This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa File: 866cb69c-61bb-348f-b43f-d2139e02ac3e.roa (raw, json) Hash identifier: JzVwNxNP7vepWCrql/e4BkQXtMtETyitbAy4XN4Xx4Y= Subject key identifier: 54:2F:E5:52:04:79:F7:90:A0:CE:2E:73:F5:B4:27:7E:D6:4E:E9:37 Certificate issuer: /CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Certificate serial: 010D0C9F4328584C14CB5DDF876BAB274A6C9080 Authority key identifier: 5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 14618 IP address blocks: 2607:b40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:5d:df:87:6b:ab:27:4a:6c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ca7b45-83e1-4a1c-8713-317adea0e270 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=dc167afd-8bce-47eb-b664-dd74d514d288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ff:21:73:06:f1:eb:3d:95:2b:9e:ab:ca:87: d0:59:8e:96:f7:23:db:d8:7e:ab:9b:99:f8:24:f4: 9c:e2:8b:b7:20:bc:0b:af:44:e3:76:91:ba:b0:94: d5:af:1d:3a:e8:85:89:90:50:b7:4e:cb:40:0d:33: b2:dd:95:b8:6b:c9:e4:84:4a:fa:dd:c1:81:a7:4b: c6:5d:69:ab:fa:5b:dc:7c:80:ab:a1:bb:e2:c6:dc: 22:f9:c6:69:0f:1a:98:4e:57:f9:cb:e1:0b:5f:7b: 03:bd:13:3a:59:ee:f0:02:b3:95:c7:0f:49:9f:c0: 59:d3:88:42:ae:44:c3:69:62:1a:f2:cc:7c:fc:67: b1:66:93:1f:e5:12:35:1a:0f:fc:75:47:3d:34:47: 34:14:3b:19:51:dd:87:9d:a6:b9:9a:ae:00:02:a2: 68:6e:f1:a6:b3:c6:fc:99:64:dd:21:2c:d8:94:95: 00:ec:40:09:51:69:06:54:a6:52:43:86:2a:63:a4: a9:f9:78:82:50:1f:88:6e:33:7c:29:b9:5b:97:5f: a3:e2:1b:a1:12:49:6e:a2:de:60:d7:06:e6:2b:e1: 05:48:be:c3:e0:ea:b4:b0:63:11:ed:5e:a4:99:23: e2:bf:2b:5f:8e:e5:d6:86:19:9b:9c:42:2c:65:1a: e2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2F:E5:52:04:79:F7:90:A0:CE:2E:73:F5:B4:27:7E:D6:4E:E9:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/866cb69c-61bb-348f-b43f-d2139e02ac3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270/17ca7b45-83e1-4a1c-8713-317adea0e270.crl X509v3 Authority Key Identifier: keyid:5D:A6:1C:DE:6C:60:FE:16:B5:3C:6F:5F:98:DF:91:C1:D7:64:40:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/17ca7b45-83e1-4a1c-8713-317adea0e270.cer sbgp-ipAddrBlock: critical IPv6: 2607:b40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ea:d9:12:44:23:76:72:08:c2:58:2b:9c:7a:16:e5:b5:1c: 14:c0:a0:8e:5d:ce:d2:53:62:2e:85:c6:1f:e8:8b:28:80:69: 45:14:0a:95:4c:f2:a9:5d:54:cc:63:2f:69:f2:2d:d8:1d:d4: a2:10:d5:53:fc:36:cb:21:d3:b5:8a:60:5d:f8:66:02:bd:42: ea:48:03:c0:1c:3c:1b:e9:a9:c1:31:60:83:8a:98:75:14:b8: 7d:47:df:77:5e:f1:d1:a7:8e:00:59:42:47:e9:02:f5:17:34: f7:28:6b:b4:3d:43:6d:49:17:1f:d2:06:96:27:3c:8d:a6:aa: c5:8a:a1:d4:88:d0:5c:65:9b:ed:c0:c4:26:5a:cd:ff:7c:ca: 1c:3b:20:24:be:6d:7b:f0:7e:bf:22:25:c9:b7:eb:4d:99:19: bf:3c:0a:5e:23:50:be:e9:8e:8e:de:98:5d:ab:25:4b:4f:68: 1f:32:1a:5d:a9:df:46:34:57:a0:83:53:5e:de:99:ac:40:8f: 98:5a:2e:c3:cc:ca:6f:01:fe:76:ea:c4:cf:a9:95:99:8b:9f: 3d:7c:d9:29:41:fa:ae:bf:26:e7:d3:f0:be:2b:ea:10:71:7d: 94:60:68:96:d0:a0:b2:19:bb:ac:fa:58:bf:51:03:ab:db:9d: 0b:6c:c3:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwUy13fh2urJ0pskIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdjYTdiNDUtODNlMS00YTFjLTg3MTMtMzE3YWRlYTBl MjcwMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk ZGMxNjdhZmQtOGJjZS00N2ViLWI2NjQtZGQ3NGQ1MTRkMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv8hcwbx6z2VK56ryofQWY6W9yPb2H6rm5n4 JPSc4ou3ILwLr0TjdpG6sJTVrx066IWJkFC3TstADTOy3ZW4a8nkhEr63cGBp0vG XWmr+lvcfICrobvixtwi+cZpDxqYTlf5y+ELX3sDvRM6We7wArOVxw9Jn8BZ04hC rkTDaWIa8sx8/GexZpMf5RI1Gg/8dUc9NEc0FDsZUd2Hnaa5mq4AAqJobvGms8b8 mWTdISzYlJUA7EAJUWkGVKZSQ4YqY6Sp+XiCUB+IbjN8Kblbl1+j4huhEkluot5g 1wbmK+EFSL7D4Oq0sGMR7V6kmSPivytfjuXWhhmbnEIsZRriGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQv5VIEefeQoM4uc/W0J37WTuk3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xN2Nh N2I0NS04M2UxLTRhMWMtODcxMy0zMTdhZGVhMGUyNzAvODY2Y2I2OWMtNjFiYi0z NDhmLWI0M2YtZDIxMzllMDJhYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTdjYTdiNDUtODNlMS00YTFjLTg3 MTMtMzE3YWRlYTBlMjcwLzE3Y2E3YjQ1LTgzZTEtNGExYy04NzEzLTMxN2FkZWEw ZTI3MC5jcmwwHwYDVR0jBBgwFoAUXaYc3mxg/ha1PG9fmN+RwddkQOUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xN2NhN2I0NS04M2UxLTRhMWMtODcxMy0zMTdh ZGVhMGUyNzAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgcLQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbq2RJEI3ZyCMJYK5x6FuW1HBTAoI5dztJTYi6Fxh/oiyiAaUUU CpVM8qldVMxjL2nyLdgd1KIQ1VP8Nssh07WKYF34ZgK9QupIA8AcPBvpqcExYIOK mHUUuH1H33de8dGnjgBZQkfpAvUXNPcoa7Q9Q21JFx/SBpYnPI2mqsWKodSI0Fxl m+3AxCZazf98yhw7ICS+bXvwfr8iJcm3602ZGb88Cl4jUL7pjo7emF2rJUtPaB8y Gl2p30Y0V6CDU17emaxAj5haLsPMym8B/nbqxM+plZmLnz182SlB+q6/JufT8L4r 6hBxfZRgaJbQoLIZu6z6WL9RA6vbnQtswzY= -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:37 2025 by rpki-client