This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa File: 2cc6c38a-68cb-3c34-9564-f77e506f710d.roa (raw, json) Hash identifier: xSg2wTThSTn7+Ky78NmGZav7BLPuJRQpQhtwjIMpstw= Subject key identifier: 2A:CF:46:9A:48:D7:AD:CD:13:5B:44:56:2B:5E:94:D6:E1:6A:25:19 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584C14CB77FC274ECCD41F5A2480 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 395494 IP address blocks: 2605:2cc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:77:fc:27:4e:cc:d4:1f:5a:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=4d633324-8dea-4141-8ba5-c83fffb1bf7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:76:66:02:88:85:e4:66:a2:83:62:3a:76:18: f8:1a:20:86:07:75:85:19:27:da:4e:42:ff:4e:b3: f4:b0:36:2c:55:da:6b:62:62:ef:6f:ce:e0:93:86: ef:ea:74:84:5a:46:54:f7:b2:67:4f:a9:ed:76:2e: a4:31:ad:71:99:5c:83:26:08:91:c0:a4:09:1e:c2: 55:0c:90:7b:f1:3b:a4:65:f1:f9:cc:3f:2e:13:59: 8d:17:13:a8:0d:e6:ba:f1:1b:50:58:9b:5b:24:e1: 23:fb:5e:0c:af:e4:c9:5b:c0:70:e3:62:69:1a:ba: b7:d3:a9:51:15:92:2e:08:92:b9:64:2a:59:87:ad: 5f:18:84:a5:b9:9e:9e:45:0c:fe:91:aa:47:c4:87: 44:78:ee:43:ca:e4:55:b1:38:c5:bb:be:3f:7b:65: 99:c1:ca:ec:7b:e0:1b:1f:48:2e:f7:77:4a:47:aa: 91:97:9c:03:fe:e4:b3:fc:bf:f3:6e:2e:24:62:ad: 76:79:a2:01:a1:c6:49:7f:b9:17:3a:9e:5b:61:4d: 88:98:49:de:3c:d2:c8:ca:c0:c4:80:0d:12:1d:85: fc:95:74:97:f2:fa:27:47:fe:b1:60:05:53:01:e0: ee:29:f2:ac:ec:6a:81:2f:2f:c4:df:4d:a9:c9:d7: 1c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CF:46:9A:48:D7:AD:CD:13:5B:44:56:2B:5E:94:D6:E1:6A:25:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/2cc6c38a-68cb-3c34-9564-f77e506f710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv6: 2605:2cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:13:39:39:1a:9e:33:60:47:68:cb:cb:3f:ee:16:d9:c6:55: e3:ee:1b:17:89:50:8d:86:93:0e:5e:e2:98:58:5d:97:a6:44: 09:db:f5:da:cb:5b:c3:42:d8:16:88:c7:83:ad:76:b9:0e:07: 41:0a:03:10:6d:c7:66:78:42:d1:8b:c7:f5:e4:1a:2b:af:2c: d9:3c:2b:39:f1:b7:6c:8f:95:b5:9a:04:fb:17:81:62:1b:5b: 16:43:e4:51:bd:09:55:f1:02:be:cd:c9:35:45:55:26:1d:1a: fe:4f:e8:b4:e8:a6:e2:36:85:79:3a:dc:fd:34:04:6b:ed:6f: 77:26:07:b3:58:56:90:65:f7:16:cf:53:05:5b:b2:76:74:dc: 61:10:54:da:9c:f5:a6:56:0e:67:38:f3:ec:a3:58:5b:a6:02: 2b:a1:9e:30:73:da:1b:3b:6f:9d:f0:05:88:1e:1e:83:3e:1e: be:dd:b4:65:be:40:8c:a4:1d:78:03:13:6c:1c:24:ac:36:5e: c9:6a:ae:d8:7d:f8:1a:a4:12:c2:5f:43:cf:99:d2:75:cf:05: 00:c3:6f:39:a9:9d:28:2d:66:b7:1d:3c:79:7b:72:d5:d3:59: 82:d7:6b:90:f3:07:06:31:5e:b6:10:00:1b:a5:5a:68:40:87: 65:5d:ee:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwUy3f8J07M1B9aJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk NGQ2MzMzMjQtOGRlYS00MTQxLThiYTUtYzgzZmZmYjFiZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3ZmAoiF5Gaig2I6dhj4GiCGB3WFGSfaTkL/ TrP0sDYsVdprYmLvb87gk4bv6nSEWkZU97JnT6ntdi6kMa1xmVyDJgiRwKQJHsJV DJB78TukZfH5zD8uE1mNFxOoDea68RtQWJtbJOEj+14Mr+TJW8Bw42JpGrq306lR FZIuCJK5ZCpZh61fGISluZ6eRQz+kapHxIdEeO5DyuRVsTjFu74/e2WZwcrse+Ab H0gu93dKR6qRl5wD/uSz/L/zbi4kYq12eaIBocZJf7kXOp5bYU2ImEnePNLIysDE gA0SHYX8lXSX8vonR/6xYAVTAeDuKfKs7GqBLy/E302pydccswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCrPRppI163NE1tEVitelNbhaiUZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvMmNjNmMzOGEtNjhjYi0z YzM0LTk1NjQtZjc3ZTUwNmY3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgUswDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgEzk5Gp4zYEdoy8s/7hbZxlXj7hsXiVCNhpMOXuKYWF2XpkQJ2/Xa y1vDQtgWiMeDrXa5DgdBCgMQbcdmeELRi8f15BorryzZPCs58bdsj5W1mgT7F4Fi G1sWQ+RRvQlV8QK+zck1RVUmHRr+T+i06KbiNoV5Otz9NARr7W93JgezWFaQZfcW z1MFW7J2dNxhEFTanPWmVg5nOPPso1hbpgIroZ4wc9obO2+d8AWIHh6DPh6+3bRl vkCMpB14AxNsHCSsNl7Jaq7YffgapBLCX0PPmdJ1zwUAw285qZ0oLWa3HTx5e3LV 01mC12uQ8wcGMV62EAAbpVpoQIdlXe7y -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:59 2025 by rpki-client