This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b9e400-d5de-3c53-86c9-e1fef938a8e2.roa File: e3b9e400-d5de-3c53-86c9-e1fef938a8e2.roa (raw, json) Hash identifier: i4hOCYvghKpDt5RaWq8zFuNo2SdjQ5uuNlAuUemmEH8= Subject key identifier: 43:45:45:50:04:A4:D5:BF:16:C1:1A:3C:C9:29:85:3D:A9:CC:F6:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C215BBCDE66DC4543134FF700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b9e400-d5de-3c53-86c9-e1fef938a8e2.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 396587 IP address blocks: 2001:503:ba3e::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:bc:de:66:dc:45:43:13:4f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=e9f44f70-815e-4da8-b426-65a2b79e0bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:82:dd:69:5f:7d:37:a2:3a:d5:52:13:43: 3f:2a:b2:a9:96:3a:a7:96:be:45:86:3f:7c:8f:d8: 09:a4:f6:89:1d:40:bb:16:f6:f0:9c:75:57:39:85: 82:71:a8:1a:23:8e:ef:68:d1:31:37:4a:67:63:61: 8a:f7:74:3a:17:d2:58:75:3a:dd:cf:3d:41:d6:db: 67:88:cd:10:95:69:62:97:3b:b7:29:bc:a5:d0:8a: 46:bb:12:12:29:55:d6:39:b7:70:3e:92:f9:4b:d4: 74:d3:50:46:ae:bf:36:00:6a:7f:33:ef:c4:b7:af: b0:ef:8f:43:0e:10:06:27:bf:6a:9c:54:36:a3:38: 0a:40:13:16:ec:8d:cc:a8:b0:21:5f:60:d9:bb:20: 26:9f:c7:b6:b6:b4:2f:a3:a2:df:2b:5a:16:c1:2b: c3:e3:42:6a:a1:c4:c6:54:c9:73:45:44:03:7d:f4: be:3f:8b:68:cc:dc:45:4e:99:c2:0c:52:99:a7:44: 44:dd:44:77:a3:90:7c:36:1e:fc:8c:bb:59:80:db: 46:0f:cc:af:c2:1c:99:46:d8:ff:02:28:31:d6:10: 82:0f:6c:b9:31:f6:28:ca:6c:17:2b:32:1c:b2:e1: 4c:04:a2:a7:03:04:cb:90:fb:8b:2f:1a:4d:b6:40: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:45:45:50:04:A4:D5:BF:16:C1:1A:3C:C9:29:85:3D:A9:CC:F6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3b9e400-d5de-3c53-86c9-e1fef938a8e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:65:bf:c9:26:21:99:67:82:d9:9c:35:df:8d:d8:b2:41:2d: 06:a9:db:8a:b7:51:28:8b:b8:d1:76:05:f5:b7:a6:bc:6b:29: b5:f5:3f:77:c0:7f:47:c1:91:e1:51:29:7f:ce:50:9a:d4:09: 5e:30:75:a0:f7:1e:68:c6:6c:ec:8e:0f:7d:18:03:06:92:55: a8:4a:52:4b:2a:7e:fe:26:7d:6c:5d:34:e9:ac:c3:ac:cd:71: 8b:c8:11:f8:4b:6b:2f:29:70:8a:3d:7f:35:58:da:9f:c4:f0: 6c:d6:34:5b:2d:cd:24:fe:15:31:f9:70:28:34:fb:38:68:97: 2b:0a:29:41:2a:9f:43:d5:55:54:e7:ee:a0:ef:4e:a8:44:14: 7e:7f:8d:88:87:6c:c8:3f:4b:3d:e7:18:18:84:41:48:02:f8: c8:3e:e2:e4:4b:23:1c:75:c2:03:49:3a:f0:63:0c:6a:6e:fc: b1:80:97:ac:be:c6:e9:78:8f:15:f7:f2:7f:cc:06:a2:91:5b: d9:63:7c:62:03:a2:e4:68:7c:3a:ec:33:53:6f:f5:ba:45:8d: dd:da:a8:14:0b:2c:b4:b3:7a:ae:4f:76:8e:1c:93:63:ed:35: d9:71:36:ba:d4:3f:5d:5b:b3:46:e5:3a:96:3b:91:f0:42:3f: f7:43:98:66 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEwhW7zeZtxFQxNP9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk ZTlmNDRmNzAtODE1ZS00ZGE4LWI0MjYtNjVhMmI3OWUwYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnCC3WlffTeiOtVSE0M/KrKpljqnlr5Fhj98 j9gJpPaJHUC7FvbwnHVXOYWCcagaI47vaNExN0pnY2GK93Q6F9JYdTrdzz1B1ttn iM0QlWlilzu3Kbyl0IpGuxISKVXWObdwPpL5S9R001BGrr82AGp/M+/Et6+w749D DhAGJ79qnFQ2ozgKQBMW7I3MqLAhX2DZuyAmn8e2trQvo6LfK1oWwSvD40JqocTG VMlzRUQDffS+P4tozNxFTpnCDFKZp0RE3UR3o5B8Nh78jLtZgNtGD8yvwhyZRtj/ Aigx1hCCD2y5MfYoymwXKzIcsuFMBKKnAwTLkPuLLxpNtkA5NwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFENFRVAEpNW/FsEaPMkphT2pzPaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTNiOWU0MDAtZDVkZS0z YzUzLTg2YzktZTFmZWY5MzhhOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+ AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCEZb/JJiGZZ4LZnDXfjdiyQS0GqduKt1Eoi7jR dgX1t6a8aym19T93wH9HwZHhUSl/zlCa1AleMHWg9x5oxmzsjg99GAMGklWoSlJL Kn7+Jn1sXTTprMOszXGLyBH4S2svKXCKPX81WNqfxPBs1jRbLc0k/hUx+XAoNPs4 aJcrCilBKp9D1VVU5+6g706oRBR+f42Ih2zIP0s95xgYhEFIAvjIPuLkSyMcdcID STrwYwxqbvyxgJesvsbpeI8V9/J/zAaikVvZY3xiA6LkaHw67DNTb/W6RY3d2qgU Cyy0s3quT3aOHJNj7TXZcTa61D9dW7NG5TqWO5HwQj/3Q5hm -----END CERTIFICATE-----Generated at Sun Dec 14 12:05:42 2025 by rpki-client