This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa File: 21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa (raw, json) Hash identifier: 3uFfSa5FllDXxws98a/L5W9Ls5bcu3AabCwVsD4tmw4= Subject key identifier: 3B:64:57:88:B0:E6:2C:69:7E:61:57:8B:8D:50:D1:EA:8F:90:F2:4D Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584C0DD0C3F0BDF8F2FF607B1A42 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 2601:20b8::/29 maxlen: 32 2601:20d0::/29 maxlen: 32 2601:20f0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:c3:f0:bd:f8:f2:ff:60:7b:1a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=69aed63d-0aec-4a35-9234-263709016426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:10:9f:0a:25:03:bf:0e:0f:39:0d:57:d6: ca:36:20:b0:3e:c7:28:23:d4:b6:25:0a:c6:60:7f: 10:4f:c3:d0:09:19:78:17:92:cc:04:f2:f4:3d:2e: e0:1d:37:00:b8:cf:60:87:64:33:ab:e0:5b:43:db: 12:bd:7d:49:3d:90:e6:85:33:2e:58:d5:55:10:b1: 73:7c:4b:80:f5:d8:f1:e9:d4:74:65:9a:a2:7b:cc: 51:c4:92:6f:49:f7:10:b8:5c:5e:cb:6f:d9:96:fe: 2b:ed:66:0b:28:8f:31:95:79:2b:8e:ce:db:7b:21: 4c:4d:d0:c3:45:8f:30:78:d2:4c:c0:37:b6:0f:95: 8e:85:53:b4:c4:83:64:fc:99:c6:87:90:b0:b7:6f: 1a:91:8a:40:a3:3f:68:34:07:2e:28:e3:bc:08:ce: f2:b5:e1:0f:d4:a8:a9:4a:46:f2:ee:a2:1c:e4:4a: 28:d4:4c:37:5b:e8:b7:40:bb:dc:f1:23:4b:6c:86: 90:de:7a:29:06:ff:dd:7c:6c:e4:70:5c:61:48:53: 15:5b:c6:60:d0:10:ea:88:47:cf:35:3b:15:da:c9: 1b:a7:77:60:c3:79:9f:af:39:c2:b4:1e:90:09:ad: c5:1a:53:d1:96:2a:90:9d:80:be:16:59:da:ff:50: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:64:57:88:B0:E6:2C:69:7E:61:57:8B:8D:50:D1:EA:8F:90:F2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20b8::/29 2601:20d0::/29 2601:20f0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c5:eb:15:50:df:40:b5:1b:bb:d8:5e:37:aa:2c:7e:40:8c: 03:a8:91:fd:57:5b:bd:dc:9a:f7:b0:28:c8:0b:73:22:a3:08: 93:ba:cd:e4:f8:3a:0f:68:cc:8a:54:12:0f:7d:ae:ad:1b:fb: fd:eb:f0:71:60:ab:3e:b2:41:3c:84:28:bd:c0:cf:fa:3b:29: 30:0f:d9:34:2d:31:12:e2:7b:0a:4e:51:79:1d:50:48:a3:de: d1:54:43:c5:b9:68:fb:0a:43:5b:06:9f:90:fd:c5:cb:08:19: 7f:25:3e:35:64:3f:bf:80:de:dc:38:e4:ae:f8:86:24:53:52: 86:6e:c0:a2:63:d4:34:64:f5:85:37:84:bd:54:e9:75:65:c4: bf:84:45:f8:25:ee:5a:8e:b4:b9:d7:ac:dd:70:b5:bf:9c:f0: 5a:79:48:06:2f:bd:72:35:fa:ff:9f:c5:5f:6c:e0:f5:11:0b: 8f:c9:22:aa:5a:ee:aa:c5:c6:be:42:f8:ea:a8:b5:06:bd:1d: 42:57:57:cf:26:7c:b2:ba:da:f9:55:10:87:f7:ff:9a:a7:c5: d8:81:d0:a0:72:c8:ec:0b:90:3e:f2:92:af:53:d7:db:80:a7: aa:e0:35:08:47:66:63:da:59:6e:6b:09:a0:c6:2f:bc:cf:25: 9f:92:94:cd -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEwN0MPwvfjy/2B7GkIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk NjlhZWQ2M2QtMGFlYy00YTM1LTkyMzQtMjYzNzA5MDE2NDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtAQnwolA78ODzkNV9bKNiCwPscoI9S2JQrG YH8QT8PQCRl4F5LMBPL0PS7gHTcAuM9gh2Qzq+BbQ9sSvX1JPZDmhTMuWNVVELFz fEuA9djx6dR0ZZqie8xRxJJvSfcQuFxey2/Zlv4r7WYLKI8xlXkrjs7beyFMTdDD RY8weNJMwDe2D5WOhVO0xINk/JnGh5Cwt28akYpAoz9oNAcuKOO8CM7yteEP1Kip Skby7qIc5Eoo1Ew3W+i3QLvc8SNLbIaQ3nopBv/dfGzkcFxhSFMVW8Zg0BDqiEfP NTsV2skbp3dgw3mfrznCtB6QCa3FGlPRliqQnYC+Flna/1DUTwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDtkV4iw5ixpfmFXi41Q0eqPkPJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjFiMWY1OGEtMGE3ZS0z NGI4LTk5MzgtN2NiYzI5NzVlNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDJgEguAMF AyYBINADBQMmASDwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABjF6xVQ30C1G7vYXjeqLH5AjAOokf1XW73c mvewKMgLcyKjCJO6zeT4Og9ozIpUEg99rq0b+/3r8HFgqz6yQTyEKL3Az/o7KTAP 2TQtMRLiewpOUXkdUEij3tFUQ8W5aPsKQ1sGn5D9xcsIGX8lPjVkP7+A3tw45K74 hiRTUoZuwKJj1DRk9YU3hL1U6XVlxL+ERfgl7lqOtLnXrN1wtb+c8Fp5SAYvvXI1 +v+fxV9s4PURC4/JIqpa7qrFxr5C+OqotQa9HUJXV88mfLK62vlVEIf3/5qnxdiB 0KByyOwLkD7ykq9T19uAp6rgNQhHZmPaWW5rCaDGL7zPJZ+SlM0= -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:40 2025 by rpki-client