This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa File: 86436d71-b41d-34e1-8919-0c89ddd24b27.roa (raw, json) Hash identifier: 3jjpLPWUkjdc380NetHAQ+po8lrsnRbNHVTwXMLXN7o= Subject key identifier: AC:F5:CD:60:B2:0D:CC:80:B7:3A:E1:85:27:91:9D:FA:7C:FF:7E:49 Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Certificate serial: 010D0C9F4328584BEC50913FE8711300565CCF80 Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 2631:2000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:91:3f:e8:71:13:00:56:5c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=1a930302-7f31-4474-a259-4569231f43eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4b:6d:47:62:f1:d9:77:2d:bb:da:af:c3:c1: d1:03:42:30:f0:86:bf:7f:20:23:dc:6d:43:ea:6e: 8f:d2:3b:ac:64:cf:f1:d2:49:cd:30:62:d7:00:db: cc:ee:c9:35:29:ce:01:32:39:41:c1:2d:41:d7:c0: f3:05:69:8d:22:dc:75:5d:ae:09:a0:75:41:72:30: 18:f4:8a:cb:1f:80:04:2c:0a:c4:a3:f3:21:91:1d: 14:b5:a4:38:3c:55:23:78:70:ee:44:d4:4e:c6:da: 71:4c:91:67:f6:d3:85:07:22:dd:57:0f:8b:bd:35: 2c:0c:18:f3:67:b9:a4:39:fa:5e:6f:0e:f5:31:5c: d8:04:a7:8d:f4:29:71:86:cd:aa:78:31:c5:60:81: 2f:be:4a:66:d1:f7:af:16:ec:97:5b:d6:46:ed:00: 9f:58:1e:91:20:ce:ad:5a:3e:57:4a:a7:68:d6:02: 52:aa:2f:32:ee:f2:1b:73:54:15:54:f0:74:bb:dd: 6b:99:85:2d:2b:cc:68:40:a8:40:3b:2d:39:f7:10: c5:5c:8d:a6:9a:02:77:f5:25:cb:f4:9a:0a:96:2c: c5:24:52:8d:1a:49:88:10:61:d5:de:4d:b4:1e:9a: 03:c5:ff:6f:5f:16:e7:a1:3b:d7:28:b6:4b:4d:42: 61:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F5:CD:60:B2:0D:CC:80:B7:3A:E1:85:27:91:9D:FA:7C:FF:7E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/86436d71-b41d-34e1-8919-0c89ddd24b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl X509v3 Authority Key Identifier: keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer sbgp-ipAddrBlock: critical IPv6: 2631:2000::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:49:2c:5a:b2:c8:29:1d:88:42:6d:9a:b5:25:2b:e7:75:48: e3:5f:09:44:3d:c5:0a:d9:5b:4e:de:c6:ef:28:0e:f6:5d:0f: c3:32:f8:7d:d1:94:1a:a3:2d:92:45:4a:3d:58:44:e2:14:72: 4a:8d:7c:17:a7:ab:2c:61:10:09:72:3c:e8:fc:d3:10:4f:fd: 79:48:18:20:a5:be:64:37:05:52:0f:7c:e4:eb:96:2a:ed:29: 85:57:21:94:f0:0a:52:c9:aa:ee:70:27:57:0a:ce:e0:81:52: d6:5e:3b:bb:40:33:19:15:ca:1b:00:bd:46:fa:e8:b9:6c:a4: d7:e5:aa:7d:74:25:99:6c:bc:e3:01:61:c4:96:4c:0b:46:f4: af:ce:52:1d:6c:36:ed:9f:71:fe:0d:8b:85:48:c7:52:18:72: 79:45:1a:4d:a3:9b:66:90:72:74:28:12:15:ef:ef:a8:25:c2: a4:b9:68:34:11:d6:d4:ba:86:3b:32:37:82:4c:f3:00:01:51: 08:4c:35:9b:52:86:0a:45:20:58:9d:37:d6:cc:2e:8c:45:48: 33:cb:e4:66:e3:78:f7:18:88:9b:19:50:b3:14:ea:f8:3d:61: e3:d3:58:10:a7:ae:3c:33:5b:bf:13:5c:28:2b:f5:89:06:7d: 28:ac:7c:e2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvsUJE/6HETAFZcz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz NWExMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk MWE5MzAzMDItN2YzMS00NDc0LWEyNTktNDU2OTIzMWY0M2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukttR2Lx2Xctu9qvw8HRA0Iw8Ia/fyAj3G1D 6m6P0jusZM/x0knNMGLXANvM7sk1Kc4BMjlBwS1B18DzBWmNItx1Xa4JoHVBcjAY 9IrLH4AELArEo/MhkR0UtaQ4PFUjeHDuRNROxtpxTJFn9tOFByLdVw+LvTUsDBjz Z7mkOfpebw71MVzYBKeN9Clxhs2qeDHFYIEvvkpm0fevFuyXW9ZG7QCfWB6RIM6t Wj5XSqdo1gJSqi8y7vIbc1QVVPB0u91rmYUtK8xoQKhAOy059xDFXI2mmgJ39SXL 9JoKlizFJFKNGkmIEGHV3k20HpoDxf9vXxbnoTvXKLZLTUJhDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKz1zWCyDcyAtzrhhSeRnfp8/35JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvODY0MzZkNzEtYjQxZC0z NGUxLTg5MTktMGM4OWRkZDI0YjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2 YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4 MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5 YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgSSxassgpHYhCbZq1JSvndUjjXwlEPcUK2VtO3sbvKA72XQ/DMvh9 0ZQaoy2SRUo9WETiFHJKjXwXp6ssYRAJcjzo/NMQT/15SBggpb5kNwVSD3zk65Yq 7SmFVyGU8ApSyarucCdXCs7ggVLWXju7QDMZFcobAL1G+ui5bKTX5ap9dCWZbLzj AWHElkwLRvSvzlIdbDbtn3H+DYuFSMdSGHJ5RRpNo5tmkHJ0KBIV7++oJcKkuWg0 EdbUuoY7MjeCTPMAAVEITDWbUoYKRSBYnTfWzC6MRUgzy+Rm43j3GIibGVCzFOr4 PWHj01gQp648M1u/E1woK/WJBn0orHzi -----END CERTIFICATE-----Generated at Tue Nov 25 09:53:06 2025 by rpki-client