This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa File: b3b3910d-a610-3b46-a9cb-c5249e265700.roa (raw, json) Hash identifier: uy3ltp7c634uuxrZfafATiZuGYyCEzj46GHNQ7tR7y8= Subject key identifier: 59:2E:22:77:85:C3:4B:EE:3F:6B:CF:61:9A:F0:B5:42:09:F2:39:DF Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BEDB5EB4F0600631DF8EB99D0 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 21947 IP address blocks: 2607:f8e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:eb:4f:06:00:63:1d:f8:eb:99:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=19fb2c31-7364-415f-8999-486e71d6685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:64:09:06:2a:55:bd:35:f4:ed:52:b9:b5:dc: 61:51:59:21:23:a9:18:60:6d:52:3c:9c:39:c5:30: 84:cb:78:30:9d:bb:72:5e:f2:f0:52:03:77:84:7e: e9:3a:e3:99:04:6a:f6:66:9e:9c:9d:0a:90:07:04: d0:19:4a:d4:44:f7:02:d8:98:26:84:86:13:0d:be: 54:69:0c:c3:f8:11:50:65:ce:c5:28:11:79:2f:c9: 0c:83:b4:e8:e4:86:38:60:9f:99:ca:23:7c:ec:62: c4:c7:54:d9:bd:b1:ad:07:76:2a:29:a6:28:93:69: 77:af:d3:99:cf:3f:68:86:30:24:f2:0c:4c:fa:cc: 55:80:ae:49:9c:41:4b:8b:51:8c:36:fc:0c:a4:68: ac:01:a3:86:dd:0a:5f:bb:79:86:65:f6:e8:2e:48: 3f:c4:ff:a6:c8:e6:e5:13:48:61:fb:ea:c4:61:5d: fe:53:7f:6b:86:8d:1e:ac:89:27:ac:7d:0e:c1:26: cf:fe:68:be:9a:99:7b:7f:8c:9d:08:f2:9e:04:46: 77:d6:a1:a2:fd:51:ac:20:b5:34:01:a1:72:26:b7: d8:ec:27:5c:78:0a:db:37:a9:01:74:3b:9d:90:5d: e1:b1:f8:bb:90:bb:63:de:da:91:84:2a:fc:41:65: 72:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:22:77:85:C3:4B:EE:3F:6B:CF:61:9A:F0:B5:42:09:F2:39:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b3b3910d-a610-3b46-a9cb-c5249e265700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:75:b1:74:ee:4a:8e:ab:32:ef:dd:f4:44:35:30:25:89:06: 1c:de:46:98:08:f5:73:31:a6:3d:db:1b:0a:14:eb:6e:fb:ef: a9:ed:10:4f:92:6f:71:8b:86:ed:a7:28:65:3a:06:87:c6:49: 0d:b1:c1:2c:72:f2:53:2f:37:cc:8b:d3:89:66:22:dd:4f:9f: 26:63:ba:dd:98:b5:d6:2e:b5:d0:eb:36:23:25:f6:92:dc:b3: 6b:e3:f7:ef:b3:6e:45:16:29:4c:f7:89:4e:bc:11:85:16:d7: db:a6:45:be:77:ca:f0:3e:c2:43:cf:75:f2:83:e9:47:47:c6: 11:09:8f:c8:ae:e6:ad:a4:ae:4d:02:a8:04:cf:02:2e:65:54: 72:61:d3:2b:c3:a3:91:0b:a3:64:46:f0:db:34:94:90:aa:ca: 1d:71:a8:f4:92:35:d9:f7:e3:8f:2e:06:72:b5:ac:50:27:e0: 45:62:8b:d1:83:95:d7:77:29:db:3d:81:9f:9c:33:d8:5a:0d: bc:a7:89:fc:f3:30:58:6e:2e:25:6b:fd:9e:d3:bd:0d:4e:a2: 00:9e:3a:64:13:3b:a3:9c:dc:5c:53:7f:43:6d:9d:e0:67:9b: c5:37:26:ad:33:99:24:d7:60:3c:79:e3:1e:87:c8:5a:16:62: 46:8a:cb:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvttetPBgBjHfjrmdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk MTlmYjJjMzEtNzM2NC00MTVmLTg5OTktNDg2ZTcxZDY2ODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2QJBipVvTX07VK5tdxhUVkhI6kYYG1SPJw5 xTCEy3gwnbtyXvLwUgN3hH7pOuOZBGr2Zp6cnQqQBwTQGUrURPcC2JgmhIYTDb5U aQzD+BFQZc7FKBF5L8kMg7To5IY4YJ+ZyiN87GLEx1TZvbGtB3YqKaYok2l3r9OZ zz9ohjAk8gxM+sxVgK5JnEFLi1GMNvwMpGisAaOG3Qpfu3mGZfboLkg/xP+myObl E0hh++rEYV3+U39rho0erIknrH0OwSbP/mi+mpl7f4ydCPKeBEZ31qGi/VGsILU0 AaFyJrfY7CdceArbN6kBdDudkF3hsfi7kLtj3tqRhCr8QWVyXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFkuIneFw0vuP2vPYZrwtUIJ8jnfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjNiMzkxMGQtYTYxMC0z YjQ2LWE5Y2ItYzUyNDllMjY1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf44DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBdbF07kqOqzLv3fRENTAliQYc3kaYCPVzMaY92xsKFOtu+++p7RBP km9xi4btpyhlOgaHxkkNscEscvJTLzfMi9OJZiLdT58mY7rdmLXWLrXQ6zYjJfaS 3LNr4/fvs25FFilM94lOvBGFFtfbpkW+d8rwPsJDz3Xyg+lHR8YRCY/IruatpK5N AqgEzwIuZVRyYdMrw6ORC6NkRvDbNJSQqsodcaj0kjXZ9+OPLgZytaxQJ+BFYovR g5XXdynbPYGfnDPYWg28p4n88zBYbi4la/2e070NTqIAnjpkEzujnNxcU39DbZ3g Z5vFNyatM5kk12A8eeMeh8haFmJGistz -----END CERTIFICATE-----Generated at Tue Nov 25 09:57:53 2025 by rpki-client