This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa File: 5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa (raw, json) Hash identifier: FoCwy51ukR+M44z7sZg09spSYOfBsJUYfjSVoZkxnBc= Subject key identifier: 28:12:42:1B:FA:D1:C0:24:23:37:72:DE:C5:04:BA:C0:AB:05:B9:59 Certificate issuer: /CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Certificate serial: 010D0C9F4328584BC96AF44311EC1947C6BBDE00 Authority key identifier: F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 16509 IP address blocks: 2601:1700:e100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:f4:43:11:ec:19:47:c6:bb:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6fb0d47-7125-4b91-9b01-2e308dad0d25 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=eaa76e09-657c-42ce-99bb-2ce6899d81d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:ac:6e:fb:63:f9:96:19:1e:8a:63:5e:e1: 00:92:bb:9a:07:cf:fa:19:39:8b:26:8f:66:5c:b6: 9a:b0:61:1a:4b:47:2d:9b:f1:2b:31:3b:27:c2:43: 4c:d2:3b:9c:1a:8c:8e:04:ba:f7:f6:41:c1:b0:da: 91:20:1a:16:6d:18:9b:8e:2d:12:bb:6b:b2:10:de: 5b:dc:66:14:66:c2:0f:e0:b9:27:e8:95:ab:d5:f7: 0d:43:80:93:59:60:c5:6c:86:d8:26:c0:54:4f:69: 48:86:ea:1b:4b:8c:b8:57:03:78:7f:a5:38:66:a3: 3a:cb:e6:44:45:08:31:30:d9:94:96:2e:bf:9f:7e: 76:b9:91:e5:81:8e:a9:5b:cd:ea:ee:6c:44:6e:fc: e9:92:b4:38:85:fb:a9:7d:0e:0a:bb:de:41:c9:60: d7:40:08:38:7f:13:84:70:a0:61:f0:1e:43:96:86: f5:12:c8:84:ca:a6:e9:c2:ce:c7:49:6f:24:9e:03: 39:5e:9c:d6:ed:9c:93:7d:72:a6:8f:d9:dd:cb:11: c8:0c:cd:b6:58:00:6e:34:08:50:77:32:dd:bb:c4: 43:d5:12:c8:ec:12:d9:cf:e2:7d:75:37:20:3c:3b: b8:ed:3b:26:a7:8d:02:51:27:d5:8a:61:72:83:2b: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:12:42:1B:FA:D1:C0:24:23:37:72:DE:C5:04:BA:C0:AB:05:B9:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/5a68ccb3-a625-3c55-a020-f3b83c1fc0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25/d6fb0d47-7125-4b91-9b01-2e308dad0d25.crl X509v3 Authority Key Identifier: keyid:F1:51:5C:12:74:E1:80:0B:3C:F8:ED:38:A6:09:04:6B:0C:6B:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d6fb0d47-7125-4b91-9b01-2e308dad0d25.cer sbgp-ipAddrBlock: critical IPv6: 2601:1700:e100::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:25:2b:17:e8:ad:53:f5:9e:cb:7f:54:05:86:01:78:e2:26: ae:f2:1d:2a:6e:d0:5b:d3:b2:21:17:5f:61:a1:b9:9b:b9:23: 41:87:5c:ef:5e:1e:6a:fc:cc:f9:76:d9:17:ff:48:18:b3:86: f4:10:43:35:5b:75:4f:93:02:a0:1a:d8:8d:3e:9f:0e:c1:13: f2:39:7f:d3:f2:d7:99:0d:63:12:6b:cd:76:a3:ee:f9:f9:a9: 4d:34:fc:44:ef:be:25:1f:54:65:b5:af:a6:b2:44:94:14:07: f3:1a:9d:98:1b:09:8d:c7:64:c6:b7:5b:29:e5:75:55:39:e1: c5:e8:6f:c9:d4:81:80:78:81:d5:37:5d:e7:4f:a7:b9:1e:7d: 3a:40:a6:a7:bc:1c:27:f4:56:49:50:14:e3:4f:65:9c:42:32: 20:3a:71:62:44:53:1c:93:7a:53:76:37:a5:34:9e:03:e9:63: cf:20:0c:ca:43:f1:c2:2a:5c:58:b1:05:b5:bb:1e:2c:56:f9: ed:aa:39:88:60:02:d2:47:a9:18:6b:67:e2:8e:7f:f7:68:55: 49:c2:fe:6f:b5:62:55:85:f9:90:32:9f:24:a4:2a:de:ac:6d: 6b:7a:0a:11:f4:e6:ad:2c:40:cd:42:f0:df:52:49:a0:d9:c9: b5:7e:58:b1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvJavRDEewZR8a73gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZmYjBkNDctNzEyNS00YjkxLTliMDEtMmUzMDhkYWQw ZDI1MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk ZWFhNzZlMDktNjU3Yy00MmNlLTk5YmItMmNlNjg5OWQ4MWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzWsbvtj+ZYZHopjXuEAkruaB8/6GTmLJo9m XLaasGEaS0ctm/ErMTsnwkNM0jucGoyOBLr39kHBsNqRIBoWbRibji0Su2uyEN5b 3GYUZsIP4Lkn6JWr1fcNQ4CTWWDFbIbYJsBUT2lIhuobS4y4VwN4f6U4ZqM6y+ZE RQgxMNmUli6/n352uZHlgY6pW83q7mxEbvzpkrQ4hfupfQ4Ku95ByWDXQAg4fxOE cKBh8B5Dlob1EsiEyqbpws7HSW8kngM5XpzW7ZyTfXKmj9ndyxHIDM22WABuNAhQ dzLdu8RD1RLI7BLZz+J9dTcgPDu47Tsmp40CUSfVimFygyvT4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCgSQhv60cAkIzdy3sUEusCrBblZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZi MGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMwOGRhZDBkMjUvNWE2OGNjYjMtYTYyNS0z YzU1LWEwMjAtZjNiODNjMWZjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDZmYjBkNDctNzEyNS00YjkxLTli MDEtMmUzMDhkYWQwZDI1L2Q2ZmIwZDQ3LTcxMjUtNGI5MS05YjAxLTJlMzA4ZGFk MGQyNS5jcmwwHwYDVR0jBBgwFoAU8VFcEnThgAs8+O04pgkEawxrjv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNmZiMGQ0Ny03MTI1LTRiOTEtOWIwMS0yZTMw OGRhZDBkMjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgEXAOEw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUiUrF+itU/Wey39UBYYBeOImrvIdKm7QW9OyIRdfYaG5m7kjQYdc 714eavzM+XbZF/9IGLOG9BBDNVt1T5MCoBrYjT6fDsET8jl/0/LXmQ1jEmvNdqPu +fmpTTT8RO++JR9UZbWvprJElBQH8xqdmBsJjcdkxrdbKeV1VTnhxehvydSBgHiB 1Tdd50+nuR59OkCmp7wcJ/RWSVAU409lnEIyIDpxYkRTHJN6U3Y3pTSeA+ljzyAM ykPxwipcWLEFtbseLFb57ao5iGAC0kepGGtn4o5/92hVScL+b7ViVYX5kDKfJKQq 3qxta3oKEfTmrSxAzULw31JJoNnJtX5YsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:19 2025 by rpki-client