This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa File: 887e3efc-0de1-3597-97eb-7d1d2623f258.roa (raw, json) Hash identifier: o4zAjyuyOHCt9DYQxDNa6eC/O87zZS1yNRE8DLkSkDM= Subject key identifier: E5:AC:7C:EE:2E:BE:10:04:89:46:4F:EC:09:99:D0:8B:95:37:14:43 Certificate issuer: /CN=5ad08772-ee15-4587-860d-5bbe7077c592 Certificate serial: 010D0C9F4328584C45A81B7EF39E9E1C9CB33500 Authority key identifier: 8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 3356 IP address blocks: 2620:13d:2060::/48 maxlen: 48 2620:13d:2061::/48 maxlen: 48 2620:13d:2062::/48 maxlen: 48 2620:13d:2063::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:1b:7e:f3:9e:9e:1c:9c:b3:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad08772-ee15-4587-860d-5bbe7077c592 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=3af75f1d-9cec-4e74-ae2d-443e468a6148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:68:2c:59:ea:f6:86:bf:72:5b:2d:a5:08:63: 05:c4:12:d3:1d:e3:24:58:f8:dd:11:14:3c:a2:18: f7:8c:10:bd:cd:61:24:6a:d6:84:fe:6a:32:af:37: 07:fc:eb:2a:c2:2b:9a:66:25:63:3a:80:d8:7b:c5: aa:51:ef:eb:d9:5f:ed:ba:9d:fd:e9:64:d4:f0:e4: a5:96:43:1e:20:3a:aa:41:30:37:7f:11:2a:be:09: 73:e3:ad:ef:f0:a7:fc:11:05:cf:f5:67:90:02:5d: c2:98:99:8f:3e:ea:2d:c6:59:27:9b:bb:39:f8:fb: 3d:86:cf:72:85:3a:95:99:06:ab:0c:2a:91:67:82: 5e:93:28:47:41:2b:2e:17:82:12:44:fe:52:8d:04: 13:56:e7:7f:80:39:01:20:56:ee:5e:08:db:fc:07: 63:98:27:06:13:23:56:b9:8c:4c:ac:2e:bc:35:49: e9:26:f3:0a:73:7f:b7:97:d6:87:e2:66:b7:a7:96: 25:03:bd:a3:26:41:8f:f3:88:0d:f3:e0:b7:b3:e1: 36:c5:f2:f2:bc:c1:56:63:cb:af:e7:33:b0:6a:12: 3d:66:58:3b:df:9e:b2:e6:63:b7:16:80:a4:c7:95: f4:85:c6:8c:4f:74:00:16:a1:df:ae:69:65:b7:8c: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:7C:EE:2E:BE:10:04:89:46:4F:EC:09:99:D0:8B:95:37:14:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/887e3efc-0de1-3597-97eb-7d1d2623f258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592/5ad08772-ee15-4587-860d-5bbe7077c592.crl X509v3 Authority Key Identifier: keyid:8E:1A:E4:0F:32:6B:F7:79:01:18:BB:2E:E5:8B:26:2E:AF:4E:C8:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad08772-ee15-4587-860d-5bbe7077c592.cer sbgp-ipAddrBlock: critical IPv6: 2620:13d:2060::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3c:37:05:d5:04:87:c3:0b:f7:15:56:09:2d:35:5f:06:fa: b9:29:ae:ab:3f:09:ac:7c:77:9d:09:2a:38:e4:21:0f:d4:cc: 3c:d3:8f:0e:20:b1:c3:6f:44:20:53:cf:b3:5e:65:2c:64:6b: 52:96:3e:73:ed:d0:32:17:54:a6:db:6e:cc:a6:93:e9:4a:a5: 8b:6b:26:4c:12:37:84:01:df:6a:fc:90:79:a6:85:da:61:68: a1:df:0c:99:0d:9c:b2:d4:d6:ef:de:f8:50:61:fd:09:ea:d3: 6a:89:b4:fa:35:09:ba:8c:0b:05:6e:a7:bf:8c:86:bc:b7:b0: a4:38:e9:28:18:e3:74:91:04:4a:ce:d8:78:cf:fe:0e:db:98: a5:ba:ec:a7:c6:27:e4:d2:e8:fb:6c:09:d6:0e:47:aa:4f:54: 2c:7e:57:73:53:2e:a1:0c:98:c1:80:f2:98:78:a2:3c:a9:98: 0a:97:ce:5e:b2:f0:e2:1f:5c:fb:66:7e:32:bf:81:a9:ad:5b: 82:1a:20:6f:38:8d:26:a4:7e:87:dc:77:92:c8:0c:ce:7d:82: cf:26:ad:20:ea:dc:96:67:c4:8e:b6:05:0b:ad:3d:27:2d:5c: c3:28:7c:0e:57:8e:d5:3a:ad:fc:eb:4f:a8:00:75:66:39:5b: b3:3c:3c:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqBt+856eHJyzNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFkMDg3NzItZWUxNS00NTg3LTg2MGQtNWJiZTcwNzdj NTkyMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk M2FmNzVmMWQtOWNlYy00ZTc0LWFlMmQtNDQzZTQ2OGE2MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmgsWer2hr9yWy2lCGMFxBLTHeMkWPjdERQ8 ohj3jBC9zWEkataE/moyrzcH/OsqwiuaZiVjOoDYe8WqUe/r2V/tup396WTU8OSl lkMeIDqqQTA3fxEqvglz463v8Kf8EQXP9WeQAl3CmJmPPuotxlknm7s5+Ps9hs9y hTqVmQarDCqRZ4JekyhHQSsuF4ISRP5SjQQTVud/gDkBIFbuXgjb/AdjmCcGEyNW uYxMrC68NUnpJvMKc3+3l9aH4ma3p5YlA72jJkGP84gN8+C3s+E2xfLyvMFWY8uv 5zOwahI9Zlg7356y5mO3FoCkx5X0hcaMT3QAFqHfrmllt4zLbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOWsfO4uvhAEiUZP7AmZ0IuVNxRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81YWQw ODc3Mi1lZTE1LTQ1ODctODYwZC01YmJlNzA3N2M1OTIvODg3ZTNlZmMtMGRlMS0z NTk3LTk3ZWItN2QxZDI2MjNmMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWFkMDg3NzItZWUxNS00NTg3LTg2 MGQtNWJiZTcwNzdjNTkyLzVhZDA4NzcyLWVlMTUtNDU4Ny04NjBkLTViYmU3MDc3 YzU5Mi5jcmwwHwYDVR0jBBgwFoAUjhrkDzJr93kBGLsu5YsmLq9OyI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81YWQwODc3Mi1lZTE1LTQ1ODctODYwZC01YmJl NzA3N2M1OTIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJiABPSBg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKM8NwXVBIfDC/cVVgktNV8G+rkprqs/Cax8d50JKjjkIQ/UzDzT jw4gscNvRCBTz7NeZSxka1KWPnPt0DIXVKbbbsymk+lKpYtrJkwSN4QB32r8kHmm hdphaKHfDJkNnLLU1u/e+FBh/Qnq02qJtPo1CbqMCwVup7+Mhry3sKQ46SgY43SR BErO2HjP/g7bmKW67KfGJ+TS6PtsCdYOR6pPVCx+V3NTLqEMmMGA8ph4ojypmAqX zl6y8OIfXPtmfjK/gamtW4IaIG84jSakfofcd5LIDM59gs8mrSDq3JZnxI62BQut PSctXMMofA5XjtU6rfzrT6gAdWY5W7M8PK8= -----END CERTIFICATE-----Generated at Fri Jan 23 16:07:11 2026 by rpki-client