This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json) Hash identifier: HQtlrEj6OiasRG5Hdp1axEnCFyW7T5IApph6f0u0t6w= Subject key identifier: 8E:4E:3D:A0:0B:0F:A9:8B:6D:FF:9C:46:BC:69:D6:43:59:34:84:09 Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2 Certificate serial: 010D0C9F4328584BEC50987A152E6D9E232CBC40 Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 397511 IP address blocks: 2607:ac80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:98:7a:15:2e:6d:9e:23:2c:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=2209bb51-9997-4fa7-92b3-4c59d0767932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:11:bf:f1:61:86:62:39:34:e7:4c:2c:3c: 46:5b:4a:c5:fb:73:c2:5f:04:d2:19:c4:a3:5f:a2: ba:5d:8b:1f:7c:17:1f:18:2d:67:95:fb:31:07:bc: ba:d8:ef:a8:5b:ee:e8:19:f6:7c:22:3a:e5:f0:f9: cd:45:2e:cf:e2:82:79:30:3f:cb:8b:2a:5a:25:e7: a5:98:a7:8b:b5:13:5e:08:df:ab:66:71:ee:75:af: 56:e4:9c:ec:4e:aa:64:e1:cb:c8:8d:c9:99:b8:8d: c2:db:bd:62:ff:e4:ae:19:4b:e6:63:69:05:7e:62: 3d:5f:b2:9c:33:32:27:36:9a:c9:75:48:4b:0a:67: 90:50:b4:d3:7b:43:8d:26:15:f1:95:f3:45:a2:8d: 83:b0:60:78:4a:dc:f7:bd:5b:87:06:01:66:f7:68: 09:ec:91:7f:ce:d5:8c:0b:10:f4:ca:5d:a7:59:0d: 77:58:60:61:8b:29:6b:32:f6:7f:31:6a:f0:de:c1: 91:1b:1c:b9:bc:95:22:f0:ff:67:a6:b2:b8:47:84: d5:7c:40:f6:d8:80:48:c2:c2:7b:8a:50:6e:34:55: e0:34:1d:52:e3:7d:ec:6d:0b:d2:71:05:7b:05:52: 09:27:cd:51:b0:15:00:0a:2e:a6:0f:09:06:88:04: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:4E:3D:A0:0B:0F:A9:8B:6D:FF:9C:46:BC:69:D6:43:59:34:84:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl X509v3 Authority Key Identifier: keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer sbgp-ipAddrBlock: critical IPv6: 2607:ac80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:24:86:48:f0:86:fb:a2:75:e2:12:d8:cb:40:4f:51:98:55: 4c:ef:94:9a:a8:7c:c4:75:b9:ed:f6:07:a7:04:73:5a:2f:54: 01:6c:13:0f:92:11:1d:d7:e9:62:05:b7:00:44:ed:2f:e2:5d: b4:2f:9c:d1:16:89:6d:63:85:3f:18:85:ba:d3:05:df:5c:4b: 61:a4:c8:54:8f:d0:23:24:21:86:b6:be:83:51:7b:b7:83:1c: cd:da:ef:5f:c6:80:ca:f1:aa:95:15:05:e9:c8:1f:f8:9c:41: ab:27:c7:06:e8:db:a2:34:2c:4d:ec:bf:e6:c5:eb:ce:25:5e: 38:16:7c:81:37:78:5f:08:03:01:68:98:50:4f:c2:38:bd:89: b4:55:f2:4a:80:18:95:84:a1:32:d0:8d:c7:a3:35:0c:5c:22: aa:51:c0:28:05:eb:7a:fc:a3:bf:63:59:b5:19:9e:8e:5b:ac: 1b:ed:1b:ae:62:56:cf:58:06:a5:ec:dd:55:13:12:5c:2e:23: d8:d5:b1:75:91:d3:ce:34:6d:21:ef:38:b6:f8:ce:e7:67:81: 38:74:ce:dc:98:2a:87:21:33:88:10:6f:71:8b:2c:22:44:3a: c9:cd:fa:f9:9c:12:3c:8c:f6:4e:95:dc:5e:8e:29:9a:26:2f: 89:b1:57:eb -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvsUJh6FS5tniMsvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz M2UyMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk MjIwOWJiNTEtOTk5Ny00ZmE3LTkyYjMtNGM1OWQwNzY3OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQwRv/FhhmI5NOdMLDxGW0rF+3PCXwTSGcSj X6K6XYsffBcfGC1nlfsxB7y62O+oW+7oGfZ8Ijrl8PnNRS7P4oJ5MD/LiypaJeel mKeLtRNeCN+rZnHuda9W5JzsTqpk4cvIjcmZuI3C271i/+SuGUvmY2kFfmI9X7Kc MzInNprJdUhLCmeQULTTe0ONJhXxlfNFoo2DsGB4Stz3vVuHBgFm92gJ7JF/ztWM CxD0yl2nWQ13WGBhiylrMvZ/MWrw3sGRGxy5vJUi8P9nprK4R4TVfED22IBIwsJ7 ilBuNFXgNB1S433sbQvScQV7BVIJJ81RsBUACi6mDwkGiATWMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI5OPaALD6mLbf+cRrxp1kNZNIQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4 MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANJIZI8Ib7onXiEtjLQE9RmFVM75SaqHzEdbnt9genBHNaL1QBbBMP khEd1+liBbcARO0v4l20L5zRFoltY4U/GIW60wXfXEthpMhUj9AjJCGGtr6DUXu3 gxzN2u9fxoDK8aqVFQXpyB/4nEGrJ8cG6NuiNCxN7L/mxevOJV44FnyBN3hfCAMB aJhQT8I4vYm0VfJKgBiVhKEy0I3HozUMXCKqUcAoBet6/KO/Y1m1GZ6OW6wb7Ruu YlbPWAal7N1VExJcLiPY1bF1kdPONG0h7zi2+M7nZ4E4dM7cmCqHITOIEG9xiywi RDrJzfr5nBI8jPZOldxejimaJi+JsVfr -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:46 2025 by rpki-client