This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa File: a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa (raw, json) Hash identifier: WvvLRYeWc/uRGlB5CRERDpKvkY1QDHcnRL/5fuxX5c0= Subject key identifier: 33:40:83:BF:35:48:19:35:D3:AC:85:64:E2:28:16:C4:F9:C8:1F:BC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C401137B42C3BAB3D8B084E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 396563 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:37:b4:2c:3b:ab:3d:8b:08:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=d681a305-3473-49e1-a2d8-cefa9a6debdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7d:c2:d3:aa:63:ff:2a:da:1c:56:c0:42:ce: 2c:f2:6b:17:e8:90:5b:e7:9e:73:a3:93:38:cf:77: b4:ab:48:86:d4:40:71:5a:66:08:96:7d:58:cd:bc: ec:6c:19:b7:29:0a:6c:cc:04:a3:dc:17:cd:14:23: d7:32:d8:14:d9:a4:0d:f0:1b:53:98:61:19:17:26: 18:42:25:83:4d:72:81:e5:3b:e9:ac:15:bc:6e:72: 04:55:8c:79:b9:69:fc:ba:0f:c5:d1:46:7f:dd:ec: ed:c8:af:8b:45:b5:98:88:d4:36:a8:e5:39:2a:cf: 16:04:8f:e9:5a:43:7b:5e:9e:31:84:0f:c0:f7:8e: ea:ed:df:ea:32:80:06:cb:87:32:df:44:cd:87:16: 48:fb:c3:ab:80:e7:f7:58:a3:eb:d4:ab:18:9e:f0: 1f:b2:f3:78:e9:42:72:6a:84:b5:98:f4:5a:64:8f: 88:d8:68:2c:85:07:71:be:9e:c7:e3:8e:f6:88:79: 31:f9:3d:5e:a6:c5:9f:73:b9:7c:43:5b:df:ab:71: 85:ae:e9:0e:41:6b:c1:be:26:10:86:f6:a4:1a:df: 1c:be:62:31:21:cd:f3:e3:13:9e:87:52:95:60:9a: 36:57:8b:95:15:1a:07:2d:56:ad:1b:9f:4f:ba:95: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:40:83:BF:35:48:19:35:D3:AC:85:64:E2:28:16:C4:F9:C8:1F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a90c4d-bc05-3308-9338-25fc2a5a1fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:dc:26:b5:60:e6:3b:87:7d:31:f9:47:f4:d8:20:77:ce:96: ac:f0:ec:f8:b0:b4:4e:7c:bf:60:de:68:c1:b1:bb:13:54:e1: 04:cc:3d:01:08:35:3c:66:a9:18:dc:8f:50:d1:73:94:d7:91: 27:77:6c:29:7f:b9:ba:02:54:38:e3:bf:6c:03:d4:09:a5:91: 00:e3:91:46:85:0b:d9:40:1c:23:3d:fe:03:bf:4d:07:4d:86: dc:3b:83:fd:ee:74:c7:52:af:a8:0f:e3:04:c5:36:d3:f7:15: b8:62:5a:12:88:99:e7:11:42:9e:fe:4d:8b:b4:76:81:52:ec: 94:e2:8a:fe:fe:62:9b:db:f3:dd:b6:23:a4:73:d4:de:44:90: ca:8f:ae:71:9b:06:94:e4:77:08:af:3b:a8:55:7a:e5:52:49: 13:fa:0b:50:1d:11:10:b5:9e:db:fd:d2:ca:c1:91:a8:05:94: 80:0f:5b:a6:39:ca:92:93:96:ac:82:2a:80:24:2e:58:49:8b: 98:0e:10:75:c6:13:ed:fc:95:71:c6:28:ba:57:d5:ee:79:46: 7d:38:04:d1:fb:de:9b:f4:11:b3:e4:e6:16:ad:ec:a7:f1:d4: 72:cf:4b:1c:72:4e:d0:ad:e4:6d:b0:b0:f3:37:ff:cc:21:5e: 60:7c:ff:20 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExAETe0LDurPYsIToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZDY4MWEzMDUtMzQ3My00OWUxLWEyZDgtY2VmYTlhNmRlYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2n3C06pj/yraHFbAQs4s8msX6JBb555zo5M4 z3e0q0iG1EBxWmYIln1YzbzsbBm3KQpszASj3BfNFCPXMtgU2aQN8BtTmGEZFyYY QiWDTXKB5TvprBW8bnIEVYx5uWn8ug/F0UZ/3eztyK+LRbWYiNQ2qOU5Ks8WBI/p WkN7Xp4xhA/A947q7d/qMoAGy4cy30TNhxZI+8OrgOf3WKPr1KsYnvAfsvN46UJy aoS1mPRaZI+I2GgshQdxvp7H4472iHkx+T1epsWfc7l8Q1vfq3GFrukOQWvBviYQ hvakGt8cvmIxIc3z4xOeh1KVYJo2V4uVFRoHLVatG59PupXmxQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDNAg781SBk106yFZOIoFsT5yB+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlhOTBjNGQtYmMwNS0z MzA4LTkzMzgtMjVmYzJhNWExZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC53Ca1YOY7h30x+Uf02CB3zpas8Oz4sLROfL9g 3mjBsbsTVOEEzD0BCDU8ZqkY3I9Q0XOU15End2wpf7m6AlQ4479sA9QJpZEA45FG hQvZQBwjPf4Dv00HTYbcO4P97nTHUq+oD+MExTbT9xW4YloSiJnnEUKe/k2LtHaB UuyU4or+/mKb2/PdtiOkc9TeRJDKj65xmwaU5HcIrzuoVXrlUkkT+gtQHREQtZ7b /dLKwZGoBZSAD1umOcqSk5asgiqAJC5YSYuYDhB1xhPt/JVxxii6V9XueUZ9OATR +96b9BGz5OYWreyn8dRyz0scck7QreRtsLDzN//MIV5gfP8g -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:46 2025 by rpki-client