This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d60564-1660-3394-bc88-97fc697c7ce0.roa File: d8d60564-1660-3394-bc88-97fc697c7ce0.roa (raw, json) Hash identifier: xkQoGKQkG/AjzFWQEUIX7jRVtZVpTnsjKaIJtUgubLw= Subject key identifier: C8:48:1B:D8:08:3A:CB:C2:7A:99:C5:65:8C:08:C6:A4:98:5F:6F:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C2C864F3EFF0F97F7047FEB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d60564-1660-3394-bc88-97fc697c7ce0.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 396616 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:4f:3e:ff:0f:97:f7:04:7f:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=66df0828-94f3-454e-910f-4e17f612e7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:29:07:97:11:3c:4a:d4:5d:81:60:f6:dc:81: 69:9c:71:fe:0f:d0:d5:cd:99:c0:1d:43:1a:0b:90: 74:4d:54:b3:bd:db:0d:83:b9:9e:6f:d9:5f:1e:89: c2:c9:77:27:6d:a5:99:f6:4d:1f:f9:fe:31:e6:29: 10:d2:58:63:07:71:ac:30:42:9c:3c:b1:89:34:ea: ac:47:16:f4:de:03:e7:90:5c:cf:0c:23:16:10:30: 62:2c:88:58:fb:4a:99:4f:60:f7:6b:d1:e8:82:71: 9a:be:c0:d0:ee:ef:a8:fc:bb:e4:9a:98:91:6c:8a: 41:16:57:1d:0b:b0:fe:2d:bd:48:35:ad:ed:e8:f8: 6a:22:00:4f:ec:c1:7e:e7:f6:5d:43:64:58:f5:d0: 35:7e:31:d4:70:48:c4:dc:20:e2:a9:a9:03:0d:f7: 0e:b4:a7:20:3d:27:53:a8:98:22:4f:39:a8:7e:ff: b6:45:9f:44:d8:fd:d8:5c:9d:22:d0:34:01:28:45: db:06:1f:57:f4:16:1a:4f:7e:70:b6:3d:d6:86:5e: 97:e1:87:6d:94:70:06:d4:a3:cc:5b:fb:6b:e3:47: 6a:13:66:a2:ee:19:fc:82:98:d4:0a:36:f9:5e:79: 21:ff:de:e8:37:bc:d1:c2:d7:03:3e:04:e6:e9:6b: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:48:1B:D8:08:3A:CB:C2:7A:99:C5:65:8C:08:C6:A4:98:5F:6F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8d60564-1660-3394-bc88-97fc697c7ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:7c:e9:5b:7a:a0:a1:a5:b8:09:4a:75:cd:50:90:9e:2d: 93:9b:bb:8f:d6:22:e6:48:0b:da:85:35:8a:a4:f5:86:e0:df: 29:a4:40:9b:f7:e2:e3:f0:52:a1:fa:4d:13:75:50:3e:6a:17: 08:49:ac:b8:0b:86:96:9a:55:1b:bc:4a:55:ee:50:b1:a9:1c: 79:11:47:74:e2:67:5f:fd:40:a1:2e:d3:c0:73:37:9d:d3:8f: b9:4a:3a:f7:27:f4:51:92:a6:2d:ff:4a:98:6c:c2:f1:58:33: b9:5e:a7:de:a8:28:2d:c2:d7:4d:88:23:8f:5f:0c:1a:ae:38: cb:9f:6b:25:b1:99:e3:76:15:ee:57:c4:b3:bd:68:0b:ba:87: ce:31:7d:9c:e4:f8:12:95:17:93:83:3f:17:6c:7e:45:10:15: 41:25:80:0d:f4:a0:23:61:89:12:c6:f3:73:93:46:3c:27:f3: f1:1b:b6:78:3e:e3:4c:63:d7:97:ba:96:fb:d4:48:2c:3e:38: cf:f1:75:d9:a1:3c:bc:63:d5:14:cc:46:33:8b:c3:c9:7a:b4: fa:6e:16:ab:7a:ac:5e:ba:6a:6c:da:81:d1:3f:54:2d:c2:fd: 09:23:82:6e:ef:a7:75:0b:3c:1f:bc:2f:46:57:ca:95:09:51: 3e:07:c6:54 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwshk8+/w+X9wR/60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk NjZkZjA4MjgtOTRmMy00NTRlLTkxMGYtNGUxN2Y2MTJlN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqikHlxE8StRdgWD23IFpnHH+D9DVzZnAHUMa C5B0TVSzvdsNg7meb9lfHonCyXcnbaWZ9k0f+f4x5ikQ0lhjB3GsMEKcPLGJNOqs Rxb03gPnkFzPDCMWEDBiLIhY+0qZT2D3a9HognGavsDQ7u+o/LvkmpiRbIpBFlcd C7D+Lb1INa3t6PhqIgBP7MF+5/ZdQ2RY9dA1fjHUcEjE3CDiqakDDfcOtKcgPSdT qJgiTzmofv+2RZ9E2P3YXJ0i0DQBKEXbBh9X9BYaT35wtj3Whl6X4YdtlHAG1KPM W/tr40dqE2ai7hn8gpjUCjb5Xnkh/97oN7zRwtcDPgTm6Ws28wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMhIG9gIOsvCepnFZYwIxqSYX28/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDhkNjA1NjQtMTY2MC0z Mzk0LWJjODgtOTdmYzY5N2M3Y2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCG5HzpW3qgoaW4CUp1zVCQni2Tm7uP1iLmSAva hTWKpPWG4N8ppECb9+Lj8FKh+k0TdVA+ahcISay4C4aWmlUbvEpV7lCxqRx5EUd0 4mdf/UChLtPAczed04+5Sjr3J/RRkqYt/0qYbMLxWDO5XqfeqCgtwtdNiCOPXwwa rjjLn2slsZnjdhXuV8SzvWgLuofOMX2c5PgSlReTgz8XbH5FEBVBJYAN9KAjYYkS xvNzk0Y8J/PxG7Z4PuNMY9eXupb71EgsPjjP8XXZoTy8Y9UUzEYzi8PJerT6bhar eqxeumps2oHRP1Qtwv0JI4Ju76d1CzwfvC9GV8qVCVE+B8ZU -----END CERTIFICATE-----Generated at Sun Dec 14 12:09:03 2025 by rpki-client