This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa File: 3a3e578e-9cda-3397-800c-e3cbde377721.roa (raw, json) Hash identifier: 6OKIgPX1KXGZjeFKr3IjU/k05G4fz9584gv4GC7dHrE= Subject key identifier: 83:22:88:D5:E8:CC:AF:46:D1:CA:20:2F:B0:C1:4E:85:B9:09:FD:69 Certificate issuer: /CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Certificate serial: 010D0C9F4328584BFFDBB1F5714235807E14FF00 Authority key identifier: 8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 14618 IP address blocks: 2607:dd40:1000::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:b1:f5:71:42:35:80:7e:14:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d3c304-619d-4e6d-aed5-9e25165cbc73 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=ae3e4ada-fb81-422a-a2e1-74b3610b563b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:85:b9:89:29:29:88:58:4f:12:4d:59:cb:a0: a9:35:1c:33:9e:e3:a2:dc:c3:24:10:bc:12:5a:37: 9a:0e:81:58:7b:1c:16:cb:20:b7:9d:0d:7b:3c:34: b8:26:af:a5:e7:0b:80:42:99:2d:68:d8:d4:e1:f2: 1e:75:03:0c:34:af:e1:91:00:df:c9:5c:d1:18:d5: ed:9d:aa:4b:36:de:36:53:41:de:7d:f3:67:98:11: a0:c8:b1:4f:11:98:c9:2a:78:ca:d6:0c:e1:e0:1f: 76:54:42:dc:a2:3c:8d:ce:69:81:b9:a0:f1:88:a1: c4:1d:0f:da:64:d8:ef:df:84:39:8e:2d:bb:8c:e7: 2b:2a:fa:46:bc:0e:5c:0e:61:c5:84:ec:fe:67:f9: be:96:bb:05:97:2c:7b:92:30:a2:2e:1c:c5:e5:4c: f7:da:d1:25:89:c6:6e:40:f7:80:d8:fb:fd:89:81: ff:3a:2c:5b:66:df:19:e9:f7:37:ab:93:3f:07:c5: 4d:1f:46:6d:56:1a:d1:77:cb:6e:d2:78:77:38:5d: 2a:93:73:fe:eb:e0:18:cd:90:2e:ec:c2:7c:f2:ed: 3d:c7:3c:10:e6:86:a6:29:64:e8:fb:e8:8d:0c:c3: f9:91:d0:13:50:f5:a3:fd:17:af:77:34:3c:26:7e: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:22:88:D5:E8:CC:AF:46:D1:CA:20:2F:B0:C1:4E:85:B9:09:FD:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/3a3e578e-9cda-3397-800c-e3cbde377721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73/33d3c304-619d-4e6d-aed5-9e25165cbc73.crl X509v3 Authority Key Identifier: keyid:8E:4A:0D:B4:C7:E9:33:47:0B:34:BD:00:38:64:1E:4A:78:EC:E2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/33d3c304-619d-4e6d-aed5-9e25165cbc73.cer sbgp-ipAddrBlock: critical IPv6: 2607:dd40:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:0a:34:c2:31:dd:9d:89:d0:e4:8b:90:a9:d7:15:be:66:88: 5c:5b:f3:e5:f2:b2:0a:e4:9a:11:7b:ad:5e:c3:28:d4:5a:55: e9:12:e8:fb:c0:97:db:7b:cb:92:d1:b9:67:5f:0e:d1:2f:70: ae:af:c7:6f:d4:cc:49:e7:c7:8f:c3:21:7b:9c:5c:a9:65:ba: da:c9:bc:33:fd:35:9d:1b:f7:9e:84:da:0f:c5:69:19:3a:d6: 86:01:58:13:dc:49:3c:fa:9d:fb:78:92:55:30:0c:7b:29:58: d0:19:03:e5:d5:8c:b4:cb:50:eb:d7:96:ee:5c:91:9b:4b:c7: 28:b5:27:da:56:9e:eb:a5:87:5d:46:c9:5e:d6:e8:79:6a:ba: 39:f2:68:b0:6f:72:ae:97:01:02:72:93:6a:a4:f1:e8:2e:ee: 33:49:f9:26:f0:df:25:78:8d:ef:8f:5e:44:17:5e:ed:c0:bc: 02:1e:d8:44:47:80:f2:ba:2e:01:fd:6d:11:2c:2c:ac:de:78: e3:22:bc:d0:a7:4a:18:12:bd:9e:0e:5e:d8:23:0c:01:05:e6: 0d:ed:76:9e:ea:54:32:53:ae:19:2f:b6:f5:00:ac:2a:4a:e1: 31:31:90:0b:0f:fa:d8:2f:12:7d:b7:97:c5:ab:49:af:9e:fb: f9:8e:08:72 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEv/27H1cUI1gH4U/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkM2MzMDQtNjE5ZC00ZTZkLWFlZDUtOWUyNTE2NWNi YzczMB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YWUzZTRhZGEtZmI4MS00MjJhLWEyZTEtNzRiMzYxMGI1NjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYW5iSkpiFhPEk1Zy6CpNRwznuOi3MMkELwS WjeaDoFYexwWyyC3nQ17PDS4Jq+l5wuAQpktaNjU4fIedQMMNK/hkQDfyVzRGNXt napLNt42U0HeffNnmBGgyLFPEZjJKnjK1gzh4B92VELcojyNzmmBuaDxiKHEHQ/a ZNjv34Q5ji27jOcrKvpGvA5cDmHFhOz+Z/m+lrsFlyx7kjCiLhzF5Uz32tElicZu QPeA2Pv9iYH/OixbZt8Z6fc3q5M/B8VNH0ZtVhrRd8tu0nh3OF0qk3P+6+AYzZAu 7MJ88u09xzwQ5oamKWTo++iNDMP5kdATUPWj/RevdzQ8Jn52qwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIMiiNXozK9G0cogL7DBToW5Cf1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zM2Qz YzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1MTY1Y2JjNzMvM2EzZTU3OGUtOWNkYS0z Mzk3LTgwMGMtZTNjYmRlMzc3NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzNkM2MzMDQtNjE5ZC00ZTZkLWFl ZDUtOWUyNTE2NWNiYzczLzMzZDNjMzA0LTYxOWQtNGU2ZC1hZWQ1LTllMjUxNjVj YmM3My5jcmwwHwYDVR0jBBgwFoAUjkoNtMfpM0cLNL0AOGQeSnjs4mowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zM2QzYzMwNC02MTlkLTRlNmQtYWVkNS05ZTI1 MTY1Y2JjNzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfdQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA0go0wjHdnYnQ5IuQqdcVvmaIXFvz5fKyCuSaEXutXsMo1FpV6RLo +8CX23vLktG5Z18O0S9wrq/Hb9TMSefHj8Mhe5xcqWW62sm8M/01nRv3noTaD8Vp GTrWhgFYE9xJPPqd+3iSVTAMeylY0BkD5dWMtMtQ69eW7lyRm0vHKLUn2lae66WH XUbJXtboeWq6OfJosG9yrpcBAnKTaqTx6C7uM0n5JvDfJXiN749eRBde7cC8Ah7Y REeA8rouAf1tESwsrN544yK80KdKGBK9ng5e2CMMAQXmDe12nupUMlOuGS+29QCs KkrhMTGQCw/62C8SfbeXxatJr577+Y4Icg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:24 2025 by rpki-client