This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/da9e1896-297f-36a3-ab2b-19136f3accd0.roa File: da9e1896-297f-36a3-ab2b-19136f3accd0.roa (raw, json) Hash identifier: td7u8rPBX9e6fY8CJamq9QN0/qMBcGkMRUlVccHAXfE= Subject key identifier: 0B:1B:89:2B:5D:E5:72:A7:A1:47:E9:BA:6B:A4:69:BB:7D:E5:D6:EF Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BD33087954A60E092F1168900 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/da9e1896-297f-36a3-ab2b-19136f3accd0.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 32806 IP address blocks: 2604:9900:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:87:95:4a:60:e0:92:f1:16:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=478d5b30-56ac-45de-b25b-0fdc012e72d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:25:6b:79:38:9f:15:97:75:05:e9:16:e3: 21:fe:af:75:d5:38:ff:51:8f:de:e3:38:9c:c8:b3: e1:ce:04:c5:d1:6a:fa:1a:26:1b:ef:80:7f:ad:bd: 9c:04:3d:9d:cd:94:5b:a2:7b:4f:fb:7e:3c:9e:24: 00:50:cc:29:14:49:11:2b:28:2e:d0:2f:40:80:78: b9:cb:dd:e8:8d:55:64:2b:95:b4:26:ca:81:14:d3: cf:1e:83:8a:6d:88:28:ce:43:44:d2:a2:e0:15:d5: 36:b3:eb:28:fc:29:69:ab:10:0b:42:00:1b:e4:2d: 89:13:29:90:ce:cc:7f:db:82:19:c5:ab:ce:b6:b0: 86:e4:1d:0d:42:12:cd:da:39:10:5e:30:ba:68:5e: 5b:bd:91:85:5a:cb:87:47:39:29:ee:77:d2:21:4c: 79:89:c1:3d:6c:08:ef:91:4e:50:d3:c9:4f:e4:bf: f8:ed:86:d6:f2:3d:bf:77:66:a7:e6:2b:dd:23:53: 19:74:43:b6:24:c2:b6:d1:80:8e:cb:ed:fa:02:b2: e6:17:9e:b5:ad:46:5d:ca:f7:ba:a9:cf:61:91:32: da:cd:ed:4e:b4:fe:d2:83:e2:66:e6:72:5d:ed:ff: 5f:c4:cd:74:96:89:7a:77:97:59:ea:29:5e:18:23: 37:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1B:89:2B:5D:E5:72:A7:A1:47:E9:BA:6B:A4:69:BB:7D:E5:D6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/da9e1896-297f-36a3-ab2b-19136f3accd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:2e:6b:7c:64:2d:27:4a:85:33:8d:53:45:04:b5:8f:64:76: cb:ce:65:93:bc:c5:72:de:04:a1:7c:0d:5f:5a:a3:b8:82:d8: c6:4c:02:62:1e:12:87:fe:81:1f:dd:3b:ba:cb:38:e4:49:54: 91:f2:8d:f2:60:48:5b:a6:95:26:d3:ac:96:8a:14:9d:52:f8: 50:82:d4:8c:62:fc:2f:d2:1e:1e:ea:7d:d6:be:df:24:38:55: b2:1e:20:e4:00:c7:a8:59:13:b4:19:23:a7:75:86:61:ea:30: 61:14:bf:4a:bc:3e:9d:e7:88:47:87:2e:11:60:68:40:74:58: 1e:61:6c:cc:8c:39:ac:a5:d8:da:9a:5a:0f:91:09:2a:47:81: ac:c8:fe:42:36:f4:33:4e:6b:35:1c:86:f4:f7:3f:7e:e2:e0: b9:20:3f:a2:fb:8a:2a:c1:f2:e6:79:49:02:45:7a:37:c0:95: 76:6f:f5:a1:10:c2:f3:50:34:be:44:cf:83:92:a5:ef:4f:1a: 79:a7:10:c0:a9:30:bf:67:a1:c0:82:1e:8b:8a:ce:3e:61:e1: a7:35:91:bb:e3:b9:ef:3a:1d:81:31:9b:e8:94:83:7c:86:93: 9f:1c:21:bd:1c:bc:7a:02:ba:27:e2:5d:91:0e:4f:05:09:b0: e9:f3:72:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvTMIeVSmDgkvEWiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk NDc4ZDViMzAtNTZhYy00NWRlLWIyNWItMGZkYzAxMmU3MmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nAla3k4nxWXdQXpFuMh/q911Tj/UY/e4zic yLPhzgTF0Wr6GiYb74B/rb2cBD2dzZRbontP+348niQAUMwpFEkRKygu0C9AgHi5 y93ojVVkK5W0JsqBFNPPHoOKbYgozkNE0qLgFdU2s+so/ClpqxALQgAb5C2JEymQ zsx/24IZxavOtrCG5B0NQhLN2jkQXjC6aF5bvZGFWsuHRzkp7nfSIUx5icE9bAjv kU5Q08lP5L/47YbW8j2/d2an5ivdI1MZdEO2JMK20YCOy+36ArLmF561rUZdyve6 qc9hkTLaze1OtP7Sg+Jm5nJd7f9fxM10lol6d5dZ6ileGCM3BwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAsbiStd5XKnoUfpumukabt95dbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZGE5ZTE4OTYtMjk3Zi0z NmEzLWFiMmItMTkxMzZmM2FjY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMEua3xkLSdKhTONU0UEtY9kdsvOZZO8xXLeBKF8DV9ao7iC2MZM AmIeEof+gR/dO7rLOORJVJHyjfJgSFumlSbTrJaKFJ1S+FCC1Ixi/C/SHh7qfda+ 3yQ4VbIeIOQAx6hZE7QZI6d1hmHqMGEUv0q8Pp3niEeHLhFgaEB0WB5hbMyMOayl 2NqaWg+RCSpHgazI/kI29DNOazUchvT3P37i4LkgP6L7iirB8uZ5SQJFejfAlXZv 9aEQwvNQNL5Ez4OSpe9PGnmnEMCpML9nocCCHouKzj5h4ac1kbvjue86HYExm+iU g3yGk58cIb0cvHoCuifiXZEOTwUJsOnzct8= -----END CERTIFICATE-----Generated at Sat Dec 6 21:01:41 2025 by rpki-client