This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa File: 503a28c0-4f23-38d6-94cd-f22d4c077e71.roa (raw, json) Hash identifier: XVvWbJBy9EJzwB5tzNxp9bNLvp3onhTaUeh+SSyKQ64= Subject key identifier: 15:0A:1D:D7:A6:F0:FC:1C:37:A4:59:F0:44:B4:5A:A0:5B:F0:EF:F5 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584BE555BE84EC6D3F33F6AE6900 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 30242 IP address blocks: 2620:84:c000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:be:84:ec:6d:3f:33:f6:ae:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=37205fc5-a694-4b98-b0c7-6d0b303f7422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:3a:ac:c1:09:c1:cd:b7:10:b3:96:74:be: 7f:7a:7e:37:16:68:09:ad:a0:8b:5f:10:7c:d3:18: b5:6e:36:fc:15:bc:b5:9b:58:ab:ce:61:92:fc:7d: 99:cb:66:71:e2:9a:ee:8f:9b:fa:49:ac:c8:67:27: e1:4b:b9:58:34:ca:a5:d5:57:f0:61:a4:f2:38:20: 29:98:ae:60:7a:f4:ec:03:0a:5d:8d:c4:d6:d8:b9: d4:fb:95:5a:45:29:84:eb:22:7c:53:0b:7e:e2:c8: d6:23:f2:81:ce:57:b8:aa:d2:08:f9:5c:97:d5:f0: cf:0e:a1:cc:55:d3:d6:a3:85:d2:35:84:35:95:25: bf:15:a2:f7:75:76:6a:d8:0b:19:12:67:3a:92:0f: 56:39:11:8f:0d:cb:ae:4c:48:ae:8b:df:55:d0:6e: ae:76:55:a4:3e:53:71:9c:9f:9e:0c:65:71:37:9d: 69:b0:c0:27:ae:a3:d8:9a:a6:61:ed:46:5b:9c:8d: d9:d8:1c:ed:8d:ca:45:2a:d7:09:9e:80:b6:71:0f: f8:a4:1b:89:20:fb:7a:90:3b:77:a9:16:90:d6:e9: 13:92:c2:bc:0e:ec:7b:cd:cd:3c:09:0c:4c:1d:8c: 70:81:9b:1b:8d:a7:62:2d:f1:7b:80:09:20:e7:78: 06:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:1D:D7:A6:F0:FC:1C:37:A4:59:F0:44:B4:5A:A0:5B:F0:EF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/503a28c0-4f23-38d6-94cd-f22d4c077e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv6: 2620:84:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:5f:4a:67:68:41:55:fb:d3:bc:38:7e:74:bf:8a:4d:79:49: 5b:9c:e9:41:f0:91:c6:90:5e:f5:6e:e7:c3:26:f5:c8:ea:ae: 7c:67:34:59:a4:73:0b:bb:a4:ea:6b:e9:fd:ce:d9:0a:df:bf: 18:23:74:16:6c:a4:96:22:60:9d:fb:0f:f3:6d:d5:f3:7f:53: 7e:fb:05:f3:16:52:a2:2b:87:63:eb:30:58:82:f3:5f:d8:fb: 08:0a:32:32:1f:2e:e9:68:e9:c7:57:06:45:ea:c3:5e:76:28: 21:2a:26:f6:aa:3c:d8:0c:51:8c:11:fa:63:10:b5:e2:b9:ee: 4a:45:03:1a:df:8d:3a:83:47:5a:6c:7e:f5:d3:5f:34:fb:df: a9:6b:d0:38:00:5d:79:b6:d0:65:d4:09:2d:f7:43:0d:d9:fa: 54:b6:80:5e:d2:d2:3c:ae:08:ba:7a:e6:1f:91:83:df:07:6f: b4:91:13:69:0a:76:f4:58:60:ce:1a:d1:09:c4:b2:1d:bf:b9: 21:ea:ef:95:a8:d9:54:53:0f:fe:cb:08:98:7d:eb:29:0e:b9: c6:6d:e0:72:09:3f:61:03:72:3c:26:3e:9f:1f:4d:ab:62:5e: ad:cd:8c:99:b7:42:73:53:b2:27:b3:f7:b8:73:bf:f3:38:4a: b4:2c:69:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvlVb6E7G0/M/auaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk MzcyMDVmYzUtYTY5NC00Yjk4LWIwYzctNmQwYjMwM2Y3NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+I6rMEJwc23ELOWdL5/en43FmgJraCLXxB8 0xi1bjb8Fby1m1irzmGS/H2Zy2Zx4pruj5v6SazIZyfhS7lYNMql1VfwYaTyOCAp mK5gevTsAwpdjcTW2LnU+5VaRSmE6yJ8Uwt+4sjWI/KBzle4qtII+VyX1fDPDqHM VdPWo4XSNYQ1lSW/FaL3dXZq2AsZEmc6kg9WORGPDcuuTEiui99V0G6udlWkPlNx nJ+eDGVxN51psMAnrqPYmqZh7UZbnI3Z2BztjcpFKtcJnoC2cQ/4pBuJIPt6kDt3 qRaQ1ukTksK8Dux7zc08CQxMHYxwgZsbjadiLfF7gAkg53gGhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBUKHdem8PwcN6RZ8ES0WqBb8O/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvNTAzYTI4YzAtNGYyMy0z OGQ2LTk0Y2QtZjIyZDRjMDc3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAhMAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALxfSmdoQVX707w4fnS/ik15SVuc6UHwkcaQXvVu58Mm9cjqrnxn NFmkcwu7pOpr6f3O2QrfvxgjdBZspJYiYJ37D/Nt1fN/U377BfMWUqIrh2PrMFiC 81/Y+wgKMjIfLulo6cdXBkXqw152KCEqJvaqPNgMUYwR+mMQteK57kpFAxrfjTqD R1psfvXTXzT736lr0DgAXXm20GXUCS33Qw3Z+lS2gF7S0jyuCLp65h+Rg98Hb7SR E2kKdvRYYM4a0QnEsh2/uSHq75Wo2VRTD/7LCJh96ykOucZt4HIJP2EDcjwmPp8f TatiXq3NjJm3QnNTsiez97hzv/M4SrQsaUo= -----END CERTIFICATE-----Generated at Wed Nov 26 11:43:50 2025 by rpki-client