This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa File: caf6984a-6241-341c-a03c-38c380834003.roa (raw, json) Hash identifier: NM7/BIePVOvOxbp0LtRV8G6M995sy6XndqZ0GbUCQsU= Subject key identifier: 71:EE:88:B2:10:DC:DD:21:42:97:1F:80:0A:8E:08:34:BA:C2:8D:97 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584BF615E51BE93A8EC1959FA7A0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 395831 IP address blocks: 2606:7bc0:1065::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e5:1b:e9:3a:8e:c1:95:9f:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=caf50c21-dd23-4427-b3bc-d54edf803db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ca:19:6b:46:80:a4:5f:3e:ff:d4:9e:e3:8c: 97:04:39:d1:6d:97:1f:6d:13:24:df:c8:ab:d7:b5: 22:54:fa:e5:57:b9:be:1a:1a:72:cd:79:6a:59:ef: 72:c4:f0:84:8f:df:1d:45:60:e6:5c:62:9a:fa:63: 92:c0:44:c5:81:4e:70:76:ea:94:6a:66:29:36:f3: f6:be:cf:e4:2a:be:2e:41:33:57:08:c4:50:6f:20: c8:6e:65:e9:4f:47:54:d6:1c:f3:4a:62:8b:81:bc: 80:be:19:63:4f:93:86:67:14:e3:b2:a3:e9:f7:d5: 4e:a8:bc:50:77:9f:e5:25:c7:a1:dd:c8:47:83:1d: 27:0c:11:a8:a2:d3:e4:a3:6a:b4:a2:45:10:8d:dd: 9d:bb:cc:ec:51:f7:e5:30:b6:75:2c:06:2b:89:7d: 18:0a:70:e0:02:69:7b:88:72:e7:35:13:fb:72:8b: e5:52:70:21:5d:b1:b7:0e:45:ba:54:d0:7b:38:e1: d1:a6:be:64:86:15:53:a9:02:ea:96:15:0c:8c:b2: b1:32:32:76:ce:da:5e:51:0e:74:5c:fe:f9:57:58: d1:08:41:56:1b:27:8c:6a:d5:0c:92:62:62:0d:cf: 6f:1f:bf:5c:d2:69:7e:1b:cf:2a:b7:d7:40:98:5b: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:88:B2:10:DC:DD:21:42:97:1F:80:0A:8E:08:34:BA:C2:8D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/caf6984a-6241-341c-a03c-38c380834003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv6: 2606:7bc0:1065::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d7:5e:76:0b:c2:9c:4e:54:9c:1e:94:41:1b:4a:43:de:3b: 7f:ed:8f:8a:fb:86:6b:51:98:6e:94:37:1b:45:72:95:78:cb: ee:df:00:50:17:83:87:8f:a6:e9:b4:6f:e4:04:11:d6:9a:c8: a9:de:18:1a:9e:b4:71:58:50:e0:6b:92:67:cc:4b:1b:77:66: 2f:b2:9c:f5:17:0f:a6:a5:18:3e:30:14:ce:b2:37:0b:af:aa: 81:fd:a0:3c:af:34:7a:5a:03:c3:82:ed:46:63:23:aa:27:ec: 39:ed:2c:41:08:6d:b6:77:ec:32:34:81:31:7c:42:12:8f:1c: fc:4c:fa:42:f3:91:e3:cc:e0:20:0b:d6:94:72:37:95:42:d1: 6f:c5:f2:dc:64:10:bd:00:72:d2:f3:96:cd:06:fe:d4:93:95: bc:08:32:57:54:fd:b1:5e:de:32:a9:76:d9:c9:1f:a1:03:bd: 22:e6:5f:22:ee:db:5a:80:7b:27:df:5c:f1:6c:75:7d:3f:e7: 58:af:ff:0c:11:13:42:db:77:cd:f1:6b:0d:e9:96:3b:d2:06: 97:01:41:83:9f:56:de:59:58:cd:2b:74:05:ef:45:44:d2:ff: 81:4e:e0:f8:89:42:19:07:13:26:09:d2:90:33:9c:d6:ae:e8: 6a:a7:22:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv2FeUb6TqOwZWfp6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk Y2FmNTBjMjEtZGQyMy00NDI3LWIzYmMtZDU0ZWRmODAzZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsoZa0aApF8+/9Se44yXBDnRbZcfbRMk38ir 17UiVPrlV7m+GhpyzXlqWe9yxPCEj98dRWDmXGKa+mOSwETFgU5wduqUamYpNvP2 vs/kKr4uQTNXCMRQbyDIbmXpT0dU1hzzSmKLgbyAvhljT5OGZxTjsqPp99VOqLxQ d5/lJceh3chHgx0nDBGootPko2q0okUQjd2du8zsUfflMLZ1LAYriX0YCnDgAml7 iHLnNRP7covlUnAhXbG3DkW6VNB7OOHRpr5khhVTqQLqlhUMjLKxMjJ2ztpeUQ50 XP75V1jRCEFWGyeMatUMkmJiDc9vH79c0ml+G88qt9dAmFvHGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHHuiLIQ3N0hQpcfgAqOCDS6wo2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2FmNjk4NGEtNjI0MS0z NDFjLWEwM2MtMzhjMzgwODM0MDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZ7wBBl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3XXnYLwpxOVJwelEEbSkPeO3/tj4r7hmtRmG6UNxtFcpV4y+7f AFAXg4ePpum0b+QEEdaayKneGBqetHFYUOBrkmfMSxt3Zi+ynPUXD6alGD4wFM6y NwuvqoH9oDyvNHpaA8OC7UZjI6on7DntLEEIbbZ37DI0gTF8QhKPHPxM+kLzkePM 4CAL1pRyN5VC0W/F8txkEL0ActLzls0G/tSTlbwIMldU/bFe3jKpdtnJH6EDvSLm XyLu21qAeyffXPFsdX0/51iv/wwRE0Lbd83xaw3pljvSBpcBQYOfVt5ZWM0rdAXv RUTS/4FO4PiJQhkHEyYJ0pAznNau6GqnIik= -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:50 2025 by rpki-client