This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa File: 2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa (raw, json) Hash identifier: i3/rXZ1GeLngHB4RUpyOHBX/mun+cNzmU4U5bTJbDv4= Subject key identifier: 7F:07:EB:E1:16:D0:70:98:E3:50:BB:E9:93:BF:53:F0:3B:8B:04:C4 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BD33088A22EBBD9606272BB80 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 32806 IP address blocks: 2604:9900:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:88:a2:2e:bb:d9:60:62:72:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=2cda6d63-fcf2-40de-a339-fd3810fd5c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:18:a8:fe:09:62:00:33:12:8c:77:4f:ab: ab:1a:06:ce:a5:68:9e:c4:75:03:0e:1e:c9:c9:ce: 59:94:b9:20:e3:09:43:57:2c:5b:c3:f2:cd:44:76: 9a:ca:38:d2:90:12:83:cc:61:30:ec:80:3d:f7:bc: 54:62:66:58:f2:24:10:3d:b5:d1:ac:42:6f:88:28: a7:61:75:03:ef:d1:a6:ac:da:32:58:6e:44:96:53: cf:1c:84:13:78:70:ad:d1:8f:99:cb:84:9e:7c:75: 59:93:f1:8f:3f:70:95:84:19:62:11:24:01:52:0f: b6:c9:2b:74:ce:6c:8a:93:40:59:40:bf:d8:b0:d2: 74:29:c0:30:4b:5b:64:ba:c4:bf:09:b3:fb:39:e2: 49:1a:13:b7:e5:9d:8e:b4:5b:b9:7b:f0:7b:d8:0c: 54:0c:97:0a:7f:4e:71:b9:21:16:cb:67:49:b6:72: 6d:9b:16:04:e2:fb:9e:05:0b:1e:29:d8:2c:7e:07: e9:e9:4b:89:1a:d2:98:a9:19:64:c7:68:d3:a1:ea: 15:8a:ff:12:14:1e:9e:f8:a6:eb:77:77:0b:b8:57: cc:d7:66:35:08:bc:07:26:ce:75:ae:1c:61:4e:62: 58:dd:af:cf:e8:44:1a:92:ed:92:bd:60:66:b4:9a: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:07:EB:E1:16:D0:70:98:E3:50:BB:E9:93:BF:53:F0:3B:8B:04:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/2054b58a-4054-3f0a-90d2-d724e1f1da7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b3:69:48:ad:51:57:60:16:ad:e9:6c:6c:f3:2f:7b:6d:3e: 48:12:79:bc:61:65:0b:65:03:83:9d:42:dd:14:b9:dd:ae:99: 56:98:cd:cc:bb:b2:18:0d:2b:c1:9f:6b:c0:72:ee:81:4d:7d: d2:73:d1:35:0f:70:c6:b9:13:f9:78:4a:b5:41:7a:58:a7:f6: 0b:f9:a2:83:33:59:60:a7:6c:71:de:28:fc:47:d6:4c:12:ff: 29:09:14:98:92:c0:3f:be:71:63:4d:48:3c:dc:f4:45:29:72: 78:b6:e1:e7:2d:d8:42:ff:27:f0:ff:98:d3:2f:50:de:6d:a4: 66:0b:9d:39:fe:df:10:82:5d:52:e9:16:01:1f:ca:06:2d:72: 98:34:1b:f9:f0:91:42:eb:ca:37:23:a4:38:53:bf:ab:45:1e: 13:6c:ae:88:44:88:98:44:02:9d:b8:e4:e6:9d:c3:41:c6:83: 55:48:43:ed:63:f6:e4:a3:e3:38:37:cf:9e:72:62:69:14:1c: f6:79:a5:d8:74:98:85:3d:9c:fe:5c:b6:ac:ec:e2:ac:41:b9: 17:42:8a:07:7a:bc:86:b8:23:f0:44:f5:2b:30:c4:a2:fd:f8: 99:99:f6:cc:8b:a1:56:0f:5f:e2:e4:87:8d:03:f0:25:19:3c: f5:61:b7:86 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvTMIiiLrvZYGJyu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MmNkYTZkNjMtZmNmMi00MGRlLWEzMzktZmQzODEwZmQ1YzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2EYqP4JYgAzEox3T6urGgbOpWiexHUDDh7J yc5ZlLkg4wlDVyxbw/LNRHaayjjSkBKDzGEw7IA997xUYmZY8iQQPbXRrEJviCin YXUD79GmrNoyWG5EllPPHIQTeHCt0Y+Zy4SefHVZk/GPP3CVhBliESQBUg+2ySt0 zmyKk0BZQL/YsNJ0KcAwS1tkusS/CbP7OeJJGhO35Z2OtFu5e/B72AxUDJcKf05x uSEWy2dJtnJtmxYE4vueBQseKdgsfgfp6UuJGtKYqRlkx2jToeoViv8SFB6e+Kbr d3cLuFfM12Y1CLwHJs51rhxhTmJY3a/P6EQaku2SvWBmtJpJZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH8H6+EW0HCY41C76ZO/U/A7iwTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvMjA1NGI1OGEtNDA1NC0z ZjBhLTkwZDItZDcyNGUxZjFkYTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCzaUitUVdgFq3pbGzzL3ttPkgSebxhZQtlA4OdQt0Uud2umVaY zcy7shgNK8Gfa8By7oFNfdJz0TUPcMa5E/l4SrVBelin9gv5ooMzWWCnbHHeKPxH 1kwS/ykJFJiSwD++cWNNSDzc9EUpcni24ect2EL/J/D/mNMvUN5tpGYLnTn+3xCC XVLpFgEfygYtcpg0G/nwkULryjcjpDhTv6tFHhNsrohEiJhEAp245Oadw0HGg1VI Q+1j9uSj4zg3z55yYmkUHPZ5pdh0mIU9nP5ctqzs4qxBuRdCigd6vIa4I/BE9Ssw xKL9+JmZ9syLoVYPX+Lkh40D8CUZPPVht4Y= -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:05 2025 by rpki-client