This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa File: ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa (raw, json) Hash identifier: WY9GhxBbYX8lfon1Y4bawNWO32ptlLOnGJgCvbOLtuQ= Subject key identifier: EB:1A:C7:0C:9F:D1:6E:1E:8A:80:6C:18:38:22:73:0C:7C:45:37:EC Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584C3BE13992C0BE7CB7107DC9C0 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 198949 IP address blocks: 2607:f460::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:39:92:c0:be:7c:b7:10:7d:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=acc72be2-381b-438a-af39-74232f5d5df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:90:0c:58:5b:0d:71:ba:84:d4:14:a1:cb: 30:4c:35:cd:91:12:09:c0:6f:d2:b2:00:01:02:77: fd:4b:13:d6:2f:44:b0:84:2c:a3:83:fd:43:6a:b5: 32:70:dc:a4:d1:5c:69:f6:a1:41:05:d2:c5:06:7e: 4a:0b:e4:95:e5:0d:4a:c1:51:57:61:a3:2a:c1:15: 0a:3b:79:71:ab:72:0d:4d:77:07:d9:53:f7:2f:2b: d6:c1:5f:ef:1a:96:64:6e:d2:05:4f:02:44:b8:aa: c5:79:82:a2:bf:1c:24:8c:14:54:2d:11:99:9c:44: 59:6e:0d:1e:d6:63:49:4c:e4:46:c0:e6:b2:9d:55: 8d:16:62:ca:61:56:eb:b2:16:ae:05:c8:3f:7b:78: 2a:b2:b8:79:29:e2:b0:f1:56:e1:f5:02:2d:52:6e: 99:db:85:07:34:64:92:0f:9a:c6:99:19:84:6a:08: 29:8f:50:3c:b0:38:6d:41:ce:02:2d:06:a4:a4:c7: 50:79:d1:dd:65:c7:22:a6:6e:5a:b8:73:1c:42:9a: 59:45:df:f6:35:f1:0a:75:98:f7:4f:db:8b:e0:15: 37:ba:91:ea:21:5e:7f:e5:37:63:8b:a3:31:6c:72: 63:e8:b2:b3:05:d6:48:33:f9:b0:39:98:3e:74:71: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1A:C7:0C:9F:D1:6E:1E:8A:80:6C:18:38:22:73:0C:7C:45:37:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/ecf3d650-29cd-3e1b-8cbc-93e223ab6249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv6: 2607:f460::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:2d:e8:4a:32:d3:9b:45:49:59:63:d9:97:34:fd:9c:dd:0d: 1c:6b:4e:ba:fe:f3:69:d7:00:b0:6b:48:5d:f2:5f:eb:f3:a1: 81:06:75:ec:b3:d8:53:9c:0c:9c:c6:4e:92:4a:3f:89:e5:db: 76:13:bb:d7:2e:56:df:7a:ec:cd:2e:b7:ac:e4:95:0f:83:92: 51:fe:f4:7f:24:47:99:4b:6d:f4:c7:a9:4a:ec:c1:5b:46:b0: a3:78:d3:a1:8f:a0:15:62:eb:6c:44:7d:f6:7e:a6:ce:71:c6: f4:3f:55:24:10:3b:fa:83:91:a0:3a:1f:08:87:e0:53:b6:17: 94:d4:d2:09:7b:71:3d:c2:1e:d5:26:50:05:f6:d6:44:93:66: 82:df:63:e3:17:58:b6:91:c8:3b:f0:74:b9:97:81:49:1e:19: 7b:15:74:41:80:f3:d0:de:4a:21:51:1c:f0:31:11:f1:c4:89: b6:2b:a0:89:3f:2a:b3:09:51:d2:f0:c3:c8:73:27:da:04:1b: ce:88:22:4b:4e:dc:b5:7b:9c:f3:c7:c0:f3:e7:23:b4:51:e1: 81:d9:e2:d4:77:20:c9:25:83:ba:78:b0:29:91:0b:f7:51:16: a9:60:6a:14:07:c8:fb:ce:67:70:db:8e:53:42:58:14:65:37: 72:b9:2b:79 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEw74TmSwL58txB9ycAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk YWNjNzJiZTItMzgxYi00MzhhLWFmMzktNzQyMzJmNWQ1ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggyQDFhbDXG6hNQUocswTDXNkRIJwG/SsgAB Anf9SxPWL0SwhCyjg/1DarUycNyk0Vxp9qFBBdLFBn5KC+SV5Q1KwVFXYaMqwRUK O3lxq3INTXcH2VP3LyvWwV/vGpZkbtIFTwJEuKrFeYKivxwkjBRULRGZnERZbg0e 1mNJTORGwOaynVWNFmLKYVbrshauBcg/e3gqsrh5KeKw8Vbh9QItUm6Z24UHNGSS D5rGmRmEaggpj1A8sDhtQc4CLQakpMdQedHdZccipm5auHMcQppZRd/2NfEKdZj3 T9uL4BU3upHqIV5/5Tdji6MxbHJj6LKzBdZIM/mwOZg+dHFxtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOsaxwyf0W4eioBsGDgicwx8RTfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvZWNmM2Q2NTAtMjljZC0z ZTFiLThjYmMtOTNlMjIzYWI2MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf0YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApLehKMtObRUlZY9mXNP2c3Q0ca066/vNp1wCwa0hd8l/r86GBBnXs s9hTnAycxk6SSj+J5dt2E7vXLlbfeuzNLres5JUPg5JR/vR/JEeZS230x6lK7MFb RrCjeNOhj6AVYutsRH32fqbOccb0P1UkEDv6g5GgOh8Ih+BTtheU1NIJe3E9wh7V JlAF9tZEk2aC32PjF1i2kcg78HS5l4FJHhl7FXRBgPPQ3kohURzwMRHxxIm2K6CJ PyqzCVHS8MPIcyfaBBvOiCJLTty1e5zzx8Dz5yO0UeGB2eLUdyDJJYO6eLApkQv3 URapYGoUB8j7zmdw245TQlgUZTdyuSt5 -----END CERTIFICATE-----Generated at Fri Dec 19 21:26:04 2025 by rpki-client