This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa File: 8a673006-55a5-3418-963c-f9a5b7571cea.roa (raw, json) Hash identifier: ziESdhnDLA8+GxvcoBuO8/gal18BsIVvyByYV5rpQlM= Subject key identifier: 1B:D2:BC:98:FB:81:CC:42:56:6A:9F:98:F1:D8:4C:33:27:76:51:73 Certificate issuer: /CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Certificate serial: 010D0C9F4328584C0DD0C11EB45F24DA2D4AF600 Authority key identifier: 43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 393869 IP address blocks: 2620:11f:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:c1:1e:b4:5f:24:da:2d:4a:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9e2c1ac-e255-40fe-8dc8-36750b569bfc Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=6dff8922-e923-431b-9f8a-63e440e5fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:11:c5:bf:7e:da:65:e3:26:4a:5d:c6:03: 5c:15:5b:87:7f:23:d8:20:0d:26:7d:53:7d:ba:0f: 96:24:85:4d:eb:27:98:86:0a:7c:05:5f:08:2c:bb: 43:60:f8:70:d6:7f:77:3d:4b:f2:ec:a8:08:5a:ea: 7c:10:0a:86:44:ba:e4:2d:bd:f7:62:5c:a1:52:37: b4:28:e3:ea:3a:27:9b:c4:c0:85:03:21:0e:0c:e8: 0c:f4:79:80:04:55:71:a8:32:68:a7:ca:ad:69:11: 2d:2a:d3:d0:0c:ec:61:83:66:2b:03:ee:6b:1c:89: 1a:ab:24:82:da:a4:46:91:3f:68:fc:50:08:e1:68: 9c:37:eb:d2:53:0a:71:73:56:ba:f7:77:a2:b4:76: 7b:3b:9b:3b:6b:72:10:32:e1:76:17:9e:d4:57:27: 7c:4a:25:38:c5:bd:a0:e2:3f:07:59:75:26:d0:71: ce:60:d8:10:4c:1a:66:ae:04:11:35:bb:09:19:14: d6:81:e7:30:d0:38:28:07:d7:f0:40:97:cf:4d:14: 62:f5:cb:e8:06:74:fd:26:51:e2:86:0a:2c:2c:0a: e0:5d:f4:01:0b:5a:c1:64:7c:45:ee:0b:79:56:54: ce:33:12:b2:d6:c2:ef:c4:7f:bb:bc:01:f9:f7:cb: 5f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D2:BC:98:FB:81:CC:42:56:6A:9F:98:F1:D8:4C:33:27:76:51:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/8a673006-55a5-3418-963c-f9a5b7571cea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.crl X509v3 Authority Key Identifier: keyid:43:5E:A0:A6:2A:BD:2A:B3:E0:0F:1E:76:5B:BD:7E:8E:F9:80:D7:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9e2c1ac-e255-40fe-8dc8-36750b569bfc.cer sbgp-ipAddrBlock: critical IPv6: 2620:11f:5000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1c:cc:18:25:42:49:51:3d:9f:78:44:e7:f9:be:7b:9c:3c: 83:4f:cd:1f:a6:7b:22:62:50:8c:ea:da:cf:a9:c0:7e:87:e6: 93:d6:36:01:36:bc:57:48:f1:28:77:0e:1f:3e:b7:d4:71:c9: 99:8d:0b:f4:ce:b7:84:ee:e5:e1:84:67:9b:94:a1:67:45:cb: e2:55:4f:03:39:c4:23:03:dc:91:c9:ba:1f:d3:89:1b:64:0a: 12:9b:96:6d:53:da:12:99:86:a7:d4:36:da:af:36:c6:14:93: 8a:97:5b:b7:c2:48:d6:6f:ba:1a:8a:0e:2c:cd:d1:40:77:2f: e6:97:9b:3c:dd:d7:ab:b7:55:70:a8:20:ec:74:b5:a3:57:48: 40:7b:e2:6f:af:48:32:34:30:9d:e8:d9:ba:e7:ba:8b:d4:c3: 47:d3:64:95:82:33:a5:8d:77:a7:e5:01:29:bc:22:4b:d8:d0: bf:fe:ed:c4:70:a9:64:af:3a:0b:6e:8d:a9:b3:22:46:9b:b9: ac:6a:b7:b6:f3:75:01:fb:1f:43:68:00:67:b9:95:03:1c:e1: a4:a4:f3:d1:59:87:8d:bf:fd:06:e0:0f:48:2c:94:93:29:d4: 55:ff:27:3e:93:69:8e:74:08:07:85:a0:87:63:48:5d:84:85: 91:3d:b2:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwN0MEetF8k2i1K9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTllMmMxYWMtZTI1NS00MGZlLThkYzgtMzY3NTBiNTY5 YmZjMB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk NmRmZjg5MjItZTkyMy00MzFiLTlmOGEtNjNlNDQwZTVmYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqsRxb9+2mXjJkpdxgNcFVuHfyPYIA0mfVN9 ug+WJIVN6yeYhgp8BV8ILLtDYPhw1n93PUvy7KgIWup8EAqGRLrkLb33YlyhUje0 KOPqOiebxMCFAyEODOgM9HmABFVxqDJop8qtaREtKtPQDOxhg2YrA+5rHIkaqySC 2qRGkT9o/FAI4WicN+vSUwpxc1a693eitHZ7O5s7a3IQMuF2F57UVyd8SiU4xb2g 4j8HWXUm0HHOYNgQTBpmrgQRNbsJGRTWgecw0DgoB9fwQJfPTRRi9cvoBnT9JlHi hgosLArgXfQBC1rBZHxF7gt5VlTOMxKy1sLvxH+7vAH598tf1wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBvSvJj7gcxCVmqfmPHYTDMndlFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUy YzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1MGI1NjliZmMvOGE2NzMwMDYtNTVhNS0z NDE4LTk2M2MtZjlhNWI3NTcxY2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTllMmMxYWMtZTI1NS00MGZlLThk YzgtMzY3NTBiNTY5YmZjL2E5ZTJjMWFjLWUyNTUtNDBmZS04ZGM4LTM2NzUwYjU2 OWJmYy5jcmwwHwYDVR0jBBgwFoAUQ16gpiq9KrPgDx52W71+jvmA1x0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWUyYzFhYy1lMjU1LTQwZmUtOGRjOC0zNjc1 MGI1NjliZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABH1Aw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKBzMGCVCSVE9n3hE5/m+e5w8g0/NH6Z7ImJQjOraz6nAfofmk9Y2 ATa8V0jxKHcOHz631HHJmY0L9M63hO7l4YRnm5ShZ0XL4lVPAznEIwPckcm6H9OJ G2QKEpuWbVPaEpmGp9Q22q82xhSTipdbt8JI1m+6GooOLM3RQHcv5pebPN3Xq7dV cKgg7HS1o1dIQHvib69IMjQwnejZuue6i9TDR9NklYIzpY13p+UBKbwiS9jQv/7t xHCpZK86C26NqbMiRpu5rGq3tvN1AfsfQ2gAZ7mVAxzhpKTz0VmHjb/9BuAPSCyU kynUVf8nPpNpjnQIB4Wgh2NIXYSFkT2y9g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:40 2025 by rpki-client