This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/0f94333d-b55e-3606-8f0d-3ffc2c5ec5ad.roa File: 0f94333d-b55e-3606-8f0d-3ffc2c5ec5ad.roa (raw, json) Hash identifier: oTSU/VJOcAVgHIaDSwOvsA3iuu8t7DnPNCZOwifXXG4= Subject key identifier: 1C:3B:9B:79:B2:D3:CD:35:45:C1:9D:E1:63:9C:49:F9:E4:45:23:31 Certificate issuer: /CN=b25db122-9955-42d2-8413-be2d15a44347 Certificate serial: 010D0C9F4328584C5EC6B8A8109306A4E9F28100 Authority key identifier: 6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/0f94333d-b55e-3606-8f0d-3ffc2c5ec5ad.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 401859 IP address blocks: 2620:da:6000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:b8:a8:10:93:06:a4:e9:f2:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b25db122-9955-42d2-8413-be2d15a44347 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=0a5a2e51-8aab-44d2-81da-362e01d8d8d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:5c:40:6e:ca:34:94:0d:14:f1:6f:e4:63:5b: 5b:5b:35:61:bd:9d:66:9e:31:e8:82:0d:a8:5d:0f: 69:9f:51:98:ab:47:90:6a:42:50:a2:dc:8d:59:c5: be:c9:3b:11:07:22:69:3a:a1:1b:c6:a0:e1:13:9f: a9:57:1c:fa:e7:7a:9c:2a:1b:61:b3:82:8f:24:2d: fc:26:9e:f1:1f:d2:ba:72:5e:51:61:f8:b7:58:93: 12:70:16:86:f9:4c:62:dc:07:ff:9b:4f:af:4e:e8: 99:72:b0:c0:bd:31:c4:e6:bd:3d:01:fe:c5:79:a8: f2:ed:f9:e8:00:76:0a:bd:45:22:5c:5b:5e:a1:c2: 2d:92:b0:c3:0b:a2:06:92:03:95:f9:ff:03:87:68: 6e:80:be:f6:9a:bd:0d:27:ad:5b:f6:55:8c:06:8b: 69:84:d2:1c:12:4c:93:a4:02:12:c0:35:b5:f1:ae: 60:bb:c5:e2:96:69:0c:b2:4a:18:96:b1:e6:2a:05: 76:9b:6e:f6:44:b3:0d:87:94:42:69:c9:3b:97:a1: 03:b7:a9:39:33:ef:03:86:ec:68:66:e8:3e:69:e9: 51:76:b6:e3:13:71:92:4f:de:1d:38:90:4c:85:bb: 2e:04:4a:4d:50:ee:eb:72:c8:b9:d0:7d:e3:8f:d8: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3B:9B:79:B2:D3:CD:35:45:C1:9D:E1:63:9C:49:F9:E4:45:23:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/0f94333d-b55e-3606-8f0d-3ffc2c5ec5ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347/b25db122-9955-42d2-8413-be2d15a44347.crl X509v3 Authority Key Identifier: keyid:6E:4C:48:6C:3B:E6:A0:EC:D5:78:BA:4A:C2:97:8B:D8:17:90:AF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b25db122-9955-42d2-8413-be2d15a44347.cer sbgp-ipAddrBlock: critical IPv6: 2620:da:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:67:9a:c8:ca:f9:9b:85:95:4c:c5:bb:2e:50:24:6e:a8:21: cf:24:42:ae:54:98:ef:53:05:9f:65:9c:14:a4:cf:90:b2:c2: f7:2b:90:c5:f5:a0:05:30:c2:a4:c9:dc:0a:09:e4:06:0c:f3: a3:3e:eb:71:fd:0a:f4:fe:05:94:61:cc:75:6f:df:b9:41:3a: 6d:58:b4:eb:3f:f4:32:ef:57:3f:1d:ff:11:4a:4b:e2:6a:80: 21:8f:ac:aa:24:31:e7:1c:6d:cd:15:75:0e:f6:da:07:28:53: 5e:b0:9f:4a:b6:b8:da:fc:af:9d:22:69:6a:c8:3c:9f:4c:ed: d0:36:8e:37:bc:c8:07:fe:ff:79:4b:e2:0b:99:be:0b:ec:cf: e0:1b:bf:31:7e:2a:65:16:a9:87:b4:70:e5:0e:59:90:22:3c: 37:40:2b:9a:be:5f:82:cf:01:7a:a0:48:7a:27:70:50:ef:68: 1a:ce:18:73:e4:77:17:b0:18:2d:f1:88:1f:95:25:bf:96:23: 65:75:3b:8b:fc:01:e9:81:8b:64:a2:37:db:8f:9b:a8:8b:7a: f1:2d:d0:e1:a1:e6:3d:8b:43:33:41:89:e1:be:8a:c1:3f:0c: e2:7f:47:3d:be:39:a0:82:ef:aa:0f:bb:36:ad:b8:30:41:ec: 36:49:16:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExexrioEJMGpOnygQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI1ZGIxMjItOTk1NS00MmQyLTg0MTMtYmUyZDE1YTQ0 MzQ3MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MGE1YTJlNTEtOGFhYi00NGQyLTgxZGEtMzYyZTAxZDhkOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVxAbso0lA0U8W/kY1tbWzVhvZ1mnjHogg2o XQ9pn1GYq0eQakJQotyNWcW+yTsRByJpOqEbxqDhE5+pVxz653qcKhths4KPJC38 Jp7xH9K6cl5RYfi3WJMScBaG+Uxi3Af/m0+vTuiZcrDAvTHE5r09Af7Feajy7fno AHYKvUUiXFteocItkrDDC6IGkgOV+f8Dh2hugL72mr0NJ61b9lWMBotphNIcEkyT pAISwDW18a5gu8XilmkMskoYlrHmKgV2m272RLMNh5RCack7l6EDt6k5M+8Dhuxo Zug+aelRdrbjE3GST94dOJBMhbsuBEpNUO7rcsi50H3jj9huvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBw7m3my0801RcGd4WOcSfnkRSMxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVk YjEyMi05OTU1LTQyZDItODQxMy1iZTJkMTVhNDQzNDcvMGY5NDMzM2QtYjU1ZS0z NjA2LThmMGQtM2ZmYzJjNWVjNWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjI1ZGIxMjItOTk1NS00MmQyLTg0 MTMtYmUyZDE1YTQ0MzQ3L2IyNWRiMTIyLTk5NTUtNDJkMi04NDEzLWJlMmQxNWE0 NDM0Ny5jcmwwHwYDVR0jBBgwFoAUbkxIbDvmoOzVeLpKwpeL2BeQr+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMjVkYjEyMi05OTU1LTQyZDItODQxMy1iZTJk MTVhNDQzNDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA2mAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGNnmsjK+ZuFlUzFuy5QJG6oIc8kQq5UmO9TBZ9lnBSkz5Cywvcr kMX1oAUwwqTJ3AoJ5AYM86M+63H9CvT+BZRhzHVv37lBOm1YtOs/9DLvVz8d/xFK S+JqgCGPrKokMeccbc0VdQ722gcoU16wn0q2uNr8r50iaWrIPJ9M7dA2jje8yAf+ /3lL4guZvgvsz+AbvzF+KmUWqYe0cOUOWZAiPDdAK5q+X4LPAXqgSHoncFDvaBrO GHPkdxewGC3xiB+VJb+WI2V1O4v8AemBi2SiN9uPm6iLevEt0OGh5j2LQzNBieG+ isE/DOJ/Rz2+OaCC76oPuzatuDBB7DZJFic= -----END CERTIFICATE-----Generated at Sat Jan 10 14:13:30 2026 by rpki-client