This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a5c1032-033d-3bae-8f5f-d7a5f5b2746a.roa File: 3a5c1032-033d-3bae-8f5f-d7a5f5b2746a.roa (raw, json) Hash identifier: gVdkhNJ+fLghiXQmRMx8W8hx8OonKS420sRRt+xm4dI= Subject key identifier: 75:AF:8F:0F:CF:32:E4:BB:73:E6:54:8A:A8:36:EA:AB:00:67:4B:FB Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBF7927B34BD8E5C3E4680 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a5c1032-033d-3bae-8f5f-d7a5f5b2746a.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:8500::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:f7:92:7b:34:bd:8e:5c:3e:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=0ee95fed-b5dd-409a-8373-28665bb03d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3c:21:0a:0c:75:e9:11:f7:79:ab:00:79:a6: 8b:5e:eb:f0:3a:89:f3:8c:7a:96:c8:c9:8f:05:84: 8f:8d:1a:d1:fc:53:7e:17:e5:d9:49:18:2e:2d:2c: 22:ab:a3:b3:47:0f:63:b1:c3:5e:d7:1a:ea:bd:07: 79:1a:12:fa:d8:0e:e8:a2:31:63:e3:e3:93:fc:43: a0:70:97:d9:2d:12:93:aa:fa:83:52:3c:9e:ba:a6: 0f:28:59:7c:65:2a:83:9b:65:9c:b0:7c:08:37:67: fc:ce:b2:6d:76:d4:ac:0c:d2:19:26:fc:8b:5a:e1: 3c:7a:02:85:25:af:ca:fa:9e:a9:59:90:8f:1f:05: 8b:f3:3c:16:a4:1f:04:97:c6:58:3f:24:7b:a7:c9: b0:90:b2:ab:0e:95:dc:5d:91:ff:b7:43:ce:a2:e4: ed:40:7f:90:f2:e3:20:22:83:84:0b:42:08:a0:b0: f7:66:5a:c4:1e:eb:17:05:7c:ec:87:88:9a:6e:f1: 14:b6:3d:c3:d1:ab:34:e7:6d:fd:26:c3:57:b9:c9: ea:b6:aa:74:49:47:a3:83:cf:65:c3:3d:4a:1f:37: 2b:36:80:38:b3:e5:9e:de:b7:e4:ad:ea:26:22:5d: 11:c1:4b:1a:af:a6:b6:7f:75:5c:7e:e2:85:59:55: 77:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AF:8F:0F:CF:32:E4:BB:73:E6:54:8A:A8:36:EA:AB:00:67:4B:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3a5c1032-033d-3bae-8f5f-d7a5f5b2746a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:8500::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:6d:77:4e:0e:a1:58:9a:76:ae:4c:93:37:87:fb:9c:b6:df: d0:c0:3c:73:42:c7:89:3a:99:ec:89:d6:44:c5:c1:c8:71:1c: 67:63:92:b6:a2:32:a3:91:8b:02:90:b5:a9:d7:af:4f:72:4d: 5c:6e:9e:0d:56:66:c9:0d:19:16:16:28:86:12:40:a1:3f:cc: c4:78:3f:93:96:d9:14:06:d9:9f:b2:4d:01:d4:da:a9:13:82: e8:dd:5d:3c:f6:70:12:c5:e5:fb:64:d8:7e:04:b2:ca:59:77: d3:b9:57:0d:f9:ac:9e:3b:f3:76:f6:43:e7:7f:04:ec:60:63: 69:10:9a:d3:f7:96:0a:fb:23:5f:0d:bb:be:f6:75:c7:8b:85: 49:39:b3:86:88:45:2f:9b:4e:ba:64:07:0a:99:2c:49:34:98: dc:95:46:d6:88:1e:aa:19:6c:da:92:a5:e1:44:30:72:4f:8b: 5b:00:a8:2e:5f:fd:59:4c:c9:f8:80:c9:58:10:ca:17:16:ac: 26:6e:2f:4d:52:a1:c2:37:22:a0:17:e4:f6:a5:4f:4f:50:46: fd:ab:72:c4:c2:1c:c0:90:94:9c:b7:fd:57:d5:49:af:56:31: dd:f7:77:15:db:74:ea:87:13:be:c4:e4:60:63:e0:bb:82:36: b1:dc:cb:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/2/eSezS9jlw+RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MGVlOTVmZWQtYjVkZC00MDlhLTgzNzMtMjg2NjViYjAzZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzwhCgx16RH3easAeaaLXuvwOonzjHqWyMmP BYSPjRrR/FN+F+XZSRguLSwiq6OzRw9jscNe1xrqvQd5GhL62A7oojFj4+OT/EOg cJfZLRKTqvqDUjyeuqYPKFl8ZSqDm2WcsHwIN2f8zrJtdtSsDNIZJvyLWuE8egKF Ja/K+p6pWZCPHwWL8zwWpB8El8ZYPyR7p8mwkLKrDpXcXZH/t0POouTtQH+Q8uMg IoOEC0IIoLD3ZlrEHusXBXzsh4iabvEUtj3D0as05239JsNXucnqtqp0SUejg89l wz1KHzcrNoA4s+We3rfkreomIl0RwUsar6a2f3VcfuKFWVV3LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHWvjw/PMuS7c+ZUiqg26qsAZ0v7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2E1YzEwMzItMDMzZC0z YmFlLThmNWYtZDdhNWY1YjI3NDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAIUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKptd04OoViadq5MkzeH+5y239DAPHNCx4k6meyJ1kTFwchxHGdj kraiMqORiwKQtanXr09yTVxung1WZskNGRYWKIYSQKE/zMR4P5OW2RQG2Z+yTQHU 2qkTgujdXTz2cBLF5ftk2H4EsspZd9O5Vw35rJ4783b2Q+d/BOxgY2kQmtP3lgr7 I18Nu772dceLhUk5s4aIRS+bTrpkBwqZLEk0mNyVRtaIHqoZbNqSpeFEMHJPi1sA qC5f/VlMyfiAyVgQyhcWrCZuL01SocI3IqAX5PalT09QRv2rcsTCHMCQlJy3/VfV Sa9WMd33dxXbdOqHE77E5GBj4LuCNrHcy/k= -----END CERTIFICATE-----Generated at Sat Dec 6 19:27:03 2025 by rpki-client