This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa File: f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa (raw, json) Hash identifier: R1Xm+6JDzkuCQCDjF4cMvuIHFmQVVIeiqC0M2AKl08Q= Subject key identifier: 94:B3:23:61:8E:64:82:05:FD:D4:4D:43:C7:5F:C6:1A:49:8A:01:6F Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584BCD9B06BFAD23E04049E39780 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 32140 IP address blocks: 2602:806:f000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:06:bf:ad:23:e0:40:49:e3:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=43fc9242-a7b7-4daf-b4af-aa7e94ccb594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f3:8a:e3:7e:4a:56:69:64:93:25:52:b5:c8: 7e:2a:bd:74:1a:29:67:b3:10:67:88:0e:96:3b:0b: b7:54:08:74:40:0d:96:42:d8:ee:47:ff:72:b8:8f: ba:0a:f8:f5:b3:58:4e:77:3f:9a:b6:89:e8:18:12: ec:95:5a:27:d5:c6:57:30:f5:ef:55:62:05:bd:2f: 5c:d0:11:95:79:d3:82:9c:c6:b3:fd:9c:93:b8:b3: 5c:16:2e:c4:2d:74:2c:51:32:9e:3e:6e:19:20:67: ef:de:01:95:c2:a3:ee:11:00:9f:20:96:ab:12:e1: cd:00:57:86:28:92:38:90:b9:d6:4e:89:00:da:c3: 91:8d:f6:8d:ab:a2:db:ae:34:2c:05:1e:6c:c7:b7: 23:06:87:cb:fa:6f:2c:3b:49:8b:d7:d2:f8:f5:01: 54:03:0d:63:8f:9f:e2:1f:a9:a1:83:1a:e5:eb:49: 74:9c:48:d1:ce:95:10:f5:38:30:be:9b:7b:05:f4: 6a:42:bc:13:25:00:b5:6e:55:64:b6:8a:54:8b:47: 9a:7c:57:d7:8b:e7:1d:a4:74:3a:62:8d:2f:73:77: 18:b7:04:0d:50:0e:9f:99:da:03:3a:b7:ec:5b:4f: c3:08:d6:f0:5c:78:51:58:0d:bf:09:c7:b3:d6:38: 23:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B3:23:61:8E:64:82:05:FD:D4:4D:43:C7:5F:C6:1A:49:8A:01:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/f258fef8-0d1c-37f1-a943-db2e6b236d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv6: 2602:806:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:77:d8:90:17:17:2c:93:02:e5:3b:7d:ea:31:af:0d:5f:0e: 47:17:67:61:cc:79:74:d1:34:7d:ba:18:7f:f1:7a:42:e7:35: d2:8c:44:cd:14:73:bd:da:aa:78:a1:75:8b:51:a3:94:2c:f2: de:0d:fb:3b:26:32:40:84:2e:63:a7:25:47:5d:a0:82:43:32: 0e:5c:1b:8f:0f:72:a3:dc:61:70:c8:2a:22:71:e9:f6:8e:d8: 15:14:b7:35:ab:0d:90:47:51:40:4d:5b:cc:b7:dd:9d:3a:32: da:b8:09:1b:49:93:de:61:05:82:ac:4a:f7:22:a3:cc:d3:d5: 67:c0:2e:47:7e:df:45:74:e1:09:99:5e:94:ba:36:bc:53:c9: da:3e:0a:e6:89:08:92:05:ee:64:aa:41:8e:ea:3c:3c:cd:4e: 83:3f:a6:bc:3b:79:71:f6:e5:ed:88:52:e7:47:26:84:11:bc: 4a:8c:04:e9:9f:1c:71:38:55:4c:68:5b:44:73:db:77:b6:71: 40:81:fd:48:ac:4a:9a:90:c3:a6:43:e7:25:8a:33:13:35:e3: cf:0d:f6:88:21:17:b4:8d:bc:8a:65:8b:58:8a:3b:7c:ef:c9: e6:27:ce:b4:e7:7b:c6:f4:7a:97:13:bf:0a:69:c4:4d:e1:b5: cc:9c:b5:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvNmwa/rSPgQEnjl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NDNmYzkyNDItYTdiNy00ZGFmLWI0YWYtYWE3ZTk0Y2NiNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPOK435KVmlkkyVStch+Kr10GilnsxBniA6W Owu3VAh0QA2WQtjuR/9yuI+6Cvj1s1hOdz+atonoGBLslVon1cZXMPXvVWIFvS9c 0BGVedOCnMaz/ZyTuLNcFi7ELXQsUTKePm4ZIGfv3gGVwqPuEQCfIJarEuHNAFeG KJI4kLnWTokA2sORjfaNq6LbrjQsBR5sx7cjBofL+m8sO0mL19L49QFUAw1jj5/i H6mhgxrl60l0nEjRzpUQ9Tgwvpt7BfRqQrwTJQC1blVktopUi0eafFfXi+cdpHQ6 Yo0vc3cYtwQNUA6fmdoDOrfsW0/DCNbwXHhRWA2/Ccez1jgjGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJSzI2GOZIIF/dRNQ8dfxhpJigFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZjI1OGZlZjgtMGQxYy0z N2YxLWE5NDMtZGIyZTZiMjM2ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIBvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJ32JAXFyyTAuU7feoxrw1fDkcXZ2HMeXTRNH26GH/xekLnNdKM RM0Uc73aqnihdYtRo5Qs8t4N+zsmMkCELmOnJUddoIJDMg5cG48PcqPcYXDIKiJx 6faO2BUUtzWrDZBHUUBNW8y33Z06Mtq4CRtJk95hBYKsSvcio8zT1WfALkd+30V0 4QmZXpS6NrxTydo+CuaJCJIF7mSqQY7qPDzNToM/prw7eXH25e2IUudHJoQRvEqM BOmfHHE4VUxoW0Rz23e2cUCB/UisSpqQw6ZD5yWKMxM1488N9oghF7SNvIpli1iK O3zvyeYnzrTne8b0epcTvwppxE3htcyctRU= -----END CERTIFICATE-----Generated at Tue Nov 25 14:27:32 2025 by rpki-client