This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa File: 87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa (raw, json) Hash identifier: sbUGup0DJx0s+mvEIMYF92X6janzeoUWssdUCYE1fqM= Subject key identifier: 74:3F:37:92:F2:B6:92:B3:E5:FE:40:7B:00:03:74:9B:79:5D:BE:D6 Certificate issuer: /CN=86375a98-0294-4970-a5b8-3fec0469382c Certificate serial: 010D0C9F4328584B79EB8EAA676F2A9E123C8380 Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa Signing time: Fri 10 Oct 2025 14:35:08 +0000 ROA not before: Fri 10 Oct 2025 14:35:08 +0000 ROA not after: Thu 08 Jan 2026 15:35:08 +0000 asID: 3783 IP address blocks: 2607:3540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:eb:8e:aa:67:6f:2a:9e:12:3c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c Validity Not Before: Oct 10 14:35:08 2025 GMT Not After : Jan 8 15:35:08 2026 GMT Subject: CN=342f05f2-b0bf-4c25-9345-3c6a7f597dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0c:e9:27:3a:0a:28:53:3d:d5:76:cc:6d:b2: 79:46:dc:65:88:e4:35:12:83:53:5c:3e:1a:1e:99: 19:5a:c4:d1:f2:5a:28:e2:62:7a:17:3b:e1:7f:7e: 07:8c:49:42:54:6b:f7:70:f4:f0:47:c8:64:a0:c6: b3:f0:3d:38:7e:a6:99:45:f0:81:d9:20:aa:3c:66: 1d:2d:bb:3d:3a:9d:87:4d:6b:c4:14:ea:b4:df:0c: ac:02:d7:2c:a2:70:91:27:8a:e1:ed:91:65:e1:72: 62:49:2d:cd:4c:e6:b9:77:8f:d8:aa:c8:39:65:be: 88:8f:bb:d3:a9:6d:8d:4f:b4:f1:b2:47:f5:2c:1c: c4:60:b8:5b:7d:e7:7d:22:cc:f9:04:a8:47:62:f8: e0:14:a9:86:88:39:73:84:e9:b7:82:ad:95:37:7b: 1e:c9:76:43:79:b2:30:42:66:b6:58:6e:f0:64:b7: 5b:a5:94:70:38:60:16:ab:91:9b:ab:18:67:42:bf: ef:08:e4:88:6e:4f:aa:e1:0b:c0:68:85:77:bd:cd: aa:12:4b:e9:a1:28:0f:1f:ee:d8:35:bd:7a:24:42: b7:55:71:a1:0f:c9:b5:99:60:e9:da:dd:59:af:8f: 5a:9e:d3:84:52:f1:68:66:90:34:f3:b6:3a:67:c5: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3F:37:92:F2:B6:92:B3:E5:FE:40:7B:00:03:74:9B:79:5D:BE:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/87d8db82-610e-3b97-a6b9-d8e5d4f5a478.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl X509v3 Authority Key Identifier: keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer sbgp-ipAddrBlock: critical IPv6: 2607:3540::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ea:f9:92:92:c9:84:89:0a:5e:b3:c6:11:50:5f:2f:56:41: c7:00:61:00:12:ac:e3:0c:c6:e2:9c:b8:7d:7c:cd:94:45:af: b6:0a:b8:21:43:62:e8:76:c5:8d:34:23:8a:9f:7c:d9:c3:c5: f7:62:46:cd:0a:de:06:d0:0d:fe:40:e1:47:2e:45:73:1d:4a: e5:de:88:28:a5:f4:68:80:1f:26:3d:2a:6e:1c:0f:f8:0d:f1: f9:67:1b:f4:3e:84:a6:d0:02:3c:e0:70:9b:58:51:31:6b:b0: 86:d2:a9:36:ea:f0:dd:00:46:e7:98:ee:42:1a:5d:96:a9:00: a1:9b:7a:a5:9b:71:07:b6:79:d8:49:ad:02:9c:6d:a8:3c:a4: fb:09:1d:35:93:37:61:07:c0:6c:b4:55:18:6b:0e:77:ff:8d: ca:53:52:70:14:c7:43:79:4b:b9:85:60:59:87:1a:bf:7b:0e: b0:25:5a:d9:79:59:ab:23:83:91:7e:07:5f:f3:c0:24:2e:ef: c6:84:7d:88:3f:f6:38:07:30:31:36:07:3d:87:90:4a:19:e7: 05:bb:6f:ca:a0:22:4b:6d:a1:d2:74:93:3e:b9:28:b9:f8:ea: 0a:7d:79:35:ba:a0:17:97:8a:15:bb:80:2a:fa:e3:17:5b:c1: f2:04:c8:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEt5646qZ28qnhI8g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODYzNzVhOTgtMDI5NC00OTcwLWE1YjgtM2ZlYzA0Njkz ODJjMB4XDTI1MTAxMDE0MzUwOFoXDTI2MDEwODE1MzUwOFowLzEtMCsGA1UEAxMk MzQyZjA1ZjItYjBiZi00YzI1LTkzNDUtM2M2YTdmNTk3ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQzpJzoKKFM91XbMbbJ5RtxliOQ1EoNTXD4a HpkZWsTR8loo4mJ6Fzvhf34HjElCVGv3cPTwR8hkoMaz8D04fqaZRfCB2SCqPGYd Lbs9Op2HTWvEFOq03wysAtcsonCRJ4rh7ZFl4XJiSS3NTOa5d4/Yqsg5Zb6Ij7vT qW2NT7Txskf1LBzEYLhbfed9Isz5BKhHYvjgFKmGiDlzhOm3gq2VN3seyXZDebIw Qma2WG7wZLdbpZRwOGAWq5GbqxhnQr/vCOSIbk+q4QvAaIV3vc2qEkvpoSgPH+7Y Nb16JEK3VXGhD8m1mWDp2t1Zr49antOEUvFoZpA087Y6Z8XiIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHQ/N5LytpKz5f5AewADdJt5Xb7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NjM3 NWE5OC0wMjk0LTQ5NzAtYTViOC0zZmVjMDQ2OTM4MmMvODdkOGRiODItNjEwZS0z Yjk3LWE2YjktZDhlNWQ0ZjVhNDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODYzNzVhOTgtMDI5NC00OTcwLWE1 YjgtM2ZlYzA0NjkzODJjLzg2Mzc1YTk4LTAyOTQtNDk3MC1hNWI4LTNmZWMwNDY5 MzgyYy5jcmwwHwYDVR0jBBgwFoAUSef92bELoj16dZ4IOa03utMYAUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84NjM3NWE5OC0wMjk0LTQ5NzAtYTViOC0zZmVj MDQ2OTM4MmMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgc1QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAT6vmSksmEiQpes8YRUF8vVkHHAGEAEqzjDMbinLh9fM2URa+2Crgh Q2LodsWNNCOKn3zZw8X3YkbNCt4G0A3+QOFHLkVzHUrl3ogopfRogB8mPSpuHA/4 DfH5Zxv0PoSm0AI84HCbWFExa7CG0qk26vDdAEbnmO5CGl2WqQChm3qlm3EHtnnY Sa0CnG2oPKT7CR01kzdhB8BstFUYaw53/43KU1JwFMdDeUu5hWBZhxq/ew6wJVrZ eVmrI4ORfgdf88AkLu/GhH2IP/Y4BzAxNgc9h5BKGecFu2/KoCJLbaHSdJM+uSi5 +OoKfXk1uqAXl4oVu4Aq+uMXW8HyBMhm -----END CERTIFICATE-----Generated at Sat Nov 22 21:20:06 2025 by rpki-client