This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa File: f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa (raw, json) Hash identifier: uwpK/2sTmqJjxBJn5GdnsiIAZl96hDLTb6uQo7BMJto= Subject key identifier: 52:74:58:E2:30:19:A0:2E:A7:3C:21:7D:A4:59:8F:6B:79:90:5B:9B Certificate issuer: /CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Certificate serial: 010D0C9F4328584BE6CD9742FAFE68A1F4DAE0E8 Authority key identifier: 98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa Signing time: Tue 18 Nov 2025 14:37:52 +0000 ROA not before: Tue 18 Nov 2025 14:37:52 +0000 ROA not after: Mon 16 Feb 2026 14:37:52 +0000 asID: 16524 IP address blocks: 2604:85c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:cd:97:42:fa:fe:68:a1:f4:da:e0:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d5d923-fd34-409d-8f77-22c6014e6e1b Validity Not Before: Nov 18 14:37:52 2025 GMT Not After : Feb 16 14:37:52 2026 GMT Subject: CN=fb9d5608-a2f2-457e-9d3b-96c264e291a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:66:c9:71:c2:3d:7f:53:42:f6:e4:49:14:eb: 94:8e:9c:c9:9e:e4:52:4f:02:58:94:07:17:54:a6: 36:ce:3d:ba:3e:2a:33:07:e6:8a:c4:69:c5:f9:ea: f2:39:59:c9:a8:13:50:42:66:c2:4b:30:80:ff:b5: da:40:d3:e0:86:f2:19:c0:71:6d:0d:b4:e0:82:9e: c8:67:d1:57:e7:d5:f0:10:b6:84:86:2c:08:f3:80: 6e:c6:e8:60:7a:ac:97:e0:d7:34:2d:66:76:d6:a3: 79:c7:f2:41:ea:a4:79:a6:22:e5:5e:8b:b1:c3:92: 3a:15:3c:c9:5f:e4:8b:44:45:e1:02:21:a3:38:05: 0a:7d:d2:f1:f9:d7:6d:75:a0:17:f2:fd:9f:85:31: 1d:60:89:66:21:42:9f:70:c3:c8:09:bc:eb:98:bd: 36:d6:16:33:a7:51:64:bf:c2:38:d6:b7:8c:f7:14: d7:9b:7d:2c:55:07:9e:d7:35:fd:04:b1:6d:99:56: 71:dd:a8:5b:94:14:7d:ba:a5:52:f0:f9:25:8d:5a: 61:06:4a:f1:bf:12:ee:b9:16:6a:45:f0:f8:1b:d2: bd:99:f4:cc:b6:4d:9d:20:3f:09:22:06:17:98:f3: d0:c8:1a:78:36:f0:df:0b:2b:4c:70:cb:25:b3:cc: 0c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:74:58:E2:30:19:A0:2E:A7:3C:21:7D:A4:59:8F:6B:79:90:5B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/f4f34b1f-2bf7-3769-9389-b88e8d8c6ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b/16d5d923-fd34-409d-8f77-22c6014e6e1b.crl X509v3 Authority Key Identifier: keyid:98:26:24:10:BC:59:3D:D8:C8:82:2B:46:33:36:FC:DD:A4:EF:FB:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/16d5d923-fd34-409d-8f77-22c6014e6e1b.cer sbgp-ipAddrBlock: critical IPv6: 2604:85c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6f:06:a7:0b:5c:35:40:f8:34:5b:a3:86:1d:60:bd:0d:01: 6c:48:f3:95:08:0e:8d:05:14:b1:f2:e5:b5:d9:7d:bc:45:af: a1:51:15:b8:5a:b2:e0:3b:46:e3:3b:26:8a:38:ca:7e:5c:ad: 30:83:e6:9e:31:6d:4c:e8:c1:ea:27:b3:71:08:98:3d:bf:2a: d6:df:c1:4e:e9:4c:97:6e:cc:de:cc:31:7a:41:6d:a6:be:e8: 21:19:20:40:f5:99:de:cf:8c:f9:65:b3:e5:77:75:de:cd:5c: bf:ad:ef:a1:ca:27:9e:11:82:f0:91:3b:9f:6c:a6:86:8a:2d: d6:56:b1:fa:06:63:f1:07:78:79:d2:0d:f3:63:d1:1d:0c:43: ff:8f:fc:1a:ef:4f:9c:da:38:77:cc:e8:24:78:2a:68:11:2f: e2:17:ae:7e:6c:e4:42:d9:f8:72:4c:31:90:7a:4c:09:97:7d: 24:11:61:40:74:dd:56:bd:43:94:5b:d3:74:72:f9:ff:d9:b6: 05:cf:90:84:99:ed:3c:5b:b7:b0:be:92:4f:a8:e0:95:ca:c7: d5:9f:18:62:5b:da:a7:56:70:94:96:de:b8:43:d8:20:22:46: eb:b4:c5:b5:a4:48:ef:a7:d5:d9:e5:a6:b5:dc:ba:ad:c3:1e: e3:0e:36:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvmzZdC+v5oofTa4OgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTZkNWQ5MjMtZmQzNC00MDlkLThmNzctMjJjNjAxNGU2 ZTFiMB4XDTI1MTExODE0Mzc1MloXDTI2MDIxNjE0Mzc1MlowLzEtMCsGA1UEAxMk ZmI5ZDU2MDgtYTJmMi00NTdlLTlkM2ItOTZjMjY0ZTI5MWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32bJccI9f1NC9uRJFOuUjpzJnuRSTwJYlAcX VKY2zj26PiozB+aKxGnF+eryOVnJqBNQQmbCSzCA/7XaQNPghvIZwHFtDbTggp7I Z9FX59XwELaEhiwI84BuxuhgeqyX4Nc0LWZ21qN5x/JB6qR5piLlXouxw5I6FTzJ X+SLREXhAiGjOAUKfdLx+ddtdaAX8v2fhTEdYIlmIUKfcMPICbzrmL021hYzp1Fk v8I41reM9xTXm30sVQee1zX9BLFtmVZx3ahblBR9uqVS8PkljVphBkrxvxLuuRZq RfD4G9K9mfTMtk2dID8JIgYXmPPQyBp4NvDfCytMcMsls8wMCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFJ0WOIwGaAupzwhfaRZj2t5kFubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1 ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2MDE0ZTZlMWIvZjRmMzRiMWYtMmJmNy0z NzY5LTkzODktYjg4ZThkOGM2ZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTZkNWQ5MjMtZmQzNC00MDlkLThm NzctMjJjNjAxNGU2ZTFiLzE2ZDVkOTIzLWZkMzQtNDA5ZC04Zjc3LTIyYzYwMTRl NmUxYi5jcmwwHwYDVR0jBBgwFoAUmCYkELxZPdjIgitGMzb83aTv+10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNmQ1ZDkyMy1mZDM0LTQwOWQtOGY3Ny0yMmM2 MDE0ZTZlMWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgSFwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdbwanC1w1QPg0W6OGHWC9DQFsSPOVCA6NBRSx8uW12X28Ra+hURW4 WrLgO0bjOyaKOMp+XK0wg+aeMW1M6MHqJ7NxCJg9vyrW38FO6UyXbszezDF6QW2m vughGSBA9Znez4z5ZbPld3XezVy/re+hyieeEYLwkTufbKaGii3WVrH6BmPxB3h5 0g3zY9EdDEP/j/wa70+c2jh3zOgkeCpoES/iF65+bORC2fhyTDGQekwJl30kEWFA dN1WvUOUW9N0cvn/2bYFz5CEme08W7ewvpJPqOCVysfVnxhiW9qnVnCUlt64Q9gg IkbrtMW1pEjvp9XZ5aa13Lqtwx7jDjaf -----END CERTIFICATE-----Generated at Sat Nov 22 21:14:43 2025 by rpki-client