This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fdd09d2-4419-3638-908c-841afbac6db1.roa File: 0fdd09d2-4419-3638-908c-841afbac6db1.roa (raw, json) Hash identifier: sUX5MW03Ffh3RVgvNx12koDSHACWh+L3L5sM9kKl4bI= Subject key identifier: 0B:95:0E:28:CA:81:CA:5A:10:5C:A2:42:BA:06:38:0E:7F:A5:17:9E Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBCD1F889236D11F32FC80 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fdd09d2-4419-3638-908c-841afbac6db1.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:3680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:cd:1f:88:92:36:d1:1f:32:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=b4ab6589-b7a1-48af-8354-66ec60012eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8b:22:44:63:e9:15:1b:90:6b:4c:35:66:ae: 59:90:05:13:9c:45:60:0a:e2:8c:b7:3f:67:bb:b0: 5f:d8:39:7b:b0:c6:8d:71:ce:cc:11:e7:3f:a4:5e: 7b:29:6d:cc:5d:90:e6:07:4b:af:5d:2c:41:e1:80: 35:57:c3:e5:72:ad:4f:57:ec:c0:c1:36:69:4c:4d: da:ba:0e:74:0c:73:1c:b0:97:6e:35:dc:05:27:31: 4d:3c:7f:d2:75:40:ae:de:4d:16:7e:a1:d9:74:d1: b7:d5:1c:24:cd:82:14:73:5b:56:31:94:84:be:09: 05:90:90:11:47:33:4f:cf:a8:16:d1:23:19:94:30: 72:4c:8d:e3:22:ca:5d:16:ae:e2:eb:ae:1c:8b:0a: 36:d1:43:98:ab:68:ec:d0:a3:ce:8a:f5:20:4a:bf: be:b5:5e:0d:06:24:32:33:4f:c1:f8:bd:3b:17:f1: 75:6d:d8:90:d9:20:56:55:56:21:e1:d2:f6:b6:b0: 9c:a5:33:c6:88:46:b7:ac:65:e7:0f:32:a7:74:c5: fc:7c:f0:52:e1:7c:34:e2:82:b9:b6:05:85:93:70: 9c:58:5c:38:2f:9e:a8:42:d0:16:5e:6b:42:71:cb: ff:29:f5:78:fd:04:46:65:22:59:76:ee:8e:5f:ce: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:0E:28:CA:81:CA:5A:10:5C:A2:42:BA:06:38:0E:7F:A5:17:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fdd09d2-4419-3638-908c-841afbac6db1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:3680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9a:4e:39:e0:e6:2b:a0:70:43:5c:5d:64:97:a5:ca:fc:56: d7:2c:dd:51:e4:fd:b5:86:8b:71:c8:26:1d:b8:cc:ba:82:c9: 18:1c:94:3a:ce:b2:0a:f7:92:5b:b1:54:99:71:b8:63:9e:65: a0:0e:af:aa:2d:a5:94:f3:ed:99:9a:4d:bf:55:f3:cf:24:0b: 69:d8:9d:0a:2a:6a:71:8c:59:ee:40:95:52:d8:ee:78:6b:94: e1:ad:aa:45:09:4f:71:b0:34:38:52:da:04:3e:41:5b:68:0d: f7:18:6f:3c:64:95:32:13:93:77:45:0a:f6:00:0d:ec:00:e5: bd:e6:a5:fd:db:a6:21:dd:9f:ed:43:a4:be:98:7b:2a:8d:55: d5:72:f0:75:35:d2:a6:6e:31:a1:5a:ce:65:30:2d:f0:5a:50: c1:6f:8b:66:18:81:24:49:66:fa:d0:a8:ec:f4:3b:56:08:41: 01:89:5d:df:36:5c:37:b7:7f:aa:c9:08:f7:c0:cc:03:ca:a1: 4e:ec:e1:75:08:e8:d8:ab:bc:3b:3f:88:4c:1b:33:4d:24:71: da:da:7f:06:99:bb:58:69:79:b5:00:6d:de:2f:56:03:7c:37: 41:c9:d1:86:fe:5c:df:98:df:74:d1:e2:b0:cf:53:f7:49:d7: 14:a8:62:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/280fiJI20R8y/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YjRhYjY1ODktYjdhMS00OGFmLTgzNTQtNjZlYzYwMDEyZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiosiRGPpFRuQa0w1Zq5ZkAUTnEVgCuKMtz9n u7Bf2Dl7sMaNcc7MEec/pF57KW3MXZDmB0uvXSxB4YA1V8Plcq1PV+zAwTZpTE3a ug50DHMcsJduNdwFJzFNPH/SdUCu3k0WfqHZdNG31RwkzYIUc1tWMZSEvgkFkJAR RzNPz6gW0SMZlDByTI3jIspdFq7i664ciwo20UOYq2js0KPOivUgSr++tV4NBiQy M0/B+L07F/F1bdiQ2SBWVVYh4dL2trCcpTPGiEa3rGXnDzKndMX8fPBS4Xw04oK5 tgWFk3CcWFw4L56oQtAWXmtCccv/KfV4/QRGZSJZdu6OX87oCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAuVDijKgcpaEFyiQroGOA5/pReeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGZkZDA5ZDItNDQxOS0z NjM4LTkwOGMtODQxYWZiYWM2ZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIADaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHuaTjng5iugcENcXWSXpcr8Vtcs3VHk/bWGi3HIJh24zLqCyRgc lDrOsgr3kluxVJlxuGOeZaAOr6otpZTz7ZmaTb9V888kC2nYnQoqanGMWe5AlVLY 7nhrlOGtqkUJT3GwNDhS2gQ+QVtoDfcYbzxklTITk3dFCvYADewA5b3mpf3bpiHd n+1DpL6YeyqNVdVy8HU10qZuMaFazmUwLfBaUMFvi2YYgSRJZvrQqOz0O1YIQQGJ Xd82XDe3f6rJCPfAzAPKoU7s4XUI6NirvDs/iEwbM00kcdrafwaZu1hpebUAbd4v VgN8N0HJ0Yb+XN+Y33TR4rDPU/dJ1xSoYjE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:17:21 2025 by rpki-client