This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa File: ffaf171b-accf-3357-80be-1cc3a9494500.roa (raw, json) Hash identifier: 8SktOh4fcBQsfCWQp3xa7E0CXqEwJFo5v+f2nQqjhs8= Subject key identifier: DB:68:30:D6:2A:2F:80:F5:80:36:70:6F:7D:02:44:17:FA:FE:F4:C8 Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584BC53B01497700D4A4939B3700 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 32806 IP address blocks: 2604:9900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:01:49:77:00:d4:a4:93:9b:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=0c7a7367-e187-4035-b28d-bf99b1c5cb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:87:7e:62:cc:7a:91:12:f4:78:7f:cc:eb: 5a:9f:1e:47:b9:17:9b:86:34:f9:a3:a8:f3:81:bf: 31:3b:c8:82:e4:17:bf:44:ec:24:a5:10:05:43:6c: 4d:11:13:1f:03:b2:b4:1d:29:03:79:71:9a:7a:1b: f1:9d:4e:ee:03:95:0c:2e:ce:7b:c2:d1:8e:4a:9e: d7:34:b2:55:f6:a1:5d:d7:d2:e7:d1:b0:82:91:e9: b6:81:34:63:f9:63:b9:1a:d6:8f:e9:c7:95:e6:26: aa:de:7f:47:c9:15:e6:f1:b2:af:74:c2:2f:27:0e: 05:30:3a:9f:e3:05:e1:4f:05:64:4e:5a:9c:46:35: b2:0a:ee:bf:a8:e2:16:b9:33:04:36:12:e0:43:06: b0:e3:3b:be:c0:c1:d0:0d:82:b7:b2:b6:95:bc:4a: a6:b7:93:85:b4:25:c3:e9:35:97:50:c5:4e:c3:d0: a4:51:18:cb:68:fe:e0:f4:51:42:6b:79:08:65:bd: 2e:c4:2d:08:95:5d:7c:22:30:15:b2:cc:53:24:99: ca:f5:29:eb:7d:f6:19:e1:40:19:3e:8d:18:f7:23: cf:cb:be:29:72:8d:d1:58:9f:3e:19:31:fa:84:8f: 53:08:41:01:42:3b:a9:87:01:68:de:22:e3:a5:15: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:30:D6:2A:2F:80:F5:80:36:70:6F:7D:02:44:17:FA:FE:F4:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c1:62:a0:6d:3c:3b:e9:d2:b7:5e:1d:e7:81:4b:73:38:67: b6:e9:71:38:89:83:79:4e:e8:3b:6c:42:17:85:2e:6b:1b:49: 32:2f:01:ac:1a:c9:91:dd:5c:bb:65:f7:89:3f:7c:0c:c1:f7: a8:0d:0e:67:1a:c2:b7:34:04:90:8d:8f:84:58:e4:cb:0c:08: b2:9e:38:24:c5:40:45:80:0f:42:e3:27:c3:8a:26:6a:3f:6b: eb:3a:3f:89:79:b9:60:38:04:2c:83:9c:e4:06:9e:08:a4:df: e5:19:a1:c0:bb:1a:7d:55:0e:ef:5b:c6:12:f2:2f:cf:21:cf: ef:bf:81:89:0d:a4:83:3a:b3:38:a4:9b:c2:98:ae:b9:67:3b: a3:34:26:55:6a:0a:ee:ed:fa:71:a8:0e:5b:93:f6:03:1b:05: a6:d6:ec:87:9d:60:10:5a:2e:f7:04:f1:b7:44:3d:b3:65:b7: 6a:32:e0:30:2e:c7:b8:57:e0:18:fa:50:f8:6c:1a:4f:0f:1b: 0b:57:a0:46:ae:60:bc:71:2a:b0:c6:23:f4:1b:88:cd:96:b7: e2:46:2b:bf:bd:07:b0:c1:67:b9:ba:6e:69:ef:ef:bc:a6:0d: 7b:f3:7a:cb:c9:35:60:8e:bc:2c:26:47:a7:cf:34:3f:ed:12: 03:86:f3:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvFOwFJdwDUpJObNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MGM3YTczNjctZTE4Ny00MDM1LWIyOGQtYmY5OWIxYzVjYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSeHfmLMepES9Hh/zOtanx5HuRebhjT5o6jz gb8xO8iC5Be/ROwkpRAFQ2xNERMfA7K0HSkDeXGaehvxnU7uA5UMLs57wtGOSp7X NLJV9qFd19Ln0bCCkem2gTRj+WO5GtaP6ceV5iaq3n9HyRXm8bKvdMIvJw4FMDqf 4wXhTwVkTlqcRjWyCu6/qOIWuTMENhLgQwaw4zu+wMHQDYK3sraVvEqmt5OFtCXD 6TWXUMVOw9CkURjLaP7g9FFCa3kIZb0uxC0IlV18IjAVssxTJJnK9SnrffYZ4UAZ Po0Y9yPPy74pco3RWJ8+GTH6hI9TCEEBQjuphwFo3iLjpRX2uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtoMNYqL4D1gDZwb30CRBf6/vTIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZmZhZjE3MWItYWNjZi0z MzU3LTgwYmUtMWNjM2E5NDk0NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE3BYqBtPDvp0rdeHeeBS3M4Z7bpcTiJg3lO6DtsQheFLmsbSTIv AawayZHdXLtl94k/fAzB96gNDmcawrc0BJCNj4RY5MsMCLKeOCTFQEWAD0LjJ8OK Jmo/a+s6P4l5uWA4BCyDnOQGngik3+UZocC7Gn1VDu9bxhLyL88hz++/gYkNpIM6 szikm8KYrrlnO6M0JlVqCu7t+nGoDluT9gMbBabW7IedYBBaLvcE8bdEPbNlt2oy 4DAux7hX4Bj6UPhsGk8PGwtXoEauYLxxKrDGI/QbiM2Wt+JGK7+9B7DBZ7m6bmnv 77ymDXvzesvJNWCOvCwmR6fPND/tEgOG84M= -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:26 2025 by rpki-client