This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa File: 323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa (raw, json) Hash identifier: jBA+LFen2mwmLM3MLpP4PzK7aRymeJd/zaNTCRRdsAM= Subject key identifier: A5:E4:75:E9:63:78:75:1E:90:A2:88:7C:26:BF:4F:6A:B4:45:90:18 Certificate issuer: /CN=A91D85A20000/serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Certificate serial: 04E5BBA70E1FC355F1A2A6584AA704ACD355508A Authority key identifier: 97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa Signing time: Sat 08 Nov 2025 12:14:33 +0000 ROA not before: Sat 08 Nov 2025 12:09:33 +0000 ROA not after: Sat 07 Nov 2026 12:14:33 +0000 asID: 399165 IP address blocks: 2403:2500:400:14::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e5:bb:a7:0e:1f:c3:55:f1:a2:a6:58:4a:a7:04:ac:d3:55:50:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=97E9BDF594AC7687BA4A16CA5C1923135CDF7186 Validity Not Before: Nov 8 12:09:33 2025 GMT Not After : Nov 7 12:14:33 2026 GMT Subject: CN=A5E475E96378751E90A2887C26BF4F6AB4459018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:24:40:b5:63:c9:2a:14:6d:8c:3d:1c:52: 89:b9:cb:e1:42:94:f3:bc:7b:c7:82:15:ed:e4:d8: 69:31:31:71:ae:3d:0b:8e:bf:40:b6:c2:f8:ec:c5: a6:51:38:0c:a8:0f:ce:9a:5a:39:09:4b:a0:ea:19: 67:53:a1:30:33:c8:29:20:21:ab:6f:9d:1c:07:39: d7:6e:69:e7:fc:de:7c:c1:c0:06:10:e6:25:11:6c: 25:c3:0c:22:78:65:ec:92:f4:af:ae:a3:69:32:38: 1c:ad:22:78:da:47:35:13:39:1e:b7:f2:77:75:9f: 31:3c:e7:6d:f0:cf:37:7f:23:6f:cc:53:01:4e:7a: 14:6f:d5:37:2c:7c:ea:ea:c8:11:62:e8:2b:93:00: 26:22:7c:67:7b:0e:2f:75:74:5f:53:cf:ab:dd:48: c6:20:94:48:9a:ca:66:ef:29:91:1c:40:c9:58:eb: 9e:e0:44:fb:fb:b9:42:eb:af:4b:22:8d:86:a8:32: bb:3a:ba:19:1c:b8:57:06:34:a6:e3:5b:6e:71:93: 31:ae:23:70:3a:25:e0:98:31:7d:3b:ad:74:af:ae: 59:c3:8c:4a:f9:8a:9e:d3:3b:11:68:20:0c:50:f9: 65:32:07:57:f2:b5:e6:a6:d7:8c:d1:f1:a1:98:a2: 96:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:75:E9:63:78:75:1E:90:A2:88:7C:26:BF:4F:6A:B4:45:90:18 X509v3 Authority Key Identifier: keyid:97:E9:BD:F5:94:AC:76:87:BA:4A:16:CA:5C:19:23:13:5C:DF:71:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/97E9BDF594AC7687BA4A16CA5C1923135CDF7186.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-m99ZSsdoe6ShbKXBkjE1zfcYY.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/3/323430333a323530303a3430303a31343a3a2f36342d3634203d3e20333939313635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:2500:400:14::/64 Signature Algorithm: sha256WithRSAEncryption a2:b8:6d:04:7f:41:32:58:02:46:ba:b1:90:28:b3:0f:5a:14: b1:9e:c1:f6:ac:80:ec:55:b0:01:68:64:c9:24:d2:59:f8:ea: f6:14:1c:30:9e:91:e3:f0:7a:fc:e9:d9:02:9a:61:f3:9b:79: df:df:41:c9:a3:53:0c:93:d5:77:ed:e0:50:e6:09:24:9e:0d: d4:2d:4c:01:57:e8:3e:ac:94:0e:a7:ed:69:4d:55:db:cc:78: 99:77:35:a3:e4:cc:d7:46:5c:5e:06:7e:f3:84:c9:c5:e5:e5: f7:93:80:bd:35:aa:b5:c2:0b:3b:c2:e0:89:14:92:4e:4c:4f: 01:d3:93:e0:9b:ff:4d:ff:4e:a4:89:7f:ce:a4:52:3a:c3:1b: d2:9f:c7:e0:0a:d7:29:e7:1b:7e:a9:c7:0b:8a:b3:ff:3a:5b: 0e:57:d4:00:12:1a:ad:e9:f1:f7:ac:c8:56:cc:fb:42:cc:eb: aa:86:b0:e3:33:cc:a2:0e:e9:66:d0:8e:9b:34:f4:f0:21:cf: cc:74:e5:b5:5b:f0:70:87:cc:4b:dc:64:8a:6d:59:55:1c:aa: 23:5a:43:c5:92:6c:a4:b7:d7:99:1b:8f:23:04:ac:54:9e:6d: d2:e2:5d:dd:41:c0:a5:9f:eb:30:54:73:ff:f1:4f:6e:d3:59: 21:08:09:d3 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIUBOW7pw4fw1XxoqZYSqcErNNVUIowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg5N0U5QkRGNTk0 QUM3Njg3QkE0QTE2Q0E1QzE5MjMxMzVDREY3MTg2MB4XDTI1MTEwODEyMDkzM1oX DTI2MTEwNzEyMTQzM1owMzExMC8GA1UEAxMoQTVFNDc1RTk2Mzc4NzUxRTkwQTI4 ODdDMjZCRjRGNkFCNDQ1OTAxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALJPJEC1Y8kqFG2MPRxSibnL4UKU87x7x4IV7eTYaTExca49C46/QLbC+OzF plE4DKgPzppaOQlLoOoZZ1OhMDPIKSAhq2+dHAc5125p5/zefMHABhDmJRFsJcMM Inhl7JL0r66jaTI4HK0ieNpHNRM5Hrfyd3WfMTznbfDPN38jb8xTAU56FG/VNyx8 6urIEWLoK5MAJiJ8Z3sOL3V0X1PPq91IxiCUSJrKZu8pkRxAyVjrnuBE+/u5Quuv SyKNhqgyuzq6GRy4VwY0puNbbnGTMa4jcDol4JgxfTutdK+uWcOMSvmKntM7EWgg DFD5ZTIHV/K15qbXjNHxoZiilpUCAwEAAaOCAk8wggJLMB0GA1UdDgQWBBSl5HXp Y3h1HpCiiHwmv09qtEWQGDAfBgNVHSMEGDAWgBSX6b31lKx2h7pKFspcGSMTXN9x hjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8zLzk3RTlCREY1OTRBQzc2ODdCQTRBMTZDQTVDMTkyMzEzNUNE RjcxODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3 QzcyRkQxRkYyL2wtbTk5WlNzZG9lNlNoYktYQmtqRTF6ZmNZWS5jZXIwgbAGCCsG AQUFBwELBIGjMIGgMIGdBggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1ycHMuYXJp bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2ODY2MTA4NGI4 Ni8zLzMyMzQzMDMzM2EzMjM1MzAzMDNhMzQzMDMwM2EzMTM0M2EzYTJmMzYzNDJk MzYzNDIwM2QzZTIwMzMzOTM5MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG AQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJAMlAAQAABQwDQYJ KoZIhvcNAQELBQADggEBAKK4bQR/QTJYAka6sZAosw9aFLGewfasgOxVsAFoZMkk 0ln46vYUHDCekePwevzp2QKaYfObed/fQcmjUwyT1Xft4FDmCSSeDdQtTAFX6D6s lA6n7WlNVdvMeJl3NaPkzNdGXF4GfvOEycXl5feTgL01qrXCCzvC4IkUkk5MTwHT k+Cb/03/TqSJf86kUjrDG9Kfx+AK1ynnG36pxwuKs/86Ww5X1AASGq3p8fesyFbM +0LM66qGsOMzzKIO6WbQjps09PAhz8x05bVb8HCHzEvcZIptWVUcqiNaQ8WSbKS3 15kbjyMErFSebdLiXd1BwKWf6zBUc//xT27TWSEICdM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:35 2025 by rpki-client