This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa File: f406936d-01d8-3b95-b19f-24a82e00e2b3.roa (raw, json) Hash identifier: YLXz+GWIu/EKUFk9CJZEwNqGc/KAxrOrfmDUToRR5c4= Subject key identifier: 00:6B:23:E5:4A:BB:E4:F8:A7:9B:6F:3A:0A:7E:1B:A2:E8:01:E0:C2 Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Certificate serial: 010D0C9F4328584BE56F8A9179265C052F340180 Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa Signing time: Tue 18 Nov 2025 02:52:33 +0000 ROA not before: Tue 18 Nov 2025 02:52:33 +0000 ROA not after: Mon 16 Feb 2026 02:52:33 +0000 asID: 8075 IP address blocks: 2620:147:c16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:6f:8a:91:79:26:5c:05:2f:34:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751 Validity Not Before: Nov 18 02:52:33 2025 GMT Not After : Feb 16 02:52:33 2026 GMT Subject: CN=172333c5-d04c-446b-9a5c-41f5cbe09d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:0c:45:90:5d:be:82:34:be:ee:3d:f1:6c: 17:1a:32:91:bf:72:05:ae:37:3a:03:cd:e3:88:27: d3:db:44:f6:46:ee:14:7d:0a:58:d9:80:52:47:54: 65:3d:10:98:0d:44:9a:cf:67:ad:f1:84:dd:74:cb: ce:73:6f:f3:b5:2a:05:db:d0:a4:63:98:69:b9:f1: 95:e8:12:9a:d8:85:ec:4f:68:11:2f:75:b9:78:21: 6f:0b:cd:1e:89:5e:d7:de:90:63:2d:10:56:8d:18: 63:df:13:33:7a:73:42:50:01:e2:4a:c1:bd:ca:de: 26:c8:71:08:b2:0b:1b:d6:cf:fb:65:84:ef:e0:38: 38:12:f4:24:7a:d2:d4:b0:33:64:e7:80:e5:c6:fe: 33:0a:49:d7:6a:5a:12:4e:1a:26:12:9b:2b:37:b4: 02:0d:a5:29:31:42:4a:b2:46:45:3b:a3:ca:30:77: ba:bc:7d:97:b1:53:14:6c:98:18:42:b9:59:23:8e: f7:0d:41:4d:c6:7c:55:cc:06:cf:ee:d5:db:b1:a7: 68:38:3e:2c:57:ec:8a:2c:18:21:b0:38:bd:fa:87: 47:b4:ff:41:29:ba:39:ce:54:57:ae:48:06:a1:ba: 30:6d:21:06:02:0b:20:09:42:e3:9b:36:d8:b2:d4: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:23:E5:4A:BB:E4:F8:A7:9B:6F:3A:0A:7E:1B:A2:E8:01:E0:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/f406936d-01d8-3b95-b19f-24a82e00e2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl X509v3 Authority Key Identifier: keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer sbgp-ipAddrBlock: critical IPv6: 2620:147:c16::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:0d:4b:e0:8c:b7:04:ba:a0:20:d4:95:37:88:34:40:cc:53: 9b:49:a1:3d:93:c8:b8:b6:5c:75:a7:ac:8b:af:c7:82:c2:fd: 9b:c8:09:d3:54:07:f5:a0:49:d2:27:12:04:54:b7:93:50:8d: c3:fa:f8:87:d9:89:25:d4:ab:5c:93:8c:8f:27:91:6a:8b:e7: f8:2d:fa:73:d4:a2:a6:11:bc:a2:ca:6f:df:a0:e0:7e:b2:e6: 30:85:26:91:04:84:b1:f9:c0:1f:da:62:54:47:21:34:f5:bf: df:08:1d:df:da:65:6e:66:25:3b:40:c6:84:7b:23:69:15:a3: f4:00:12:bc:09:a6:6a:c6:95:23:78:ce:79:20:1e:dc:eb:70: e3:38:35:e0:1b:a3:a0:fa:3a:86:04:75:79:82:ce:81:32:b9: 2d:9d:a2:1b:1a:a8:20:fd:c5:e1:63:ec:84:f5:15:ee:60:3d: d5:45:b0:49:48:4a:7d:35:b1:84:6e:c7:71:45:9e:34:32:6e: 02:cf:7b:b4:bb:61:6a:a9:a5:de:40:84:2f:31:a7:cd:6b:fa: 48:5e:03:4a:98:84:ca:a1:c5:fd:5b:9f:db:dc:97:a6:f2:9e: 59:2f:f2:78:48:b3:6f:0a:3f:3b:65:4b:b6:72:b7:2d:3c:87: d5:8d:34:1c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvlb4qReSZcBS80AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl NzUxMB4XDTI1MTExODAyNTIzM1oXDTI2MDIxNjAyNTIzM1owLzEtMCsGA1UEAxMk MTcyMzMzYzUtZDA0Yy00NDZiLTlhNWMtNDFmNWNiZTA5ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko8MRZBdvoI0vu498WwXGjKRv3IFrjc6A83j iCfT20T2Ru4UfQpY2YBSR1RlPRCYDUSaz2et8YTddMvOc2/ztSoF29CkY5hpufGV 6BKa2IXsT2gRL3W5eCFvC80eiV7X3pBjLRBWjRhj3xMzenNCUAHiSsG9yt4myHEI sgsb1s/7ZYTv4Dg4EvQketLUsDNk54Dlxv4zCknXaloSThomEpsrN7QCDaUpMUJK skZFO6PKMHe6vH2XsVMUbJgYQrlZI473DUFNxnxVzAbP7tXbsadoOD4sV+yKLBgh sDi9+odHtP9BKbo5zlRXrkgGobowbSEGAgsgCULjmzbYstTejwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFABrI+VKu+T4p5tvOgp+G6LoAeDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2 NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZjQwNjkzNmQtMDFkOC0z Yjk1LWIxOWYtMjRhODJlMDBlMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwwW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKMNS+CMtwS6oCDUlTeINEDMU5tJoT2TyLi2XHWnrIuvx4LC/ZvI CdNUB/WgSdInEgRUt5NQjcP6+IfZiSXUq1yTjI8nkWqL5/gt+nPUoqYRvKLKb9+g 4H6y5jCFJpEEhLH5wB/aYlRHITT1v98IHd/aZW5mJTtAxoR7I2kVo/QAErwJpmrG lSN4znkgHtzrcOM4NeAbo6D6OoYEdXmCzoEyuS2dohsaqCD9xeFj7IT1Fe5gPdVF sElISn01sYRux3FFnjQybgLPe7S7YWqppd5AhC8xp81r+kheA0qYhMqhxf1bn9vc l6bynlkv8nhIs28KPztlS7Zyty08h9WNNBw= -----END CERTIFICATE-----Generated at Tue Nov 25 09:09:06 2025 by rpki-client