This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa File: 00a33301-9187-30c7-82ee-d5b3029d2af1.roa (raw, json) Hash identifier: EzfewP7QkhMcPz1uVxJpPIMcFdoVs/hqM51BBqWL+Wo= Subject key identifier: CD:77:E9:94:11:63:23:CD:D5:A2:D1:69:F4:E4:32:1D:D0:5C:AB:30 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584BEC5082BE86D19B1115C7F400 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 47065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:82:be:86:d1:9b:11:15:c7:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=ab99f9cc-6e6d-4332-bab9-0974b2301caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:7b:94:53:0e:3c:9b:e0:8d:83:28:a5:31: eb:8a:2a:0d:d4:34:f9:cb:0f:0f:52:16:89:96:91: b7:d6:4f:a0:a3:ad:b7:9e:d3:74:d4:6d:d9:41:32: 27:3b:69:4f:7b:c0:6b:b9:b4:6b:03:5a:a2:30:0f: ae:d9:23:7d:14:fb:95:29:2c:72:68:53:a1:a2:69: 8e:30:d2:8f:50:5f:9e:a3:b5:f1:5e:5f:89:28:8a: fe:a5:4a:cd:c2:c9:0e:1a:f0:e2:9d:81:5c:f8:a2: fe:e7:ab:18:a5:f2:6b:b2:c8:4b:e1:ae:4f:b9:4a: ed:2a:53:2b:f7:f1:c9:d7:49:a4:67:d1:08:bd:7f: 98:3a:03:cb:d1:c1:5c:5a:d2:12:ff:47:ab:e9:36: ec:99:48:73:0e:55:ae:e6:e9:32:b6:4e:42:d0:92: 45:97:57:fe:f8:49:8c:3f:93:69:da:46:a9:30:04: 66:55:a9:04:9e:30:0e:5c:8e:88:97:08:c7:d5:10: da:4e:f7:a1:9f:7e:60:d3:33:ec:6e:e4:3b:68:aa: 64:85:fd:65:63:36:20:f0:22:22:16:92:a6:73:78: d2:75:31:53:f4:ca:55:f0:3f:54:6e:a4:90:cb:68: 62:bc:01:29:d6:10:7f:67:81:40:0a:ef:e1:c0:cd: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:77:E9:94:11:63:23:CD:D5:A2:D1:69:F4:E4:32:1D:D0:5C:AB:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/00a33301-9187-30c7-82ee-d5b3029d2af1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6b:c4:9a:f3:42:d8:03:a1:1f:17:57:10:26:6b:b4:ee:8e: c7:81:6b:75:7b:75:14:46:b5:7b:da:47:9e:15:2c:6d:a1:06: e3:db:50:79:22:03:24:d8:2f:5f:78:3c:53:c3:63:c3:f2:b7: 8e:cd:2b:49:73:25:2a:7a:0c:42:8f:23:d7:2e:27:48:6f:4f: a7:b4:80:7d:17:c0:60:83:c4:8f:00:a5:a0:68:e4:d2:61:60: eb:ac:ce:da:66:aa:e3:e6:58:50:4e:e2:d1:5f:b2:16:5f:e4: d4:6c:a5:8b:72:50:34:a4:ad:b5:5a:fe:1f:59:f9:a2:ee:1f: 49:1e:1d:fd:b6:47:32:35:45:66:91:d4:fd:1f:82:70:8e:97: 7d:65:c0:da:40:7d:52:fc:a4:c8:1c:70:76:66:27:2b:bf:60: 60:91:15:54:63:31:1c:f1:79:fa:10:f0:fd:c9:6a:95:26:5d: 6e:7f:c6:90:17:97:74:f9:2f:0a:9e:8a:f0:d3:4a:bf:53:da: 6c:10:69:01:b1:0a:b3:8b:dc:57:56:dd:22:1d:ea:1b:81:5f: 4d:e9:bd:ba:4b:41:59:a8:c2:17:44:67:bf:5d:94:c1:bc:a9: 49:05:ad:86:9f:47:54:fb:bf:b7:e8:25:fc:fd:74:a7:5c:3f: 68:17:42:06 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvsUIK+htGbERXH9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk YWI5OWY5Y2MtNmU2ZC00MzMyLWJhYjktMDk3NGIyMzAxY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/57lFMOPJvgjYMopTHriioN1DT5yw8PUhaJ lpG31k+go623ntN01G3ZQTInO2lPe8BrubRrA1qiMA+u2SN9FPuVKSxyaFOhommO MNKPUF+eo7XxXl+JKIr+pUrNwskOGvDinYFc+KL+56sYpfJrsshL4a5PuUrtKlMr 9/HJ10mkZ9EIvX+YOgPL0cFcWtIS/0er6TbsmUhzDlWu5ukytk5C0JJFl1f++EmM P5Np2kapMARmVakEnjAOXI6IlwjH1RDaTvehn35g0zPsbuQ7aKpkhf1lYzYg8CIi FpKmc3jSdTFT9MpV8D9UbqSQy2hivAEp1hB/Z4FACu/hwM2PuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM136ZQRYyPN1aLRafTkMh3QXKswMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvMDBhMzMzMDEtOTE4Ny0z MGM3LTgyZWUtZDViMzAyOWQyYWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHVrxJrzQtgDoR8XVxAma7TujseBa3V7dRRGtXvaR54VLG2hBuPb UHkiAyTYL194PFPDY8Pyt47NK0lzJSp6DEKPI9cuJ0hvT6e0gH0XwGCDxI8ApaBo 5NJhYOusztpmquPmWFBO4tFfshZf5NRspYtyUDSkrbVa/h9Z+aLuH0keHf22RzI1 RWaR1P0fgnCOl31lwNpAfVL8pMgccHZmJyu/YGCRFVRjMRzxefoQ8P3JapUmXW5/ xpAXl3T5LwqeivDTSr9T2mwQaQGxCrOL3FdW3SId6huBX03pvbpLQVmowhdEZ79d lMG8qUkFrYafR1T7v7foJfz9dKdcP2gXQgY= -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:25 2025 by rpki-client