This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa File: cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa (raw, json) Hash identifier: hAXwWw4PT+S+bZiVsaLB6dJ3yKrOHICVGdhlzk4K5To= Subject key identifier: C3:A1:CB:73:89:3F:F2:C7:05:75:94:9F:A7:2E:17:3D:2D:CD:AE:C4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C24263A8ABB91CA3E57A4E480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 397210 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:3a:8a:bb:91:ca:3e:57:a4:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=bc0156ab-2f97-4b26-9111-cad935f382c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:45:17:ff:b9:f4:91:24:20:69:ea:60:ba: 24:a1:26:b2:3d:17:c3:cf:3d:8f:b3:fd:e4:a2:46: db:79:c5:45:db:51:6f:22:c6:23:bc:7e:c2:d5:92: e9:83:e3:72:93:9f:fa:a8:4d:69:77:55:6c:bf:9a: fa:a3:52:db:87:89:06:4a:e0:65:c0:5a:7d:fb:69: 2c:58:f9:62:85:ab:e0:08:11:b3:5f:18:9a:36:a5: 71:0e:68:07:61:bc:5c:e0:a0:c2:be:b7:a8:5b:a0: 68:48:fa:b5:9c:52:6d:70:c5:fb:9e:09:64:7a:71: a6:db:d1:22:62:7c:8d:6c:00:fd:d9:57:2e:50:e0: c0:e0:ae:49:f5:cb:e3:7a:d8:e6:a5:ef:ce:fc:f2: 89:04:cb:20:c0:3d:1a:9d:37:7e:ca:37:7f:a7:18: a7:27:71:7b:b0:ab:a9:87:2b:c1:ae:9d:02:18:df: 07:48:95:17:83:1c:21:6d:b2:8d:7a:09:44:90:8b: 4d:5a:19:80:41:d9:38:14:7f:a2:a7:7f:83:14:0c: 24:20:86:77:44:9b:0a:56:05:d9:11:13:ce:a1:4a: db:03:5b:48:fc:3b:44:ae:f9:63:34:14:00:2a:cd: 0d:c7:9b:e8:14:95:21:9d:da:c9:f2:09:5b:c4:2b: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A1:CB:73:89:3F:F2:C7:05:75:94:9F:A7:2E:17:3D:2D:CD:AE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:51:19:78:98:3b:ed:2e:cd:b8:c8:fe:7c:82:06:05:d2:a6: 08:e5:39:00:f5:0a:91:21:01:40:c1:19:0e:39:e9:48:b1:a2: 57:79:30:0f:5d:7a:d5:3b:7a:2c:56:40:3e:53:fc:2a:9c:76: 39:51:03:8c:d5:dd:4e:a7:8e:3f:67:db:2e:8b:b1:71:e5:6a: c6:ad:76:70:20:23:c4:d1:88:b6:24:5e:07:23:6a:f1:37:5b: d4:6e:bd:bc:99:4f:0f:86:d1:c3:d1:fe:40:86:f0:81:45:76: e5:58:e1:c7:b1:5a:8c:ff:9f:8f:f0:9f:5e:fb:f7:fc:94:fa: e6:f1:38:60:e6:3c:74:f3:a0:94:3c:48:58:f6:6b:75:d8:7d: 2a:04:dd:0d:96:ce:5d:b9:8c:c8:2e:11:24:57:5e:af:77:c0: f8:b4:24:35:6c:b0:79:b1:9f:e6:40:de:68:cb:e2:2d:0e:a4: a5:25:36:fb:5c:ce:61:af:48:4a:a4:64:86:67:fa:53:80:87: b8:08:17:40:bc:0b:64:77:dc:44:58:de:33:14:62:88:af:73: a5:51:3b:9b:ad:5c:0e:af:be:65:44:0c:c7:d3:81:9c:30:ea: fc:eb:d8:26:49:42:45:e7:2e:97:62:f4:ed:46:14:54:07:aa: a2:56:c3:fe -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwkJjqKu5HKPlek5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk YmMwMTU2YWItMmY5Ny00YjI2LTkxMTEtY2FkOTM1ZjM4MmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTpFF/+59JEkIGnqYLokoSayPRfDzz2Ps/3k okbbecVF21FvIsYjvH7C1ZLpg+Nyk5/6qE1pd1Vsv5r6o1Lbh4kGSuBlwFp9+2ks WPlihavgCBGzXxiaNqVxDmgHYbxc4KDCvreoW6BoSPq1nFJtcMX7nglkenGm29Ei YnyNbAD92VcuUODA4K5J9cvjetjmpe/O/PKJBMsgwD0anTd+yjd/pxinJ3F7sKup hyvBrp0CGN8HSJUXgxwhbbKNeglEkItNWhmAQdk4FH+ip3+DFAwkIIZ3RJsKVgXZ ERPOoUrbA1tI/DtErvljNBQAKs0Nx5voFJUhndrJ8glbxCtnnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMOhy3OJP/LHBXWUn6cuFz0tza7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzZDJiYTQtNTI5ZC0z YjBiLTgxNzMtODJlZjkzNzhjODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBtURl4mDvtLs24yP58ggYF0qYI5TkA9QqRIQFA wRkOOelIsaJXeTAPXXrVO3osVkA+U/wqnHY5UQOM1d1Op44/Z9sui7Fx5WrGrXZw ICPE0Yi2JF4HI2rxN1vUbr28mU8PhtHD0f5AhvCBRXblWOHHsVqM/5+P8J9e+/f8 lPrm8Thg5jx086CUPEhY9mt12H0qBN0Nls5duYzILhEkV16vd8D4tCQ1bLB5sZ/m QN5oy+ItDqSlJTb7XM5hr0hKpGSGZ/pTgIe4CBdAvAtkd9xEWN4zFGKIr3OlUTub rVwOr75lRAzH04GcMOr869gmSUJF5y6XYvTtRhRUB6qiVsP+ -----END CERTIFICATE-----Generated at Sun Dec 14 13:48:31 2025 by rpki-client