This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa File: 2659cabb-8358-3f3a-a793-2978e3142187.roa (raw, json) Hash identifier: cbVM7Q9ATGa20opMFGMT+lXA/rgLbxjzWclqZmUlhhM= Subject key identifier: BB:40:BD:EF:A3:B2:9F:EA:F5:83:95:B7:5D:4B:90:39:AB:07:D0:D4 Certificate issuer: /CN=3104c204-288d-4f87-83c2-99a30908dea3 Certificate serial: 010D0C9F4328584C083B5BDCD333A09731E30640 Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 4 IP address blocks: 2001:500:200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:3b:5b:dc:d3:33:a0:97:31:e3:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3 Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=54a215eb-70c4-46c7-b011-a18c8bd40fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:84:36:83:8c:8e:3b:b3:e7:4f:20:93:75:89: 76:04:ad:4c:4f:11:1c:59:f2:d5:f4:f4:ad:8b:a6: a0:1b:dc:39:83:e0:62:e3:8b:fa:a2:a2:b8:25:90: b6:ab:25:a7:3e:e2:85:69:d4:38:a6:47:3e:19:9d: 88:59:d0:d3:c4:48:09:f5:06:c0:5c:93:dc:3b:b4: c4:f2:a9:10:85:9c:9d:78:62:4c:15:6f:e4:03:95: c9:13:6f:9d:03:c5:90:96:28:55:a6:75:5a:27:fd: 59:7c:50:48:9b:5b:a7:72:7b:02:d8:cb:09:72:f1: c2:b2:f2:c7:69:e7:e9:39:30:2a:50:f6:62:05:c0: 79:85:39:61:44:0b:09:31:0b:06:6a:96:1e:cf:71: 69:d6:b2:2a:30:eb:f6:15:1e:9f:be:8e:aa:00:1a: 6b:47:c3:be:24:e5:12:17:40:ec:c2:7d:9e:4d:15: 3f:d9:4b:40:47:8b:29:cc:c5:05:e7:3c:bd:2e:1a: c0:1d:46:80:aa:a7:0b:d5:95:03:36:74:ed:9a:62: 9d:86:b0:19:d9:45:6d:c9:42:62:1b:0b:72:57:fb: b9:c1:a9:f0:54:b0:b5:01:85:7e:16:32:5c:2a:46: e7:4b:a8:e7:f5:3c:31:64:e8:4d:3c:e5:67:96:03: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:BD:EF:A3:B2:9F:EA:F5:83:95:B7:5D:4B:90:39:AB:07:D0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/2659cabb-8358-3f3a-a793-2978e3142187.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl X509v3 Authority Key Identifier: keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:e6:2f:ff:b0:53:1b:4b:82:c8:8b:69:ba:ae:48:26:e3:29: f3:09:21:74:2f:84:f8:a3:9c:cb:39:c4:cf:92:cb:e4:3a:11: b8:14:91:e8:35:52:5f:b8:a6:ae:c3:95:30:88:8d:7a:19:5c: 46:92:a4:c7:8a:73:ca:41:c6:b2:7b:0c:2f:29:f6:c5:0c:d1: 66:0f:14:55:15:44:4f:a0:4b:96:6b:c2:7f:09:d4:85:42:da: 15:df:45:78:d2:da:63:94:61:60:71:d4:f3:35:c2:65:02:3f: 9d:07:07:f8:9d:92:1d:89:56:b8:62:ee:39:94:2e:1c:17:3d: c7:22:0e:50:25:e6:7c:3f:f0:c5:61:c4:37:f4:80:90:33:39: af:ef:c3:7f:1b:6c:68:9a:0c:43:6e:0c:49:ed:6a:0e:03:e4: 0a:08:96:a8:68:bb:cd:f6:28:e1:ec:d1:51:48:09:ff:9e:e8: e2:48:71:d8:fb:09:b2:f9:96:b9:d1:6c:42:d2:c2:10:5d:97: 9b:52:2a:e1:d0:09:aa:8c:19:b9:ad:53:74:1a:f6:fc:ba:c1: 79:4e:8b:c1:5f:bf:01:f2:59:66:40:04:0c:8e:70:c2:55:f2: 24:0e:da:e2:1b:50:2a:1c:6a:61:e5:cd:37:e7:3f:46:ea:d6: 05:5b:2a:12 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwIO1vc0zOglzHjBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk ZWEzMB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk NTRhMjE1ZWItNzBjNC00NmM3LWIwMTEtYTE4YzhiZDQwZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYQ2g4yOO7PnTyCTdYl2BK1MTxEcWfLV9PSt i6agG9w5g+Bi44v6oqK4JZC2qyWnPuKFadQ4pkc+GZ2IWdDTxEgJ9QbAXJPcO7TE 8qkQhZydeGJMFW/kA5XJE2+dA8WQlihVpnVaJ/1ZfFBIm1uncnsC2MsJcvHCsvLH aefpOTAqUPZiBcB5hTlhRAsJMQsGapYez3Fp1rIqMOv2FR6fvo6qABprR8O+JOUS F0Dswn2eTRU/2UtAR4spzMUF5zy9LhrAHUaAqqcL1ZUDNnTtmmKdhrAZ2UVtyUJi GwtyV/u5wanwVLC1AYV+FjJcKkbnS6jn9TwxZOhNPOVnlgNuyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLtAve+jsp/q9YOVt11LkDmrB9DUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0 YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMjY1OWNhYmItODM1OC0z ZjNhLWE3OTMtMjk3OGUzMTQyMTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4 ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz MDkwOGRlYTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFAAIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALTmL/+wUxtLgsiLabquSCbjKfMJIXQvhPijnMs5xM+Sy+Q6EbgU keg1Ul+4pq7DlTCIjXoZXEaSpMeKc8pBxrJ7DC8p9sUM0WYPFFUVRE+gS5Zrwn8J 1IVC2hXfRXjS2mOUYWBx1PM1wmUCP50HB/idkh2JVrhi7jmULhwXPcciDlAl5nw/ 8MVhxDf0gJAzOa/vw38bbGiaDENuDEntag4D5AoIlqhou832KOHs0VFICf+e6OJI cdj7CbL5lrnRbELSwhBdl5tSKuHQCaqMGbmtU3Qa9vy6wXlOi8FfvwHyWWZABAyO cMJV8iQO2uIbUCocamHlzTfnP0bq1gVbKhI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:35 2025 by rpki-client