This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa File: c4a3f939-bd64-3487-a242-6fbbe2db4083.roa (raw, json) Hash identifier: gq4Ku7jcfPAIyNx2zJMMhb8ifgoGFVi1l2NjQEs9Gss= Subject key identifier: 04:81:5B:6A:C0:26:E9:AC:F2:09:F7:0E:B0:0D:BE:6F:5F:A1:1A:60 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584BE57117F9937BE7E4D06BB560 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa Signing time: Tue 18 Nov 2025 02:55:41 +0000 ROA not before: Tue 18 Nov 2025 02:55:41 +0000 ROA not after: Mon 16 Feb 2026 02:55:41 +0000 asID: 16509 IP address blocks: 2602:28c:2907::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:71:17:f9:93:7b:e7:e4:d0:6b:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Nov 18 02:55:41 2025 GMT Not After : Feb 16 02:55:41 2026 GMT Subject: CN=e3031d77-452a-4a1b-a8c2-4a825a3f6e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:a5:a5:92:2f:e3:f6:28:a1:9b:3f:72:d9: b7:ee:86:3f:5d:8f:15:38:3a:91:6f:47:b0:5d:af: 11:17:1a:6a:65:eb:39:0f:34:26:6a:8d:50:dd:fd: 8d:0b:4b:54:b0:51:1b:9f:6c:96:fa:36:3c:f7:ac: 4a:dd:80:83:8f:25:49:fa:bb:1d:4b:d4:1f:11:e1: 23:cf:c0:f4:0a:f5:31:92:f5:4f:f0:91:57:57:07: c8:d8:00:a6:61:a4:1a:b2:e1:0c:8d:17:f8:b9:65: cb:36:16:7b:1e:a7:3f:9f:9b:99:62:3a:3c:31:ed: a1:aa:05:c7:ef:47:07:79:27:5c:f4:01:10:8e:63: aa:07:3d:5b:d8:2a:3a:c1:82:c1:4b:b0:e0:8e:c4: 77:a9:da:9e:63:1e:9f:d0:60:68:6d:27:79:47:83: ca:d2:72:c1:80:bc:c0:c4:79:b5:b6:90:4a:0f:7a: 6b:c3:c6:0a:a3:e9:0a:ce:75:45:b3:12:6f:1d:67: ba:1e:e1:27:4c:0d:e8:01:70:b8:f3:82:81:e2:0d: 1c:52:9f:6d:e9:22:3b:40:74:eb:69:83:6f:8d:82: 4a:ec:e6:1c:5b:11:15:dc:f5:e9:ed:0d:40:ab:b3: 6e:c6:a7:31:e8:02:fd:9d:6d:35:e9:02:91:8b:2f: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:5B:6A:C0:26:E9:AC:F2:09:F7:0E:B0:0D:BE:6F:5F:A1:1A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/c4a3f939-bd64-3487-a242-6fbbe2db4083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2602:28c:2907::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:75:7c:cd:9d:d4:2d:16:bc:12:95:bc:eb:21:54:cd:65:89: 5a:4e:5c:5e:64:20:0a:5c:9f:b8:b5:4d:9f:0b:a5:6d:bb:2e: da:1a:9e:d8:bf:01:d7:e7:40:63:c8:0f:e4:59:e8:02:41:76: a4:2d:b2:a2:42:08:e2:c0:d9:76:34:d1:3b:1c:ce:30:2c:73: 46:c6:c9:d0:60:d3:29:94:cb:25:83:9f:65:4b:34:b4:78:dd: 89:c2:0b:82:42:8b:44:7f:ea:f4:72:1d:a8:9f:11:a3:1d:b5: 6c:3e:c2:9b:1b:b3:9f:d4:2b:c4:5d:b8:dd:49:4f:98:c1:7a: dc:8c:2e:b0:51:23:d9:6b:eb:27:38:25:71:33:ec:ea:f8:81: e2:ad:b4:3f:4a:67:c4:87:0c:64:8f:85:e3:32:a0:c7:7e:8f: 6f:3a:bc:02:87:1a:a8:0b:7b:54:d1:98:f3:6c:ab:a4:4e:a4: 29:d6:62:ec:2b:ea:bf:e2:8a:f5:3b:0a:21:13:69:a6:98:19: 08:92:5e:c4:05:ca:d5:3f:81:5b:2e:d0:ba:e2:e5:e3:de:ca: 3d:49:f3:7b:b0:74:97:4f:b1:f9:f0:04:a9:ab:5d:35:a4:a6: bf:ef:28:fd:4e:0c:4a:d1:a7:66:d5:a5:62:b2:00:8a:57:57: 71:b6:2d:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvlcRf5k3vn5NBrtWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MTExODAyNTU0MVoXDTI2MDIxNjAyNTU0MVowLzEtMCsGA1UEAxMk ZTMwMzFkNzctNDUyYS00YTFiLWE4YzItNGE4MjVhM2Y2ZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSelpZIv4/YooZs/ctm37oY/XY8VODqRb0ew Xa8RFxpqZes5DzQmao1Q3f2NC0tUsFEbn2yW+jY896xK3YCDjyVJ+rsdS9QfEeEj z8D0CvUxkvVP8JFXVwfI2ACmYaQasuEMjRf4uWXLNhZ7Hqc/n5uZYjo8Me2hqgXH 70cHeSdc9AEQjmOqBz1b2Co6wYLBS7DgjsR3qdqeYx6f0GBobSd5R4PK0nLBgLzA xHm1tpBKD3prw8YKo+kKznVFsxJvHWe6HuEnTA3oAXC484KB4g0cUp9t6SI7QHTr aYNvjYJK7OYcWxEV3PXp7Q1Aq7Nuxqcx6AL9nW016QKRiy9nnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFASBW2rAJums8gn3DrANvm9foRpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYzRhM2Y5MzktYmQ2NC0z NDg3LWEyNDItNmZiYmUyZGI0MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCkH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKJ1fM2d1C0WvBKVvOshVM1liVpOXF5kIApcn7i1TZ8LpW27Ltoa nti/AdfnQGPID+RZ6AJBdqQtsqJCCOLA2XY00TsczjAsc0bGydBg0ymUyyWDn2VL NLR43YnCC4JCi0R/6vRyHaifEaMdtWw+wpsbs5/UK8RduN1JT5jBetyMLrBRI9lr 6yc4JXEz7Or4geKttD9KZ8SHDGSPheMyoMd+j286vAKHGqgLe1TRmPNsq6ROpCnW Yuwr6r/iivU7CiETaaaYGQiSXsQFytU/gVsu0Lri5ePeyj1J83uwdJdPsfnwBKmr XTWkpr/vKP1ODErRp2bVpWKyAIpXV3G2LdY= -----END CERTIFICATE-----Generated at Tue Nov 25 09:10:25 2025 by rpki-client