This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de32a43f-88da-3dfd-b40b-4c4c8b6d241b.roa File: de32a43f-88da-3dfd-b40b-4c4c8b6d241b.roa (raw, json) Hash identifier: J3lOFC1xs7yIfEu9+Uhr6DXhHQEjWjEwrGrYQBvoz3w= Subject key identifier: 16:96:BE:A6:68:E3:7C:FF:11:BA:E9:CD:EA:3B:2E:36:C6:70:72:64 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDB888D2CC09C7689F69BC0 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de32a43f-88da-3dfd-b40b-4c4c8b6d241b.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:1080::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:88:8d:2c:c0:9c:76:89:f6:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=34931176-2a00-4aac-bed1-70d0ff8ffab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:02:e2:d4:36:22:00:ac:fc:1a:3d:89:3e:76: ae:45:ad:91:4d:7e:c7:8e:37:57:a7:dd:26:d5:9c: 06:55:0e:0b:70:ed:74:53:a1:92:86:85:1f:b6:45: a7:53:9d:86:9a:c5:69:e5:fe:58:4f:67:95:e8:42: 5b:48:bf:c9:83:73:10:52:a4:5a:9d:d7:71:65:33: fe:e6:d6:32:3e:af:76:cc:8c:ff:3f:c7:73:7a:5d: f0:d3:fd:1c:e0:1b:b4:08:7f:cf:8c:a3:73:58:3f: f7:ee:86:0e:99:90:74:e3:66:bf:46:4a:1a:89:e0: 87:b0:ed:f7:b4:fb:f3:63:fe:5b:2c:86:a4:9f:27: e9:40:59:39:58:ae:24:84:c3:84:84:01:eb:5b:ed: 50:39:91:a5:01:66:13:38:66:08:f5:6e:d0:48:7e: 9a:c2:7d:b1:02:af:9b:c1:72:79:88:36:8e:89:3c: dc:83:04:3a:6f:12:25:5e:26:ca:be:31:16:2a:bf: 8f:f8:6d:26:f8:b6:38:bb:64:1e:f4:86:45:13:5c: f5:bf:cc:74:e3:4b:25:04:63:69:f0:24:24:bd:ca: c4:a9:85:a8:7b:d5:5a:06:16:20:12:44:ff:12:6d: 30:6c:28:23:0a:63:e2:d7:eb:c6:62:29:87:e5:dd: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:96:BE:A6:68:E3:7C:FF:11:BA:E9:CD:EA:3B:2E:36:C6:70:72:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/de32a43f-88da-3dfd-b40b-4c4c8b6d241b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1080::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:26:3a:55:26:55:2a:d1:9a:90:45:49:36:d6:5c:e4:8c:f6: 54:24:16:d4:7f:b8:e9:b4:f1:64:88:94:ab:bb:4d:de:1c:bc: 23:a7:70:70:10:9a:8e:bd:54:64:b4:0a:06:d7:c6:38:56:a6: 02:a1:00:63:a5:24:4c:86:36:d8:a6:28:78:df:79:da:eb:88: 9c:ea:e1:9e:55:e6:e9:9c:97:e9:3d:8d:d8:8e:ab:a4:74:bc: 0e:c7:88:cf:2e:34:15:6c:96:7e:d9:1e:a2:cf:11:ee:2b:db: d3:cb:00:76:83:88:8d:ec:41:09:23:c8:a7:b5:3a:8a:e2:96: 77:c5:7d:bc:da:c3:1d:bf:4a:01:2d:e0:17:1f:0e:8d:26:63: 39:43:d7:ff:6b:3d:69:57:97:15:71:b3:ad:11:32:fb:06:86: 74:fd:ff:5f:b0:52:18:a4:aa:72:b2:0d:2d:1c:8a:56:0b:eb: fb:d3:1f:68:04:9b:1d:87:8c:18:af:f2:56:db:2a:40:37:54: 84:f2:a7:cd:18:a6:7d:6f:31:23:29:76:fc:b3:5a:a2:f3:ec: 13:60:1d:f6:cc:24:5e:9d:7a:25:37:b1:24:7d:2e:0d:17:58: 65:65:cc:d8:e1:01:d2:6a:77:3b:40:ab:f3:22:47:21:8e:4e: 66:d8:e6:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/24iNLMCcdon2m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk MzQ5MzExNzYtMmEwMC00YWFjLWJlZDEtNzBkMGZmOGZmYWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQLi1DYiAKz8Gj2JPnauRa2RTX7HjjdXp90m 1ZwGVQ4LcO10U6GShoUftkWnU52GmsVp5f5YT2eV6EJbSL/Jg3MQUqRanddxZTP+ 5tYyPq92zIz/P8dzel3w0/0c4Bu0CH/PjKNzWD/37oYOmZB042a/RkoaieCHsO33 tPvzY/5bLIaknyfpQFk5WK4khMOEhAHrW+1QOZGlAWYTOGYI9W7QSH6awn2xAq+b wXJ5iDaOiTzcgwQ6bxIlXibKvjEWKr+P+G0m+LY4u2Qe9IZFE1z1v8x040slBGNp 8CQkvcrEqYWoe9VaBhYgEkT/Em0wbCgjCmPi1+vGYimH5d15uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBaWvqZo43z/Ebrpzeo7LjbGcHJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGUzMmE0M2YtODhkYS0z ZGZkLWI0MGItNGM0YzhiNmQyNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIABCA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAmOlUmVSrRmpBFSTbWXOSM9lQkFtR/uOm08WSIlKu7Td4cvCOn cHAQmo69VGS0CgbXxjhWpgKhAGOlJEyGNtimKHjfedrriJzq4Z5V5umcl+k9jdiO q6R0vA7HiM8uNBVsln7ZHqLPEe4r29PLAHaDiI3sQQkjyKe1OorilnfFfbzawx2/ SgEt4BcfDo0mYzlD1/9rPWlXlxVxs60RMvsGhnT9/1+wUhikqnKyDS0cilYL6/vT H2gEmx2HjBiv8lbbKkA3VITyp80Ypn1vMSMpdvyzWqLz7BNgHfbMJF6deiU3sSR9 Lg0XWGVlzNjhAdJqdztAq/MiRyGOTmbY5i4= -----END CERTIFICATE-----Generated at Sat Dec 6 17:24:54 2025 by rpki-client