This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c64e1e1-0638-3d9a-8617-77b14cc8d5ba.roa File: 3c64e1e1-0638-3d9a-8617-77b14cc8d5ba.roa (raw, json) Hash identifier: ez5paZFfLn+KzYnohZOhuQfmQKcSYA5AVU7pbRgdPN8= Subject key identifier: D9:5A:A7:52:FB:1C:AA:F7:52:C5:1C:ED:02:71:65:80:6B:F5:E9:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BCD9BDAB4BCA11D4BCBC7BB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c64e1e1-0638-3d9a-8617-77b14cc8d5ba.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 33287 IP address blocks: 2603:301d:400::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:da:b4:bc:a1:1d:4b:cb:c7:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=d0d61b5f-a624-439b-a90f-af72c9c6eed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:20:29:ff:af:45:6d:ab:eb:b1:21:ce:61:73: d1:b3:e0:3a:7c:eb:1e:21:e6:a0:7e:c1:57:fc:48: 68:d3:d3:ed:14:4d:6f:fd:af:6a:dd:03:6b:98:3e: d3:aa:47:c4:16:b7:5d:0f:4a:66:35:f7:96:10:2f: a9:59:35:98:cc:1e:2d:9e:0f:94:d6:b9:b3:79:ff: c7:55:51:d5:64:88:af:66:95:1b:8a:ed:f7:be:51: 42:64:30:cf:91:78:a2:a8:d7:5b:fd:37:b8:ae:22: 37:b0:6f:65:5c:4d:c7:3b:5d:fd:2e:70:4d:21:95: db:45:a5:43:65:55:b1:fe:44:20:63:db:a9:ab:87: ad:4d:84:70:14:2b:94:eb:55:0f:bb:ce:9a:b7:50: e9:3c:9f:49:8d:df:98:50:c0:71:40:de:c2:7b:e1: 85:92:64:7d:54:61:4d:5d:2b:67:9d:4c:08:e0:be: 2f:4a:94:05:9d:98:3b:0b:a3:ff:f4:f5:ab:3d:f0: 00:b6:25:b6:af:5d:d4:95:d6:b8:46:a8:3f:13:71: ca:db:b8:2c:1d:c2:20:37:d0:e2:8a:a2:47:09:fc: 4c:e2:43:d4:f2:84:48:47:5a:b7:c5:d1:ee:9e:57: 3c:12:90:64:2a:49:de:4c:08:f4:44:20:ca:55:98: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5A:A7:52:FB:1C:AA:F7:52:C5:1C:ED:02:71:65:80:6B:F5:E9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c64e1e1-0638-3d9a-8617-77b14cc8d5ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301d:400::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2f:f9:01:22:58:3d:20:e1:45:8a:01:c1:ae:7c:e5:9d:67: 77:ae:90:f1:2b:ec:59:d4:9f:dd:63:8a:3f:02:a8:d2:a8:17: 47:e5:3b:02:40:6a:f0:2f:90:c8:57:ac:42:e6:9c:87:22:bf: c3:0c:52:80:f9:c9:14:73:c1:86:1a:df:9a:4f:cb:44:77:28: dc:8e:8a:87:24:57:a5:df:bf:d9:9e:83:09:f1:a1:dc:69:41: 9d:50:bd:26:db:bf:6d:63:2a:94:22:e2:b4:99:6a:1c:02:7a: ca:42:81:7e:10:94:7b:ca:31:6d:bb:73:cc:e8:1d:35:93:03: 6e:04:46:28:4f:07:a0:76:2b:03:70:7a:6b:a2:ef:3e:bf:05: 38:e4:93:9a:c1:b0:33:c2:90:5c:78:99:36:72:36:04:e4:10: e9:b3:f3:db:1f:ce:5c:7b:80:8a:1e:2f:12:52:59:76:49:48: 37:af:65:2a:1b:0d:6c:b5:bc:6f:0e:6f:f4:a0:aa:38:bc:3d: 1a:bc:86:94:23:d2:85:ac:39:70:c1:0c:a4:95:6d:37:4a:36: 3a:7d:12:31:71:45:aa:a4:1a:8b:1e:2c:7f:c7:8b:d7:6d:f6: d0:41:49:bc:e8:af:22:be:8d:e3:dc:6e:97:7b:27:ef:c6:da: 41:25:1a:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvNm9q0vKEdS8vHu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk ZDBkNjFiNWYtYTYyNC00MzliLWE5MGYtYWY3MmM5YzZlZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CAp/69FbavrsSHOYXPRs+A6fOseIeagfsFX /Eho09PtFE1v/a9q3QNrmD7TqkfEFrddD0pmNfeWEC+pWTWYzB4tng+U1rmzef/H VVHVZIivZpUbiu33vlFCZDDPkXiiqNdb/Te4riI3sG9lXE3HO139LnBNIZXbRaVD ZVWx/kQgY9upq4etTYRwFCuU61UPu86at1DpPJ9Jjd+YUMBxQN7Ce+GFkmR9VGFN XStnnUwI4L4vSpQFnZg7C6P/9PWrPfAAtiW2r13Ulda4Rqg/E3HK27gsHcIgN9Di iqJHCfxM4kPU8oRIR1q3xdHunlc8EpBkKkneTAj0RCDKVZhFHQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNlap1L7HKr3UsUc7QJxZYBr9emeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M2NGUxZTEtMDYzOC0z ZDlhLTg2MTctNzdiMTRjYzhkNWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwHQQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAoy/5ASJYPSDhRYoBwa585Z1nd66Q8SvsWdSf3WOKPwKo0qgXR+U7 AkBq8C+QyFesQuachyK/wwxSgPnJFHPBhhrfmk/LRHco3I6KhyRXpd+/2Z6DCfGh 3GlBnVC9Jtu/bWMqlCLitJlqHAJ6ykKBfhCUe8oxbbtzzOgdNZMDbgRGKE8HoHYr A3B6a6LvPr8FOOSTmsGwM8KQXHiZNnI2BOQQ6bPz2x/OXHuAih4vElJZdklIN69l KhsNbLW8bw5v9KCqOLw9GryGlCPShaw5cMEMpJVtN0o2On0SMXFFqqQaix4sf8eL 12320EFJvOivIr6N49xul3sn78baQSUaoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:53 2025 by rpki-client