This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9aa3496-54e2-38a1-91b5-6a4cd24c3d9b.roa File: a9aa3496-54e2-38a1-91b5-6a4cd24c3d9b.roa (raw, json) Hash identifier: rXT4Lz7FY3NV9TdlyZuijO5dyBhWVaL9rNogWUfBoRA= Subject key identifier: 5D:77:8D:94:50:F3:07:F2:36:50:7C:BD:AE:2F:E5:94:3B:72:10:69 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB5B6001E805DDACC28140 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9aa3496-54e2-38a1-91b5-6a4cd24c3d9b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:b6fa::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:5b:60:01:e8:05:dd:ac:c2:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=04a3df7c-a39d-4e7d-8fbf-983635e60724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:48:78:10:df:19:5b:52:d0:a3:ce:33:0d: 8b:29:82:70:df:f8:af:9b:b4:27:0a:f2:a9:3e:92: 37:cf:cc:ef:6f:30:02:af:d1:39:23:68:7e:86:06: 83:f9:1e:b9:fb:f9:33:84:ce:8c:0e:97:6a:fe:e0: c8:90:76:f9:e1:f6:b7:a7:8e:93:b3:7e:50:53:10: c3:d9:49:b5:13:2e:f9:b5:ad:d8:da:b5:c1:21:ce: 22:d5:50:00:e0:92:87:3c:c4:46:ec:45:8b:e9:7a: 0c:b3:5d:b5:c6:85:02:6d:86:93:71:23:c1:9b:51: c6:71:72:93:c2:1f:82:b5:56:c4:5a:3e:9e:f5:2d: 72:e8:0a:b9:f2:a1:be:76:48:fb:c3:ac:bd:cc:fd: 83:7d:cb:65:c4:33:78:7d:9b:ac:1b:a8:b4:e8:05: 58:ad:5e:bc:b9:4d:fc:cc:71:b0:5e:dc:32:c4:3c: a1:fa:9c:e9:11:8e:7e:25:5a:03:a5:35:73:cd:95: 50:22:43:fe:c4:11:e1:b3:a3:98:79:be:12:5c:4f: 4e:93:f0:e1:f9:3f:f1:85:7e:af:cf:de:43:a7:a8: 30:48:67:15:d0:e4:40:ef:c3:30:0f:98:7a:75:00: a6:f9:3b:1e:5b:00:07:e6:82:d2:fb:89:85:a8:5e: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:77:8D:94:50:F3:07:F2:36:50:7C:BD:AE:2F:E5:94:3B:72:10:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9aa3496-54e2-38a1-91b5-6a4cd24c3d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:b6fa::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ce:51:71:af:c3:55:26:d9:09:58:b8:60:52:31:5d:80:73: c3:55:f1:86:32:46:8f:72:b8:98:cd:52:63:b0:ba:95:6f:ba: 33:f4:42:94:c1:00:4f:6a:21:7f:5f:05:c1:25:93:51:b1:1c: 90:37:6e:96:0f:a8:9a:39:7e:6f:64:f7:04:00:59:b6:02:e0: 43:01:d5:06:cf:61:9a:37:3c:a6:b4:03:da:1a:79:f1:d9:fd: 1d:39:ea:9a:7b:75:7e:3b:bd:1b:bb:6a:42:53:43:d0:5d:90: 34:97:90:0e:5a:ea:ae:12:3c:be:ac:69:42:cf:f9:c9:b0:bd: 88:eb:11:da:77:da:90:90:22:a4:9e:82:4d:a3:29:b0:9c:dc: da:93:0c:35:20:e4:10:83:97:2a:1c:f1:3f:88:00:2e:d3:a8: 71:23:20:92:55:03:19:bf:c4:d5:49:1b:20:6c:9e:7e:16:34: fb:3a:c7:4c:0b:11:69:a3:1c:88:93:08:e4:ae:af:91:49:44: 5e:60:e8:7b:76:5d:16:ec:3a:eb:cc:33:6d:09:d9:53:d1:2f: bb:c1:20:e9:4f:9d:53:04:d5:f1:65:02:62:ae:07:65:1d:d0: 51:18:1b:aa:a2:69:d4:65:97:4f:a2:79:02:5f:3e:d2:19:8f: c8:97:05:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/21tgAegF3azCgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MDRhM2RmN2MtYTM5ZC00ZTdkLThmYmYtOTgzNjM1ZTYwNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvFIeBDfGVtS0KPOMw2LKYJw3/ivm7QnCvKp PpI3z8zvbzACr9E5I2h+hgaD+R65+/kzhM6MDpdq/uDIkHb54fa3p46Ts35QUxDD 2Um1Ey75ta3Y2rXBIc4i1VAA4JKHPMRG7EWL6XoMs121xoUCbYaTcSPBm1HGcXKT wh+CtVbEWj6e9S1y6Aq58qG+dkj7w6y9zP2DfctlxDN4fZusG6i06AVYrV68uU38 zHGwXtwyxDyh+pzpEY5+JVoDpTVzzZVQIkP+xBHhs6OYeb4SXE9Ok/Dh+T/xhX6v z95Dp6gwSGcV0ORA78MwD5h6dQCm+TseWwAH5oLS+4mFqF5A1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF13jZRQ8wfyNlB8va4v5ZQ7chBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTlhYTM0OTYtNTRlMi0z OGExLTkxYjUtNmE0Y2QyNGMzZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIALb6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGDOUXGvw1Um2QlYuGBSMV2Ac8NV8YYyRo9yuJjNUmOwupVvujP0 QpTBAE9qIX9fBcElk1GxHJA3bpYPqJo5fm9k9wQAWbYC4EMB1QbPYZo3PKa0A9oa efHZ/R056pp7dX47vRu7akJTQ9BdkDSXkA5a6q4SPL6saULP+cmwvYjrEdp32pCQ IqSegk2jKbCc3NqTDDUg5BCDlyoc8T+IAC7TqHEjIJJVAxm/xNVJGyBsnn4WNPs6 x0wLEWmjHIiTCOSur5FJRF5g6Ht2XRbsOuvMM20J2VPRL7vBIOlPnVME1fFlAmKu B2Ud0FEYG6qiadRll0+ieQJfPtIZj8iXBU4= -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:32 2025 by rpki-client