This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b398e938-b736-3b99-8bb6-2cb6e1f2e866.roa File: b398e938-b736-3b99-8bb6-2cb6e1f2e866.roa (raw, json) Hash identifier: oIp/xpgMU4pHVhWgDg4hnmEbZeqYzh3/LrIoTPAILFw= Subject key identifier: BC:0F:DE:4F:A6:74:B3:59:1B:90:30:9A:23:82:67:8C:BF:94:16:1B Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB6A7334541FD06AB90220 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b398e938-b736-3b99-8bb6-2cb6e1f2e866.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:2400::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:6a:73:34:54:1f:d0:6a:b9:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=cf08d01a-20aa-47aa-98d1-86f3dd9b3dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:44:51:cb:72:8c:b7:d0:d4:09:ee:7a:49:a7: fe:d2:a2:32:22:ff:21:05:a2:18:13:42:dd:02:1a: 00:34:bb:f1:a9:ed:66:29:d3:95:a8:d9:00:de:f1: 2d:03:39:59:18:75:bc:7e:9e:cb:e2:a5:84:08:e6: 71:ee:1e:db:eb:56:b7:5c:05:99:26:00:47:d2:30: 03:bd:e5:a6:88:60:41:30:bc:5d:25:53:96:41:ae: 9f:13:d1:3c:05:f0:85:9d:03:96:0a:78:f2:d4:c3: 88:fb:5e:02:a1:e6:72:de:d0:40:eb:d9:09:7d:b5: d2:2a:fd:b7:66:7d:41:5a:66:33:ce:ef:bf:6f:03: 04:f6:8a:8b:ce:00:78:26:1b:a3:35:80:2c:48:3c: dd:f9:11:70:78:c8:74:37:22:6e:a8:16:81:6e:24: c4:ae:eb:41:17:20:fa:76:5a:91:8c:47:44:03:30: f9:27:43:16:f0:6d:44:41:ea:7f:3d:19:3a:c5:8e: 33:b0:c2:5b:c7:ff:e4:9b:68:df:b4:74:45:99:11: 23:d9:3d:de:32:8a:6a:95:e5:1f:7d:18:ec:b2:23: 46:46:30:dd:b5:8c:08:75:8c:bd:a7:d9:9d:1c:ca: c5:c2:41:66:aa:58:7a:2c:84:ee:4b:8c:49:ac:13: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0F:DE:4F:A6:74:B3:59:1B:90:30:9A:23:82:67:8C:BF:94:16:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b398e938-b736-3b99-8bb6-2cb6e1f2e866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2400::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e6:10:3d:c6:18:c4:f4:79:d7:52:db:96:94:6d:d3:c6:47: 4c:1a:50:22:d2:97:8d:f4:01:d6:89:a7:29:ec:30:b2:36:16: 98:9f:5e:45:ae:3a:3a:62:78:0e:da:a1:f9:c2:e6:e0:6e:fd: 97:ff:62:39:de:4a:a9:61:3f:d0:cb:b1:6f:11:2a:2e:17:b5: 18:a2:84:b6:84:50:19:46:03:be:57:d6:71:5c:cc:82:b5:ea: 1c:69:43:69:e5:10:c2:d2:a5:e7:59:23:56:89:df:41:6c:77: e0:13:a6:44:69:3e:0b:65:50:af:f4:9f:70:e0:ed:a5:77:37: 72:d0:18:23:bd:5b:9c:e2:a0:03:92:bf:c9:ea:c9:13:de:1b: cd:f7:7e:79:bf:75:e1:70:69:a3:13:2f:52:23:b5:31:e1:9b: 74:f6:da:f6:41:42:a3:bd:51:7f:9d:4f:ac:e9:94:f9:38:c7: a2:c0:88:cb:b5:02:6e:81:63:d6:04:30:c2:a6:18:1e:d6:e7: 2b:0b:f4:50:09:20:95:2d:4e:c8:0b:c1:59:14:1b:0b:57:0b: e2:1e:06:60:d9:a2:4d:d3:3a:7c:ad:bd:e2:98:e6:ed:9d:8c: ef:24:75:cc:55:91:29:c6:e9:f6:34:1d:bb:46:90:27:62:c4: 25:e1:cf:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/22pzNFQf0Gq5AiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk Y2YwOGQwMWEtMjBhYS00N2FhLTk4ZDEtODZmM2RkOWIzZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ERRy3KMt9DUCe56Saf+0qIyIv8hBaIYE0Ld AhoANLvxqe1mKdOVqNkA3vEtAzlZGHW8fp7L4qWECOZx7h7b61a3XAWZJgBH0jAD veWmiGBBMLxdJVOWQa6fE9E8BfCFnQOWCnjy1MOI+14CoeZy3tBA69kJfbXSKv23 Zn1BWmYzzu+/bwME9oqLzgB4JhujNYAsSDzd+RFweMh0NyJuqBaBbiTErutBFyD6 dlqRjEdEAzD5J0MW8G1EQep/PRk6xY4zsMJbx//km2jftHRFmREj2T3eMopqleUf fRjssiNGRjDdtYwIdYy9p9mdHMrFwkFmqlh6LITuS4xJrBNk+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwP3k+mdLNZG5AwmiOCZ4y/lBYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjM5OGU5MzgtYjczNi0z Yjk5LThiYjYtMmNiNmUxZjJlODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIACQA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEzmED3GGMT0eddS25aUbdPGR0waUCLSl430AdaJpynsMLI2Fpif XkWuOjpieA7aofnC5uBu/Zf/YjneSqlhP9DLsW8RKi4XtRiihLaEUBlGA75X1nFc zIK16hxpQ2nlEMLSpedZI1aJ30Fsd+ATpkRpPgtlUK/0n3Dg7aV3N3LQGCO9W5zi oAOSv8nqyRPeG833fnm/deFwaaMTL1IjtTHhm3T22vZBQqO9UX+dT6zplPk4x6LA iMu1Am6BY9YEMMKmGB7W5ysL9FAJIJUtTsgLwVkUGwtXC+IeBmDZok3TOnytveKY 5u2djO8kdcxVkSnG6fY0HbtGkCdixCXhz5U= -----END CERTIFICATE-----Generated at Sat Dec 6 18:21:41 2025 by rpki-client