This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa File: 52c214a8-65e8-34d6-b99e-ab5d56938375.roa (raw, json) Hash identifier: ye0eN06+sTsNYaAMv47pKYfZXLgDbhNrfxeVk4KyEc4= Subject key identifier: 65:28:BF:1F:D1:67:03:4C:82:A5:66:ED:2A:E5:AE:EA:E7:7C:8C:62 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BE6BB21A77D8499E40506DA10 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 3939 IP address blocks: 2001:418:3ff:100::/56 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:21:a7:7d:84:99:e4:05:06:da:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=5bf6f3d8-23cc-4f2e-83ad-51a6abffc71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:af:ac:84:6d:3c:f3:5a:a0:c9:71:0a:c0:50: 83:e6:a2:79:c3:c5:97:3e:18:6d:11:2b:ec:67:92: ba:44:cf:44:44:04:35:d5:e2:85:88:da:11:7c:06: df:54:e7:36:57:fd:1f:7a:e9:bb:a9:ce:56:7f:6c: 1a:75:0e:09:ce:a7:0d:c1:e9:14:be:f6:9c:61:60: 3b:fb:c5:84:e6:54:84:0d:31:4d:e7:79:b8:9a:08: fb:55:cf:a9:59:78:d2:82:10:4d:70:f1:11:6f:62: f8:88:c1:30:db:90:3a:25:5a:41:c2:00:8f:43:56: 5b:1d:1a:bb:ea:0e:ae:5b:73:82:dd:f6:4f:7f:70: 49:c0:ff:e8:d5:49:b2:9a:94:24:56:15:b3:37:19: fb:22:57:d3:ba:3e:0d:58:fd:0e:1d:b4:9a:f9:10: a1:14:a8:07:cb:39:da:b6:50:3c:9f:0e:26:9a:9c: ba:46:c9:c5:83:d6:e7:92:d4:3d:6f:15:d4:97:16: c6:8b:f1:e2:9a:97:29:9f:32:88:83:5f:78:f5:c0: ca:fc:76:a4:70:9d:f4:f0:cb:1f:5a:d1:2d:e3:1d: 66:91:9a:1f:89:7e:7f:64:aa:3b:53:fe:6d:fb:f9: 66:07:af:a9:44:8f:cf:47:a5:a5:cb:64:2a:68:de: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:28:BF:1F:D1:67:03:4C:82:A5:66:ED:2A:E5:AE:EA:E7:7C:8C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52c214a8-65e8-34d6-b99e-ab5d56938375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:3ff:100::/56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:49:c2:50:15:b7:29:47:c6:05:54:78:2d:ff:d8:92:f7:21: d2:cd:59:c3:aa:29:db:40:5a:1c:1e:b7:d3:e0:43:e7:07:49: 67:11:6d:a9:6d:29:9e:2e:4e:df:44:fc:a7:3f:1b:0b:cf:bd: c5:ff:ab:71:78:cf:03:65:66:81:ca:81:d5:7e:d6:b8:44:be: 28:6d:a5:e6:51:1f:6c:c8:ab:57:91:22:53:42:ad:c9:c1:93: 60:0f:cd:81:6f:77:2a:78:dc:71:04:a5:6d:16:24:fa:1a:07: 3a:6f:23:c0:00:38:b9:8b:07:73:7c:e9:a2:dd:38:a6:23:3a: e8:a3:3d:7c:1b:8b:04:08:44:2a:df:b9:51:24:51:b3:32:96: cb:93:23:8a:d1:cb:72:24:13:be:1c:22:82:9e:c0:eb:dd:ef: d5:29:52:25:12:2d:f3:c4:a2:fd:9e:00:4a:93:36:ba:56:83: 4e:29:3e:06:8d:e7:c0:1b:35:d9:c6:52:66:3f:e4:d3:e9:fd: cd:a0:26:c8:22:a8:2b:13:70:f6:75:c6:27:cf:15:b1:ec:1e: a9:d3:dd:c2:b5:fa:18:1a:bc:f7:57:a4:47:f3:c6:52:e4:14: 1f:80:18:b1:9a:2f:e4:a6:ec:16:80:e3:4f:45:7b:42:54:70: 39:26:fd:a4 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWEvmuyGnfYSZ5AUG2hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk NWJmNmYzZDgtMjNjYy00ZjJlLTgzYWQtNTFhNmFiZmZjNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K+shG0881qgyXEKwFCD5qJ5w8WXPhhtESvs Z5K6RM9ERAQ11eKFiNoRfAbfVOc2V/0feum7qc5Wf2wadQ4JzqcNwekUvvacYWA7 +8WE5lSEDTFN53m4mgj7Vc+pWXjSghBNcPERb2L4iMEw25A6JVpBwgCPQ1ZbHRq7 6g6uW3OC3fZPf3BJwP/o1UmympQkVhWzNxn7IlfTuj4NWP0OHbSa+RChFKgHyzna tlA8nw4mmpy6RsnFg9bnktQ9bxXUlxbGi/HimpcpnzKIg1949cDK/HakcJ308Msf WtEt4x1mkZofiX5/ZKo7U/5t+/lmB6+pRI/PR6Wly2QqaN7M4wIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFGUovx/RZwNMgqVm7SrlrurnfIxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNTJjMjE0YTgtNjVlOC0z NGQ2LWI5OWUtYWI1ZDU2OTM4Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgAIAEEGAP/ ATBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBmScJQFbcpR8YFVHgt/9iS9yHSzVnDqinbQFocHrfT4EPnB0ln EW2pbSmeLk7fRPynPxsLz73F/6txeM8DZWaByoHVfta4RL4obaXmUR9syKtXkSJT Qq3JwZNgD82Bb3cqeNxxBKVtFiT6Ggc6byPAADi5iwdzfOmi3TimIzrooz18G4sE CEQq37lRJFGzMpbLkyOK0ctyJBO+HCKCnsDr3e/VKVIlEi3zxKL9ngBKkza6VoNO KT4GjefAGzXZxlJmP+TT6f3NoCbIIqgrE3D2dcYnzxWx7B6p093CtfoYGrz3V6RH 88ZS5BQfgBixmi/kpuwWgONPRXtCVHA5Jv2k -----END CERTIFICATE-----Generated at Sat Dec 6 06:46:38 2025 by rpki-client