This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa File: b5060e1b-5649-3da3-90ed-6368bf81760a.roa (raw, json) Hash identifier: 30oi+s1pBz9ix95zwpKQdKd0YIEJ/dil/+rZf/ZRxBY= Subject key identifier: 71:B1:67:5E:A5:20:41:3A:54:8E:6A:84:6C:F8:37:EE:9F:1D:AE:16 Certificate issuer: /CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Certificate serial: 010D0C9F4328584C593154B1F71B0AB34E63AF80 Authority key identifier: F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 14228 IP address blocks: 2620:d5:4000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:54:b1:f7:1b:0a:b3:4e:63:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e65c610-fa49-4d7b-a2e7-69124f1e5c85 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=baf6160b-0fc1-4b66-8f99-be3c13a780cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:9a:50:2f:4a:a2:40:63:72:39:3e:38:d2: 62:79:57:47:ea:f8:0c:7d:e2:b9:34:0f:72:cc:a3: dd:46:ac:a6:d4:1a:9a:6b:c9:64:1a:98:b3:49:5c: 66:84:21:67:5e:ca:e9:04:31:63:26:9b:8d:79:d5: 1b:dd:28:5b:0d:f8:ea:e3:8c:aa:a5:c6:71:28:42: 77:1f:7b:2e:8a:78:5a:10:91:1b:5a:64:c4:5a:5c: 4d:91:8c:6d:46:6d:ca:2a:18:0d:fe:82:02:e6:db: c6:74:bd:e2:9b:55:5e:ab:a6:ac:82:8d:b3:13:d7: 43:71:8d:0b:38:ac:fe:ae:a2:eb:26:36:5b:24:80: c1:13:8d:11:fa:85:b0:43:c1:89:ea:93:c5:8b:3d: ea:b7:d1:9e:4f:a6:19:eb:17:00:ce:18:3a:35:91: 33:6b:ec:40:e7:a9:de:16:1f:ab:31:37:2a:e3:05: 59:db:4e:38:35:e1:16:c4:8f:39:ec:3f:56:16:e9: 9a:17:f6:b6:31:f3:fb:ee:01:de:3d:55:68:ed:80: d7:cd:8d:d5:2d:58:3f:43:e4:a7:05:d8:cb:13:59: 89:db:b9:60:e8:bb:4c:7e:94:b1:17:ab:29:1e:27: 8a:ad:04:a5:e0:10:5b:f4:68:97:f7:aa:62:f4:b0: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B1:67:5E:A5:20:41:3A:54:8E:6A:84:6C:F8:37:EE:9F:1D:AE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/b5060e1b-5649-3da3-90ed-6368bf81760a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.crl X509v3 Authority Key Identifier: keyid:F1:40:ED:33:FA:99:FA:E6:68:C3:42:37:01:C2:6B:4C:6A:AE:35:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e65c610-fa49-4d7b-a2e7-69124f1e5c85.cer sbgp-ipAddrBlock: critical IPv6: 2620:d5:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:da:0e:87:38:e0:1a:e4:31:44:81:f4:b9:16:b8:d6:3e:82: 1e:c0:c4:cd:20:8f:32:e3:45:9f:79:1f:ea:11:6b:1e:a5:71: e3:b9:3c:8a:87:36:c6:d6:ee:ef:6d:91:de:77:b1:90:53:9a: d7:09:a2:bf:00:c7:7c:7b:2f:7e:2f:85:75:8e:1d:30:ee:e2: 11:b9:6f:48:7f:8a:c5:31:1d:b8:6a:9b:30:1b:8d:16:91:f3: 96:0d:8f:01:a6:d8:e1:e2:14:41:ca:b0:04:34:eb:fd:96:b5: 7f:9e:d0:04:06:e2:8d:ec:c1:26:6d:f2:ec:c2:22:f2:5d:78: 50:6b:1f:7d:e9:4f:fa:8d:90:bc:8b:80:40:db:70:34:08:f2: 93:cb:98:fb:01:5e:92:ae:d9:8c:68:83:b2:93:7d:0a:43:c4: 98:81:a7:c8:4c:2e:01:60:60:b8:04:8d:7e:7c:83:ed:5b:04: ab:66:a3:b4:c0:ce:c4:e3:30:d3:78:ba:1e:5d:95:64:60:78: 55:6f:36:9c:f5:2e:7c:47:eb:4b:d0:75:bb:e5:6f:3c:b3:dd: 3d:ad:9b:0c:0d:77:43:45:94:25:d4:2b:64:92:89:e5:20:db: cb:99:80:de:d2:3d:ae:e8:89:0f:9e:90:1d:a4:81:94:87:3f: ec:41:ef:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExZMVSx9xsKs05jr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U2NWM2MTAtZmE0OS00ZDdiLWEyZTctNjkxMjRmMWU1 Yzg1MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YmFmNjE2MGItMGZjMS00YjY2LThmOTktYmUzYzEzYTc4MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkqaUC9KokBjcjk+ONJieVdH6vgMfeK5NA9y zKPdRqym1Bqaa8lkGpizSVxmhCFnXsrpBDFjJpuNedUb3ShbDfjq44yqpcZxKEJ3 H3suinhaEJEbWmTEWlxNkYxtRm3KKhgN/oIC5tvGdL3im1Veq6asgo2zE9dDcY0L OKz+rqLrJjZbJIDBE40R+oWwQ8GJ6pPFiz3qt9GeT6YZ6xcAzhg6NZEza+xA56ne Fh+rMTcq4wVZ2044NeEWxI857D9WFumaF/a2MfP77gHePVVo7YDXzY3VLVg/Q+Sn BdjLE1mJ27lg6LtMfpSxF6spHieKrQSl4BBb9GiX96pi9LCTQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGxZ16lIEE6VI5qhGz4N+6fHa4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1 YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEyNGYxZTVjODUvYjUwNjBlMWItNTY0OS0z ZGEzLTkwZWQtNjM2OGJmODE3NjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U2NWM2MTAtZmE0OS00ZDdiLWEy ZTctNjkxMjRmMWU1Yzg1LzNlNjVjNjEwLWZhNDktNGQ3Yi1hMmU3LTY5MTI0ZjFl NWM4NS5jcmwwHwYDVR0jBBgwFoAU8UDtM/qZ+uZow0I3AcJrTGquNSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTY1YzYxMC1mYTQ5LTRkN2ItYTJlNy02OTEy NGYxZTVjODUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAA1UAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzaDoc44BrkMUSB9LkWuNY+gh7AxM0gjzLjRZ95H+oRax6lceO5 PIqHNsbW7u9tkd53sZBTmtcJor8Ax3x7L34vhXWOHTDu4hG5b0h/isUxHbhqmzAb jRaR85YNjwGm2OHiFEHKsAQ06/2WtX+e0AQG4o3swSZt8uzCIvJdeFBrH33pT/qN kLyLgEDbcDQI8pPLmPsBXpKu2Yxog7KTfQpDxJiBp8hMLgFgYLgEjX58g+1bBKtm o7TAzsTjMNN4uh5dlWRgeFVvNpz1LnxH60vQdbvlbzyz3T2tmwwNd0NFlCXUK2SS ieUg28uZgN7SPa7oiQ+ekB2kgZSHP+xB77c= -----END CERTIFICATE-----Generated at Mon Jan 26 06:07:22 2026 by rpki-client