This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa File: 43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa (raw, json) Hash identifier: lgUMgBg5NbaOFXTW+wT0me4DUqteFjNGviWcQYm+CIE= Subject key identifier: 74:CA:8E:3C:F3:EC:54:0D:85:EB:2E:8C:D2:9E:A6:20:91:D4:C9:D8 Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584BDFC05FA94F824DB67507E180 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa Signing time: Sun 16 Nov 2025 02:00:31 +0000 ROA not before: Sun 16 Nov 2025 02:00:31 +0000 ROA not after: Sat 14 Feb 2026 02:00:31 +0000 asID: 88 IP address blocks: 2604:4540:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:c0:5f:a9:4f:82:4d:b6:75:07:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Nov 16 02:00:31 2025 GMT Not After : Feb 14 02:00:31 2026 GMT Subject: CN=a988d5bd-70ae-49d6-b58e-d828ca54e1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:1e:eb:a8:df:33:a1:af:e8:70:64:29:14: 62:bc:d6:dc:e9:39:a8:04:f3:c1:cb:cc:e8:1e:bd: 2e:6f:da:70:5c:55:4a:3d:74:d4:c7:de:ce:f9:6c: b4:47:e4:67:11:9e:5b:ff:f7:bc:38:ef:3c:71:d2: ee:e8:c4:08:df:06:c8:df:04:59:82:08:62:d6:c5: 47:aa:4b:c5:fe:37:33:78:7b:eb:61:c0:3b:38:9e: ea:fa:d3:f8:06:9c:c2:4d:3c:3c:7a:fc:1f:f2:e2: 0b:a1:03:48:fa:2c:ae:73:a3:fc:8c:f0:2d:12:fa: b3:75:d1:85:6d:03:dc:13:fd:58:f5:92:b8:00:23: 39:6b:5d:55:ce:68:e9:b9:ee:e1:b7:b0:7d:03:b6: ed:65:e5:25:5e:ac:df:ca:d8:e7:7d:68:d1:d9:ac: 57:71:50:91:71:4b:47:c3:25:94:1c:ce:f4:ff:30: 4e:62:7c:a6:eb:ee:a4:d1:12:7c:79:f7:ed:4f:0b: b7:4f:86:65:e2:46:75:48:fc:0a:eb:d0:c6:c7:39: 5f:32:48:89:84:db:c5:e2:7f:f2:57:d4:73:81:dd: 21:46:c2:8c:81:11:7a:a9:c3:a6:33:58:5d:d0:98: 13:c9:8e:08:7b:e1:a7:46:4f:ef:0a:ce:c4:15:ee: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CA:8E:3C:F3:EC:54:0D:85:EB:2E:8C:D2:9E:A6:20:91:D4:C9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/43a189c4-9044-3410-a690-f3bf9d0dfbb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540:1000::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a0:c5:4c:21:7c:cf:cd:5e:63:47:b2:95:16:76:f1:76:c6: 31:a0:b5:93:b8:cf:44:e9:e1:aa:b9:34:13:cc:63:bc:d6:f1: c8:33:6f:64:f5:f5:cd:fe:11:55:40:a3:a8:ac:4e:eb:aa:4d: ee:9a:d6:41:a1:25:ff:0b:68:77:ba:e7:fa:5c:d1:29:c7:ef: b3:e0:9b:b0:d6:6a:d8:79:d8:e2:b5:64:85:41:ec:5c:b2:0a: 0d:21:4c:15:12:f3:45:8c:12:07:b7:5d:cb:e0:fc:9f:68:cc: d9:21:1d:47:3f:e2:ae:63:5d:69:f1:b7:47:80:72:84:63:e7: 76:e3:ba:f7:43:69:c2:85:5a:2d:96:0b:54:c1:3c:e7:f0:6a: 3e:7c:18:f5:61:a9:24:9a:f3:b5:01:28:a6:3d:a5:d1:08:39: 41:d7:6a:e4:48:ae:ac:62:1d:97:d0:90:9a:be:f7:84:da:ad: 9a:02:c8:48:c6:f6:64:16:3a:8e:78:f2:e4:74:0e:4e:9a:fd: f8:e2:43:d2:33:05:ec:f0:93:0c:3d:f1:71:ea:81:45:c9:4d: fd:4d:4c:0c:1f:c6:12:c6:73:72:c1:22:c3:3e:96:39:5e:b3: ac:a4:d6:82:7c:f5:d7:14:7b:f8:de:fa:11:36:38:9e:17:a2: 04:c5:a1:6c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvfwF+pT4JNtnUH4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MTExNjAyMDAzMVoXDTI2MDIxNDAyMDAzMVowLzEtMCsGA1UEAxMk YTk4OGQ1YmQtNzBhZS00OWQ2LWI1OGUtZDgyOGNhNTRlMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw8e66jfM6Gv6HBkKRRivNbc6TmoBPPBy8zo Hr0ub9pwXFVKPXTUx97O+Wy0R+RnEZ5b//e8OO88cdLu6MQI3wbI3wRZgghi1sVH qkvF/jczeHvrYcA7OJ7q+tP4BpzCTTw8evwf8uILoQNI+iyuc6P8jPAtEvqzddGF bQPcE/1Y9ZK4ACM5a11Vzmjpue7ht7B9A7btZeUlXqzfytjnfWjR2axXcVCRcUtH wyWUHM70/zBOYnym6+6k0RJ8efftTwu3T4Zl4kZ1SPwK69DGxzlfMkiJhNvF4n/y V9Rzgd0hRsKMgRF6qcOmM1hd0JgTyY4Ie+GnRk/vCs7EFe4rVwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHTKjjzz7FQNhesujNKepiCR1MnYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvNDNhMTg5YzQtOTA0NC0z NDEwLWE2OTAtZjNiZjlkMGRmYmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgRFQBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAtKDFTCF8z81eY0eylRZ28XbGMaC1k7jPROnhqrk0E8xjvNbxyDNv ZPX1zf4RVUCjqKxO66pN7prWQaEl/wtod7rn+lzRKcfvs+CbsNZq2HnY4rVkhUHs XLIKDSFMFRLzRYwSB7ddy+D8n2jM2SEdRz/irmNdafG3R4ByhGPnduO690NpwoVa LZYLVME85/BqPnwY9WGpJJrztQEopj2l0Qg5Qddq5EiurGIdl9CQmr73hNqtmgLI SMb2ZBY6jnjy5HQOTpr9+OJD0jMF7PCTDD3xceqBRclN/U1MDB/GEsZzcsEiwz6W OV6zrKTWgnz11xR7+N76ETY4nheiBMWhbA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:10:27 2025 by rpki-client