This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa File: bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa (raw, json) Hash identifier: 1+HTZOkPPO+gGh5Jufjv2noa+hkxNci5m1N0AaVo2u0= Subject key identifier: C7:22:A0:60:04:F9:74:B6:41:0D:5D:16:EB:E4:3B:09:13:94:DA:FD Certificate issuer: /CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Certificate serial: 010D0C9F4328584BF34B2545A6E2124F69830780 Authority key identifier: 7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 14618 IP address blocks: 2602:faca:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:25:45:a6:e2:12:4f:69:83:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e433c1f-a072-4dfd-8096-c6c8634a49f8 Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=c9072b5d-4656-4361-a1d6-7701647d384a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:06:2c:e4:1b:76:41:25:2d:d5:db:43:2b: e8:17:e5:44:45:21:75:4d:b3:ff:8e:0f:80:44:39: ae:4d:3d:7c:a0:21:e5:3a:09:20:d2:78:cb:85:99: ec:e6:6e:30:3d:a8:5f:f0:91:ab:ba:e0:96:be:7f: 09:80:ae:60:55:f2:fe:90:fe:7a:ed:b2:a3:31:62: 70:84:6f:56:5d:db:d2:ec:fc:58:10:c9:a6:65:fb: fe:cc:85:dd:21:6e:77:86:46:d0:4c:0f:87:0a:30: 00:6a:00:30:10:84:df:35:35:ec:12:ff:c5:de:23: b6:6f:3f:65:b4:29:13:bf:4f:aa:4a:c5:0b:22:61: 8e:8d:ec:eb:f6:b9:02:7a:98:32:e1:2a:83:13:f0: 5c:8e:8b:fa:38:eb:85:f2:90:46:9b:b5:38:82:a2: b1:95:1a:34:3e:c2:a5:94:0d:24:3a:4e:cb:21:99: 9b:c1:88:34:ce:61:15:22:70:76:bb:19:e4:40:92: 3a:ce:90:a6:d2:fe:1a:b6:c8:56:15:18:cd:6a:c5: d8:83:c1:9d:fb:c5:43:ae:8c:f8:be:5a:21:a1:50: 19:52:c2:8a:90:29:6f:a3:d5:6a:7a:40:7f:88:de: d9:b6:5c:2b:56:d5:a1:f0:8d:2c:a2:a7:17:5a:20: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:22:A0:60:04:F9:74:B6:41:0D:5D:16:EB:E4:3B:09:13:94:DA:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/bf3d6c30-fa23-3d6b-8695-4d3554136f00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8/8e433c1f-a072-4dfd-8096-c6c8634a49f8.crl X509v3 Authority Key Identifier: keyid:7F:94:5F:DC:7D:33:71:29:D4:44:7E:1C:27:46:6F:58:6A:D4:E2:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e433c1f-a072-4dfd-8096-c6c8634a49f8.cer sbgp-ipAddrBlock: critical IPv6: 2602:faca:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:83:d4:d2:16:5d:5a:3b:05:de:c4:71:97:09:a8:31:fb:f5: 1e:67:0e:17:a2:02:52:1d:cf:14:36:7e:e6:03:68:e2:5b:b4: 9c:c7:d9:86:22:68:eb:af:cc:6c:c9:39:81:43:27:31:e5:cf: e3:5c:15:33:75:c7:bd:7b:09:f6:21:53:16:e5:9c:bf:33:96: ac:65:ae:13:dc:f1:b5:3f:2d:cc:b3:0d:06:91:ed:e2:ca:45: 22:17:eb:3f:cd:e9:c4:6a:a9:e5:f2:4f:dd:63:6d:1b:47:04: 82:9d:2a:90:b0:60:43:61:40:62:9c:be:f2:af:34:00:0f:fd: 64:ac:d8:51:be:b2:33:6b:45:ab:81:5f:dc:d1:21:f3:f8:08: f9:3b:8e:ed:36:81:78:9f:b8:7c:e8:a6:35:e0:83:25:32:b2: a8:19:c0:58:82:9e:e1:70:5d:3e:15:7c:be:86:78:9b:31:da: 25:d5:6d:b2:30:fb:d9:19:bc:12:b6:dd:78:eb:40:6e:5e:8a: 58:4c:c7:8d:3e:62:5f:92:d7:75:8b:56:24:c4:f0:89:7e:df: 33:7c:72:e4:59:63:fb:cd:bd:19:ea:94:6a:ba:83:31:ed:40: 4a:ed:62:1d:e5:17:7f:91:38:5a:92:d3:dc:56:35:fd:ae:7e: 20:e7:14:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvzSyVFpuIST2mDB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU0MzNjMWYtYTA3Mi00ZGZkLTgwOTYtYzZjODYzNGE0 OWY4MB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk YzkwNzJiNWQtNDY1Ni00MzYxLWExZDYtNzcwMTY0N2QzODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo0GLOQbdkElLdXbQyvoF+VERSF1TbP/jg+A RDmuTT18oCHlOgkg0njLhZns5m4wPahf8JGruuCWvn8JgK5gVfL+kP567bKjMWJw hG9WXdvS7PxYEMmmZfv+zIXdIW53hkbQTA+HCjAAagAwEITfNTXsEv/F3iO2bz9l tCkTv0+qSsULImGOjezr9rkCepgy4SqDE/Bcjov6OOuF8pBGm7U4gqKxlRo0PsKl lA0kOk7LIZmbwYg0zmEVInB2uxnkQJI6zpCm0v4atshWFRjNasXYg8Gd+8VDroz4 vlohoVAZUsKKkClvo9VqekB/iN7ZtlwrVtWh8I0soqcXWiB58QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMcioGAE+XS2QQ1dFuvkOwkTlNr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQz M2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4NjM0YTQ5ZjgvYmYzZDZjMzAtZmEyMy0z ZDZiLTg2OTUtNGQzNTU0MTM2ZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGU0MzNjMWYtYTA3Mi00ZGZkLTgw OTYtYzZjODYzNGE0OWY4LzhlNDMzYzFmLWEwNzItNGRmZC04MDk2LWM2Yzg2MzRh NDlmOC5jcmwwHwYDVR0jBBgwFoAUf5Rf3H0zcSnURH4cJ0ZvWGrU4icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZTQzM2MxZi1hMDcyLTRkZmQtODA5Ni1jNmM4 NjM0YTQ5ZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6ygEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADiD1NIWXVo7Bd7EcZcJqDH79R5nDheiAlIdzxQ2fuYDaOJbtJzH 2YYiaOuvzGzJOYFDJzHlz+NcFTN1x717CfYhUxblnL8zlqxlrhPc8bU/LcyzDQaR 7eLKRSIX6z/N6cRqqeXyT91jbRtHBIKdKpCwYENhQGKcvvKvNAAP/WSs2FG+sjNr RauBX9zRIfP4CPk7ju02gXifuHzopjXggyUysqgZwFiCnuFwXT4VfL6GeJsx2iXV bbIw+9kZvBK23XjrQG5eilhMx40+Yl+S13WLViTE8Il+3zN8cuRZY/vNvRnqlGq6 gzHtQErtYh3lF3+ROFqS09xWNf2ufiDnFOQ= -----END CERTIFICATE-----Generated at Fri Dec 19 12:35:50 2025 by rpki-client