This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa File: cf3cda41-0474-3ce2-924d-84527b3062ff.roa (raw, json) Hash identifier: Gwu+HBrhRbgqvfz8aNreyEvYBwWkdIG9LQRhZ7x8kVg= Subject key identifier: D2:8C:2F:26:DC:DA:BC:32:0B:D7:3A:BC:33:E2:FA:B4:9F:A4:B6:EC Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977 Certificate serial: 010D0C9F4328584BC96AE4789BD334F38599C600 Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 398549 IP address blocks: 2605:dd40:5bbb::/48 maxlen: 48 2605:dd40:5ccc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:e4:78:9b:d3:34:f3:85:99:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=b9d169c2-ee3a-4bc6-95c5-99f6bf18ae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:05:b0:ca:af:f1:18:2e:a4:6d:00:95:9a: d4:84:34:b8:c2:47:ed:ec:3a:75:b4:fa:16:af:01: b9:ef:d4:9a:81:2a:5a:c9:35:49:a4:f7:02:4a:51: ca:e8:6e:3d:4a:8c:80:66:e8:08:00:bf:e4:51:99: 57:a8:54:d4:df:89:e2:1f:e5:13:d8:ed:c9:70:92: 88:2a:2b:79:6f:dd:90:78:62:aa:ba:c5:13:39:73: ac:c9:6d:42:97:69:4c:66:5c:78:53:e2:d7:1b:94: 76:52:13:1c:b4:97:08:f4:83:8c:75:32:21:59:a3: 8e:82:a1:d7:40:14:26:c4:f5:13:57:cf:6b:c8:70: 27:53:ac:10:f4:ef:93:99:a5:c2:59:8f:2d:af:02: bb:60:34:b0:2a:3f:eb:d2:c4:6e:57:5f:50:c7:01: 0f:9d:22:38:c5:01:03:d6:96:85:bc:a7:a9:62:fb: 35:e7:56:35:2e:92:74:e0:2a:87:c7:ee:a5:44:7c: 20:79:b4:a0:b5:33:98:1f:d9:6f:66:53:4e:75:82: ad:4b:02:fd:89:96:06:01:43:eb:05:20:35:9b:9b: 21:85:4b:58:72:f2:cd:90:c0:35:86:b9:15:aa:77: eb:09:b1:d3:00:fa:df:b4:87:04:3e:fc:15:2b:5e: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:2F:26:DC:DA:BC:32:0B:D7:3A:BC:33:E2:FA:B4:9F:A4:B6:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/cf3cda41-0474-3ce2-924d-84527b3062ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl X509v3 Authority Key Identifier: keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer sbgp-ipAddrBlock: critical IPv6: 2605:dd40:5bbb::/48 2605:dd40:5ccc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a7:ca:a1:3b:d2:ed:d5:f0:90:c7:2c:0b:9c:13:f8:5f:3e: 63:fe:07:ec:27:4d:50:46:c1:de:5e:89:e5:8a:7e:10:65:63: 2d:c1:7e:fe:8c:39:5b:af:41:92:3e:44:a5:d8:98:62:00:91: 60:b9:1a:c9:3c:b9:06:7d:03:63:ac:a5:29:5e:60:40:01:47: 58:8c:59:02:f3:73:c5:6a:03:3b:85:78:f3:be:fe:89:9d:95: 74:20:e0:2c:e0:76:16:39:78:42:74:d3:4a:3a:5a:b5:c6:d7: 5c:ee:0c:63:b6:a8:ee:42:48:b0:60:5e:dd:ae:1e:76:24:4b: 0f:72:b8:eb:25:04:5c:6e:29:bc:da:5b:94:32:ef:d8:51:24: 05:e5:8f:a1:df:d6:e9:a2:e2:df:c1:3f:e6:87:54:a2:03:15: 79:c8:17:51:70:7d:1a:47:a6:5e:1f:7e:ec:74:af:4c:37:cd: fa:42:43:c4:38:4a:fa:4e:5d:d5:c4:84:5b:3a:4b:d4:b2:ee: 62:e3:93:9e:d3:d0:5c:29:bd:18:1d:d7:71:6f:53:d7:79:f8: 80:cb:65:0c:f7:76:86:be:42:25:fd:94:ba:2c:99:ed:a0:3b: e8:ae:8e:db:1c:77:c2:db:06:3b:9e:87:8c:8b:3d:ae:96:39: 2b:1c:d3:23 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEvJauR4m9M084WZxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4 OTc3MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk YjlkMTY5YzItZWUzYS00YmM2LTk1YzUtOTlmNmJmMThhZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBkFsMqv8RgupG0AlZrUhDS4wkft7Dp1tPoW rwG579SagSpayTVJpPcCSlHK6G49SoyAZugIAL/kUZlXqFTU34niH+UT2O3JcJKI Kit5b92QeGKqusUTOXOsyW1Cl2lMZlx4U+LXG5R2UhMctJcI9IOMdTIhWaOOgqHX QBQmxPUTV89ryHAnU6wQ9O+TmaXCWY8trwK7YDSwKj/r0sRuV19QxwEPnSI4xQED 1paFvKepYvs151Y1LpJ04CqHx+6lRHwgebSgtTOYH9lvZlNOdYKtSwL9iZYGAUPr BSA1m5shhUtYcvLNkMA1hrkVqnfrCbHTAPrftIcEPvwVK16gOwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFNKMLybc2rwyC9c6vDPi+rSfpLbsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvY2YzY2RhNDEtMDQ3NC0z Y2UyLTkyNGQtODQ1MjdiMzA2MmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4 ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy ZDVjODg5NzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgXdQFu7 AwcAJgXdQFzMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEynyqE70u3V8JDHLAucE/hfPmP+B+wnTVBGwd5e ieWKfhBlYy3Bfv6MOVuvQZI+RKXYmGIAkWC5Gsk8uQZ9A2OspSleYEABR1iMWQLz c8VqAzuFePO+/omdlXQg4CzgdhY5eEJ000o6WrXG11zuDGO2qO5CSLBgXt2uHnYk Sw9yuOslBFxuKbzaW5Qy79hRJAXlj6Hf1umi4t/BP+aHVKIDFXnIF1FwfRpHpl4f fux0r0w3zfpCQ8Q4SvpOXdXEhFs6S9Sy7mLjk57T0FwpvRgd13FvU9d5+IDLZQz3 doa+QiX9lLosme2gO+iujtscd8LbBjueh4yLPa6WOSsc0yM= -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:55 2025 by rpki-client