This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa File: 5aff0123-c654-3a1d-bbad-1e7208a52d23.roa (raw, json) Hash identifier: HK5pV3vsT3MhPPKSF92GaiXr9THjcy7KgOy5bpkyHUE= Subject key identifier: 72:85:73:0E:77:4B:0E:AE:78:39:DB:89:9C:1A:D4:93:26:53:C7:0A Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012 Certificate serial: 010D0C9F4328584C136625DBBFD72D8F56A84200 Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 32723 IP address blocks: 2607:2040::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:25:db:bf:d7:2d:8f:56:a8:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012 Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=e64d32fd-455a-49f3-85ec-8c72b4a2c9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:95:6e:46:b5:90:e1:50:eb:e0:9f:46:c8: 67:1a:f7:c2:ba:a3:ae:b2:44:9f:1c:81:9a:ca:de: 17:18:3b:f5:a0:57:1e:49:bb:9d:76:fd:2c:39:bd: 8b:e0:4d:bd:44:d2:47:65:fc:b7:89:2d:05:92:d7: a0:e7:2d:e6:5a:fe:85:3a:1f:e1:fe:87:aa:24:65: 25:f9:86:26:45:6b:b1:fd:65:98:23:da:3b:a9:3c: 94:b6:c4:8f:b2:c0:9f:eb:55:1a:6a:d5:45:a5:04: 6b:08:aa:06:ff:cb:0a:2a:e8:c8:02:c5:ec:c5:91: 59:5f:1f:e4:6d:a9:05:7e:ee:45:f6:d9:50:93:66: 85:5a:da:46:24:f1:fd:a0:bb:71:69:8a:f5:cb:eb: 20:73:ff:58:07:cb:3b:26:61:6a:9a:fa:a2:b7:8e: 7e:be:dc:c3:74:a5:4f:09:f0:98:57:bb:a7:95:04: db:45:25:d8:81:60:ff:65:9d:f1:7e:fc:81:0b:97: 8d:eb:71:b5:d8:f1:38:c1:b1:27:f6:eb:75:86:98: 2f:0b:d6:2a:13:9c:10:97:43:97:87:84:fd:8e:33: a4:9d:b6:19:39:c5:b6:ef:29:8b:32:58:1b:16:db: 6e:e0:30:bd:90:74:1a:51:8d:01:6a:46:a5:64:77: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:73:0E:77:4B:0E:AE:78:39:DB:89:9C:1A:D4:93:26:53:C7:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/5aff0123-c654-3a1d-bbad-1e7208a52d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl X509v3 Authority Key Identifier: keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer sbgp-ipAddrBlock: critical IPv6: 2607:2040::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f9:72:88:18:05:2a:69:05:b2:fb:5f:4d:d7:5d:3c:72:d6: 33:4f:a6:dc:da:9a:92:af:36:8f:8a:fb:03:d0:d4:d8:16:d7: dd:e5:89:f3:f0:dc:de:d3:f7:f2:bc:1d:b1:20:59:42:6e:24: 37:9b:9d:8f:fc:0d:c6:dd:95:c9:2f:15:f6:f8:24:d9:1d:14: fa:78:fc:a5:33:3d:3f:66:01:51:c1:1a:d5:aa:dd:75:ce:7f: 55:c0:b6:13:4b:6f:2d:94:a3:b9:b8:6c:c8:35:f5:35:db:7d: 87:ab:19:99:62:e4:d5:64:89:2b:37:b9:b8:39:ab:e1:d6:62: 13:1a:3f:b7:e9:fe:bb:86:b0:26:69:ac:15:bf:9a:e7:57:36: 1f:23:25:55:ce:dd:d1:2e:45:02:01:54:fb:2f:e5:bd:1b:b6: 37:1e:23:0f:1d:24:d0:e2:cb:c7:1e:e0:fa:db:06:3c:a1:76: d8:b6:1f:26:ae:30:b6:5c:bd:a2:6d:98:b7:68:fd:8c:bd:bb: 15:24:5b:3e:50:a5:30:d7:ca:8a:71:4c:52:3f:98:9a:46:af: 11:04:0d:22:7c:15:7d:ce:9f:d0:ad:44:09:2e:25:29:69:45: ca:9c:e9:18:51:5b:b2:2b:e6:59:59:53:64:26:6e:e9:cc:38: 9d:f0:7c:e3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwTZiXbv9ctj1aoQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGY5NTBiMTctODM0NS00MWU3LWJmNzUtNTQ4MTcyOWEw MDEyMB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk ZTY0ZDMyZmQtNDU1YS00OWYzLTg1ZWMtOGM3MmI0YTJjOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4OVbka1kOFQ6+CfRshnGvfCuqOuskSfHIGa yt4XGDv1oFceSbuddv0sOb2L4E29RNJHZfy3iS0Fkteg5y3mWv6FOh/h/oeqJGUl +YYmRWux/WWYI9o7qTyUtsSPssCf61UaatVFpQRrCKoG/8sKKujIAsXsxZFZXx/k bakFfu5F9tlQk2aFWtpGJPH9oLtxaYr1y+sgc/9YB8s7JmFqmvqit45+vtzDdKVP CfCYV7unlQTbRSXYgWD/ZZ3xfvyBC5eN63G12PE4wbEn9ut1hpgvC9YqE5wQl0OX h4T9jjOknbYZOcW27ymLMlgbFttu4DC9kHQaUY0BakalZHf53wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHKFcw53Sw6ueDnbiZwa1JMmU8cKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1 MGIxNy04MzQ1LTQxZTctYmY3NS01NDgxNzI5YTAwMTIvNWFmZjAxMjMtYzY1NC0z YTFkLWJiYWQtMWU3MjA4YTUyZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGY5NTBiMTctODM0NS00MWU3LWJm NzUtNTQ4MTcyOWEwMDEyLzBmOTUwYjE3LTgzNDUtNDFlNy1iZjc1LTU0ODE3Mjlh MDAxMi5jcmwwHwYDVR0jBBgwFoAUVjwr/D78tHnEgtdq3t5zMLCztmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZjk1MGIxNy04MzQ1LTQxZTctYmY3NS01NDgx NzI5YTAwMTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgcgQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAA+XKIGAUqaQWy+19N1108ctYzT6bc2pqSrzaPivsD0NTYFtfd5Ynz 8Nze0/fyvB2xIFlCbiQ3m52P/A3G3ZXJLxX2+CTZHRT6ePylMz0/ZgFRwRrVqt11 zn9VwLYTS28tlKO5uGzINfU1232HqxmZYuTVZIkrN7m4Oavh1mITGj+36f67hrAm aawVv5rnVzYfIyVVzt3RLkUCAVT7L+W9G7Y3HiMPHSTQ4svHHuD62wY8oXbYth8m rjC2XL2ibZi3aP2MvbsVJFs+UKUw18qKcUxSP5iaRq8RBA0ifBV9zp/QrUQJLiUp aUXKnOkYUVuyK+ZZWVNkJm7pzDid8Hzj -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:28 2025 by rpki-client