:e8:3d:4b:fc:f8:a0:59:50:ea:7a:46:16: 55:9c:ce:08:8c:4d:dc:be:6e:9a:a0:c8:7b:3f:c4:d0:82:ef: e9:aa:b9:7f:da:08:2c:6a:6c:98:53:76:1a:2b:69:14:fe:d8: fd:b1:e2:16:53:d6:58:ea:6e:e1:29:4c:91:67:bc:b4:7d:22: c3:11:85:15:be:fd:f5:e5:a5:0d:e0:df:89:c0:81:6f:94:c1: 95:df:69:a8:01:ae:b3:57:91:e0:08:f8:ab:45:96:bb:1f:6f: 85:e2:d2:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETkUAEk6pxj6MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZmQ1NDUzZDktZjIyMS00ODZjLWFkNDgtMzAzYWIxNTM1NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvNV57vpxmYVlUzMNyX0mlIB+l5w/yrHioQB s0xfqNFe3na6MvO8iIaVXViYmYDpNRvTcZVo85BdwY93ooQbP/EVR7zFr/uPZ55t FkF+JjQAdB9wiv08W+pN5Zix3IsAFxv79laslYCVjO84+6UBY9A4gOw+10Lf7tWA nUbqaagLhAMUamOz9bNaJzAZHMJH4v1txdBb63M0aE2t6nN2ctdb+Q0qTNaqlzNf 7y+sFcLLB7O4idiy9a4zLpmObYDJhwnOKIEcAFGYeHUR2HYVIhWRwcUAbxnoJjP5 bivfQww4/gQfXbD8JVXqhUV9aeS8KEvz6GMH0DTKZQlM2D52rQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNsLP8GGsClxZuowKbYACBfbe32HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVhZjc5MTktYWMyNC0z NzExLWIxOWMtOTJmNzMwYjBkZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBiVzL560yZXUcJmUv+434n3aMYFlNw7PcRS/8K 63UebuG07y0ViyMLMZ5jvK2mAlDhD1Dg4RLIODfPIYnnZB7VNtC6B1mNjwLjufQN qjhTBrEzWYh9XtTZbjU+L7RzomxIu/m+QzTRXmrNcuIKhfjxqo3eE7z36lw78z4o 6qeZIEpltHqZpLixes1JFuVkGxWQTJdRFwnoPUv8+KBZUOp6RhZVnM4IjE3cvm6a oMh7P8TQgu/pqrl/2ggsamyYU3YaK2kU/tj9seIWU9ZY6m7hKUyRZ7y0fSLDEYUV vv315aUN4N+JwIFvlMGV32moAa6zV5HgCPirRZa7H2+F4tIk -----END CERTIFICATE-----Generated at Thu Dec 25 07:24:43 2025 by rpki-client