This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa File: 8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa (raw, json) Hash identifier: cqdEH+YqsDTlZa29ZC8kStbPpW4kii6uMwUS0kN9m54= Subject key identifier: 99:8B:A0:3B:67:CE:8B:BA:0E:77:AB:1B:78:4E:64:E0:A2:37:94:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C40113A25B8C8E1A8B7BEC500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396576 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:3a:25:b8:c8:e1:a8:b7:be:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=2fe01df8-7679-4b77-a574-bf0d544da23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:be:11:06:10:93:69:7b:d7:a2:4e:ba:91:72: 2b:e3:cb:27:7d:0a:99:7a:f9:3a:4f:84:c8:1b:93: 0d:44:71:ec:b2:0f:b9:b2:c7:11:5b:9c:02:97:17: e0:0e:08:bd:45:c3:a6:85:4d:b1:b2:28:7d:b5:bb: 43:e5:8d:be:1f:ca:3d:6f:bd:71:fc:73:34:1d:6c: 7a:df:ab:9f:cc:eb:05:fe:b3:c9:6b:a8:98:5e:52: de:11:b4:d9:98:26:0c:a2:ad:47:15:17:b8:45:07: 9d:d8:5d:fd:48:d7:b1:42:1f:96:8f:d7:9d:69:37: b4:e2:5e:f6:83:b4:c2:8e:9a:6c:b8:fa:3a:fd:c6: da:dc:c6:17:c9:e0:44:b8:33:a0:52:db:66:94:5a: e3:ad:d3:eb:4d:d4:8c:b1:c0:96:27:9e:0e:fd:29: 15:30:fb:2d:0d:d0:b5:ed:b3:34:cc:8f:d3:7e:c6: 4c:72:18:8e:f0:2f:e5:1f:f3:5c:63:61:99:6d:0e: 18:18:63:b0:0f:44:d7:27:91:aa:7f:da:f6:aa:a8: fa:f8:b4:d3:30:a4:7f:41:4c:75:94:c0:b1:04:49: da:22:f0:70:b3:e2:d0:e9:67:2e:d3:28:89:e6:7e: 0e:9c:be:8f:1d:64:2f:af:04:c2:af:01:f4:99:2f: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8B:A0:3B:67:CE:8B:BA:0E:77:AB:1B:78:4E:64:E0:A2:37:94:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5fa7b1-6448-36ee-98b9-3fe729b4f686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:d6:50:fa:da:e3:91:47:54:e3:62:cf:c1:b2:ad:41:31:05: 47:e7:00:3b:ee:12:74:77:ed:e6:46:7f:c3:09:8f:08:1d:c4: ca:ad:7a:70:93:5e:9f:e1:d5:98:c5:72:b1:c1:b7:f0:3b:9e: d9:7b:30:15:44:71:f8:c7:15:eb:d5:80:c0:ac:58:16:fc:5b: 44:0a:39:74:6e:d1:3e:c1:06:dc:cf:7a:f6:c0:5b:05:57:cf: ea:fa:2c:b7:40:5d:25:af:97:5d:16:c7:df:87:ab:fe:a6:8f: 1b:c1:10:6d:b7:27:a6:75:e9:99:76:32:54:4f:42:18:e7:65: 89:f5:fe:d8:13:ae:35:02:0b:9e:28:33:dd:d5:05:d2:a1:61: d6:cc:ab:42:25:2d:ea:8a:b0:af:14:dc:34:07:1a:b8:88:9a: 39:40:2e:31:1d:37:4e:3f:2b:78:c0:1c:f3:91:1a:fd:a3:e1: ec:28:b6:64:81:91:b9:29:28:a9:18:b8:87:6b:a9:c0:d2:6d: 4c:1b:75:91:35:44:56:a9:10:71:e3:d5:07:1f:fe:48:d7:a3: 38:4a:3e:26:73:67:4d:da:be:41:61:e1:a3:4b:52:92:61:c6: df:be:b4:b8:71:a2:e4:5e:4f:83:32:53:f2:71:84:ab:eb:88: 3e:61:d7:97 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAEToluMjhqLe+xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MmZlMDFkZjgtNzY3OS00Yjc3LWE1NzQtYmYwZDU0NGRhMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi74RBhCTaXvXok66kXIr48snfQqZevk6T4TI G5MNRHHssg+5sscRW5wClxfgDgi9RcOmhU2xsih9tbtD5Y2+H8o9b71x/HM0HWx6 36ufzOsF/rPJa6iYXlLeEbTZmCYMoq1HFRe4RQed2F39SNexQh+Wj9edaTe04l72 g7TCjppsuPo6/cba3MYXyeBEuDOgUttmlFrjrdPrTdSMscCWJ54O/SkVMPstDdC1 7bM0zI/TfsZMchiO8C/lH/NcY2GZbQ4YGGOwD0TXJ5Gqf9r2qqj6+LTTMKR/QUx1 lMCxBEnaIvBws+LQ6Wcu0yiJ5n4OnL6PHWQvrwTCrwH0mS/kSQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJmLoDtnzou6DnerG3hOZOCiN5SLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGQ1ZmE3YjEtNjQ0OC0z NmVlLTk4YjktM2ZlNzI5YjRmNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC41lD62uORR1TjYs/Bsq1BMQVH5wA77hJ0d+3m Rn/DCY8IHcTKrXpwk16f4dWYxXKxwbfwO57ZezAVRHH4xxXr1YDArFgW/FtECjl0 btE+wQbcz3r2wFsFV8/q+iy3QF0lr5ddFsffh6v+po8bwRBttyemdemZdjJUT0IY 52WJ9f7YE641AgueKDPd1QXSoWHWzKtCJS3qirCvFNw0Bxq4iJo5QC4xHTdOPyt4 wBzzkRr9o+HsKLZkgZG5KSipGLiHa6nA0m1MG3WRNURWqRBx49UHH/5I16M4Sj4m c2dN2r5BYeGjS1KSYcbfvrS4caLkXk+DMlPycYSr64g+YdeX -----END CERTIFICATE-----Generated at Sun Dec 21 00:13:49 2025 by rpki-client