This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa File: cfc625d2-59fc-3fca-a96c-ec36601abffc.roa (raw, json) Hash identifier: T3CZsonCrsZRMRDovoOp+Dyddho1DUFnrvBEo9Eo+XI= Subject key identifier: 10:09:FF:11:B8:5E:F6:E2:A7:61:53:98:6E:61:61:CF:4A:E2:A3:1F Certificate issuer: /CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Certificate serial: 010D0C9F4328584BD5FB133EBC0F0E5438141220 Authority key identifier: 29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 393819 IP address blocks: 2606:cac0::/32 maxlen: 32 2606:cac0:35::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:13:3e:bc:0f:0e:54:38:14:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4ac08c7-b64b-4701-92e6-e136f50164b9 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=0d85075c-1a3c-4a5b-8817-cfa6927e9a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:8f:e3:37:86:c2:03:78:8a:e1:f1:25:1f: 6a:ac:09:45:ad:77:06:69:00:09:e9:0a:82:ee:fa: 99:e2:ae:94:5d:15:bd:13:08:72:9f:51:24:0b:c2: 87:db:56:c8:97:4f:01:f4:9e:1a:f2:fd:f7:80:8f: a0:78:89:b4:dd:25:9c:32:51:83:25:12:db:6b:a3: 90:c6:43:ef:17:c8:7a:5d:09:f5:ed:fc:3c:7e:31: e6:22:9d:5e:cd:99:ce:39:23:da:b5:67:0f:bd:30: b4:04:4b:e1:c2:52:9c:20:ed:d2:8e:cd:02:3a:c2: 7d:10:2c:94:5d:9d:94:6d:a8:28:e7:67:85:f3:27: 7b:60:62:36:25:79:75:a3:3b:07:f7:84:7d:77:f0: 07:46:e0:c7:aa:53:00:15:e7:15:d7:15:f2:c6:1f: 3a:a7:cb:83:59:68:c3:9b:45:76:34:de:be:d8:9b: 32:ac:98:cc:25:b6:9e:cb:f3:3d:3c:25:58:c3:9e: 1d:ff:b5:76:9d:c3:ad:7a:8b:9c:bc:24:f6:00:f6: 05:94:35:4a:7e:c8:5e:cf:f4:79:f4:6a:5f:81:2c: 8c:bd:c3:c2:a8:3f:56:55:0f:b7:71:e2:f4:ed:0c: fe:1f:7d:80:b5:a6:a6:15:6d:e0:91:d4:f5:b0:2e: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:FF:11:B8:5E:F6:E2:A7:61:53:98:6E:61:61:CF:4A:E2:A3:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/cfc625d2-59fc-3fca-a96c-ec36601abffc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9/b4ac08c7-b64b-4701-92e6-e136f50164b9.crl X509v3 Authority Key Identifier: keyid:29:2F:8C:27:8A:C6:AB:14:31:91:62:BC:EC:C2:13:15:F5:3B:8B:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b4ac08c7-b64b-4701-92e6-e136f50164b9.cer sbgp-ipAddrBlock: critical IPv6: 2606:cac0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:40:ef:cb:89:84:f2:54:41:95:50:9a:4d:b7:b2:df:02:0d: 20:f3:24:ae:66:72:3c:b2:37:ff:72:61:b1:19:22:37:13:1e: 3e:cc:fd:35:6c:12:c8:50:c4:e6:3d:ed:b8:25:95:ff:5c:e2: 9d:4b:c7:83:b0:b4:71:73:b0:8c:e8:f4:b3:7e:a2:d9:60:e8: 21:75:9e:f6:95:0e:c2:3d:01:80:8c:96:37:79:83:a4:a6:68: ef:fb:e0:18:1d:8f:51:16:84:37:59:08:0a:be:3a:a1:67:38: 4d:11:9e:e6:ca:01:a2:ad:33:02:09:9d:0d:f7:78:80:21:6a: 12:68:a8:f9:c2:c5:c1:75:ee:f7:a1:bb:47:92:df:b6:66:dd: 00:be:2b:37:e4:87:01:98:7a:a4:f2:91:11:c3:30:57:14:e4: ea:d4:17:b0:a4:f6:4a:93:fb:ed:81:e2:4f:2e:0a:d9:f4:09: bf:a9:f2:49:15:24:42:6f:71:62:9f:35:40:87:15:f4:2d:34: b5:99:17:5e:61:06:bc:ee:47:c8:73:d2:dd:2b:7e:a1:e5:3b: bd:df:1f:ca:8e:b6:58:7e:5c:a1:84:12:d3:74:1f:78:87:45: f6:a5:00:57:a6:22:ad:ed:a8:c4:ea:b2:92:e8:c3:9f:eb:4c: fa:fc:b8:44 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvV+xM+vA8OVDgUEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRhYzA4YzctYjY0Yi00NzAxLTkyZTYtZTEzNmY1MDE2 NGI5MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk MGQ4NTA3NWMtMWEzYy00YTViLTg4MTctY2ZhNjkyN2U5YTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUuP4zeGwgN4iuHxJR9qrAlFrXcGaQAJ6QqC 7vqZ4q6UXRW9Ewhyn1EkC8KH21bIl08B9J4a8v33gI+geIm03SWcMlGDJRLba6OQ xkPvF8h6XQn17fw8fjHmIp1ezZnOOSPatWcPvTC0BEvhwlKcIO3Sjs0COsJ9ECyU XZ2Ubago52eF8yd7YGI2JXl1ozsH94R9d/AHRuDHqlMAFecV1xXyxh86p8uDWWjD m0V2NN6+2JsyrJjMJbaey/M9PCVYw54d/7V2ncOteoucvCT2APYFlDVKfshez/R5 9GpfgSyMvcPCqD9WVQ+3ceL07Qz+H32AtaamFW3gkdT1sC436QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBAJ/xG4Xvbip2FTmG5hYc9K4qMfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFj MDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2ZjUwMTY0YjkvY2ZjNjI1ZDItNTlmYy0z ZmNhLWE5NmMtZWMzNjYwMWFiZmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjRhYzA4YzctYjY0Yi00NzAxLTky ZTYtZTEzNmY1MDE2NGI5L2I0YWMwOGM3LWI2NGItNDcwMS05MmU2LWUxMzZmNTAx NjRiOS5jcmwwHwYDVR0jBBgwFoAUKS+MJ4rGqxQxkWK87MITFfU7i38wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNGFjMDhjNy1iNjRiLTQ3MDEtOTJlNi1lMTM2 ZjUwMTY0YjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbKwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBSQO/LiYTyVEGVUJpNt7LfAg0g8ySuZnI8sjf/cmGxGSI3Ex4+zP01 bBLIUMTmPe24JZX/XOKdS8eDsLRxc7CM6PSzfqLZYOghdZ72lQ7CPQGAjJY3eYOk pmjv++AYHY9RFoQ3WQgKvjqhZzhNEZ7mygGirTMCCZ0N93iAIWoSaKj5wsXBde73 obtHkt+2Zt0Avis35IcBmHqk8pERwzBXFOTq1BewpPZKk/vtgeJPLgrZ9Am/qfJJ FSRCb3FinzVAhxX0LTS1mRdeYQa87kfIc9LdK36h5Tu93x/KjrZYflyhhBLTdB94 h0X2pQBXpiKt7ajE6rKS6MOf60z6/LhE -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:40 2025 by rpki-client