This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa File: b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa (raw, json) Hash identifier: 3wI+htSaBgNvST0SsfOQ+Fv6ASiinTMaalzsXtt0zVY= Subject key identifier: C8:1E:52:D3:DB:03:BD:44:EB:30:CD:A5:5E:E0:2C:98:6A:DB:D5:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C338139B662E2C48D38A138C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 396827 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:39:b6:62:e2:c4:8d:38:a1:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=2b687e93-334a-478d-bcd6-c424326333ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:27:95:37:3d:a5:5f:35:26:23:64:f5:26: 65:ac:5a:83:99:cb:df:7b:49:fb:1c:2d:1a:12:d6: 7d:02:fd:87:30:5f:42:65:07:82:3b:de:1c:bd:e0: d6:84:9b:d2:b5:0e:89:94:d0:c3:49:eb:14:48:46: 20:ec:c1:97:a6:4a:9a:d2:f0:ad:92:65:6c:09:23: 15:3b:65:5e:a9:bf:25:bb:9d:86:9d:3b:e0:a7:ae: cc:de:16:d3:a7:fb:c4:d2:62:2c:d1:e9:c4:47:0c: d2:08:1f:d4:98:b1:fe:8b:01:c2:e1:d8:cc:fb:3c: d7:11:ef:3f:93:e7:d6:96:3c:ac:62:5a:f1:00:55: b2:f1:ac:3b:f6:20:dc:8a:10:0a:72:b1:4d:ba:03: b5:e4:eb:2a:61:07:4e:34:77:c4:21:95:83:c6:60: 8b:f1:af:d4:05:03:16:3d:fd:0d:40:b6:f5:5c:ae: 97:5a:39:09:42:3f:16:72:10:b4:bf:28:0d:fa:4e: 24:fc:d9:6a:9e:9c:ca:41:14:03:47:04:64:7f:e8: ea:39:1e:08:11:2c:96:97:57:c8:af:e3:a5:94:b3: ed:16:68:d4:08:4d:95:d6:7e:c1:0a:30:2c:8f:28: 0b:99:4f:1f:e2:01:28:1b:6e:63:6b:b1:4a:d1:91: bc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1E:52:D3:DB:03:BD:44:EB:30:CD:A5:5E:E0:2C:98:6A:DB:D5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9dd3bdc-bdc0-3a3e-b372-fdf0aa206c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3b:64:74:ee:79:b3:a2:a1:a6:47:d4:f6:df:52:13:84:87: c6:f7:3a:a4:82:28:e8:35:07:fd:82:cc:82:7b:0f:45:3a:e2: 9a:7f:8c:37:e7:30:0b:f0:00:7a:d4:13:ae:90:96:1a:27:34: 02:1e:96:a3:62:7a:c7:be:ee:76:4f:36:3a:06:bf:58:45:46: 36:04:22:03:bc:52:f3:72:07:77:ef:0f:64:17:35:6b:0e:90: 97:fa:0b:05:6a:da:95:5a:a3:70:97:a9:69:53:c7:f7:7b:7a: f6:a1:b6:b0:03:33:03:92:44:07:c2:d4:eb:ca:3d:72:5e:ca: 62:ad:4c:92:9e:9b:56:2b:68:9c:56:57:c0:ca:53:25:76:c4: 27:bd:88:c0:2d:26:bc:5e:62:eb:95:9c:ac:1c:33:fb:d9:c3: 09:94:08:84:46:6a:c9:ae:6e:21:43:3d:e7:f9:f8:4a:65:a2: be:c4:1d:3a:44:8c:8f:b0:61:f4:05:c3:42:8a:18:f5:6b:b6: 10:30:a7:35:12:c4:c6:c3:33:cd:f7:29:3a:00:01:60:fa:17: 4e:1c:58:66:35:e9:69:e2:f5:27:b7:3d:75:da:8e:7e:46:8c: cf:d2:c0:94:f1:9d:de:a1:8d:d2:de:c9:d0:c6:14:fa:75:e8: 3f:83:c1:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwzgTm2YuLEjTihOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk MmI2ODdlOTMtMzM0YS00NzhkLWJjZDYtYzQyNDMyNjMzM2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO4nlTc9pV81JiNk9SZlrFqDmcvfe0n7HC0a EtZ9Av2HMF9CZQeCO94cveDWhJvStQ6JlNDDSesUSEYg7MGXpkqa0vCtkmVsCSMV O2Veqb8lu52GnTvgp67M3hbTp/vE0mIs0enERwzSCB/UmLH+iwHC4djM+zzXEe8/ k+fWljysYlrxAFWy8aw79iDcihAKcrFNugO15OsqYQdONHfEIZWDxmCL8a/UBQMW Pf0NQLb1XK6XWjkJQj8WchC0vygN+k4k/NlqnpzKQRQDRwRkf+jqOR4IESyWl1fI r+OllLPtFmjUCE2V1n7BCjAsjygLmU8f4gEoG25ja7FK0ZG8qwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMgeUtPbA71E6zDNpV7gLJhq29WlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlkZDNiZGMtYmRjMC0z YTNlLWIzNzItZmRmMGFhMjA2YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACA7ZHTuebOioaZH1PbfUhOEh8b3OqSCKOg1B/2CzIJ7D0U64pp/ jDfnMAvwAHrUE66QlhonNAIelqNiese+7nZPNjoGv1hFRjYEIgO8UvNyB3fvD2QX NWsOkJf6CwVq2pVao3CXqWlTx/d7evahtrADMwOSRAfC1OvKPXJeymKtTJKem1Yr aJxWV8DKUyV2xCe9iMAtJrxeYuuVnKwcM/vZwwmUCIRGasmubiFDPef5+Eplor7E HTpEjI+wYfQFw0KKGPVrthAwpzUSxMbDM833KToAAWD6F04cWGY16Wni9Se3PXXa jn5GjM/SwJTxnd6hjdLeydDGFPp16D+DwUM= -----END CERTIFICATE-----Generated at Sat Dec 20 14:43:44 2025 by rpki-client