This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa File: efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa (raw, json) Hash identifier: SoEnDIP3EPRix9+MgwRrVwWNFZrJudkVVJcgNdsrmDQ= Subject key identifier: 38:32:A0:D5:46:41:B4:25:EC:21:3F:5A:A5:73:0D:43:DB:13:33:56 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584BFFDBB20754995E49C3D39F00 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 16509 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:b2:07:54:99:5e:49:c3:d3:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=d9b3616c-ef58-4d1f-97dd-e98c036cd18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:41:c9:f3:35:f6:8e:9e:c3:63:ac:52:3f: 2e:9b:1e:0d:03:8f:95:58:d5:cb:a7:8c:a8:6f:94: 8d:96:5d:f6:a3:99:cb:04:4b:ff:8a:1c:25:f0:e6: e3:09:28:22:ec:20:ad:3f:62:30:8d:1f:d4:70:f2: 5e:05:90:86:80:bc:44:5f:48:17:61:9a:0d:1c:3b: c0:75:a0:a3:a8:12:93:56:e5:7c:e6:0c:5a:b6:35: d2:04:c9:52:f8:07:03:85:7c:35:06:e4:2e:73:21: a0:79:6e:b8:e0:e5:ce:e2:21:0f:66:ad:16:67:df: e9:6c:f6:89:fb:f5:1b:44:d0:20:8c:16:87:90:be: f2:e3:04:95:bd:34:e1:3f:15:06:7e:ae:56:fc:73: df:cb:98:ac:f9:29:bd:3b:72:39:21:4a:51:05:63: ab:c6:59:e8:f2:ec:8a:e9:06:3f:75:00:ca:6b:34: c6:75:16:b6:f2:25:ca:cb:b8:4c:4f:80:0a:ab:5f: 03:f2:bf:f7:26:1b:f6:79:67:63:2f:3a:81:e2:c4: e6:3d:b6:0a:d4:0e:ed:a2:e0:e2:b1:18:1a:cc:57: 35:6f:a0:e9:09:54:08:e4:52:ce:40:54:9e:b0:6a: 44:c6:81:60:49:7d:e1:1a:8d:f4:2a:66:f4:02:8c: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:A0:D5:46:41:B4:25:EC:21:3F:5A:A5:73:0D:43:DB:13:33:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/efdfb3d4-cefa-3c61-8eee-5d71708406e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:a9:b5:07:f2:02:7c:72:54:61:e8:4f:5a:7b:4f:09:1b:61: 46:9e:be:8b:da:c5:a8:60:fe:2d:63:d4:40:a2:ee:0e:32:f6: 44:52:df:45:5d:50:c2:0d:0a:96:c0:70:af:1b:7e:0a:6f:b7: fe:59:dc:d2:e0:df:b8:9f:54:53:fd:f2:29:61:e2:10:3e:29: 24:fd:60:9b:de:62:a2:d8:1a:92:75:64:1a:28:48:ca:82:5e: 25:4a:e1:e9:b4:64:f5:f2:4e:11:51:7e:57:33:96:af:bd:2d: 69:6c:3a:7f:71:c6:7e:ac:4e:34:bf:6b:2b:36:60:d5:ca:fd: 65:90:4a:be:04:ef:b7:ae:9f:cc:58:bf:a3:60:c2:b0:fe:93: 5a:71:fc:78:01:3f:e0:1f:80:5a:6e:46:7b:37:08:22:e6:97: 4d:d8:52:4c:81:85:6d:19:5e:e2:6b:96:87:53:8a:17:21:3e: 49:b3:4f:a5:f7:9e:90:b4:fe:76:82:0c:25:da:e5:31:f5:4d: ac:1a:6c:7e:a7:90:35:09:88:1e:a0:27:8d:4e:1b:d6:06:30: ef:1c:cf:44:25:dc:eb:6b:8e:79:da:c2:90:9c:ca:30:38:fa: ae:f1:70:43:77:2e:d8:2f:ff:d9:76:e6:b4:12:5e:98:24:0b: 8d:ac:44:79 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEv/27IHVJleScPTnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZDliMzYxNmMtZWY1OC00ZDFmLTk3ZGQtZTk4YzAzNmNkMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdByfM19o6ew2OsUj8umx4NA4+VWNXLp4yo b5SNll32o5nLBEv/ihwl8ObjCSgi7CCtP2IwjR/UcPJeBZCGgLxEX0gXYZoNHDvA daCjqBKTVuV85gxatjXSBMlS+AcDhXw1BuQucyGgeW644OXO4iEPZq0WZ9/pbPaJ +/UbRNAgjBaHkL7y4wSVvTThPxUGfq5W/HPfy5is+Sm9O3I5IUpRBWOrxlno8uyK 6QY/dQDKazTGdRa28iXKy7hMT4AKq18D8r/3Jhv2eWdjLzqB4sTmPbYK1A7touDi sRgazFc1b6DpCVQI5FLOQFSesGpExoFgSX3hGo30Kmb0AoxV5wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDgyoNVGQbQl7CE/WqVzDUPbEzNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvZWZkZmIzZDQtY2VmYS0z YzYxLThlZWUtNWQ3MTcwODQwNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAO6m1B/ICfHJUYehPWntPCRthRp6+i9rFqGD+LWPUQKLuDjL2RFLf RV1Qwg0KlsBwrxt+Cm+3/lnc0uDfuJ9UU/3yKWHiED4pJP1gm95iotgaknVkGihI yoJeJUrh6bRk9fJOEVF+VzOWr70taWw6f3HGfqxONL9rKzZg1cr9ZZBKvgTvt66f zFi/o2DCsP6TWnH8eAE/4B+AWm5GezcIIuaXTdhSTIGFbRle4muWh1OKFyE+SbNP pfeekLT+doIMJdrlMfVNrBpsfqeQNQmIHqAnjU4b1gYw7xzPRCXc62uOedrCkJzK MDj6rvFwQ3cu2C//2XbmtBJemCQLjaxEeQ== -----END CERTIFICATE-----Generated at Fri Dec 19 16:41:42 2025 by rpki-client