This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa File: 43d013ec-a6c3-3388-8d14-0791322dd8c0.roa (raw, json) Hash identifier: KfOWs+6TIKxvR56n4O9mbhYmmmuhvPyeTogJrPfm3c8= Subject key identifier: D7:3E:6F:3E:08:9C:5E:22:4A:5C:58:4E:52:5D:69:C3:E5:B6:F5:27 Certificate issuer: /CN=04c216c1-5924-4a66-9346-a1f215800ceb Certificate serial: 010D0C9F4328584C321B9F4987FCDF879F7ABC40 Authority key identifier: 98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa Signing time: Mon 15 Dec 2025 14:00:38 +0000 ROA not before: Mon 15 Dec 2025 14:00:38 +0000 ROA not after: Sun 15 Mar 2026 13:00:38 +0000 asID: 399889 IP address blocks: 2602:fc54::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:1b:9f:49:87:fc:df:87:9f:7a:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c216c1-5924-4a66-9346-a1f215800ceb Validity Not Before: Dec 15 14:00:38 2025 GMT Not After : Mar 15 13:00:38 2026 GMT Subject: CN=2bbbf76e-e54d-4012-8019-e2c8151f4e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a2:56:9b:08:7b:45:57:0b:53:de:32:8b:72: 8b:01:5a:10:30:1e:45:db:d4:94:cd:5d:76:a6:a1: f5:a4:6b:2a:a1:a5:60:4f:f4:e7:8d:f8:ec:82:87: 2b:86:d4:24:89:bd:33:aa:e1:31:03:32:c2:3f:54: ac:38:12:a3:9f:0c:3d:1f:03:fd:84:86:b6:be:78: f4:ea:27:87:47:05:23:cb:dc:61:0c:c5:44:1b:3a: 34:67:55:eb:9c:4a:0d:7b:a8:2f:7e:e4:b3:cf:a1: c5:fc:72:ea:27:cb:8f:5b:b8:85:8c:6e:83:2e:48: 11:42:86:e4:69:ab:36:74:75:5e:24:cf:fd:81:d8: 20:48:60:65:a4:b9:60:45:41:16:df:db:af:8b:2b: 1b:b8:34:71:85:8b:16:38:5f:c4:20:7f:0e:88:63: 00:1a:c6:6f:9c:e5:24:45:e6:bb:79:9b:6d:ad:e2: 68:be:2a:7a:25:e9:86:ca:1a:d8:8c:0c:57:8f:8e: e2:80:28:f0:5a:b1:45:a5:bb:e1:5b:df:5e:2b:8d: b8:7f:cc:4e:92:d4:53:bb:a1:31:1e:56:15:58:30: c9:41:69:fc:b8:6c:90:7d:04:c8:87:ba:24:a7:35: d7:45:5e:9b:86:c6:bc:9a:b5:98:e4:c4:d2:52:b1: cc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3E:6F:3E:08:9C:5E:22:4A:5C:58:4E:52:5D:69:C3:E5:B6:F5:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/43d013ec-a6c3-3388-8d14-0791322dd8c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb/04c216c1-5924-4a66-9346-a1f215800ceb.crl X509v3 Authority Key Identifier: keyid:98:B8:4C:6C:DD:3D:9B:0A:D7:06:98:7D:61:74:95:AB:15:54:04:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/04c216c1-5924-4a66-9346-a1f215800ceb.cer sbgp-ipAddrBlock: critical IPv6: 2602:fc54::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:63:73:5d:bb:54:5b:10:9b:03:2b:aa:a7:3c:e6:d3:86:6b: 74:23:5f:d8:46:5c:2e:07:07:96:68:98:27:12:37:e5:68:cf: 04:dd:3c:9a:21:7c:c4:fc:cc:d3:49:f1:69:98:4b:fd:43:fd: c0:ab:48:d4:72:62:1b:ed:39:5c:74:4d:9c:b3:4a:3d:6b:a0: bc:b4:0e:0e:27:a5:3a:06:ba:97:54:07:0a:e9:31:47:74:34: 4e:11:53:4a:a4:45:4d:cf:e5:41:4a:05:68:1e:bd:4b:50:ef: cf:05:a5:df:71:34:42:76:ca:33:bd:d2:a2:91:55:91:82:cf: 04:23:44:1b:a5:60:12:a8:7e:4f:94:71:38:41:2f:4b:6b:d1: 10:7c:51:fb:75:6a:7d:b8:5a:ee:85:c8:08:d2:fd:fc:1d:e7: 6a:c9:2b:1e:e7:1a:72:27:35:34:a7:9f:63:24:ac:e2:14:f8: c5:cd:f0:12:8d:4a:3e:93:57:ce:3a:2d:08:5a:f5:03:bb:8b: 57:1f:90:e3:dc:d5:3f:6f:91:96:19:50:80:85:85:01:62:fe: 31:d4:90:5d:8a:f7:84:17:81:9d:a9:27:e0:0a:23:69:b5:75: 38:b6:93:80:b2:5d:ec:bc:b9:cd:02:6a:f5:a8:6a:55:3a:e1: aa:f3:8f:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwyG59Jh/zfh596vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRjMjE2YzEtNTkyNC00YTY2LTkzNDYtYTFmMjE1ODAw Y2ViMB4XDTI1MTIxNTE0MDAzOFoXDTI2MDMxNTEzMDAzOFowLzEtMCsGA1UEAxMk MmJiYmY3NmUtZTU0ZC00MDEyLTgwMTktZTJjODE1MWY0ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKJWmwh7RVcLU94yi3KLAVoQMB5F29SUzV12 pqH1pGsqoaVgT/TnjfjsgocrhtQkib0zquExAzLCP1SsOBKjnww9HwP9hIa2vnj0 6ieHRwUjy9xhDMVEGzo0Z1XrnEoNe6gvfuSzz6HF/HLqJ8uPW7iFjG6DLkgRQobk aas2dHVeJM/9gdggSGBlpLlgRUEW39uviysbuDRxhYsWOF/EIH8OiGMAGsZvnOUk Rea7eZttreJovip6JemGyhrYjAxXj47igCjwWrFFpbvhW99eK424f8xOktRTu6Ex HlYVWDDJQWn8uGyQfQTIh7okpzXXRV6bhsa8mrWY5MTSUrHMawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNc+bz4InF4iSlxYTlJdacPltvUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wNGMy MTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYyMTU4MDBjZWIvNDNkMDEzZWMtYTZjMy0z Mzg4LThkMTQtMDc5MTMyMmRkOGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDRjMjE2YzEtNTkyNC00YTY2LTkz NDYtYTFmMjE1ODAwY2ViLzA0YzIxNmMxLTU5MjQtNGE2Ni05MzQ2LWExZjIxNTgw MGNlYi5jcmwwHwYDVR0jBBgwFoAUmLhMbN09mwrXBph9YXSVqxVUBDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wNGMyMTZjMS01OTI0LTRhNjYtOTM0Ni1hMWYy MTU4MDBjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8VAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAd2NzXbtUWxCbAyuqpzzm04ZrdCNf2EZcLgcHlmiYJxI35WjPBN08 miF8xPzM00nxaZhL/UP9wKtI1HJiG+05XHRNnLNKPWugvLQODielOga6l1QHCukx R3Q0ThFTSqRFTc/lQUoFaB69S1DvzwWl33E0QnbKM73SopFVkYLPBCNEG6VgEqh+ T5RxOEEvS2vREHxR+3Vqfbha7oXICNL9/B3naskrHucacic1NKefYySs4hT4xc3w Eo1KPpNXzjotCFr1A7uLVx+Q49zVP2+RlhlQgIWFAWL+MdSQXYr3hBeBnakn4Aoj abV1OLaTgLJd7Ly5zQJq9ahqVTrhqvOPag== -----END CERTIFICATE-----Generated at Fri Dec 19 19:19:20 2025 by rpki-client