This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd794b47-b206-332c-b9a5-2fcf2808e487.roa File: dd794b47-b206-332c-b9a5-2fcf2808e487.roa (raw, json) Hash identifier: CKI+ZVHBfojbKRwHE96O3shkHrWzIXApWwX53PI8TfA= Subject key identifier: 75:09:6C:32:10:C3:CE:22:9D:1F:34:2D:BE:4D:08:EB:04:2C:F1:60 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBE26FC8289F7D85960700 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd794b47-b206-332c-b9a5-2fcf2808e487.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:2ca6::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:e2:6f:c8:28:9f:7d:85:96:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=07dfc48e-592a-4f61-8fd7-f485a2c4a5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:71:58:cc:57:f3:4a:0d:46:c9:d9:95:17: 28:11:0c:b6:67:23:3d:36:4a:62:2c:db:de:76:f4: ad:ae:23:14:55:5b:8f:7a:14:0b:d8:a9:d9:40:9e: c7:a5:a3:7b:51:66:ff:58:52:22:7d:48:a8:f3:d5: 57:e1:a6:14:d0:3e:1a:ce:6b:c8:d1:20:9d:69:f4: a1:d8:d5:a0:d9:87:39:96:43:82:ef:75:21:b0:e6: 8e:06:25:94:c8:a8:58:60:db:72:77:54:54:15:69: 26:23:01:b3:bc:eb:42:67:c0:de:19:d9:04:87:67: b0:64:ac:a6:62:57:51:09:e1:ff:6d:16:f6:36:f4: 3b:e0:93:19:58:2b:ab:c5:fc:29:f0:57:01:2b:c2: be:5f:6d:69:b0:2b:1a:c7:17:f3:41:6a:4c:4d:da: db:1a:3b:d1:ea:70:c6:6b:70:95:49:54:a2:af:55: fe:02:0f:87:83:ea:d9:e4:cd:8a:64:07:2c:9d:33: f7:df:bd:ae:75:28:fc:80:d5:e2:44:2f:9a:82:be: 29:61:0a:35:9a:f0:82:2b:36:f3:c6:96:06:75:12: 81:3a:91:d1:3b:d9:90:83:9d:ff:1e:08:80:83:16: e3:89:32:c7:70:3a:a7:24:78:f4:41:59:e8:de:57: 10:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:09:6C:32:10:C3:CE:22:9D:1F:34:2D:BE:4D:08:EB:04:2C:F1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dd794b47-b206-332c-b9a5-2fcf2808e487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2ca6::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:68:4f:e6:9c:3b:49:c8:f2:2b:ac:6b:ef:34:24:d6:6a:c8: 24:da:6a:41:ca:3b:d1:0e:5f:40:30:34:3b:c0:d9:2b:51:62: 29:87:48:54:f4:b6:33:4c:96:7f:b8:72:46:b8:9e:00:6f:09: 93:0f:ea:8a:00:62:ea:6f:b0:41:a6:d1:4a:95:81:b6:db:c3: 6b:d7:63:4e:d0:94:87:77:01:d8:3f:13:97:14:89:a3:9d:36: 6c:2b:e3:34:47:e6:5c:7c:44:42:56:d6:e7:b9:7a:d3:03:15: ea:7b:04:d3:51:34:82:04:ba:81:68:30:d9:f0:7e:1f:06:9e: 4b:49:67:05:d9:c5:f4:c1:4d:e6:6b:e9:52:ae:f1:52:9d:b5: ce:46:e4:2b:d3:d0:a0:6b:61:eb:44:fc:fb:ae:f3:23:5b:b3: 1c:58:81:ff:3b:f6:6f:d2:38:df:f3:76:f9:18:0b:5a:13:78: 31:49:fb:b4:3b:5f:bb:4b:23:d9:ed:5c:bf:b8:39:db:cb:14: 89:d1:cd:69:b6:48:75:a4:c3:ca:41:1c:e5:eb:9b:4a:60:3f: 25:90:ff:b8:4f:5a:ce:56:59:ce:78:62:af:a0:cc:20:d0:dd: 8f:cb:b4:25:59:41:87:60:4c:8a:5d:1f:e7:f9:6f:25:22:08: 4d:1d:4e:f3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/2+JvyCiffYWWBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MDdkZmM0OGUtNTkyYS00ZjYxLThmZDctZjQ4NWEyYzRhNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4NxWMxX80oNRsnZlRcoEQy2ZyM9NkpiLNve dvStriMUVVuPehQL2KnZQJ7HpaN7UWb/WFIifUio89VX4aYU0D4azmvI0SCdafSh 2NWg2Yc5lkOC73UhsOaOBiWUyKhYYNtyd1RUFWkmIwGzvOtCZ8DeGdkEh2ewZKym YldRCeH/bRb2NvQ74JMZWCurxfwp8FcBK8K+X21psCsaxxfzQWpMTdrbGjvR6nDG a3CVSVSir1X+Ag+Hg+rZ5M2KZAcsnTP3372udSj8gNXiRC+agr4pYQo1mvCCKzbz xpYGdRKBOpHRO9mQg53/HgiAgxbjiTLHcDqnJHj0QVno3lcQDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHUJbDIQw84inR80Lb5NCOsELPFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGQ3OTRiNDctYjIwNi0z MzJjLWI5YTUtMmZjZjI4MDhlNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIACym MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGpoT+acO0nI8iusa+80JNZqyCTaakHKO9EOX0AwNDvA2StRYimH SFT0tjNMln+4cka4ngBvCZMP6ooAYupvsEGm0UqVgbbbw2vXY07QlId3Adg/E5cU iaOdNmwr4zRH5lx8REJW1ue5etMDFep7BNNRNIIEuoFoMNnwfh8GnktJZwXZxfTB TeZr6VKu8VKdtc5G5CvT0KBrYetE/Puu8yNbsxxYgf879m/SON/zdvkYC1oTeDFJ +7Q7X7tLI9ntXL+4OdvLFInRzWm2SHWkw8pBHOXrm0pgPyWQ/7hPWs5WWc54Yq+g zCDQ3Y/LtCVZQYdgTIpdH+f5byUiCE0dTvM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:17:55 2025 by rpki-client