This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddfecc6c-09b4-3d58-8990-876da30a3d33.roa File: ddfecc6c-09b4-3d58-8990-876da30a3d33.roa (raw, json) Hash identifier: rRgwVj3iBzkp4QTtTV3Wjj1UDXmnYg+ICtzroVAdr54= Subject key identifier: AA:E3:38:92:2E:D1:88:88:32:49:CE:4C:79:31:1C:76:B9:E5:C7:F3 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB594499EC2BA8E73D9760 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddfecc6c-09b4-3d58-8990-876da30a3d33.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:2b00::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:59:44:99:ec:2b:a8:e7:3d:97:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=7d08c0be-f8e0-446f-b613-8e29ca0350b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b3:81:b6:ad:42:99:05:29:a1:5b:8c:77:e8: e9:9f:f1:8d:e7:64:a2:7b:dc:c4:14:73:f3:67:ba: 53:be:16:a0:70:96:c1:c0:e5:7e:f6:0e:a7:0f:62: dd:17:ba:75:9d:49:83:83:2e:be:e2:9d:3a:24:f5: ae:f0:d0:37:1c:a9:bf:0b:76:9e:ae:6a:9a:8c:7e: 23:43:54:00:6e:d8:fb:c9:9b:71:d5:6f:53:cb:53: a6:8a:e4:d9:bc:7b:82:ba:d5:d5:e4:18:4a:68:9f: 76:83:fc:24:10:75:84:6f:56:5e:ba:02:d9:6b:f5: 46:79:b4:e0:d0:9c:98:4e:41:7a:1e:de:a2:20:be: 49:6b:86:1c:94:d2:f3:4c:3f:aa:fb:02:18:4a:49: 77:ea:4e:f8:8a:47:57:95:f5:cb:12:29:5a:f6:66: 18:e2:ba:2a:be:26:1d:e7:06:1a:d8:80:1b:52:e6: b2:64:75:00:5a:fd:a6:c9:ec:6f:b3:fb:05:e8:18: 2c:5b:16:36:a2:60:04:e9:2f:b2:8a:eb:3c:93:3d: fa:cf:48:13:a8:af:4c:00:ea:e1:a2:4b:b3:73:66: fd:c0:e8:ce:1a:27:a8:4d:e4:8e:9e:ff:8a:ef:ba: ad:d8:ce:01:55:03:76:c3:44:41:ee:b3:fc:6d:09: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E3:38:92:2E:D1:88:88:32:49:CE:4C:79:31:1C:76:B9:E5:C7:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ddfecc6c-09b4-3d58-8990-876da30a3d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:2b00::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:41:0c:f9:42:e5:1f:b6:c4:a4:12:8b:6a:67:53:66:02:00: ba:14:6e:eb:81:01:ec:33:de:89:95:2c:59:f1:89:cb:48:80: 1e:c9:e7:07:57:3b:f4:7d:06:6a:63:8d:eb:26:28:37:2a:75: 5d:9f:24:2a:35:8e:29:d8:da:79:98:de:b8:25:59:d7:b5:ef: 91:af:b5:a1:cf:d7:51:cf:6a:2a:26:c3:8a:71:8c:aa:4e:23: 4c:ed:a7:50:5e:35:c0:eb:60:f3:31:41:54:92:e5:1c:5a:36: a4:43:a0:db:ca:71:2b:18:f4:45:c6:35:70:97:5a:24:73:ed: 98:4a:7d:b4:a9:8f:fa:35:55:6a:f4:fa:73:7e:a8:39:41:fb: 6d:85:b1:df:fa:7b:fa:02:d8:63:33:2d:e7:b7:ce:6a:16:a3: 05:e6:48:d4:ed:53:6d:16:68:83:77:e4:ed:98:5d:e8:6e:03: a8:7d:0e:55:93:25:fe:02:47:93:22:16:7c:ba:fa:0a:1a:14: ab:1a:8b:78:65:41:b5:ae:77:0f:80:cb:84:c8:65:11:8f:69: f3:61:35:f7:7d:e3:9c:56:1b:38:c9:86:fb:15:e6:d9:27:cd: ed:da:1b:29:c0:1f:a3:82:c0:da:51:2b:82:6c:c2:76:56:cb: 4b:b2:ca:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/21lEmewrqOc9l2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk N2QwOGMwYmUtZjhlMC00NDZmLWI2MTMtOGUyOWNhMDM1MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLOBtq1CmQUpoVuMd+jpn/GN52Sie9zEFHPz Z7pTvhagcJbBwOV+9g6nD2LdF7p1nUmDgy6+4p06JPWu8NA3HKm/C3aermqajH4j Q1QAbtj7yZtx1W9Ty1OmiuTZvHuCutXV5BhKaJ92g/wkEHWEb1ZeugLZa/VGebTg 0JyYTkF6Ht6iIL5Ja4YclNLzTD+q+wIYSkl36k74ikdXlfXLEila9mYY4roqviYd 5wYa2IAbUuayZHUAWv2myexvs/sF6BgsWxY2omAE6S+yius8kz36z0gTqK9MAOrh okuzc2b9wOjOGieoTeSOnv+K77qt2M4BVQN2w0RB7rP8bQkA7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKrjOJIu0YiIMknOTHkxHHa55cfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGRmZWNjNmMtMDliNC0z ZDU4LTg5OTAtODc2ZGEzMGEzZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIACsA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChBDPlC5R+2xKQSi2pnU2YCALoUbuuBAewz3omVLFnxictIgB7J 5wdXO/R9BmpjjesmKDcqdV2fJCo1jinY2nmY3rglWde175GvtaHP11HPaiomw4px jKpOI0ztp1BeNcDrYPMxQVSS5RxaNqRDoNvKcSsY9EXGNXCXWiRz7ZhKfbSpj/o1 VWr0+nN+qDlB+22Fsd/6e/oC2GMzLee3zmoWowXmSNTtU20WaIN35O2YXehuA6h9 DlWTJf4CR5MiFny6+goaFKsai3hlQbWudw+Ay4TIZRGPafNhNfd945xWGzjJhvsV 5tknze3aGynAH6OCwNpRK4JswnZWy0uyylw= -----END CERTIFICATE-----Generated at Sat Dec 6 19:08:27 2025 by rpki-client