This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/5494666e-3db6-378b-8dbe-16af1245f927.roa File: 5494666e-3db6-378b-8dbe-16af1245f927.roa (raw, json) Hash identifier: iUfP+g7dd87Rx9frBH06SBe6rYSD+vmCefJzcgq8NRo= Subject key identifier: 31:9A:EB:E7:BE:3A:76:52:78:F1:D5:CF:24:BA:55:74:41:76:B7:A1 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584C14CB7D07F7761D49DE9CE8A8 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/5494666e-3db6-378b-8dbe-16af1245f927.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 32806 IP address blocks: 2604:9900:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:7d:07:f7:76:1d:49:de:9c:e8:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=be8bf0a7-437c-4225-ad94-17712b8a032e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:cd:8b:49:4c:05:bf:cd:b6:9e:e6:fd:a7: 10:68:f9:da:a6:19:69:23:2b:24:55:ab:b4:ef:a0: 83:ce:43:c1:71:2e:27:99:ea:e7:5a:67:ec:d9:22: 6c:1d:a3:9c:da:42:31:17:6d:f1:36:81:f2:dc:73: 6b:4d:2a:57:7f:07:89:53:66:07:96:59:6e:61:de: f7:6a:2e:08:cf:b5:fa:85:bc:81:fc:44:f0:3f:4e: fb:b9:d0:fb:88:fc:37:db:19:a3:83:dc:f2:bf:8a: ac:d0:22:ca:b2:e0:23:f2:f1:44:c8:d4:9e:ae:9c: c9:97:f7:61:48:2e:75:47:26:b6:e8:9e:12:65:23: 41:3a:40:3a:b3:c8:28:7c:84:fd:b4:f1:df:b4:d8: b9:b0:07:ac:fb:0d:16:db:a0:2f:d5:b2:e8:17:11: 0d:ab:ec:6f:c9:c0:3a:82:ea:72:71:62:1c:a9:7d: 80:07:93:90:3e:4b:f7:7b:4e:5a:a9:d3:fc:93:4f: ea:f5:a1:fc:8b:58:c5:f8:cc:8c:5b:7a:cc:5b:39: c1:cf:b4:b6:08:11:3d:52:10:77:e8:10:28:b3:48: b0:67:ae:e4:df:8b:f5:09:a8:0e:5c:b3:2a:d5:d0: ec:56:fa:0d:26:60:a9:28:59:26:83:25:53:e9:da: 8c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:EB:E7:BE:3A:76:52:78:F1:D5:CF:24:BA:55:74:41:76:B7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/5494666e-3db6-378b-8dbe-16af1245f927.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:b5:24:a5:f8:c8:33:27:25:f0:38:62:34:04:2b:d6:6a:12: 08:3e:91:c5:bc:ec:c8:8e:12:d4:db:db:76:03:eb:d6:d4:a1: 05:bd:72:3d:84:d5:5d:bc:c9:d4:b9:d5:b2:3c:4d:85:1b:2c: ce:02:10:43:51:08:36:cb:d8:fa:3d:56:57:15:6c:57:ff:fc: df:2a:72:cb:3f:f8:6c:89:88:c9:f1:ef:42:5e:19:26:d6:7d: 9d:2f:09:49:74:ec:ff:6c:e3:f3:3c:b5:23:de:a4:68:db:91: e1:6f:ef:4c:b2:91:22:9d:e1:8b:82:26:2f:a9:e0:85:60:9f: cf:3f:20:e8:e9:6b:83:b5:0e:e1:97:11:d1:55:f4:67:42:6c: 78:56:90:a3:cf:e9:a9:66:70:e7:39:22:7b:1c:08:32:46:62: b3:4f:06:db:4a:04:89:eb:d2:f0:c7:a1:67:90:4b:36:0c:92: 31:5a:7a:7c:11:75:68:40:0c:17:51:b5:c7:5f:65:dd:6b:ea: 85:23:81:6b:6b:b5:71:42:4e:62:49:8d:c0:4c:72:51:22:9c: 78:d5:ed:17:db:fd:02:8d:13:fe:07:66:f5:ad:4b:c7:d8:4b: ac:f9:00:66:2f:28:a1:57:5c:2c:fa:b2:02:b9:3b:49:17:2d: 31:48:8b:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwUy30H93YdSd6c6KgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk YmU4YmYwYTctNDM3Yy00MjI1LWFkOTQtMTc3MTJiOGEwMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc/Ni0lMBb/Ntp7m/acQaPnaphlpIyskVau0 76CDzkPBcS4nmernWmfs2SJsHaOc2kIxF23xNoHy3HNrTSpXfweJU2YHllluYd73 ai4Iz7X6hbyB/ETwP077udD7iPw32xmjg9zyv4qs0CLKsuAj8vFEyNSerpzJl/dh SC51Rya26J4SZSNBOkA6s8gofIT9tPHftNi5sAes+w0W26Av1bLoFxENq+xvycA6 gupycWIcqX2AB5OQPkv3e05aqdP8k0/q9aH8i1jF+MyMW3rMWznBz7S2CBE9UhB3 6BAos0iwZ67k34v1CagOXLMq1dDsVvoNJmCpKFkmgyVT6dqMxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGa6+e+OnZSePHVzyS6VXRBdrehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvNTQ5NDY2NmUtM2RiNi0z NzhiLThkYmUtMTZhZjEyNDVmOTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALi1JKX4yDMnJfA4YjQEK9ZqEgg+kcW87MiOEtTb23YD69bUoQW9 cj2E1V28ydS51bI8TYUbLM4CEENRCDbL2Po9VlcVbFf//N8qcss/+GyJiMnx70Je GSbWfZ0vCUl07P9s4/M8tSPepGjbkeFv70yykSKd4YuCJi+p4IVgn88/IOjpa4O1 DuGXEdFV9GdCbHhWkKPP6almcOc5InscCDJGYrNPBttKBInr0vDHoWeQSzYMkjFa enwRdWhADBdRtcdfZd1r6oUjgWtrtXFCTmJJjcBMclEinHjV7Rfb/QKNE/4HZvWt S8fYS6z5AGYvKKFXXCz6sgK5O0kXLTFIi7Y= -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:10 2025 by rpki-client