This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa File: 9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa (raw, json) Hash identifier: e5vg9t1uROR4pSNPLYqLQ9VP9p2AgA1D5Hy1WNE72I4= Subject key identifier: 4F:D3:6F:35:99:94:AE:36:9B:5A:5B:E2:3B:CC:82:44:5B:1C:6E:D6 Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e Certificate serial: 010D0C9F4328584BDCF5C453388A2FACDAA33180 Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 0 IP address blocks: 2601:a001::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:c4:53:38:8a:2f:ac:da:a3:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=0b830162-23a9-4b66-9675-ff7cb0f4ba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4c:91:44:25:db:8e:b9:57:ed:ef:e6:07:25: 1a:c9:49:0c:1e:57:fa:35:dd:a1:32:75:cd:da:27: cf:93:e0:4a:9f:89:96:ae:3e:f0:90:fc:3d:8c:c1: f6:46:7e:e5:e3:59:a2:ec:ca:42:0c:b7:0f:ce:68: 43:b2:64:8c:9b:fe:0c:0a:bd:13:d2:7e:a7:8f:14: ea:63:84:3a:a4:b1:9e:e7:2d:e2:b9:ac:fc:5a:94: 75:c6:36:ec:b6:79:d9:4b:4c:e7:b7:27:30:4a:ea: 56:4e:ed:e3:d0:40:b4:89:be:3f:66:2e:d0:f6:d7: 4e:7b:13:4f:07:bd:9c:86:e8:bd:c8:14:90:82:bc: af:f6:8c:81:35:fa:27:96:25:d9:49:75:b1:b6:31: 37:f1:b4:0f:a9:36:5c:6d:e9:ac:85:01:a2:39:64: ef:94:3e:d6:12:46:0d:8a:40:5c:8c:65:79:28:2f: 8c:f3:41:ac:cd:f8:1e:6e:72:17:d1:0b:2b:0c:36: e0:15:cb:c9:c0:73:a2:d7:9d:56:e7:1a:3a:77:30: cd:36:27:97:59:b1:b7:d1:06:b0:f6:25:06:bd:6e: 61:5a:96:ff:72:6e:07:f0:c2:09:c3:7a:ad:e7:01: fd:e3:a5:91:e0:f8:14:92:fb:57:20:04:a7:2d:48: 59:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D3:6F:35:99:94:AE:36:9B:5A:5B:E2:3B:CC:82:44:5B:1C:6E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/9d1e2949-725d-30e4-9f53-38bd0e6b7df0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl X509v3 Authority Key Identifier: keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer sbgp-ipAddrBlock: critical IPv6: 2601:a001::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:34:99:b5:f2:43:82:bc:27:cd:65:6c:cf:a0:b4:82:6b:8e: 6a:0f:47:e5:a5:58:cb:7f:e2:57:79:3d:d7:92:d4:d9:3b:ae: ea:d0:c8:c5:37:92:f4:bf:0f:1e:76:5c:57:2b:b6:80:b1:2d: 11:05:e4:20:a6:5c:36:90:85:a2:82:83:e1:53:c7:62:e0:09: c0:a0:66:ce:46:16:ed:42:50:78:e9:2d:2c:da:1f:d3:6e:5e: 24:e2:5d:31:24:ce:8b:1d:cb:d6:c2:4d:1c:48:25:0e:bf:8f: 8e:06:5b:18:1e:26:97:5a:53:32:b0:2c:ad:a7:79:b6:7b:c2: 8f:f9:e3:2c:80:e9:42:4e:da:bf:a2:d7:b4:94:9d:85:47:6b: 66:62:9d:7e:30:b0:25:79:72:93:39:47:5c:f6:28:4b:32:7a: 5c:5e:d6:69:d0:93:56:0a:dc:26:3c:06:58:bb:b2:e9:6f:eb: 67:d2:e1:7b:b2:cb:f3:0c:fc:02:a3:08:5c:3b:07:e2:e1:99: 96:cf:c3:47:21:eb:8e:15:9e:39:7a:1e:74:8e:09:94:fc:7f: d5:30:44:79:ce:c5:85:51:d7:25:f8:19:c0:92:01:4c:bc:8b: e7:68:5e:d2:ac:ba:ec:a8:d0:f8:ec:73:80:de:8f:06:04:0b: 45:a1:7a:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvc9cRTOIovrNqjMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk MDRlMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MGI4MzAxNjItMjNhOS00YjY2LTk2NzUtZmY3Y2IwZjRiYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEyRRCXbjrlX7e/mByUayUkMHlf6Nd2hMnXN 2ifPk+BKn4mWrj7wkPw9jMH2Rn7l41mi7MpCDLcPzmhDsmSMm/4MCr0T0n6njxTq Y4Q6pLGe5y3iuaz8WpR1xjbstnnZS0zntycwSupWTu3j0EC0ib4/Zi7Q9tdOexNP B72chui9yBSQgryv9oyBNfonliXZSXWxtjE38bQPqTZcbemshQGiOWTvlD7WEkYN ikBcjGV5KC+M80GszfgebnIX0QsrDDbgFcvJwHOi151W5xo6dzDNNieXWbG30Qaw 9iUGvW5hWpb/cm4H8MIJw3qt5wH946WR4PgUkvtXIASnLUhZaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFE/TbzWZlK42m1pb4jvMgkRbHG7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvOWQxZTI5NDktNzI1ZC0z MGU0LTlmNTMtMzhiZDBlNmI3ZGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5 NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3 ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgATBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCdNJm18kOCvCfNZWzPoLSCa45qD0flpVjLf+JXeT3XktTZO67q0MjF N5L0vw8edlxXK7aAsS0RBeQgplw2kIWigoPhU8di4AnAoGbORhbtQlB46S0s2h/T bl4k4l0xJM6LHcvWwk0cSCUOv4+OBlsYHiaXWlMysCytp3m2e8KP+eMsgOlCTtq/ ote0lJ2FR2tmYp1+MLAleXKTOUdc9ihLMnpcXtZp0JNWCtwmPAZYu7Lpb+tn0uF7 ssvzDPwCowhcOwfi4ZmWz8NHIeuOFZ45eh50jgmU/H/VMER5zsWFUdcl+BnAkgFM vIvnaF7SrLrsqND47HOA3o8GBAtFoXpy -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:49 2025 by rpki-client