This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa File: f20f7c09-af10-3817-917d-de587331fc66.roa (raw, json) Hash identifier: v5XOJJlyQ+PdVjvs3fQP/jOXvun/278fl/yPzLj5xq8= Subject key identifier: A0:DA:FD:37:BC:56:6B:82:2F:C2:FD:62:EF:80:C3:5C:57:82:39:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C338114060DEFA25A86C1F760 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 397205 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:14:06:0d:ef:a2:5a:86:c1:f7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=d4cd16b1-36fb-45b3-9106-165998cb232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:74:ac:51:98:48:bb:09:3a:1b:25:7b:54:66: 1a:25:b8:dd:63:90:0e:aa:db:3a:95:f2:83:a7:54: 6f:5e:a5:e7:30:27:b8:34:a0:84:7e:06:7d:a7:8a: 26:aa:d9:6d:83:a0:6e:f6:ac:8b:de:15:39:c4:81: 99:e9:14:a6:74:41:6e:c1:18:ca:80:8c:fd:01:40: 72:c1:41:8d:93:30:99:ed:42:64:08:07:52:a9:3c: 9a:4b:cc:4e:b4:4a:9b:b0:fc:22:db:92:4f:8b:1a: 5c:2d:4e:fe:8b:6e:3f:cf:5a:28:24:c5:82:a3:6c: 71:f0:c2:21:28:86:ff:07:9d:d7:57:26:17:77:5d: 87:8f:03:38:a4:38:2c:73:16:0e:ce:09:d6:ba:42: b0:d3:ed:07:60:4a:8b:ad:3a:dd:d2:54:67:c1:0b: f6:8b:9b:e3:82:5e:6f:9b:ca:fb:c1:25:1e:5c:07: 84:18:12:e3:1b:ce:88:d3:22:20:2f:d1:d8:cd:25: 4b:05:c4:9b:13:2c:37:ca:dd:c8:6b:f1:f6:02:18: 4b:bc:34:57:c0:b7:50:6b:c8:ec:ec:4e:13:a0:ea: c8:80:0a:cd:17:db:f9:7e:62:d6:55:97:37:52:7e: a1:9a:97:c6:5a:1e:60:1b:e3:b6:0b:f1:e3:ab:94: 0f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DA:FD:37:BC:56:6B:82:2F:C2:FD:62:EF:80:C3:5C:57:82:39:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:bf:91:2b:3c:49:19:97:1a:26:50:0c:8b:11:55:1b:19:16: ae:85:05:21:73:39:a4:93:5a:4c:e5:0c:c3:76:e0:d5:90:82: 29:7d:ee:c8:4d:af:30:cf:97:f2:53:e2:61:7c:d7:a4:b5:cf: ed:9e:92:43:b8:5c:04:04:aa:f0:22:97:76:03:02:0d:9f:bc: 2e:f6:52:eb:6c:c4:46:0a:d1:e8:1a:b3:ff:91:2c:59:94:49: 8f:2a:31:ad:bf:d0:ef:75:ce:31:be:eb:fc:f0:23:6f:29:73: 35:39:be:63:2b:c5:ee:c3:ad:09:74:76:29:5e:89:58:1f:a7: a6:f4:e4:d7:47:83:31:d1:ac:c5:cc:34:d7:70:6a:67:70:15: dd:f4:7b:ae:88:fd:9c:b6:c8:52:a5:3e:2d:c0:b6:4a:7e:68: 4a:bd:f1:9e:85:6a:90:ea:c6:cc:08:16:bc:3f:df:aa:35:4b: e8:35:ac:70:ea:21:15:b3:1a:76:7f:a1:42:3b:23:36:9b:e2: f2:87:94:bf:c5:43:57:30:c2:f7:e0:5c:91:28:d2:f7:9c:d2: 79:0f:8f:0b:14:8a:8c:6e:6c:b1:b3:e5:50:ae:e4:79:fe:91: 50:2e:3b:a2:04:f9:e8:d4:ce:96:99:8b:a5:58:23:55:a1:1d: 24:b1:47:eb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwzgRQGDe+iWobB92AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZDRjZDE2YjEtMzZmYi00NWIzLTkxMDYtMTY1OTk4Y2IyMzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXSsUZhIuwk6GyV7VGYaJbjdY5AOqts6lfKD p1RvXqXnMCe4NKCEfgZ9p4omqtltg6Bu9qyL3hU5xIGZ6RSmdEFuwRjKgIz9AUBy wUGNkzCZ7UJkCAdSqTyaS8xOtEqbsPwi25JPixpcLU7+i24/z1ooJMWCo2xx8MIh KIb/B53XVyYXd12HjwM4pDgscxYOzgnWukKw0+0HYEqLrTrd0lRnwQv2i5vjgl5v m8r7wSUeXAeEGBLjG86I0yIgL9HYzSVLBcSbEyw3yt3Ia/H2AhhLvDRXwLdQa8js 7E4ToOrIgArNF9v5fmLWVZc3Un6hmpfGWh5gG+O2C/Hjq5QPHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDa/Te8VmuCL8L9Yu+Aw1xXgjkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjIwZjdjMDktYWYxMC0z ODE3LTkxN2QtZGU1ODczMzFmYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALq/kSs8SRmXGiZQDIsRVRsZFq6FBSFzOaSTWkzlDMN24NWQgil9 7shNrzDPl/JT4mF816S1z+2ekkO4XAQEqvAil3YDAg2fvC72UutsxEYK0egas/+R LFmUSY8qMa2/0O91zjG+6/zwI28pczU5vmMrxe7DrQl0dileiVgfp6b05NdHgzHR rMXMNNdwamdwFd30e66I/Zy2yFKlPi3Atkp+aEq98Z6FapDqxswIFrw/36o1S+g1 rHDqIRWzGnZ/oUI7Izab4vKHlL/FQ1cwwvfgXJEo0vec0nkPjwsUioxubLGz5VCu 5Hn+kVAuO6IE+ejUzpaZi6VYI1WhHSSxR+s= -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:18 2025 by rpki-client