This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa File: 4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa (raw, json) Hash identifier: AKu+LnqTYxQFc7ckbYNiu298NU+b1IXJghtZKKDPJ0k= Subject key identifier: C0:E0:84:7F:C8:69:D0:4B:E8:BD:B5:26:0E:7B:E2:89:5D:9E:86:AB Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584C0570BBE3038C8DAB54DBE800 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 16509 IP address blocks: 2600:400:ff00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:bb:e3:03:8c:8d:ab:54:db:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=b86695c5-ebbb-452c-8cb4-ba5a883d5e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:44:3b:84:cd:61:3c:e3:a8:60:f4:cb:b2: 42:4d:86:9f:c2:00:3b:95:fa:10:95:01:7d:0d:73: 78:87:81:e1:e0:6d:2a:ef:4e:c3:c5:16:a6:25:9a: 50:fd:ca:30:7f:60:67:83:43:cb:30:50:f0:8d:03: 87:c7:96:4c:cd:ff:36:1a:e2:a0:8c:59:ed:44:96: 60:6b:b8:a6:bf:09:35:01:d2:a8:1a:bd:b7:c6:3a: df:d6:44:28:ea:4b:f9:0e:8b:b7:05:d9:93:cc:37: 95:40:1c:da:ab:a5:9b:e7:ef:0f:c9:7d:e6:d7:44: c0:9b:33:b0:3a:95:b0:11:25:0e:e0:98:fb:a4:40: 73:70:75:a9:26:ca:7d:5e:3d:19:1e:73:8f:5d:16: 3e:18:dd:6d:7d:99:45:51:44:3d:cb:ce:50:98:3a: c9:24:1b:b5:5b:70:2e:cf:cb:46:17:02:6c:c1:8e: ae:15:7e:26:1c:f4:50:25:a3:ec:96:d7:a9:75:f4: 08:9a:70:88:eb:f6:4f:23:b7:d9:f1:d6:59:7d:3f: f8:87:57:00:0d:bb:ae:3a:cd:5a:e7:f2:67:30:0b: e5:46:c9:47:50:cc:ef:a9:76:8e:77:11:0d:af:c7: 6c:ed:3e:b7:cc:2a:26:7c:3f:2b:4e:b1:1d:51:05: 49:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E0:84:7F:C8:69:D0:4B:E8:BD:B5:26:0E:7B:E2:89:5D:9E:86:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/4f0fe6e7-b8ab-3dac-9155-001ac64dc382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400:ff00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:2d:e6:d0:ea:0f:fe:5c:8e:5e:60:9a:47:f1:07:19:a4:5a: b3:7e:2a:49:50:12:16:23:c4:4a:18:27:f9:d4:65:31:65:3c: 37:b6:d9:aa:4a:44:76:6b:51:fb:7b:cd:85:7d:39:f2:88:02: 69:78:0f:f5:66:2c:3d:c0:da:23:08:c9:43:e8:37:f7:95:9f: 54:98:4a:f8:0e:fd:ed:14:85:a6:64:30:6a:77:16:81:d1:78: f7:52:22:c7:5a:f0:73:36:43:2a:aa:75:f9:49:5b:b0:0d:e0: 95:38:4d:f8:c0:38:9d:e7:3d:e6:4f:ac:b8:0d:97:e4:6a:fc: 83:bf:87:f7:eb:54:db:86:46:97:86:ce:7d:03:e7:5d:08:74: 7c:36:e7:3d:54:ff:cb:e5:70:6c:d7:a1:4a:8b:22:bc:ca:47: 06:6c:d2:fe:c0:c3:86:25:22:31:b3:f4:92:15:4d:a9:1a:02: 87:c4:c2:ef:91:94:9f:ba:db:d8:fd:56:46:94:1c:80:54:28: 9d:1d:44:db:d8:0b:d2:b9:dd:15:b2:a3:91:e3:13:a7:6b:1e: dc:49:78:2e:1f:87:c5:8a:39:49:42:5c:f1:80:37:2b:e7:f5: 47:b8:1b:64:47:f1:38:a7:a5:01:d3:77:87:d6:c1:b6:02:42: 1b:da:9a:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwFcLvjA4yNq1Tb6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk Yjg2Njk1YzUtZWJiYi00NTJjLThjYjQtYmE1YTg4M2Q1ZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEhEO4TNYTzjqGD0y7JCTYafwgA7lfoQlQF9 DXN4h4Hh4G0q707DxRamJZpQ/cowf2Bng0PLMFDwjQOHx5ZMzf82GuKgjFntRJZg a7imvwk1AdKoGr23xjrf1kQo6kv5Dou3BdmTzDeVQBzaq6Wb5+8PyX3m10TAmzOw OpWwESUO4Jj7pEBzcHWpJsp9Xj0ZHnOPXRY+GN1tfZlFUUQ9y85QmDrJJBu1W3Au z8tGFwJswY6uFX4mHPRQJaPsltepdfQImnCI6/ZPI7fZ8dZZfT/4h1cADbuuOs1a 5/JnMAvlRslHUMzvqXaOdxENr8ds7T63zComfD8rTrEdUQVJZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMDghH/IadBL6L21Jg574oldnoarMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNGYwZmU2ZTctYjhhYi0z ZGFjLTkxNTUtMDAxYWM2NGRjMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAEAP8A MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABwt5tDqD/5cjl5gmkfxBxmkWrN+KklQEhYjxEoYJ/nUZTFlPDe2 2apKRHZrUft7zYV9OfKIAml4D/VmLD3A2iMIyUPoN/eVn1SYSvgO/e0UhaZkMGp3 FoHRePdSIsda8HM2QyqqdflJW7AN4JU4TfjAOJ3nPeZPrLgNl+Rq/IO/h/frVNuG RpeGzn0D510IdHw25z1U/8vlcGzXoUqLIrzKRwZs0v7Aw4YlIjGz9JIVTakaAofE wu+RlJ+629j9VkaUHIBUKJ0dRNvYC9K53RWyo5HjE6drHtxJeC4fh8WKOUlCXPGA Nyvn9Ue4G2RH8TinpQHTd4fWwbYCQhvampQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:01 2025 by rpki-client