This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa File: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (raw, json) Hash identifier: xuWcLOA+YGBwLdbFLIVLsbW+sdRHTSB4KCXmCTntWJw= Subject key identifier: 6A:39:BD:18:B5:E8:D4:F7:26:EA:97:8B:6B:0A:33:39:41:E9:4D:63 Certificate issuer: /CN=da61f786-99c2-4468-90f7-0b35abd168e5 Certificate serial: 010D0C9F4328584BF4B08F779A24C7F4AA2BD880 Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 54650 IP address blocks: 2604:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:8f:77:9a:24:c7:f4:aa:2b:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5 Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=d93106dd-522e-4244-8df1-f940c5c0b320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:41:f1:88:88:6c:b4:63:08:46:e0:d7:8b: 25:8d:b6:ef:5f:b2:ec:f6:30:16:b3:9a:2d:5e:5c: 4e:07:b9:c7:8a:46:e5:86:cb:8e:3f:4b:e9:fc:2f: 74:65:dc:f0:f7:81:9f:f8:6a:ba:44:c6:e3:28:77: 5c:3d:73:60:bc:ee:47:dc:21:0e:f2:2e:c2:03:da: 08:58:d6:a0:e6:5e:4f:e6:05:33:20:97:e8:7d:bf: e3:22:34:5f:82:29:8d:b3:59:a5:40:7e:df:68:88: 50:03:02:bf:35:78:a6:cf:cb:3e:11:6c:c1:2f:4a: 69:0d:bb:4a:53:45:f5:e3:f9:94:f6:fd:f6:c1:e4: a0:8b:9c:89:c8:f5:87:a8:1a:a8:32:8d:50:cf:25: 83:ce:8b:eb:8d:be:6b:41:97:bf:62:ac:d9:19:8d: 9c:af:8e:67:7d:a1:fd:f2:e2:0a:bf:1a:e1:2e:cc: e8:7c:fc:f6:4c:6e:1f:0a:f7:f6:c3:a0:7b:22:7d: 5d:3e:57:c5:e4:b8:d7:d2:1e:88:2c:f0:67:85:cd: da:57:c8:e2:86:0c:cf:02:81:e7:32:34:e2:27:1e: c3:97:0b:85:43:38:53:7b:b7:f9:85:1a:b0:c8:55: 47:72:49:4a:32:1c:77:69:f5:17:0a:ba:a2:19:3d: fc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:BD:18:B5:E8:D4:F7:26:EA:97:8B:6B:0A:33:39:41:E9:4D:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/bc669675-4f09-3100-852b-f89b8e4fa0ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl X509v3 Authority Key Identifier: keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer sbgp-ipAddrBlock: critical IPv6: 2604:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:5b:12:c8:c8:b9:f6:0c:31:2b:9a:d7:6f:78:e9:2c:0f:e9: 2b:bd:03:95:14:83:e9:63:c5:ab:19:79:bb:b4:a1:5a:e6:27: 95:46:38:d7:fc:5e:9d:64:09:89:82:8e:57:69:11:52:4a:0d: 74:01:f2:21:68:0c:a2:82:08:75:6d:da:a1:3f:28:6b:2e:02: 0a:18:a5:8a:bd:89:9e:a1:61:95:cf:d3:8e:09:a9:a5:30:99: af:ac:ee:5e:d3:89:25:26:3a:18:38:ea:a3:32:12:15:a3:33: e6:e4:80:90:da:10:6f:0a:dc:26:d9:27:f3:c3:85:a4:1b:3a: f8:0b:36:f1:d3:3f:92:00:32:fb:81:7f:e9:83:1f:e5:5e:13: 1a:91:4b:b0:90:f5:9e:c7:3f:d6:26:c8:af:56:9e:19:4e:a0: e8:eb:71:8d:7d:e3:61:31:0e:0e:b2:68:22:1a:51:dc:a6:be: 58:b8:11:07:21:6b:e9:bc:ca:a7:56:9f:36:25:f3:a6:41:ac: 16:c6:1e:e6:92:db:0c:94:2c:48:1d:47:42:56:7e:b5:27:c4: ce:22:73:ae:f4:f3:1f:70:90:73:8b:98:83:c6:4c:14:08:8f: c0:29:c4:d4:68:19:d1:15:85:37:9a:2e:97:a8:7a:d1:2b:33: b2:5e:0e:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEv0sI93miTH9Kor2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE2MWY3ODYtOTljMi00NDY4LTkwZjctMGIzNWFiZDE2 OGU1MB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDkzMTA2ZGQtNTIyZS00MjQ0LThkZjEtZjk0MGM1YzBiMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoVB8YiIbLRjCEbg14sljbbvX7Ls9jAWs5ot XlxOB7nHikblhsuOP0vp/C90Zdzw94Gf+Gq6RMbjKHdcPXNgvO5H3CEO8i7CA9oI WNag5l5P5gUzIJfofb/jIjRfgimNs1mlQH7faIhQAwK/NXimz8s+EWzBL0ppDbtK U0X14/mU9v32weSgi5yJyPWHqBqoMo1QzyWDzovrjb5rQZe/YqzZGY2cr45nfaH9 8uIKvxrhLszofPz2TG4fCvf2w6B7In1dPlfF5LjX0h6ILPBnhc3aV8jihgzPAoHn MjTiJx7DlwuFQzhTe7f5hRqwyFVHcklKMhx3afUXCrqiGT38wQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGo5vRi16NT3JuqXi2sKMzlB6U1jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYx Zjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1YWJkMTY4ZTUvYmM2Njk2NzUtNGYwOS0z MTAwLTg1MmItZjg5YjhlNGZhMGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGE2MWY3ODYtOTljMi00NDY4LTkw ZjctMGIzNWFiZDE2OGU1L2RhNjFmNzg2LTk5YzItNDQ2OC05MGY3LTBiMzVhYmQx NjhlNS5jcmwwHwYDVR0jBBgwFoAUm7JW3Y6M5BMCH6y6TevAUqLlBVkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYTYxZjc4Ni05OWMyLTQ0NjgtOTBmNy0wYjM1 YWJkMTY4ZTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgS7QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAOWxLIyLn2DDErmtdveOksD+krvQOVFIPpY8WrGXm7tKFa5ieVRjjX /F6dZAmJgo5XaRFSSg10AfIhaAyiggh1bdqhPyhrLgIKGKWKvYmeoWGVz9OOCaml MJmvrO5e04klJjoYOOqjMhIVozPm5ICQ2hBvCtwm2Sfzw4WkGzr4Czbx0z+SADL7 gX/pgx/lXhMakUuwkPWexz/WJsivVp4ZTqDo63GNfeNhMQ4OsmgiGlHcpr5YuBEH IWvpvMqnVp82JfOmQawWxh7mktsMlCxIHUdCVn61J8TOInOu9PMfcJBzi5iDxkwU CI/AKcTUaBnRFYU3mi6XqHrRKzOyXg5g -----END CERTIFICATE-----Generated at Tue Nov 25 09:56:49 2025 by rpki-client