This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa File: 0aafa072-9065-3d0d-bc2d-86c1387cec16.roa (raw, json) Hash identifier: aKW93WcMYbvndIIFi9npNmJYWlgusaLHi7VQtRd74cc= Subject key identifier: EA:BD:C0:09:FD:63:FA:90:F2:2C:1B:9F:69:BE:80:F9:2E:13:3D:C7 Certificate issuer: /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Certificate serial: 010D0C9F4328584BE555E23FC70F0918689CF360 Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 25957 IP address blocks: 2602:f6ae::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:e2:3f:c7:0f:09:18:68:9c:f3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=f2b3f9fa-13a4-48a3-94f9-6a2ba471327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d4:d7:5a:63:77:b9:43:d9:bd:d2:c4:14:17: 15:fb:fb:9f:67:12:30:6c:0f:24:2a:14:9c:00:02: 3a:8f:80:b0:0a:c1:35:23:64:69:ab:8d:51:4d:e5: fc:ee:4a:ff:05:28:5e:19:7b:37:af:91:a3:db:2f: 0b:3c:2c:34:f7:3c:e5:86:5c:45:65:33:42:05:b1: 22:c9:d8:04:5f:8d:b9:fe:d0:16:96:92:fd:3a:67: 19:a9:c2:83:c6:b8:d9:7b:fb:0c:18:57:09:bf:58: e9:d0:33:26:39:86:2f:0b:a8:87:86:f6:c9:2d:9f: 92:80:c0:49:f9:9b:52:c2:7a:8e:fe:f5:01:20:78: ec:4b:90:9c:52:44:50:4a:3e:cc:62:dc:1c:df:ac: 2c:f2:e5:91:c7:c6:92:3e:16:1a:07:77:4d:68:1c: e6:6a:2f:c1:0a:d8:e8:3b:b2:a5:1a:9b:8f:06:ff: ae:8b:7d:3b:75:fe:b8:2d:09:14:e3:72:e7:d5:db: ee:54:b7:42:74:1b:bd:23:5b:1a:f3:19:05:f9:bb: cc:ea:59:88:87:ca:d0:e7:12:20:7a:f3:c2:a5:a7: 78:e3:18:1f:84:f0:ec:42:01:21:5e:a8:26:83:7e: cd:ed:9e:6d:05:09:1e:c8:09:9f:7f:bb:be:df:5c: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BD:C0:09:FD:63:FA:90:F2:2C:1B:9F:69:BE:80:F9:2E:13:3D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/0aafa072-9065-3d0d-bc2d-86c1387cec16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl X509v3 Authority Key Identifier: keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer sbgp-ipAddrBlock: critical IPv6: 2602:f6ae::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b2:ff:65:ce:cb:74:77:5f:08:cf:fe:40:32:a5:24:af:e8: 00:be:8c:f5:c9:e4:31:55:f4:9d:39:25:33:20:31:1f:a4:47: fe:02:76:ef:a2:40:00:e9:a0:0f:ba:51:ae:06:7d:9b:69:aa: e5:6a:0c:87:e1:8c:d8:90:62:fe:3a:8d:ab:3f:77:2c:68:d9: 6e:43:c2:8d:dc:8f:42:7e:30:3e:9c:67:cb:61:3c:38:57:79: 01:9c:eb:6d:5f:e7:45:ad:83:b2:d0:80:19:6c:7f:60:c5:78: 83:13:b0:5b:03:bc:a3:52:1d:af:d7:39:93:f7:93:1d:59:c6: 01:8d:4f:71:af:ed:92:78:9c:3c:ca:c3:08:09:f1:1c:34:38: de:11:0a:41:15:9e:8a:48:13:17:6c:e4:2c:2b:c6:33:3e:00: 98:8f:9d:e8:ae:50:36:3c:af:52:d5:75:58:9e:03:04:0a:66: 83:67:72:4f:0d:95:d9:5a:6c:63:8a:af:58:a4:0d:b8:6e:d1: 52:9b:9a:c9:5f:c2:4b:ab:ca:7d:56:84:d0:87:4a:5c:79:5e: c0:b7:45:9a:b7:89:0a:9c:e4:3c:0a:76:fc:b4:0c:45:7f:17: 46:19:6c:d8:95:92:d1:8d:a7:cf:f9:25:de:59:f1:6e:b1:46: 3d:42:08:7b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvlVeI/xw8JGGic82AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU2Yzg3NDAtZjM1MS00NjI1LWEzZmYtNTRmYjFlNmE1 Yjk3MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjJiM2Y5ZmEtMTNhNC00OGEzLTk0ZjktNmEyYmE0NzEzMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntTXWmN3uUPZvdLEFBcV+/ufZxIwbA8kKhSc AAI6j4CwCsE1I2Rpq41RTeX87kr/BSheGXs3r5Gj2y8LPCw09zzlhlxFZTNCBbEi ydgEX425/tAWlpL9OmcZqcKDxrjZe/sMGFcJv1jp0DMmOYYvC6iHhvbJLZ+SgMBJ +ZtSwnqO/vUBIHjsS5CcUkRQSj7MYtwc36ws8uWRx8aSPhYaB3dNaBzmai/BCtjo O7KlGpuPBv+ui307df64LQkU43Ln1dvuVLdCdBu9I1sa8xkF+bvM6lmIh8rQ5xIg evPCpad44xgfhPDsQgEhXqgmg37N7Z5tBQkeyAmff7u+31zM1QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOq9wAn9Y/qQ8iwbn2m+gPkuEz3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTZj ODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZiMWU2YTViOTcvMGFhZmEwNzItOTA2NS0z ZDBkLWJjMmQtODZjMTM4N2NlYzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTU2Yzg3NDAtZjM1MS00NjI1LWEz ZmYtNTRmYjFlNmE1Yjk3Lzk1NmM4NzQwLWYzNTEtNDYyNS1hM2ZmLTU0ZmIxZTZh NWI5Ny5jcmwwHwYDVR0jBBgwFoAUu9J7ZW3N3xWxraso8PXI96MbJUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTZjODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZi MWU2YTViOTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2rgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAdrL/Zc7LdHdfCM/+QDKlJK/oAL6M9cnkMVX0nTklMyAxH6RH/gJ2 76JAAOmgD7pRrgZ9m2mq5WoMh+GM2JBi/jqNqz93LGjZbkPCjdyPQn4wPpxny2E8 OFd5AZzrbV/nRa2DstCAGWx/YMV4gxOwWwO8o1Idr9c5k/eTHVnGAY1Pca/tknic PMrDCAnxHDQ43hEKQRWeikgTF2zkLCvGMz4AmI+d6K5QNjyvUtV1WJ4DBApmg2dy Tw2V2VpsY4qvWKQNuG7RUpuayV/CS6vKfVaE0IdKXHlewLdFmreJCpzkPAp2/LQM RX8XRhls2JWS0Y2nz/kl3lnxbrFGPUIIew== -----END CERTIFICATE-----Generated at Tue Nov 25 08:32:01 2025 by rpki-client