This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa File: cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa (raw, json) Hash identifier: BXec/WQc7N0E9epJXTyfW+q001iIMUN3bij729QzC4s= Subject key identifier: 08:B7:A0:55:FF:75:C7:F6:C1:3D:C8:B7:34:23:4B:E7:26:C3:1A:39 Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Certificate serial: 010D0C9F4328584BC53B33D9B963C387278E9300 Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 396982 IP address blocks: 2620:126:f000::/44 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:33:d9:b9:63:c3:87:27:8e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=5d2dd79c-5d85-469d-9bd2-378bee49e075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:49:f9:01:75:e0:fa:ca:76:93:35:ae:6a: b5:ba:8e:9a:18:a5:01:80:f5:eb:77:59:01:5b:d7: 5e:9e:2f:ed:a0:87:9f:ac:2f:16:d6:12:43:35:1e: 27:ad:97:d9:ba:8f:2e:b4:b8:c6:08:e8:78:ea:f4: dd:29:21:c8:41:6d:66:a4:d5:0e:5c:16:cc:4a:c7: bc:18:d8:f4:ad:d2:7b:eb:1d:ec:73:1a:bb:74:d1: 56:51:d6:8e:f7:39:57:28:27:80:61:25:50:22:a6: 17:4b:28:7e:dc:f0:9e:1d:d9:eb:f5:a9:49:00:9d: aa:fb:2f:40:d2:09:65:ca:bf:ff:a4:65:44:15:d1: f9:46:73:a1:4b:40:9c:50:86:b7:8d:73:b3:91:2b: cb:1a:4c:ff:d5:e3:df:ef:f0:45:a7:d1:36:5e:06: 79:0f:20:55:a7:e9:0b:31:cf:c9:81:52:75:1e:bc: 73:f4:48:79:41:fa:4f:d1:f4:da:fa:07:68:c3:a4: 0b:23:cb:cc:bc:8a:f9:25:b9:dc:9f:21:47:4d:27: 95:24:ee:c7:0b:cf:cb:8d:d8:d3:49:17:17:aa:f8: 1c:34:78:4d:44:20:b1:1c:c7:91:e3:80:6f:1b:eb: fe:0b:64:92:4f:be:5b:52:6b:72:b5:05:b5:d9:97: ca:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B7:A0:55:FF:75:C7:F6:C1:3D:C8:B7:34:23:4B:E7:26:C3:1A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cf2b3797-7be9-3b3a-ba2e-23e8cc77131d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl X509v3 Authority Key Identifier: keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer sbgp-ipAddrBlock: critical IPv6: 2620:126:f000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:38:74:d3:a4:64:cd:de:b5:c2:8f:8d:db:97:bb:00:cd:d7: 3b:95:ba:95:1d:69:56:95:47:95:af:6e:ae:82:58:9f:5b:3c: 61:d1:aa:53:cb:31:79:97:3e:04:7e:fb:6e:39:4b:76:66:34: 14:4c:28:0e:4a:ef:5b:31:36:66:40:28:e6:95:72:bd:46:ea: 3f:64:ed:8b:3f:04:70:b0:66:55:2b:bd:35:07:6e:98:2e:01: 53:8e:6d:6b:02:44:70:f8:53:52:49:2e:54:93:ae:d0:ab:38: 6b:6c:75:2c:d9:9f:bc:ca:2c:2f:34:8f:89:19:7f:5f:fb:2d: 6d:48:74:c5:24:55:a6:85:f9:ad:9b:b9:05:73:49:41:7e:a9: d4:28:3d:20:37:a6:7e:e4:36:37:8d:80:00:ca:e6:14:38:93: 49:48:05:32:10:d8:d4:6b:dd:cd:fe:f0:a7:c9:6c:a0:a6:10: 60:98:33:30:d5:b2:dd:b1:de:73:d3:aa:6c:fb:66:9b:be:64: e1:70:8b:0b:5e:48:ca:7a:02:73:f5:ea:2e:dc:ad:8e:c7:dc: 94:10:dc:56:45:a2:a2:74:a1:02:35:aa:ca:51:d2:af:b3:8a: 27:1b:6b:5d:f1:c1:42:4d:18:5a:fe:fd:e9:ee:3e:d7:48:b9: c5:06:11:3c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvFOzPZuWPDhyeOkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkYzg4MWYtNTRhYy00MGE5LTg5YjMtNTM4M2NmMjQz YmFlMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NWQyZGQ3OWMtNWQ4NS00NjlkLTliZDItMzc4YmVlNDllMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV1J+QF14PrKdpM1rmq1uo6aGKUBgPXrd1kB W9deni/toIefrC8W1hJDNR4nrZfZuo8utLjGCOh46vTdKSHIQW1mpNUOXBbMSse8 GNj0rdJ76x3scxq7dNFWUdaO9zlXKCeAYSVQIqYXSyh+3PCeHdnr9alJAJ2q+y9A 0gllyr//pGVEFdH5RnOhS0CcUIa3jXOzkSvLGkz/1ePf7/BFp9E2XgZ5DyBVp+kL Mc/JgVJ1Hrxz9Eh5QfpP0fTa+gdow6QLI8vMvIr5JbncnyFHTSeVJO7HC8/LjdjT SRcXqvgcNHhNRCCxHMeR44BvG+v+C2SST75bUmtytQW12ZfKTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAi3oFX/dcf2wT3ItzQjS+cmwxo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmRj ODgxZi01NGFjLTQwYTktODliMy01MzgzY2YyNDNiYWUvY2YyYjM3OTctN2JlOS0z YjNhLWJhMmUtMjNlOGNjNzcxMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkYzg4MWYtNTRhYy00MGE5LTg5 YjMtNTM4M2NmMjQzYmFlL2NiZGM4ODFmLTU0YWMtNDBhOS04OWIzLTUzODNjZjI0 M2JhZS5jcmwwHwYDVR0jBBgwFoAUC3efBgtCdYQS3txgZnSkOzvFHDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYmRjODgxZi01NGFjLTQwYTktODliMy01Mzgz Y2YyNDNiYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABJvAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEU4dNOkZM3etcKPjduXuwDN1zuVupUdaVaVR5Wvbq6CWJ9bPGHR qlPLMXmXPgR++245S3ZmNBRMKA5K71sxNmZAKOaVcr1G6j9k7Ys/BHCwZlUrvTUH bpguAVOObWsCRHD4U1JJLlSTrtCrOGtsdSzZn7zKLC80j4kZf1/7LW1IdMUkVaaF +a2buQVzSUF+qdQoPSA3pn7kNjeNgADK5hQ4k0lIBTIQ2NRr3c3+8KfJbKCmEGCY MzDVst2x3nPTqmz7Zpu+ZOFwiwteSMp6AnP16i7crY7H3JQQ3FZFoqJ0oQI1qspR 0q+ziicba13xwUJNGFr+/enuPtdIucUGETw= -----END CERTIFICATE-----Generated at Tue Nov 25 08:32:05 2025 by rpki-client