This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa File: 9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa (raw, json) Hash identifier: 4isj1oeuYocN37IClFqlpHYBY1Q53oBXmyQZEZlpncs= Subject key identifier: 25:C9:88:0F:DC:11:C4:3A:24:C0:81:9E:D3:26:A6:91:B7:51:A0:B3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB6C10D27FD2A8BE4ACA28 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:880a:d0c::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:6c:10:d2:7f:d2:a8:be:4a:ca:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=e9c3da8e-2936-46c1-8d80-2275d3f57db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:cd:3f:3d:1b:2f:9d:30:f4:71:ed:b9:d5: 87:67:c3:21:45:e4:38:cc:dd:5e:db:42:a6:5b:76: a4:46:82:91:8e:9b:19:99:7f:88:d5:31:a0:8a:68: ff:1e:77:0f:d0:4a:ab:43:a4:ec:2d:6e:c6:4d:29: ca:70:d7:95:8c:db:99:cf:8c:1e:91:06:df:d5:d9: 79:76:7d:78:41:3f:69:14:67:4f:43:dd:86:a1:34: cc:7f:0f:b2:4a:6c:9e:ab:68:1e:99:83:34:d6:ab: 23:96:79:8c:15:21:eb:5d:cc:96:96:af:7e:7f:42: 96:33:79:f5:c8:1e:f4:b5:86:a0:3e:29:fb:7e:21: 0f:bd:7c:59:19:a9:13:a1:bc:1f:8d:54:b1:bf:76: b4:9e:b2:fd:9f:f1:b5:f9:fc:3e:1a:4c:b4:0a:ab: 5c:09:a9:28:a1:99:e9:bf:83:a2:9d:14:13:3c:b0: c5:20:85:61:88:b2:5d:f2:1f:f7:7b:f3:ca:b2:58: 01:7c:ae:83:a5:8c:21:c0:80:54:94:3a:f2:b7:52: 62:95:51:44:74:3d:3b:8e:e1:44:0f:85:5b:5b:03: 51:59:b4:ff:5a:7d:ca:45:18:38:8f:cf:a3:9c:60: 38:a7:f5:71:bd:d9:b0:23:85:f8:82:4b:ce:32:76: d3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:88:0F:DC:11:C4:3A:24:C0:81:9E:D3:26:A6:91:B7:51:A0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9f87a5bc-a60b-3c85-a47c-ecac7bc633c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:d0c::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:56:6e:93:b8:65:7d:29:99:07:40:78:1d:c3:3d:bf:25:8d: 2d:40:fc:20:d4:7d:e5:2e:b8:97:a5:52:96:17:23:68:45:7c: 54:c2:2e:d8:89:88:7f:87:3f:51:81:8c:50:56:a7:40:35:92: 98:bc:39:f3:bc:19:04:03:89:a5:69:ab:42:aa:98:89:49:a1: e0:8b:d0:c3:ed:6e:68:ed:06:eb:9e:1a:3e:f3:1b:4d:64:5c: 3a:cc:f0:b2:c1:5b:3d:e1:d0:20:d5:8e:a8:10:b1:53:16:40: 24:55:a1:7b:39:19:7f:56:83:47:c7:31:1c:44:0c:b6:9b:31: 8c:5d:c6:fa:a3:01:60:74:ba:29:d0:42:b8:78:ff:f5:24:a2: 5a:da:dc:95:fc:a8:12:5d:0a:1c:96:1a:8a:36:f9:35:0b:64: 6f:c5:b7:96:e1:64:4b:62:49:5b:26:25:75:7d:93:f9:fc:9d: 68:85:74:26:68:4d:07:bf:9b:43:7c:60:75:9b:85:96:e8:dd: 27:f7:62:b6:f1:8e:45:04:1a:f8:ec:2d:53:7b:c6:4f:72:b5: 56:49:9a:ba:46:57:c2:64:f0:7b:2e:29:6c:3f:06:1a:be:ba: 79:9b:8f:26:ac:37:93:2a:33:14:e0:44:2e:ef:2c:18:79:9e: d0:b6:33:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/22wQ0n/SqL5KyigwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTljM2RhOGUtMjkzNi00NmMxLThkODAtMjI3NWQzZjU3ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fbNPz0bL50w9HHtudWHZ8MhReQ4zN1e20Km W3akRoKRjpsZmX+I1TGgimj/HncP0EqrQ6TsLW7GTSnKcNeVjNuZz4wekQbf1dl5 dn14QT9pFGdPQ92GoTTMfw+ySmyeq2gemYM01qsjlnmMFSHrXcyWlq9+f0KWM3n1 yB70tYagPin7fiEPvXxZGakTobwfjVSxv3a0nrL9n/G1+fw+Gky0CqtcCakooZnp v4OinRQTPLDFIIVhiLJd8h/3e/PKslgBfK6DpYwhwIBUlDryt1JilVFEdD07juFE D4VbWwNRWbT/Wn3KRRg4j8+jnGA4p/VxvdmwI4X4gkvOMnbT9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXJiA/cEcQ6JMCBntMmppG3UaCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWY4N2E1YmMtYTYwYi0z Yzg1LWE0N2MtZWNhYzdiYzYzM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICg0M MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClWbpO4ZX0pmQdAeB3DPb8ljS1A/CDUfeUuuJelUpYXI2hFfFTC LtiJiH+HP1GBjFBWp0A1kpi8OfO8GQQDiaVpq0KqmIlJoeCL0MPtbmjtBuueGj7z G01kXDrM8LLBWz3h0CDVjqgQsVMWQCRVoXs5GX9Wg0fHMRxEDLabMYxdxvqjAWB0 uinQQrh4//Ukolra3JX8qBJdChyWGoo2+TULZG/Ft5bhZEtiSVsmJXV9k/n8nWiF dCZoTQe/m0N8YHWbhZbo3Sf3YrbxjkUEGvjsLVN7xk9ytVZJmrpGV8Jk8HsuKWw/ Bhq+unmbjyasN5MqMxTgRC7vLBh5ntC2Mws= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:30 2025 by rpki-client