This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa File: 71105327-84d5-3f6a-bcc8-fff7f32ab982.roa (raw, json) Hash identifier: h2fgFZTYFXCfWMxHb1lqWYnfiBSnABa238w7/jr39J4= Subject key identifier: 9A:74:98:9B:94:BE:90:EF:30:C1:0D:4F:DC:C2:44:D8:01:79:88:D8 Certificate issuer: /CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Certificate serial: 010D0C9F4328584C02A60A387A371BBD4DA06000 Authority key identifier: DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 15147 IP address blocks: 2600:400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:0a:38:7a:37:1b:bd:4d:a0:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a0f176-b4a2-4e32-8a98-4e12e07d8996 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=2d91f6bc-5094-4801-abbb-9710ad5f53ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:d4:10:87:b7:e8:ef:56:7f:c0:75:3c:22: 66:64:d5:ba:cb:9f:b1:d1:b2:54:83:ed:53:12:e9: 2d:2f:4b:94:18:ed:a9:21:c6:ff:67:02:f0:d6:34: c5:7d:3e:31:d8:cb:cd:5b:64:d0:ca:ae:1b:51:9f: 86:8b:fd:5b:59:f4:5e:8b:5a:0b:a6:0e:33:5d:8a: ee:d6:95:08:2b:49:1a:7f:98:0c:23:99:7f:05:17: e0:9a:6c:04:8b:22:38:c8:1c:0e:c0:1c:d9:e7:2a: 3d:11:4a:78:32:56:08:30:ee:eb:29:62:c5:ff:02: c8:a8:f4:7e:2e:2f:12:58:8f:d4:95:e5:f1:cc:ef: 2d:fe:d9:a7:5e:e6:cf:93:4a:a8:f3:35:77:3d:7d: e9:46:dd:87:2f:c4:d2:ad:17:26:20:85:5b:52:af: 6a:2a:85:36:b7:36:f6:fb:81:15:ad:63:f2:63:92: 7f:d1:7e:a4:f5:42:6f:57:11:95:4c:a0:71:ba:41: f1:45:1b:f9:a3:bc:b9:7e:da:90:c4:b7:6d:a4:00: 35:c6:9d:d6:9b:b8:a5:57:70:b4:3a:40:6d:c4:d8: eb:aa:1d:cb:a6:79:d7:53:c0:19:e9:15:39:53:98: e5:e6:75:00:51:29:64:8b:5d:8a:c7:10:52:05:04: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:74:98:9B:94:BE:90:EF:30:C1:0D:4F:DC:C2:44:D8:01:79:88:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/71105327-84d5-3f6a-bcc8-fff7f32ab982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.crl X509v3 Authority Key Identifier: keyid:DC:75:7C:13:7E:A8:82:8E:7C:F9:53:75:19:D0:B1:85:4E:C5:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d8a0f176-b4a2-4e32-8a98-4e12e07d8996.cer sbgp-ipAddrBlock: critical IPv6: 2600:400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:f9:35:8a:ad:9b:26:af:e7:90:d1:29:66:57:01:34:cf:28: 2e:8a:4d:35:cd:82:98:3f:6f:8d:4b:fe:3e:f8:2a:01:48:9b: 85:fa:ae:bf:8e:df:58:f4:9b:e3:42:10:5d:61:ef:6d:3b:b3: 71:de:95:11:d3:60:65:da:c0:66:14:d5:53:1b:23:a4:a7:3b: 42:a8:7c:3a:f7:cd:a9:1a:76:50:eb:7b:3c:23:41:fa:53:7e: 4a:62:80:85:c1:30:0a:6a:45:13:b1:60:8a:b4:89:06:94:8c: 31:18:21:f1:c9:1f:7a:13:5a:d5:9e:d5:ed:71:1f:f2:1b:a1: 57:ad:bb:e4:d7:91:68:2b:76:9a:89:71:94:94:95:96:6e:e2: ab:94:65:f5:c2:5f:4a:d1:87:a9:ae:de:d6:79:27:90:3b:30: 43:d5:f0:f4:f5:51:fb:33:49:81:a5:f5:34:ba:42:e5:9d:32: 50:b3:b3:1c:e3:79:1f:fe:b1:c7:69:a0:f5:c0:26:cd:6c:42: 8d:8b:62:a5:a9:31:75:62:7a:83:9f:f9:46:1e:a6:7c:f0:d9: 25:49:c5:f7:19:64:c4:fd:7b:e0:90:83:82:28:81:0e:c1:bf: 75:61:c1:1a:08:43:08:8f:4b:d9:ce:0c:c1:90:ed:61:9d:2c: 10:4d:49:7c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwCpgo4ejcbvU2gYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhhMGYxNzYtYjRhMi00ZTMyLThhOTgtNGUxMmUwN2Q4 OTk2MB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk MmQ5MWY2YmMtNTA5NC00ODAxLWFiYmItOTcxMGFkNWY1M2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqHUEIe36O9Wf8B1PCJmZNW6y5+x0bJUg+1T EuktL0uUGO2pIcb/ZwLw1jTFfT4x2MvNW2TQyq4bUZ+Gi/1bWfRei1oLpg4zXYru 1pUIK0kaf5gMI5l/BRfgmmwEiyI4yBwOwBzZ5yo9EUp4MlYIMO7rKWLF/wLIqPR+ Li8SWI/UleXxzO8t/tmnXubPk0qo8zV3PX3pRt2HL8TSrRcmIIVbUq9qKoU2tzb2 +4EVrWPyY5J/0X6k9UJvVxGVTKBxukHxRRv5o7y5ftqQxLdtpAA1xp3Wm7ilV3C0 OkBtxNjrqh3LpnnXU8AZ6RU5U5jl5nUAUSlki12KxxBSBQShXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJp0mJuUvpDvMMENT9zCRNgBeYjYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEw ZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEyZTA3ZDg5OTYvNzExMDUzMjctODRkNS0z ZjZhLWJjYzgtZmZmN2YzMmFiOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDhhMGYxNzYtYjRhMi00ZTMyLThh OTgtNGUxMmUwN2Q4OTk2L2Q4YTBmMTc2LWI0YTItNGUzMi04YTk4LTRlMTJlMDdk ODk5Ni5jcmwwHwYDVR0jBBgwFoAU3HV8E36ogo58+VN1GdCxhU7FP/YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOGEwZjE3Ni1iNGEyLTRlMzItOGE5OC00ZTEy ZTA3ZDg5OTYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgAEADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAL+TWKrZsmr+eQ0SlmVwE0zyguik01zYKYP2+NS/4++CoBSJuF+q6/ jt9Y9JvjQhBdYe9tO7Nx3pUR02Bl2sBmFNVTGyOkpztCqHw6982pGnZQ63s8I0H6 U35KYoCFwTAKakUTsWCKtIkGlIwxGCHxyR96E1rVntXtcR/yG6FXrbvk15FoK3aa iXGUlJWWbuKrlGX1wl9K0Yeprt7WeSeQOzBD1fD09VH7M0mBpfU0ukLlnTJQs7Mc 43kf/rHHaaD1wCbNbEKNi2KlqTF1YnqDn/lGHqZ88NklScX3GWTE/XvgkIOCKIEO wb91YcEaCEMIj0vZzgzBkO1hnSwQTUl8 -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:20 2025 by rpki-client