This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa File: 3bab386a-a864-3a16-a4d2-095896d544dd.roa (raw, json) Hash identifier: yJ1uoOSa9/AhYylen2r1mBRCWWDjaZAwucnzYXFCqFk= Subject key identifier: 9A:09:7A:18:5F:79:6E:C6:00:95:58:AA:D5:00:EC:0D:FE:38:32:8E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C45A8497C465BD89B7A275710 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 3356 IP address blocks: 2607:f028:17::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:49:7c:46:5b:d8:9b:7a:27:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1cb71873-522e-4806-b4ac-70c4786f9df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:7a:c6:38:33:c2:d2:68:d3:2c:41:b3:4a: 09:ac:31:d3:ba:9c:25:16:9c:12:45:93:16:c9:a9: b9:a4:bd:76:31:31:c3:31:46:d8:01:6a:e3:3e:a4: 96:c7:d8:b6:4f:82:3d:c1:a8:e5:62:83:0e:7a:3e: d9:f9:07:88:0c:23:9a:f6:47:81:dd:58:51:36:0c: e7:70:ca:2c:3e:c5:2b:11:bb:09:55:7b:43:52:d1: be:48:e2:4c:31:c8:27:0c:8c:fd:a0:0a:61:63:e6: 47:e7:8e:45:32:72:83:cf:52:e4:cd:94:2f:44:01: 85:3a:20:68:4f:d7:14:d7:8e:71:da:be:91:8c:0d: f2:a9:67:7e:7d:8f:ee:b3:49:6e:98:86:22:d1:15: c4:28:e9:b1:1c:f5:ce:aa:89:fe:b6:b1:cf:6b:d8: ca:5b:ee:66:cb:5c:cf:aa:bb:ad:e8:cb:b1:3c:df: 15:17:df:fb:45:0b:e6:00:85:a1:de:25:5e:78:af: 61:0e:06:37:c6:6b:72:b3:81:64:d2:26:a6:d8:2b: b1:74:b5:94:eb:84:4d:55:ef:7f:19:04:4e:ba:fa: d5:69:88:1f:9b:95:a0:9a:3f:02:01:1a:53:f7:9d: 56:25:6e:a6:66:62:73:21:ac:34:2c:43:b1:0e:60: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:09:7A:18:5F:79:6E:C6:00:95:58:AA:D5:00:EC:0D:FE:38:32:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3bab386a-a864-3a16-a4d2-095896d544dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:17::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c8:7f:2f:fc:e2:3b:8c:c8:c8:01:0d:06:19:ea:b0:46:fa: bf:8f:d5:8f:50:87:73:3e:0b:7a:b9:63:47:cc:30:e9:4a:e7: 6b:59:f6:a0:26:9e:48:4f:7e:c1:ed:46:be:36:6e:4c:e4:88: 31:0b:cd:ac:66:03:3b:43:60:1a:23:e6:4b:5b:29:dd:25:56: 88:0b:d4:69:5c:eb:7d:49:bb:a0:ec:8a:b5:b5:1b:f8:47:27: 8f:fc:4b:4e:91:35:e3:bf:95:c0:f9:88:17:f9:47:c0:c1:ff: 45:ca:5a:e3:f8:ce:90:0f:cc:18:c6:39:4a:09:92:69:db:17: 9d:65:2f:4a:d9:3a:37:01:aa:64:0b:8f:71:fb:7e:08:41:0c: dd:64:e4:1b:fb:6b:09:b0:7f:70:ec:2e:9f:4a:78:a2:fa:0c: af:a4:ad:47:f0:29:53:b1:d7:d5:cd:7c:34:96:dd:81:a1:f1: ce:a0:4c:e1:da:4c:6f:6a:3c:c5:08:62:51:af:78:c1:1a:95: 76:53:e0:cd:17:2c:c9:78:f0:59:3a:ed:81:3a:1c:ef:ad:72: fa:af:bb:6f:62:d9:23:27:7b:73:85:30:91:42:6d:96:59:2c: 04:a9:45:49:ad:34:35:06:28:01:72:0e:83:c0:22:65:d6:89: 40:26:c7:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFqEl8RlvYm3onVxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWNiNzE4NzMtNTIyZS00ODA2LWI0YWMtNzBjNDc4NmY5ZGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rB6xjgzwtJo0yxBs0oJrDHTupwlFpwSRZMW yam5pL12MTHDMUbYAWrjPqSWx9i2T4I9wajlYoMOej7Z+QeIDCOa9keB3VhRNgzn cMosPsUrEbsJVXtDUtG+SOJMMcgnDIz9oAphY+ZH545FMnKDz1LkzZQvRAGFOiBo T9cU145x2r6RjA3yqWd+fY/us0lumIYi0RXEKOmxHPXOqon+trHPa9jKW+5my1zP qrut6MuxPN8VF9/7RQvmAIWh3iVeeK9hDgY3xmtys4Fk0iam2CuxdLWU64RNVe9/ GQROuvrVaYgfm5Wgmj8CARpT951WJW6mZmJzIaw0LEOxDmB+KwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJoJehhfeW7GAJVYqtUA7A3+ODKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2JhYjM4NmEtYTg2NC0z YTE2LWE0ZDItMDk1ODk2ZDU0NGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACTIfy/84juMyMgBDQYZ6rBG+r+P1Y9Qh3M+C3q5Y0fMMOlK52tZ 9qAmnkhPfsHtRr42bkzkiDELzaxmAztDYBoj5ktbKd0lVogL1Glc631Ju6DsirW1 G/hHJ4/8S06RNeO/lcD5iBf5R8DB/0XKWuP4zpAPzBjGOUoJkmnbF51lL0rZOjcB qmQLj3H7fghBDN1k5Bv7awmwf3DsLp9KeKL6DK+krUfwKVOx19XNfDSW3YGh8c6g TOHaTG9qPMUIYlGveMEalXZT4M0XLMl48Fk67YE6HO+tcvqvu29i2SMne3OFMJFC bZZZLASpRUmtNDUGKAFyDoPAImXWiUAmxzo= -----END CERTIFICATE-----Generated at Tue Dec 23 04:58:19 2025 by rpki-client