This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa File: 397c8651-a597-3cf5-8c81-90307ce30cf8.roa (raw, json) Hash identifier: DQ2x5tVgdvvQn2zmPAIVIHSqCaiD5abguRedyre8lOg= Subject key identifier: E6:A0:94:AF:94:82:E5:B6:F6:0A:E1:A3:53:12:F1:B7:55:AF:05:8C Certificate issuer: /CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Certificate serial: 010D0C9F4328584C215B868C6EB97FC10D639380 Authority key identifier: 04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 395403 IP address blocks: 2620:4d:4022::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:86:8c:6e:b9:7f:c1:0d:63:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da0b54d4-921a-405a-8c7a-6aa1dcb263ea Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=c5430e86-eebe-421b-9b1d-b85138874406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a4:1a:4d:4d:af:ec:77:0b:3c:08:26:69:32: 36:d2:cb:94:5b:35:08:dc:26:97:29:bc:1d:c2:7f: a3:45:47:09:8f:56:78:41:39:b7:85:4b:2d:b3:7e: 40:d2:a5:b3:ad:62:3e:ee:3b:fb:d4:2a:86:2e:1a: bd:a4:96:61:b4:5b:b4:b1:aa:ed:53:a9:75:ef:58: 75:ca:61:b7:86:3c:5e:48:06:be:50:bc:b9:6a:31: 4e:a2:26:2a:c2:b6:a8:ed:da:ea:58:61:8b:11:d8: 6b:ca:97:d6:0a:5c:cc:64:36:fe:8a:74:a5:70:79: 16:3e:31:e7:87:79:8e:32:53:59:77:9a:76:f8:d4: 93:60:9a:4a:41:6c:78:1e:e1:79:45:e8:e1:2d:b7: 27:c9:4e:51:13:62:d6:93:ee:b6:eb:e3:a1:7f:67: 07:c7:5d:e1:de:c5:7e:2a:36:8b:a1:94:48:1d:00: 42:ee:0d:4f:9c:f6:18:f2:a9:73:41:12:8d:e8:f1: 0f:9d:ed:7c:d4:e5:22:2a:8c:05:bf:11:8d:40:9e: 8d:24:cf:fd:c0:b9:93:69:37:5e:d7:2a:12:0d:ae: d7:a8:af:aa:b1:35:2b:c7:ef:17:ff:5e:69:11:60: 4b:af:f0:a5:f2:4f:da:f2:ee:b4:5a:54:89:47:ba: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A0:94:AF:94:82:E5:B6:F6:0A:E1:A3:53:12:F1:B7:55:AF:05:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/397c8651-a597-3cf5-8c81-90307ce30cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.crl X509v3 Authority Key Identifier: keyid:04:BF:3B:6B:DE:61:C1:E7:75:29:6F:0B:70:E8:23:14:D8:1B:BC:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da0b54d4-921a-405a-8c7a-6aa1dcb263ea.cer sbgp-ipAddrBlock: critical IPv6: 2620:4d:4022::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:1f:92:fa:15:0e:7d:e2:64:86:39:72:80:73:bb:78:d2:a2: 96:1b:39:aa:de:3f:b5:91:7d:4b:01:bb:f4:99:94:39:f2:ad: 54:82:da:f3:3e:b9:0e:f0:cc:a2:f3:07:97:cf:dc:7f:53:29: b5:6c:b0:11:97:5f:66:4f:da:35:c1:73:1c:1e:64:46:3b:81: 0e:c0:67:1f:f1:97:ca:4d:d9:c6:c4:c8:55:d3:84:7d:68:be: e7:4b:24:ad:78:03:ac:64:30:07:4f:08:7a:19:46:60:1a:23: c9:bc:ab:1a:ac:30:81:9d:6b:f6:f7:50:67:13:44:89:d3:a5: 48:78:09:7f:7c:8a:2f:6b:25:a1:6c:6f:f7:ea:3a:f9:41:34: 75:37:9b:96:30:0e:55:52:69:20:f8:08:aa:83:d7:2a:ec:56: d8:fa:f9:6a:31:16:58:30:95:fe:c3:10:37:4a:c5:44:6c:3c: 84:a3:7f:e7:b1:98:3c:08:9b:fb:ac:e2:c9:23:9f:d8:4e:79: 8e:92:39:e8:79:14:2b:39:ad:ce:d4:85:1b:be:8b:e4:61:32: b8:88:f7:70:85:97:15:20:2b:6e:d8:b1:b8:ee:27:fb:fe:2f: ae:d1:fd:b4:a6:eb:c4:e7:f0:3c:cd:4d:7a:fa:c9:7a:8b:ae: df:41:bf:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwhW4aMbrl/wQ1jk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEwYjU0ZDQtOTIxYS00MDVhLThjN2EtNmFhMWRjYjI2 M2VhMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk YzU0MzBlODYtZWViZS00MjFiLTliMWQtYjg1MTM4ODc0NDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66QaTU2v7HcLPAgmaTI20suUWzUI3CaXKbwd wn+jRUcJj1Z4QTm3hUsts35A0qWzrWI+7jv71CqGLhq9pJZhtFu0sartU6l171h1 ymG3hjxeSAa+ULy5ajFOoiYqwrao7drqWGGLEdhrypfWClzMZDb+inSlcHkWPjHn h3mOMlNZd5p2+NSTYJpKQWx4HuF5RejhLbcnyU5RE2LWk+626+Ohf2cHx13h3sV+ KjaLoZRIHQBC7g1PnPYY8qlzQRKN6PEPne181OUiKowFvxGNQJ6NJM/9wLmTaTde 1yoSDa7XqK+qsTUrx+8X/15pEWBLr/Cl8k/a8u60WlSJR7rVCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOaglK+UguW29grho1MS8bdVrwWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBi NTRkNC05MjFhLTQwNWEtOGM3YS02YWExZGNiMjYzZWEvMzk3Yzg2NTEtYTU5Ny0z Y2Y1LThjODEtOTAzMDdjZTMwY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGEwYjU0ZDQtOTIxYS00MDVhLThj N2EtNmFhMWRjYjI2M2VhL2RhMGI1NGQ0LTkyMWEtNDA1YS04YzdhLTZhYTFkY2Iy NjNlYS5jcmwwHwYDVR0jBBgwFoAUBL87a95hwed1KW8LcOgjFNgbvA4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYTBiNTRkNC05MjFhLTQwNWEtOGM3YS02YWEx ZGNiMjYzZWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAATUAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADMfkvoVDn3iZIY5coBzu3jSopYbOareP7WRfUsBu/SZlDnyrVSC 2vM+uQ7wzKLzB5fP3H9TKbVssBGXX2ZP2jXBcxweZEY7gQ7AZx/xl8pN2cbEyFXT hH1ovudLJK14A6xkMAdPCHoZRmAaI8m8qxqsMIGda/b3UGcTRInTpUh4CX98ii9r JaFsb/fqOvlBNHU3m5YwDlVSaSD4CKqD1yrsVtj6+WoxFlgwlf7DEDdKxURsPISj f+exmDwIm/us4skjn9hOeY6SOeh5FCs5rc7UhRu+i+RhMriI93CFlxUgK27Ysbju J/v+L67R/bSm68Tn8DzNTXr6yXqLrt9Bv3I= -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:33 2025 by rpki-client