This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa File: dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa (raw, json) Hash identifier: u9VtaHp4jLnOjLF/RZoGschL8FnJo03nVPdlxzhuOnw= Subject key identifier: 71:B3:37:95:DD:D6:A5:0C:DF:B7:CA:86:95:7D:AB:15:08:50:2E:1B Certificate issuer: /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Certificate serial: 010D0C9F4328584BEC5082D4BE549C884A970400 Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 400065 IP address blocks: 2604:4540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:82:d4:be:54:9c:88:4a:97:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=22d1d554-dd94-4ec1-927e-af527ec95b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:3b:21:c0:86:30:cd:de:11:01:07:76:9d: 9a:3d:89:cd:7f:e8:35:49:33:b0:a9:62:84:47:53: 1e:49:ec:cf:7f:58:a3:ed:da:05:85:55:de:6c:07: 84:ea:5f:a0:a8:fa:f2:d4:ee:d5:ba:cb:e6:2a:a3: 03:90:90:3a:29:c3:d7:63:2a:ac:08:87:b5:7f:fd: f7:73:17:3d:58:f9:1c:f5:5c:08:5e:ed:fd:0f:42: 21:1c:3b:0c:a2:68:33:36:0e:cb:06:d0:fc:96:f1: ec:49:33:eb:a6:60:1c:46:ed:80:16:75:e9:85:66: 50:a3:d9:ca:bb:b3:dd:3c:a8:dd:49:52:8d:6c:84: 23:50:d4:b4:57:72:48:3f:ef:d2:82:0b:64:18:86: 3d:7d:db:73:4e:01:46:bb:57:a4:f6:b1:f1:d3:ca: 70:d6:62:51:b5:7f:73:1d:5d:7a:d3:95:88:88:99: 8d:00:b2:a5:cf:2d:cd:29:5e:0f:75:33:5b:10:fb: cc:13:4f:7e:2e:6e:cd:42:ad:d4:75:be:57:58:a1: 14:09:81:d6:2f:f8:be:d7:ca:d0:3b:25:be:eb:4b: 99:d4:e9:ae:cb:61:de:ec:11:19:b8:e7:f8:1a:48: b0:dc:7e:71:01:32:14:6f:16:8a:b4:3d:bc:0e:eb: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B3:37:95:DD:D6:A5:0C:DF:B7:CA:86:95:7D:AB:15:08:50:2E:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/dd4d84db-7a3d-35ad-a1db-6e770c1c76fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl X509v3 Authority Key Identifier: keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer sbgp-ipAddrBlock: critical IPv6: 2604:4540::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:86:4a:5f:7a:65:5a:f0:10:fa:3b:9c:ba:ec:e9:5a:91:0e: 47:07:84:01:47:37:6b:02:c5:b3:bb:59:56:30:90:2e:1a:63: 6a:01:e7:1b:46:98:37:f8:99:aa:2c:2e:c1:ed:ee:e8:ec:b7: bb:a2:33:fa:ca:20:a0:3a:9c:e5:e2:32:e8:56:eb:71:50:05: d3:28:0e:be:5b:98:cd:60:2b:a2:a0:a0:38:2a:59:48:11:8e: d2:68:10:45:db:0c:91:3f:2c:95:a0:88:03:8b:7f:d4:f7:60: 47:be:ab:c4:8c:08:f2:ec:c7:10:0a:c4:bb:24:0f:a5:7c:e9: 37:07:bd:92:4a:18:75:65:b5:ed:ff:c4:82:3f:9c:0c:a4:88: 81:35:85:7b:3d:c8:74:ef:16:6c:d1:2a:14:ee:b3:94:a9:14: 5b:31:78:dd:c1:7c:c9:04:61:26:ca:62:58:b3:25:d0:4d:11: e3:ce:1a:30:7f:62:15:06:ab:ca:b4:13:d5:d6:69:d3:89:44: 85:d3:3b:c5:15:55:68:71:94:d0:55:0f:61:32:64:83:c1:5a: 07:90:41:08:f4:c5:7f:95:d0:9e:b7:64:c2:21:74:50:5b:0f: 92:8e:dc:89:84:d0:3c:ff:d1:dc:84:c5:e5:9f:a0:0b:bf:15: 7d:66:71:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvsUILUvlSciEqXBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJmYzE2ZmUtYmYwYS00ZjNhLWE2NWUtMjE3ZDhmOGMz ZWNkMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk MjJkMWQ1NTQtZGQ5NC00ZWMxLTkyN2UtYWY1MjdlYzk1YjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMg7IcCGMM3eEQEHdp2aPYnNf+g1STOwqWKE R1MeSezPf1ij7doFhVXebAeE6l+gqPry1O7VusvmKqMDkJA6KcPXYyqsCIe1f/33 cxc9WPkc9VwIXu39D0IhHDsMomgzNg7LBtD8lvHsSTPrpmAcRu2AFnXphWZQo9nK u7PdPKjdSVKNbIQjUNS0V3JIP+/SggtkGIY9fdtzTgFGu1ek9rHx08pw1mJRtX9z HV1605WIiJmNALKlzy3NKV4PdTNbEPvME09+Lm7NQq3Udb5XWKEUCYHWL/i+18rQ OyW+60uZ1Omuy2He7BEZuOf4Gkiw3H5xATIUbxaKtD28DuuxmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGzN5Xd1qUM37fKhpV9qxUIUC4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YmZj MTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdkOGY4YzNlY2QvZGQ0ZDg0ZGItN2EzZC0z NWFkLWExZGItNmU3NzBjMWM3NmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGJmYzE2ZmUtYmYwYS00ZjNhLWE2 NWUtMjE3ZDhmOGMzZWNkLzhiZmMxNmZlLWJmMGEtNGYzYS1hNjVlLTIxN2Q4Zjhj M2VjZC5jcmwwHwYDVR0jBBgwFoAUl/yFHXLGc9xg3OTz+hLE+ivzRnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YmZjMTZmZS1iZjBhLTRmM2EtYTY1ZS0yMTdk OGY4YzNlY2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgRFQAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACmGSl96ZVrwEPo7nLrs6VqRDkcHhAFHN2sCxbO7WVYwkC4aY2oB 5xtGmDf4maosLsHt7ujst7uiM/rKIKA6nOXiMuhW63FQBdMoDr5bmM1gK6KgoDgq WUgRjtJoEEXbDJE/LJWgiAOLf9T3YEe+q8SMCPLsxxAKxLskD6V86TcHvZJKGHVl te3/xII/nAykiIE1hXs9yHTvFmzRKhTus5SpFFsxeN3BfMkEYSbKYlizJdBNEePO GjB/YhUGq8q0E9XWadOJRIXTO8UVVWhxlNBVD2EyZIPBWgeQQQj0xX+V0J63ZMIh dFBbD5KO3ImE0Dz/0dyExeWfoAu/FX1mcbM= -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:21 2025 by rpki-client