This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa File: a3882799-952b-3088-babc-d21c9fdf0685.roa (raw, json) Hash identifier: pMWpTM4f0tyFpDmtjHpRvjdW+AfFAua6EL3YeSmumKs= Subject key identifier: BA:1A:8B:F6:91:8C:A0:58:14:F6:9D:38:CC:9B:E5:41:A6:81:73:B7 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584BD3306DD6F7820F0EAC1D7860 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 29854 IP address blocks: 2607:fc98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:6d:d6:f7:82:0f:0e:ac:1d:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=764fd7cc-3094-4f7c-a7c6-62bb07b00851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:9f:f0:0d:d3:55:2e:1b:03:9c:f8:c3:41: 00:0f:a7:e6:f9:6d:9b:5b:98:b1:26:82:a8:f6:52: 46:c9:79:f4:92:d4:11:46:40:a8:e6:98:67:4a:0f: aa:d9:db:42:e5:57:24:34:4e:bd:2b:98:84:f6:ef: a6:05:b3:60:09:9d:46:8a:45:91:38:a7:5f:3f:e3: b7:1e:f2:b9:be:58:da:2f:3f:c1:d4:5f:03:c5:e6: d0:e0:ad:07:17:40:1c:ab:d5:38:37:1f:46:ed:7d: d4:b4:aa:f0:98:56:ea:d5:d9:64:0c:15:3a:73:c8: eb:4c:db:11:ba:c8:6b:71:79:7e:63:7f:20:3e:be: cc:e7:fe:53:13:47:06:34:07:aa:3d:37:00:ac:d4: eb:d9:be:26:4b:2c:88:06:42:78:25:83:3d:5f:e8: 05:54:c6:a0:48:14:24:de:a1:0d:3b:e3:ac:8e:e9: 81:1c:57:6a:2e:eb:e1:db:b8:98:57:fd:a7:a2:09: 07:3b:1f:c5:e3:84:7a:54:2d:cb:18:5c:75:16:04: 14:eb:86:af:93:a6:ad:71:8b:e0:24:47:6b:94:02: 94:8e:e0:4e:b4:98:e8:50:34:1d:7a:63:73:2d:9e: d3:8c:d3:99:ec:2c:56:f9:2e:a8:a3:f9:03:ec:80: a4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1A:8B:F6:91:8C:A0:58:14:F6:9D:38:CC:9B:E5:41:A6:81:73:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/a3882799-952b-3088-babc-d21c9fdf0685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv6: 2607:fc98::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9f:99:a2:79:52:09:b3:46:be:2d:4a:07:46:75:73:5e:25: c9:de:a6:4a:62:b8:3d:94:9f:53:39:59:5e:29:5c:82:c7:81: d4:f8:9f:69:e5:03:ba:1e:a3:24:46:31:d9:a4:67:cb:66:41: 7c:d6:72:dc:2a:63:25:ca:c9:2f:ab:7e:ab:b5:f4:8e:a2:d4: 86:79:78:2b:c6:4b:e2:e3:ca:ea:dd:ef:10:b4:44:32:61:8a: 05:ba:e5:df:fd:b1:16:ff:ff:26:10:e5:e7:c0:26:2b:07:03: 6c:0c:30:3a:1d:41:cd:61:0e:f4:cf:1b:e6:9e:c9:dd:1d:38: 22:ce:c0:ae:7f:06:7e:cb:d0:96:a6:34:ad:bc:e1:36:cb:d3: ec:37:33:0d:08:d7:cb:aa:af:db:7f:5c:a7:8d:ab:0d:1a:23: 90:ae:b4:cf:8c:55:d8:ae:1e:67:02:bc:e9:c4:37:ea:4f:af: 1c:01:f3:3c:f7:23:24:46:53:b4:26:19:5e:dc:87:2a:dc:df: 7e:71:ff:23:0f:ea:96:ad:d7:87:12:48:72:7b:c9:3b:64:ea: af:d3:37:6b:5d:48:27:43:95:db:c3:42:d7:fe:c2:43:83:a0: 1c:62:49:cc:86:d6:a2:49:fc:8c:22:84:5b:3a:ea:cc:30:d5: 7c:80:2c:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvTMG3W94IPDqwdeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk NzY0ZmQ3Y2MtMzA5NC00ZjdjLWE3YzYtNjJiYjA3YjAwODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3yf8A3TVS4bA5z4w0EAD6fm+W2bW5ixJoKo 9lJGyXn0ktQRRkCo5phnSg+q2dtC5VckNE69K5iE9u+mBbNgCZ1GikWROKdfP+O3 HvK5vljaLz/B1F8DxebQ4K0HF0Acq9U4Nx9G7X3UtKrwmFbq1dlkDBU6c8jrTNsR ushrcXl+Y38gPr7M5/5TE0cGNAeqPTcArNTr2b4mSyyIBkJ4JYM9X+gFVMagSBQk 3qENO+OsjumBHFdqLuvh27iYV/2nogkHOx/F44R6VC3LGFx1FgQU64avk6atcYvg JEdrlAKUjuBOtJjoUDQdemNzLZ7TjNOZ7CxW+S6oo/kD7ICkdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLoai/aRjKBYFPadOMyb5UGmgXO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvYTM4ODI3OTktOTUyYi0z MDg4LWJhYmMtZDIxYzlmZGYwNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf8mDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCKn5mieVIJs0a+LUoHRnVzXiXJ3qZKYrg9lJ9TOVleKVyCx4HU+J9p 5QO6HqMkRjHZpGfLZkF81nLcKmMlyskvq36rtfSOotSGeXgrxkvi48rq3e8QtEQy YYoFuuXf/bEW//8mEOXnwCYrBwNsDDA6HUHNYQ70zxvmnsndHTgizsCufwZ+y9CW pjStvOE2y9PsNzMNCNfLqq/bf1ynjasNGiOQrrTPjFXYrh5nArzpxDfqT68cAfM8 9yMkRlO0Jhle3Icq3N9+cf8jD+qWrdeHEkhye8k7ZOqv0zdrXUgnQ5Xbw0LX/sJD g6AcYknMhtaiSfyMIoRbOurMMNV8gCwY -----END CERTIFICATE-----Generated at Sat Dec 6 17:03:05 2025 by rpki-client