This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa File: cfc0aa13-2df9-3952-848a-2c1df7879358.roa (raw, json) Hash identifier: 2Izn8Wcm159WF1TNVHJFzzfDROwnGIxbDHsnvGQpD48= Subject key identifier: 8F:79:19:CF:4A:40:30:67:14:34:7C:62:90:BA:D7:53:51:01:D6:A1 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584BEAEB2F8B368B01CFBF986560 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 393885 IP address blocks: 2604:4a00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:2f:8b:36:8b:01:cf:bf:98:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=3b2db043-02d3-483b-b557-d9889ad8e09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4f:fc:87:40:a7:b5:09:cb:91:f0:77:28:58: a1:21:9b:a4:3d:7b:95:ed:b6:00:e7:bf:84:00:f6: df:6d:61:52:37:f2:0c:72:e0:ed:c6:20:34:73:e8: 59:c1:f3:cf:e3:32:bc:20:60:9a:ff:ef:6d:89:7f: 2b:2a:07:67:6b:ac:f4:fd:20:fd:a3:c8:b9:5f:0d: be:21:48:72:51:67:f7:35:01:08:d3:00:ca:c5:89: b1:cd:52:7d:f3:be:50:d7:d4:bf:c8:90:d2:2c:aa: ea:0d:ed:d5:12:b0:a6:44:33:1d:f4:df:34:f4:6a: ab:db:3f:db:5f:4f:0d:95:18:73:bb:18:69:3b:88: 0c:6b:f6:1b:6b:32:a2:de:c0:fc:7e:69:c6:56:83: 11:a4:d0:96:a5:25:c8:da:28:f0:4e:46:0e:3e:51: 3b:39:00:f0:85:04:0f:91:d4:25:c3:9d:bb:c9:37: c1:5f:d7:b7:8e:33:f3:87:3a:4c:e1:79:36:30:ae: 50:71:0a:4a:82:34:43:d9:7e:f4:29:eb:f8:da:b1: e9:4d:aa:07:a7:62:98:7c:29:d1:00:61:63:ad:40: fe:84:08:0f:90:7f:54:0b:b2:bf:0b:b9:86:3f:d3: 2b:3f:34:84:cc:01:94:cd:c3:81:e8:3e:d4:e2:34: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:79:19:CF:4A:40:30:67:14:34:7C:62:90:BA:D7:53:51:01:D6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cfc0aa13-2df9-3952-848a-2c1df7879358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv6: 2604:4a00:f000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:48:9d:e8:49:3c:85:8d:2d:01:15:f7:2b:0a:a3:73:f8:98: 4f:ef:eb:e7:12:1b:46:27:fa:a2:d9:0d:d4:1f:38:9b:b5:93: e5:4e:72:20:19:c9:49:42:13:eb:c2:d8:b3:15:99:ca:c7:a1: 98:f1:38:b7:90:3c:e7:b5:c3:b1:6e:ef:96:3c:ef:4a:52:25: de:33:14:17:45:27:0f:11:dc:0b:ba:ff:55:c0:19:24:09:c4: 3f:f7:13:d5:63:f1:36:b6:e0:dc:86:81:f3:18:33:30:ea:13: e3:13:44:e8:40:0b:68:1a:1a:49:a8:19:f6:d2:2e:4e:a8:1c: c8:54:91:71:a7:6c:d4:42:cf:03:24:c1:ad:1d:c7:8e:a0:b0: 4b:e8:ef:ea:72:0e:1a:7c:eb:26:4e:7d:e0:bd:db:0f:6d:85: 53:1c:b9:91:a3:f4:04:c3:4d:77:5f:9e:c1:fb:7d:99:16:3b: e4:9b:76:b5:a1:a8:eb:a6:19:c0:26:08:22:ea:96:8a:0f:f4: 38:91:8b:71:82:23:66:56:c3:64:cd:7c:88:97:a9:53:65:1f: 1f:38:48:c7:04:f1:23:d0:80:73:a4:a2:1a:d1:98:55:fd:7b: 13:a5:6c:5e:d7:97:6d:57:c6:93:7a:07:2e:c5:55:90:12:4c: df:bc:7c:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvq6y+LNosBz7+YZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk M2IyZGIwNDMtMDJkMy00ODNiLWI1NTctZDk4ODlhZDhlMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0/8h0CntQnLkfB3KFihIZukPXuV7bYA57+E APbfbWFSN/IMcuDtxiA0c+hZwfPP4zK8IGCa/+9tiX8rKgdna6z0/SD9o8i5Xw2+ IUhyUWf3NQEI0wDKxYmxzVJ9875Q19S/yJDSLKrqDe3VErCmRDMd9N809Gqr2z/b X08NlRhzuxhpO4gMa/YbazKi3sD8fmnGVoMRpNCWpSXI2ijwTkYOPlE7OQDwhQQP kdQlw527yTfBX9e3jjPzhzpM4Xk2MK5QcQpKgjRD2X70Kev42rHpTaoHp2KYfCnR AGFjrUD+hAgPkH9UC7K/C7mGP9MrPzSEzAGUzcOB6D7U4jTjkwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFI95Gc9KQDBnFDR8YpC611NRAdahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvY2ZjMGFhMTMtMmRmOS0z OTUyLTg0OGEtMmMxZGY3ODc5MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRKAPAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkEid6Ek8hY0tARX3Kwqjc/iYT+/r5xIbRif6otkN1B84m7WT5U5y IBnJSUIT68LYsxWZysehmPE4t5A857XDsW7vljzvSlIl3jMUF0UnDxHcC7r/VcAZ JAnEP/cT1WPxNrbg3IaB8xgzMOoT4xNE6EALaBoaSagZ9tIuTqgcyFSRcads1ELP AyTBrR3HjqCwS+jv6nIOGnzrJk594L3bD22FUxy5kaP0BMNNd1+ewft9mRY75Jt2 taGo66YZwCYIIuqWig/0OJGLcYIjZlbDZM18iJepU2UfHzhIxwTxI9CAc6SiGtGY Vf17E6VsXteXbVfGk3oHLsVVkBJM37x8KA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:09:00 2025 by rpki-client