This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa File: df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa (raw, json) Hash identifier: gBwYQOFpojNTbYLMAYEumj+XEjGsxLJs6zAkA6YbGYs= Subject key identifier: 4D:8A:9C:45:01:3D:9D:0B:8C:85:6D:23:FC:4E:FF:D6:6C:C6:57:66 Certificate issuer: /CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Certificate serial: 010D0C9F4328584C523664FA282C8CACA2239BC0 Authority key identifier: C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 402062 IP address blocks: 2604:2420::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:64:fa:28:2c:8c:ac:a2:23:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32788e6-7ab0-4a32-8ff1-3c82690ffaa9 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=659658fb-bf7b-44c5-883a-6266de51c003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a1:24:a2:5e:8d:18:d1:f9:d2:bb:d0:f4:ca: 87:9d:89:79:22:ec:3f:48:a2:75:04:a6:22:e7:97: 79:82:39:cd:18:9a:d5:77:6e:10:93:f9:1d:cc:09: 60:cd:49:d1:35:c7:54:29:66:56:e4:80:9a:38:d6: 82:ae:1e:1c:09:87:c7:22:c6:74:a4:76:d2:32:0e: 5e:fd:0b:de:8a:e3:5a:f0:f2:f0:e5:52:79:ab:4f: 63:32:6d:92:6b:c4:84:df:c2:38:05:99:22:93:b2: 7c:a4:55:4c:5a:76:5b:4b:8f:cf:f9:56:b1:bb:54: ea:19:40:07:8c:16:ff:5d:be:d6:df:71:2b:4a:34: 14:6d:85:5c:83:42:0b:db:0c:44:13:11:d1:5b:20: 48:a0:d0:87:19:05:80:73:74:1f:64:ed:ea:af:65: 57:d4:41:21:70:bd:d3:fe:c8:f8:11:9c:a4:03:43: 0c:0b:32:3a:55:14:0d:3a:66:9b:c8:23:ed:e7:c9: 67:93:e4:d1:7e:2a:72:95:6f:77:9d:6a:d7:21:90: 09:60:eb:62:83:bd:a2:e8:6d:ec:8d:9c:bb:5b:29: 80:bc:f4:08:43:71:8f:ad:f7:a5:1d:d0:ba:65:66: 71:b6:f9:ec:52:d1:f0:a3:96:b8:2f:1f:3e:a2:0d: 82:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8A:9C:45:01:3D:9D:0B:8C:85:6D:23:FC:4E:FF:D6:6C:C6:57:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/df0d3da4-d663-3a1e-9c7a-b6915a743af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.crl X509v3 Authority Key Identifier: keyid:C7:11:F0:EB:52:43:82:65:99:AD:F7:9F:CC:F0:5E:C4:03:69:DB:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c32788e6-7ab0-4a32-8ff1-3c82690ffaa9.cer sbgp-ipAddrBlock: critical IPv6: 2604:2420::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:c2:29:0a:34:3a:cb:d1:83:6f:f0:89:ce:04:41:ff:f9:7d: 63:38:d2:94:8d:de:13:6e:10:f7:bc:72:7f:80:9b:70:6d:ea: 66:e1:0d:78:12:3f:9d:4a:a8:f2:8a:31:a0:ee:2a:b7:ef:f7: ee:ed:5c:6e:f9:ba:5c:aa:9d:bc:d8:63:ec:de:ea:13:7d:34: b8:c8:f1:10:34:33:53:38:93:11:23:a9:24:26:b6:7e:14:ad: b9:a6:91:c5:0e:bc:89:74:88:16:e7:54:99:28:13:30:a3:3a: 55:4d:4f:c3:cb:64:9c:aa:d2:03:4b:a9:ce:bf:52:f0:9d:8c: 68:d4:e7:84:3f:04:81:27:f3:a3:ac:42:51:5b:32:5d:ec:1d: 66:aa:07:85:17:c9:14:2b:49:84:8e:09:7a:14:00:dd:54:91: 2c:db:4e:5f:be:8d:f3:9d:0e:42:f3:0d:5f:1c:81:69:8e:5c: 03:95:38:0d:56:18:f7:c9:65:9c:ed:44:4e:fc:58:ea:19:6a: 34:b3:a9:48:0e:bb:e8:d0:3b:d4:be:ae:41:e5:32:b2:5c:48: fe:bb:b2:be:a5:df:fe:a5:d1:f6:83:1e:76:99:45:82:b6:76: 39:00:ce:de:9a:0f:52:f0:84:1c:e2:d3:e6:cc:a1:9a:45:65: 9b:61:c8:b8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExSNmT6KCyMrKIjm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyNzg4ZTYtN2FiMC00YTMyLThmZjEtM2M4MjY5MGZm YWE5MB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk NjU5NjU4ZmItYmY3Yi00NGM1LTg4M2EtNjI2NmRlNTFjMDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqEkol6NGNH50rvQ9MqHnYl5Iuw/SKJ1BKYi 55d5gjnNGJrVd24Qk/kdzAlgzUnRNcdUKWZW5ICaONaCrh4cCYfHIsZ0pHbSMg5e /QveiuNa8PLw5VJ5q09jMm2Sa8SE38I4BZkik7J8pFVMWnZbS4/P+Vaxu1TqGUAH jBb/Xb7W33ErSjQUbYVcg0IL2wxEExHRWyBIoNCHGQWAc3QfZO3qr2VX1EEhcL3T /sj4EZykA0MMCzI6VRQNOmabyCPt58lnk+TRfipylW93nWrXIZAJYOtig72i6G3s jZy7WymAvPQIQ3GPrfelHdC6ZWZxtvnsUtHwo5a4Lx8+og2CIwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE2KnEUBPZ0LjIVtI/xO/9ZsxldmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3 ODhlNi03YWIwLTRhMzItOGZmMS0zYzgyNjkwZmZhYTkvZGYwZDNkYTQtZDY2My0z YTFlLTljN2EtYjY5MTVhNzQzYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzMyNzg4ZTYtN2FiMC00YTMyLThm ZjEtM2M4MjY5MGZmYWE5L2MzMjc4OGU2LTdhYjAtNGEzMi04ZmYxLTNjODI2OTBm ZmFhOS5jcmwwHwYDVR0jBBgwFoAUxxHw61JDgmWZrfefzPBexANp2wwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzI3ODhlNi03YWIwLTRhMzItOGZmMS0zYzgy NjkwZmZhYTkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQkIDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBwikKNDrL0YNv8InOBEH/+X1jONKUjd4TbhD3vHJ/gJtwbepm4Q14 Ej+dSqjyijGg7iq37/fu7Vxu+bpcqp282GPs3uoTfTS4yPEQNDNTOJMRI6kkJrZ+ FK25ppHFDryJdIgW51SZKBMwozpVTU/Dy2ScqtIDS6nOv1LwnYxo1OeEPwSBJ/Oj rEJRWzJd7B1mqgeFF8kUK0mEjgl6FADdVJEs205fvo3znQ5C8w1fHIFpjlwDlTgN Vhj3yWWc7URO/FjqGWo0s6lIDrvo0DvUvq5B5TKyXEj+u7K+pd/+pdH2gx52mUWC tnY5AM7emg9S8IQc4tPmzKGaRWWbYci4 -----END CERTIFICATE-----Generated at Sun Jan 11 03:01:46 2026 by rpki-client