This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa File: c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa (raw, json) Hash identifier: F1L7MUPy07isSNlJ7BqtNb9D//QNMHCvYExzRkBDSkA= Subject key identifier: 3A:54:F7:7E:89:E3:9C:0F:11:A6:C6:A8:23:38:30:60:B3:68:A9:6C Certificate issuer: /CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Certificate serial: 010D0C9F4328584C539BDD8FB3C29F2118597040 Authority key identifier: AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa Signing time: Sat 27 Dec 2025 14:00:38 +0000 ROA not before: Sat 27 Dec 2025 14:00:38 +0000 ROA not after: Fri 27 Mar 2026 13:00:38 +0000 asID: 3477 IP address blocks: 2607:9bc0:1010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:53:9b:dd:8f:b3:c2:9f:21:18:59:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbda8ea2-a168-4a8b-b01b-21a421e7130e Validity Not Before: Dec 27 14:00:38 2025 GMT Not After : Mar 27 13:00:38 2026 GMT Subject: CN=03440399-1f9a-4684-bbc2-809681b8b53b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fd:72:1d:56:a6:fc:58:24:ed:41:e6:c8:7c: d1:3e:3b:55:12:69:eb:f3:d2:90:d0:57:7b:63:bc: 80:f2:20:3e:03:0e:71:98:12:2a:be:0b:25:18:ae: 8b:ad:99:64:6a:13:90:1d:1b:9f:b9:f1:ad:76:6d: ba:8a:cc:0b:ac:df:df:da:47:0f:6c:3b:e0:be:13: 31:37:49:af:39:57:eb:30:0b:ef:32:9b:8c:8b:76: 70:77:00:83:bb:fa:85:da:08:63:34:c7:e0:1c:6c: 6a:8a:2e:db:0b:ef:f9:58:5b:81:8e:be:55:ff:7f: 8f:80:73:fc:25:63:c0:4f:ea:9d:e2:8e:ff:2b:a0: 01:88:3c:be:1a:8a:ce:42:5d:7b:30:41:eb:f0:09: 33:77:95:f8:77:fc:c5:13:42:33:69:f6:5b:97:33: 5f:8f:3b:7d:af:b3:da:6e:89:9d:16:05:d3:3d:1a: 68:1a:18:68:7a:de:f2:c3:7c:0b:71:eb:5d:94:1f: 46:93:b7:ad:47:5a:31:bd:66:1b:7e:08:fa:81:82: d8:73:f6:62:59:78:af:89:ed:1d:b6:cc:17:e4:17: e3:37:48:2d:3e:6c:bf:dd:9f:12:bb:f7:e9:43:f9: 0e:bd:96:7e:44:27:83:9d:7b:23:12:65:5b:7d:42: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:F7:7E:89:E3:9C:0F:11:A6:C6:A8:23:38:30:60:B3:68:A9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/c3a3580b-378c-3dba-9fb3-ce13215f65ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e/dbda8ea2-a168-4a8b-b01b-21a421e7130e.crl X509v3 Authority Key Identifier: keyid:AF:FC:3B:1C:79:78:31:3D:F3:F2:FE:BE:4D:A4:4B:21:3A:08:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dbda8ea2-a168-4a8b-b01b-21a421e7130e.cer sbgp-ipAddrBlock: critical IPv6: 2607:9bc0:1010::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cf:ca:6e:5f:60:bb:2e:7d:5a:68:50:68:d9:a7:43:a0:ad: f9:79:d7:f1:6c:fa:1e:5e:38:ae:1a:8d:c2:0a:c0:62:8f:41: ec:d5:29:40:5a:52:63:cd:c9:95:13:6e:f0:1d:b2:29:63:f8: 33:9b:15:fd:37:52:5d:c1:9b:c6:29:32:ac:fa:4e:61:13:10: 81:52:64:b3:49:6e:c5:e9:ac:1f:3e:43:04:ca:eb:55:a5:b6: f7:d1:1e:3e:6f:48:91:3f:9a:3b:24:9c:36:af:75:f7:7d:e9: 0a:e0:5f:e8:23:c8:63:1f:6d:be:94:b5:f5:02:dd:0b:20:ee: 67:ff:b5:97:b5:5a:21:23:9b:9d:3a:d0:92:1c:78:94:d1:54: aa:fc:93:76:7a:80:79:a1:53:03:a4:a3:03:47:c8:a0:96:40: ee:bf:6c:b6:8e:5b:97:0f:8f:a6:6e:36:28:d2:ac:02:9b:47: 70:68:08:f6:bd:25:eb:a6:fb:92:84:1f:e6:23:b4:85:f6:86: ad:2f:f0:df:e5:b5:87:ea:4d:30:73:3b:7c:dd:fb:1f:91:aa: ce:17:cc:5b:3f:e7:dc:39:74:a3:69:bc:4f:dd:e1:b2:1e:f7: 52:07:e6:35:53:db:e6:6d:64:99:f0:68:74:ad:06:4a:72:32: a0:78:01:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExTm92Ps8KfIRhZcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJkYThlYTItYTE2OC00YThiLWIwMWItMjFhNDIxZTcx MzBlMB4XDTI1MTIyNzE0MDAzOFoXDTI2MDMyNzEzMDAzOFowLzEtMCsGA1UEAxMk MDM0NDAzOTktMWY5YS00Njg0LWJiYzItODA5NjgxYjhiNTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf1yHVam/Fgk7UHmyHzRPjtVEmnr89KQ0Fd7 Y7yA8iA+Aw5xmBIqvgslGK6LrZlkahOQHRufufGtdm26iswLrN/f2kcPbDvgvhMx N0mvOVfrMAvvMpuMi3ZwdwCDu/qF2ghjNMfgHGxqii7bC+/5WFuBjr5V/3+PgHP8 JWPAT+qd4o7/K6ABiDy+GorOQl17MEHr8Akzd5X4d/zFE0IzafZblzNfjzt9r7Pa bomdFgXTPRpoGhhoet7yw3wLcetdlB9Gk7etR1oxvWYbfgj6gYLYc/ZiWXivie0d tswX5BfjN0gtPmy/3Z8Su/fpQ/kOvZZ+RCeDnXsjEmVbfULFLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpU936J45wPEabGqCM4MGCzaKlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRh OGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0MjFlNzEzMGUvYzNhMzU4MGItMzc4Yy0z ZGJhLTlmYjMtY2UxMzIxNWY2NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJkYThlYTItYTE2OC00YThiLWIw MWItMjFhNDIxZTcxMzBlL2RiZGE4ZWEyLWExNjgtNGE4Yi1iMDFiLTIxYTQyMWU3 MTMwZS5jcmwwHwYDVR0jBBgwFoAUr/w7HHl4MT3z8v6+TaRLIToIXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmRhOGVhMi1hMTY4LTRhOGItYjAxYi0yMWE0 MjFlNzEzMGUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgebwBAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABXPym5fYLsufVpoUGjZp0Ogrfl51/Fs+h5eOK4ajcIKwGKPQezV KUBaUmPNyZUTbvAdsilj+DObFf03Ul3Bm8YpMqz6TmETEIFSZLNJbsXprB8+QwTK 61WltvfRHj5vSJE/mjsknDavdfd96QrgX+gjyGMfbb6UtfUC3Qsg7mf/tZe1WiEj m5060JIceJTRVKr8k3Z6gHmhUwOkowNHyKCWQO6/bLaOW5cPj6ZuNijSrAKbR3Bo CPa9Jeum+5KEH+YjtIX2hq0v8N/ltYfqTTBzO3zd+x+Rqs4XzFs/59w5dKNpvE/d 4bIe91IH5jVT2+ZtZJnwaHStBkpyMqB4AUs= -----END CERTIFICATE-----Generated at Fri Jan 23 22:17:06 2026 by rpki-client