This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa File: 359caaca-1c8d-3044-b68d-1e9baf9a7283.roa (raw, json) Hash identifier: eNVr+Qwh73OegPxSY5IU4jrB0gisEpAXPzz78jd2HCk= Subject key identifier: C8:D2:6E:C1:2C:43:92:22:A9:55:7E:75:38:B2:3A:D2:7A:12:4A:5A Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e Certificate serial: 010D0C9F4328584C02A601DA131BBEF7BDCDD880 Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 3629 IP address blocks: 2620:f:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:01:da:13:1b:be:f7:bd:cd:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=971271bc-9457-42df-a565-1c105905a10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5f:20:4a:6b:c6:e9:20:c8:15:18:cc:cd:07: 8c:e2:9f:cb:ba:61:22:16:93:a4:a6:3b:a6:25:85: ad:72:ff:4e:3c:90:2d:22:07:38:3d:1a:5b:00:c5: 8f:b8:08:12:f3:06:d1:56:c7:63:4b:f2:fc:12:1e: 77:2f:21:42:25:60:e4:a9:7c:89:14:ac:05:8b:a1: 2c:63:71:55:7d:c6:8c:78:bd:1b:27:35:1d:3c:39: 1c:69:84:f3:d6:9d:37:0b:9b:19:92:2e:00:fd:7b: 9d:39:36:98:66:39:29:c5:30:be:23:2c:09:90:d2: 17:43:c6:88:5d:16:6a:98:02:56:80:d2:42:79:0f: 89:6a:66:f1:7c:c2:54:8b:9c:82:b8:44:1f:bf:35: 13:62:39:af:c0:a0:7f:d5:12:85:2e:a5:9a:8f:5c: 98:b2:e1:30:02:95:ac:b2:f4:5c:ff:5a:02:af:06: 29:60:a7:2a:ed:fa:b0:c0:d6:ea:48:1e:cd:5e:a3: 94:5e:b5:01:49:ab:1d:fb:51:5f:2d:95:e1:30:29: de:6e:36:dd:e9:1e:0a:d7:b1:96:61:98:ca:ae:d6: 68:b1:dd:73:43:a2:72:16:5c:e7:9e:fd:eb:e4:ff: 99:51:0d:18:88:37:20:e0:b0:b6:fc:45:21:e0:b8: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D2:6E:C1:2C:43:92:22:A9:55:7E:75:38:B2:3A:D2:7A:12:4A:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/359caaca-1c8d-3044-b68d-1e9baf9a7283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl X509v3 Authority Key Identifier: keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer sbgp-ipAddrBlock: critical IPv6: 2620:f:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:8e:31:99:d5:ad:f1:e2:20:d1:de:3d:b2:38:1a:d9:4f:6f: 18:4f:a5:ab:cc:bc:1c:00:66:1b:3d:dc:c7:67:24:ef:35:ca: 88:66:e0:22:f1:44:af:eb:e0:72:ab:0e:8b:71:55:57:99:ae: 21:c7:51:4f:2f:45:f7:03:68:0b:2c:6a:91:54:eb:2f:c5:c8: c5:42:ee:31:73:72:24:71:26:f7:f0:61:bf:ca:95:af:3b:e8: b8:74:1b:0b:1a:71:35:02:0f:7a:eb:24:5d:21:83:11:91:d4: db:e6:78:fa:43:a2:28:92:ef:0d:56:8c:ef:69:27:87:9d:4d: ac:9f:88:46:0d:85:c0:39:5b:09:ce:1e:1f:5e:bc:d4:87:6a: 77:1c:bf:63:b2:14:09:68:b6:ec:df:a7:2c:ec:19:c3:56:2d: 52:06:a0:04:6b:ff:aa:d7:1e:4d:bb:b8:3a:f7:6e:3c:95:11: 33:f0:b3:a2:b3:22:db:0c:5d:04:c1:d6:ca:98:e0:79:0b:a8: 33:47:d3:09:ab:33:37:81:dd:ba:33:2c:7f:cd:fc:e5:e9:bd: 84:74:ce:cc:32:25:7e:c9:13:bb:83:32:bc:cd:e5:ac:70:36: d1:d8:6a:c4:2e:03:1b:a9:da:95:54:e9:d5:38:b9:62:b6:10: 9f:3e:a8:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwCpgHaExu+973N2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZGEyMzktNzkzZS00MDgyLWFmZGUtNjQ1OGYyMzE5 ZTdlMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk OTcxMjcxYmMtOTQ1Ny00MmRmLWE1NjUtMWMxMDU5MDVhMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV8gSmvG6SDIFRjMzQeM4p/LumEiFpOkpjum JYWtcv9OPJAtIgc4PRpbAMWPuAgS8wbRVsdjS/L8Eh53LyFCJWDkqXyJFKwFi6Es Y3FVfcaMeL0bJzUdPDkcaYTz1p03C5sZki4A/XudOTaYZjkpxTC+IywJkNIXQ8aI XRZqmAJWgNJCeQ+JambxfMJUi5yCuEQfvzUTYjmvwKB/1RKFLqWaj1yYsuEwApWs svRc/1oCrwYpYKcq7fqwwNbqSB7NXqOUXrUBSasd+1FfLZXhMCnebjbd6R4K17GW YZjKrtZosd1zQ6JyFlznnv3r5P+ZUQ0YiDcg4LC2/EUh4LjkUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjSbsEsQ5IiqVV+dTiyOtJ6EkpaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJk YTIzOS03OTNlLTQwODItYWZkZS02NDU4ZjIzMTllN2UvMzU5Y2FhY2EtMWM4ZC0z MDQ0LWI2OGQtMWU5YmFmOWE3MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGUyZGEyMzktNzkzZS00MDgyLWFm ZGUtNjQ1OGYyMzE5ZTdlLzhlMmRhMjM5LTc5M2UtNDA4Mi1hZmRlLTY0NThmMjMx OWU3ZS5jcmwwHwYDVR0jBBgwFoAUth6wyClvWdBkK0QvQaw4WOAHAegwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZTJkYTIzOS03OTNlLTQwODItYWZkZS02NDU4 ZjIzMTllN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAADwAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFaOMZnVrfHiINHePbI4GtlPbxhPpavMvBwAZhs93MdnJO81yohm 4CLxRK/r4HKrDotxVVeZriHHUU8vRfcDaAssapFU6y/FyMVC7jFzciRxJvfwYb/K la876Lh0GwsacTUCD3rrJF0hgxGR1NvmePpDoiiS7w1WjO9pJ4edTayfiEYNhcA5 WwnOHh9evNSHanccv2OyFAlotuzfpyzsGcNWLVIGoARr/6rXHk27uDr3bjyVETPw s6KzItsMXQTB1sqY4HkLqDNH0wmrMzeB3bozLH/N/OXpvYR0zswyJX7JE7uDMrzN 5axwNtHYasQuAxup2pVU6dU4uWK2EJ8+qJ8= -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:10 2025 by rpki-client