This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa File: caf27556-5204-39a2-8d27-fef2c44b82de.roa (raw, json) Hash identifier: Kh5L17Dv5DDheBeukDTOeCe4Nrwt526jpSIUBzlxzNM= Subject key identifier: C7:B9:F9:93:E0:B3:32:E7:FC:8F:1F:4B:BD:88:85:2D:B0:95:EE:34 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BE82085E9EFC9CA8B34FEC790 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 40934 IP address blocks: 2001:418:1438::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:85:e9:ef:c9:ca:8b:34:fe:c7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=8328dca7-c0ca-46bc-a493-1899713d809b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7b:4d:c1:24:22:5e:a1:86:bc:d7:0f:7b:ab: 23:da:81:76:e7:0e:d7:0e:4b:0d:28:f9:48:57:f4: 0d:a1:be:08:4d:ad:9f:2e:e9:59:c4:0f:32:cb:e2: d2:57:2b:43:b4:d5:db:43:33:2e:15:21:0f:7a:d9: 3a:fb:94:fa:9d:e3:41:0d:cb:9d:7a:74:15:be:12: 40:60:84:0f:08:0d:36:d3:4a:27:7a:95:c8:e3:d0: e5:59:09:96:aa:c1:2c:53:0b:0f:2a:66:a7:af:e6: ba:f6:e3:81:73:de:89:38:6e:3b:94:3e:57:10:6a: c0:20:7f:2c:44:09:97:f7:4d:0f:da:70:dc:e8:20: c8:18:bf:82:2d:7a:49:70:6f:3c:81:e9:d0:f1:09: 94:e6:7e:b9:35:e4:4d:50:5f:3b:5b:99:bf:05:d2: 84:aa:17:e7:7a:83:16:bc:e1:82:cd:29:6a:c4:10: c4:41:65:77:1e:24:21:5e:29:0e:97:3c:01:8a:65: e2:3d:ef:4f:84:e4:50:87:19:e4:b6:09:90:f9:c5: c4:7d:14:0e:23:d0:82:30:d7:6c:32:c4:be:b8:ce: a8:fb:7f:bd:f7:c5:f0:96:0b:a8:e5:da:a5:18:4a: b4:f6:4b:3d:e7:f8:d5:ea:3d:4d:9a:43:2d:14:fb: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B9:F9:93:E0:B3:32:E7:FC:8F:1F:4B:BD:88:85:2D:B0:95:EE:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/caf27556-5204-39a2-8d27-fef2c44b82de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv6: 2001:418:1438::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:35:9a:18:88:30:66:83:c3:66:5f:3b:e0:0e:31:d5:bb:bd: 2e:bb:75:14:4d:47:91:05:0f:73:ac:0b:6f:85:a8:72:3b:49: 7d:f1:af:fc:3f:fe:c2:17:66:ee:83:c8:72:ea:1c:6e:53:bd: 81:f4:11:bb:1f:14:f5:ba:8e:f6:c5:8e:74:67:64:a1:ef:e5: 1d:1c:a6:b9:d0:32:50:4e:c2:df:45:68:de:6a:9b:87:a8:82: d5:75:ea:5c:bd:7e:f7:62:a9:04:c0:cc:e8:c0:c2:5e:91:d7: 48:63:9b:81:7c:ad:5f:c2:33:cc:da:09:d5:f2:aa:29:d5:44: 99:c3:1c:71:11:8a:49:5f:d4:14:b2:bc:a3:77:27:d4:d0:47: 6f:e8:57:fe:e5:36:e1:c8:0b:5a:44:a0:3f:ea:94:12:99:9f: c9:a2:a6:e4:74:66:e2:e6:be:4a:14:cf:48:dd:27:a8:18:51: c2:66:99:77:d7:cb:7a:01:83:3a:b4:27:39:d1:6c:28:da:3d: 23:f9:2d:6e:f1:08:20:ca:18:e9:17:b0:32:97:6d:ff:33:6f: 8c:df:f4:90:52:ce:49:da:9f:d0:bd:b7:ba:4d:b0:0e:11:fd: d2:2a:4a:2c:9d:78:c8:cc:2a:a8:b7:84:47:bd:0c:24:f4:67: 3e:8d:d4:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvoIIXp78nKizT+x5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk ODMyOGRjYTctYzBjYS00NmJjLWE0OTMtMTg5OTcxM2Q4MDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3tNwSQiXqGGvNcPe6sj2oF25w7XDksNKPlI V/QNob4ITa2fLulZxA8yy+LSVytDtNXbQzMuFSEPetk6+5T6neNBDcudenQVvhJA YIQPCA0200onepXI49DlWQmWqsEsUwsPKmanr+a69uOBc96JOG47lD5XEGrAIH8s RAmX900P2nDc6CDIGL+CLXpJcG88genQ8QmU5n65NeRNUF87W5m/BdKEqhfneoMW vOGCzSlqxBDEQWV3HiQhXikOlzwBimXiPe9PhORQhxnktgmQ+cXEfRQOI9CCMNds MsS+uM6o+3+998Xwlguo5dqlGEq09ks95/jV6j1NmkMtFPsClQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMe5+ZPgszLn/I8fS72IhS2wle40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2FmMjc1NTYtNTIwNC0z OWEyLThkMjctZmVmMmM0NGI4MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEGBQ4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGk1mhiIMGaDw2ZfO+AOMdW7vS67dRRNR5EFD3OsC2+FqHI7SX3x r/w//sIXZu6DyHLqHG5TvYH0EbsfFPW6jvbFjnRnZKHv5R0cprnQMlBOwt9FaN5q m4eogtV16ly9fvdiqQTAzOjAwl6R10hjm4F8rV/CM8zaCdXyqinVRJnDHHERiklf 1BSyvKN3J9TQR2/oV/7lNuHIC1pEoD/qlBKZn8mipuR0ZuLmvkoUz0jdJ6gYUcJm mXfXy3oBgzq0JznRbCjaPSP5LW7xCCDKGOkXsDKXbf8zb4zf9JBSzknan9C9t7pN sA4R/dIqSiydeMjMKqi3hEe9DCT0Zz6N1K4= -----END CERTIFICATE-----Generated at Sat Dec 6 06:45:13 2025 by rpki-client