This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa File: bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa (raw, json) Hash identifier: Z1qXUIBewqgi4r3hlk+2dUpsi/UzrnaH/ehy6dFk398= Subject key identifier: E7:EA:A4:4E:81:04:F3:0D:0C:26:DB:4C:C3:D2:C4:38:1D:D6:D4:90 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBCCFDE5C1124CBD5ED400 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:880a:708::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:cc:fd:e5:c1:12:4c:bd:5e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=4d477be5-92ea-47b2-86e0-c130a7c18d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:e1:25:be:b9:9a:97:83:97:e3:54:cc:83: 92:24:07:22:90:07:8c:a2:c2:18:61:06:4a:eb:fe: 25:9c:a4:f3:73:42:3d:17:35:35:28:31:73:24:16: 45:e2:e1:f2:17:d3:36:0d:a8:ab:4c:f8:82:9b:f8: a4:fe:21:22:ff:ab:17:30:d1:3b:2a:05:f3:5a:82: 0f:25:9e:a9:83:2a:83:66:ce:67:42:6f:90:57:61: 21:af:cf:d5:92:3e:4a:5d:3d:63:28:74:b5:c5:a6: 4d:1d:22:a1:01:2e:16:09:de:77:c8:00:bc:0f:80: e0:43:04:54:90:9a:5f:07:7c:47:ea:b0:f0:8c:f3: 53:22:a5:16:cd:3f:39:4c:c1:30:70:79:f3:da:71: dd:f8:be:f8:04:e3:4d:3b:46:00:ab:d0:0f:21:dc: 4a:92:86:ef:cc:42:8d:11:e6:27:ef:6a:32:6f:ae: a3:bf:12:23:eb:5c:4a:54:36:d5:6c:08:a8:27:67: 6e:4a:18:95:68:2f:2b:35:a3:23:19:f4:0e:b5:4d: 75:e6:0a:0e:03:9b:8e:bb:4c:11:db:26:ce:f1:db: 20:c5:d9:99:b9:10:a7:95:6b:8c:c0:33:ef:38:8c: 64:b6:cb:a4:6d:1b:3d:66:cc:1b:07:f8:1f:f7:1e: ba:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:A4:4E:81:04:F3:0D:0C:26:DB:4C:C3:D2:C4:38:1D:D6:D4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bad7e2a3-7b2e-35e5-86bd-878d2d0010de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:880a:708::/46 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:4d:70:44:7c:a1:25:b1:e0:c5:47:f3:32:d7:15:ae:09:3a: b3:b8:10:19:5d:8f:43:86:e3:fa:45:6d:29:eb:4a:ed:90:28: e2:ca:4a:74:a6:0b:38:bd:01:05:38:ba:c5:79:63:55:6b:05: c5:0c:0c:76:37:7f:9e:2d:a4:79:ae:22:86:d4:7a:ee:e1:5b: 13:0e:28:0b:01:87:4d:b0:84:47:48:a0:4a:45:48:eb:e0:8f: 8f:30:d8:20:6c:f5:16:61:c0:4f:dd:2b:e6:a3:a9:a4:cc:72: 5f:4b:9f:72:1f:96:4d:d2:38:59:1b:68:e9:2a:87:41:af:12: 19:e6:e4:e5:a6:4d:38:09:24:33:52:59:4f:4d:75:89:10:df: 50:af:6f:05:e9:16:a6:3e:d5:47:a0:b7:ec:90:60:44:85:c2: cb:79:3a:b9:6a:4f:c2:49:ec:1e:16:57:78:6e:9d:d8:6a:1c: 1e:37:12:d7:be:43:23:36:d5:8e:8c:de:dd:31:0e:da:81:a5: 65:42:97:67:eb:46:bb:c3:b5:88:93:54:1c:79:d6:f9:ef:e3: fc:d3:fd:c5:61:49:87:f5:1b:69:ce:ea:4e:c6:d3:75:e6:38: e1:f5:b5:2a:63:3b:99:e7:ce:b3:88:69:71:87:7d:a8:26:c4: 4d:2a:1d:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/28z95cESTL1e1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NGQ0NzdiZTUtOTJlYS00N2IyLTg2ZTAtYzEzMGE3YzE4ZDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa3hJb65mpeDl+NUzIOSJAcikAeMosIYYQZK 6/4lnKTzc0I9FzU1KDFzJBZF4uHyF9M2DairTPiCm/ik/iEi/6sXMNE7KgXzWoIP JZ6pgyqDZs5nQm+QV2Ehr8/Vkj5KXT1jKHS1xaZNHSKhAS4WCd53yAC8D4DgQwRU kJpfB3xH6rDwjPNTIqUWzT85TMEwcHnz2nHd+L74BONNO0YAq9APIdxKkobvzEKN EeYn72oyb66jvxIj61xKVDbVbAioJ2duShiVaC8rNaMjGfQOtU115goOA5uOu0wR 2ybO8dsgxdmZuRCnlWuMwDPvOIxktsukbRs9ZswbB/gf9x66hwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfqpE6BBPMNDCbbTMPSxDgd1tSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYmFkN2UyYTMtN2IyZS0z NWU1LTg2YmQtODc4ZDJkMDAxMGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICgcI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFNcER8oSWx4MVH8zLXFa4JOrO4EBldj0OG4/pFbSnrSu2QKOLK SnSmCzi9AQU4usV5Y1VrBcUMDHY3f54tpHmuIobUeu7hWxMOKAsBh02whEdIoEpF SOvgj48w2CBs9RZhwE/dK+ajqaTMcl9Ln3Iflk3SOFkbaOkqh0GvEhnm5OWmTTgJ JDNSWU9NdYkQ31CvbwXpFqY+1Uegt+yQYESFwst5OrlqT8JJ7B4WV3hundhqHB43 Ete+QyM21Y6M3t0xDtqBpWVCl2frRrvDtYiTVBx51vnv4/zT/cVhSYf1G2nO6k7G 03XmOOH1tSpjO5nnzrOIaXGHfagmxE0qHUY= -----END CERTIFICATE-----Generated at Sat Dec 6 17:25:54 2025 by rpki-client