This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa File: 474aeac4-4a0f-37f9-af53-a0017b82f404.roa (raw, json) Hash identifier: jdOvIX76XbFHxpwgob066sATZn8J4AHfRSOrAcANy6s= Subject key identifier: 88:A7:3A:02:B5:5C:CE:5E:32:67:3D:66:6A:4D:10:30:A7:B0:2B:76 Certificate issuer: /CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Certificate serial: 010D0C9F4328584C0570BAA4CAB62095897A9A00 Authority key identifier: 10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 25664 IP address blocks: 2607:cc80:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:ba:a4:ca:b6:20:95:89:7a:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15d3fdb-7c2d-4390-a72f-fa46f02f4078 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=161e96bb-4b21-4b83-8a88-87da1628068b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:49:d6:cb:35:42:a3:70:93:65:9b:fc:8e:17: 3d:13:fb:4f:f7:c0:5f:c4:09:a3:d2:4d:c3:94:ff: 1e:1c:1e:85:8e:22:a4:2b:18:79:ed:f4:df:e1:f0: 61:c1:f2:8a:90:77:5d:1c:49:75:8c:e7:aa:f6:c4: e8:8c:22:3e:18:19:c7:cd:9e:12:f0:05:82:68:8f: f3:4d:e3:42:1a:19:fc:2d:0d:40:42:ff:cf:53:25: a4:3a:9b:7a:13:8c:34:ec:02:5e:7e:b2:ee:e5:4d: f9:55:27:64:01:bb:f1:1d:c5:f7:c9:b6:bf:d8:b8: ae:b2:3f:e8:1c:66:bb:f7:e4:63:c9:91:6d:e8:07: 10:7e:20:2d:8c:3f:a1:43:3c:8f:e3:74:65:dc:89: 0d:5a:af:80:83:09:c5:f8:38:f4:ab:08:98:f6:29: 8b:a8:ef:29:03:27:48:74:c1:13:ab:45:7e:85:71: 57:2b:0a:85:c3:7a:9c:3c:1d:dd:62:14:a6:fa:a3: 52:85:02:24:6c:f4:ce:90:ae:2c:1a:c0:e5:3f:b9: 6c:46:63:0e:cc:25:f8:a9:81:66:ac:45:18:c4:67: 26:b0:2a:5e:a6:aa:36:be:5c:aa:71:90:d4:6c:28: 87:62:b4:a1:3a:6d:95:f3:ee:85:b6:51:78:de:6c: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:3A:02:B5:5C:CE:5E:32:67:3D:66:6A:4D:10:30:A7:B0:2B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/474aeac4-4a0f-37f9-af53-a0017b82f404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.crl X509v3 Authority Key Identifier: keyid:10:CA:AB:0D:A6:15:C3:67:12:DD:35:EC:D2:73:23:F7:9C:C3:AB:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e15d3fdb-7c2d-4390-a72f-fa46f02f4078.cer sbgp-ipAddrBlock: critical IPv6: 2607:cc80:1000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:7d:25:25:88:60:30:cd:2f:0f:3c:2f:4b:34:bf:81:9c:88: 1f:a6:5e:ee:93:90:c2:62:3a:d0:17:ef:45:ce:5c:63:5c:c3: 44:a7:2a:cc:31:e3:01:79:df:5e:6d:d2:a7:01:5b:78:a2:ad: 4c:8a:3a:88:ee:a6:0c:63:5c:1a:15:d0:4b:bd:3f:da:14:a3: a7:5b:fd:70:67:7e:56:77:f5:3c:12:78:81:f3:36:45:66:f6: ca:de:dc:d7:1c:22:98:bc:4a:75:b8:12:5d:f8:24:56:e9:51: 4f:c2:ae:02:ef:cd:ae:f8:bc:34:72:59:f0:5f:60:ca:c4:db: b8:ae:81:47:f8:14:34:4c:12:4d:a8:95:38:c7:f1:44:86:c0: 07:c3:cb:e5:74:83:b1:b9:62:3c:04:9b:11:2f:da:1e:91:6c: 1d:97:81:e9:d6:5f:27:ce:a1:87:79:63:4c:6c:30:66:0e:a7: 2a:0f:c6:ce:8a:d7:ed:03:80:e0:81:39:04:19:5b:b0:72:28: 47:08:bd:b8:bb:58:df:f3:57:11:22:2b:00:7d:f7:f4:ec:49: 0b:9d:9e:d6:14:40:75:76:89:53:e0:bf:e7:8a:4e:25:87:22: 29:fa:03:28:ac:5e:11:56:68:57:67:5b:16:a7:d1:94:cc:14: 6a:94:c5:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwFcLqkyrYglYl6mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTE1ZDNmZGItN2MyZC00MzkwLWE3MmYtZmE0NmYwMmY0 MDc4MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk MTYxZTk2YmItNGIyMS00YjgzLThhODgtODdkYTE2MjgwNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApknWyzVCo3CTZZv8jhc9E/tP98BfxAmj0k3D lP8eHB6FjiKkKxh57fTf4fBhwfKKkHddHEl1jOeq9sTojCI+GBnHzZ4S8AWCaI/z TeNCGhn8LQ1AQv/PUyWkOpt6E4w07AJefrLu5U35VSdkAbvxHcX3yba/2Liusj/o HGa79+RjyZFt6AcQfiAtjD+hQzyP43Rl3IkNWq+AgwnF+Dj0qwiY9imLqO8pAydI dMETq0V+hXFXKwqFw3qcPB3dYhSm+qNShQIkbPTOkK4sGsDlP7lsRmMOzCX4qYFm rEUYxGcmsCpepqo2vlyqcZDUbCiHYrShOm2V8+6FtlF43mx91wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIinOgK1XM5eMmc9ZmpNEDCnsCt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMTVk M2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2ZjAyZjQwNzgvNDc0YWVhYzQtNGEwZi0z N2Y5LWFmNTMtYTAwMTdiODJmNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTE1ZDNmZGItN2MyZC00MzkwLWE3 MmYtZmE0NmYwMmY0MDc4L2UxNWQzZmRiLTdjMmQtNDM5MC1hNzJmLWZhNDZmMDJm NDA3OC5jcmwwHwYDVR0jBBgwFoAUEMqrDaYVw2cS3TXs0nMj95zDq7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lMTVkM2ZkYi03YzJkLTQzOTAtYTcyZi1mYTQ2 ZjAyZjQwNzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfMgBAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALR9JSWIYDDNLw88L0s0v4GciB+mXu6TkMJiOtAX70XOXGNcw0Sn Kswx4wF5315t0qcBW3iirUyKOojupgxjXBoV0Eu9P9oUo6db/XBnflZ39TwSeIHz NkVm9sre3NccIpi8SnW4El34JFbpUU/CrgLvza74vDRyWfBfYMrE27iugUf4FDRM Ek2olTjH8USGwAfDy+V0g7G5YjwEmxEv2h6RbB2XgenWXyfOoYd5Y0xsMGYOpyoP xs6K1+0DgOCBOQQZW7ByKEcIvbi7WN/zVxEiKwB99/TsSQudntYUQHV2iVPgv+eK TiWHIin6AyisXhFWaFdnWxan0ZTMFGqUxZ4= -----END CERTIFICATE-----Generated at Sat Dec 6 07:27:45 2025 by rpki-client