This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa File: 0d8887fa-47ec-3f9a-8306-921ba26462c8.roa (raw, json) Hash identifier: KjXZ/FNGG7PO7fIZNq8BCzL+5NiRSMbq+ivmcoLs/ng= Subject key identifier: 2C:6A:12:C4:5E:B3:38:BF:A0:EF:FE:04:F5:C1:7A:E0:11:C7:79:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C0C6B67509957AB2CF3E53080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa Signing time: Tue 02 Dec 2025 02:00:30 +0000 ROA not before: Tue 02 Dec 2025 02:00:30 +0000 ROA not after: Mon 02 Mar 2026 02:00:30 +0000 asID: 54253 IP address blocks: 2603:c0bc::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0c:6b:67:50:99:57:ab:2c:f3:e5:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Dec 2 02:00:30 2025 GMT Not After : Mar 2 02:00:30 2026 GMT Subject: CN=820febe7-2724-424c-800d-5c92a4a69e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:aa:50:94:44:e1:9c:b7:28:1d:67:b4:c5: 7d:d7:04:12:b9:18:61:d1:c8:1b:4c:4a:f1:3b:dd: 46:aa:d0:b1:ae:0d:26:93:55:83:c4:51:0f:74:ae: 72:d2:c6:27:71:6a:00:e3:63:45:53:57:3a:f3:3c: b9:2e:3d:12:28:25:14:8b:2c:26:e8:01:6a:82:ab: b5:b7:9a:6f:83:9f:dd:51:2a:c4:2a:67:74:46:99: f4:17:ce:a6:56:6c:b3:a5:07:9d:08:a2:71:8d:96: 70:4b:54:7b:33:5f:28:03:b4:7d:93:11:66:58:45: 1b:95:41:11:e2:d5:a1:b0:1b:19:30:a8:47:c6:ae: 39:30:ff:f8:10:95:58:26:06:9e:15:0d:db:09:cd: b4:60:68:be:63:2b:df:1c:5d:e4:5d:08:d2:7d:e2: ad:7c:a8:68:bb:5d:b1:c6:3b:6c:4b:de:70:8c:19: 33:1c:b1:bf:1b:20:17:f5:c2:2e:32:7e:29:74:a9: bf:60:99:81:9f:36:35:28:3e:0e:3a:4e:39:ac:a1: 9a:a0:a7:22:04:ce:33:72:ad:89:30:fb:41:61:f7: 1e:88:52:0d:89:9a:a3:3e:89:e6:da:4d:07:57:6c: 6d:ea:eb:c9:07:61:56:8c:10:10:ee:44:83:09:0d: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6A:12:C4:5E:B3:38:BF:A0:EF:FE:04:F5:C1:7A:E0:11:C7:79:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d8887fa-47ec-3f9a-8306-921ba26462c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0bc::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:ee:a0:fc:8f:6a:f1:56:c7:6b:ca:ec:7a:bc:88:7c:9c:50: 53:74:61:32:c9:54:ed:1c:74:16:62:81:d8:b3:80:ad:19:ed: 7c:97:f7:fb:ed:e2:c0:07:24:1e:6e:8a:86:f0:17:18:c8:34: 45:b8:50:f4:66:5a:83:2a:4a:58:42:aa:0b:88:1a:2a:16:43: 50:04:91:c2:3e:00:ee:5d:93:be:3b:1d:46:fc:21:f1:5f:8d: cc:0f:6d:b5:ba:1b:19:05:96:58:0d:84:74:23:b8:45:be:91: 0c:68:4a:1a:fc:a6:66:ea:6a:03:0a:16:f9:fc:4e:af:66:2d: fa:b3:b7:7b:21:97:38:1e:54:9e:95:c1:1f:aa:19:57:76:f3: 1f:b5:00:16:fb:bc:56:04:68:7d:38:2f:8f:91:a5:c9:47:a5: d1:e7:8e:87:e0:d9:86:9a:99:bf:d8:1e:8c:73:aa:b4:40:b1: 55:58:dc:6f:ba:7b:4f:1a:37:37:63:69:be:bc:16:30:11:ed: a4:f0:7f:48:c2:67:a6:2d:65:6d:27:9e:68:5d:eb:69:bc:89: 17:36:55:8a:ec:7f:7a:88:c3:a1:85:d3:c8:11:8f:a6:22:4e: 75:24:f6:0f:62:9f:01:3e:ab:c0:95:87:6a:77:fb:cc:c1:88: 21:72:28:10 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwMa2dQmVerLPPlMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTIwMjAyMDAzMFoXDTI2MDMwMjAyMDAzMFowLzEtMCsGA1UEAxMk ODIwZmViZTctMjcyNC00MjRjLTgwMGQtNWM5MmE0YTY5ZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofOqUJRE4Zy3KB1ntMV91wQSuRhh0cgbTErx O91GqtCxrg0mk1WDxFEPdK5y0sYncWoA42NFU1c68zy5Lj0SKCUUiywm6AFqgqu1 t5pvg5/dUSrEKmd0Rpn0F86mVmyzpQedCKJxjZZwS1R7M18oA7R9kxFmWEUblUER 4tWhsBsZMKhHxq45MP/4EJVYJgaeFQ3bCc20YGi+YyvfHF3kXQjSfeKtfKhou12x xjtsS95wjBkzHLG/GyAX9cIuMn4pdKm/YJmBnzY1KD4OOk45rKGaoKciBM4zcq2J MPtBYfceiFINiZqjPonm2k0HV2xt6uvJB2FWjBAQ7kSDCQ2tzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCxqEsReszi/oO/+BPXBeuARx3mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGQ4ODg3ZmEtNDdlYy0z ZjlhLTgzMDYtOTIxYmEyNjQ2MmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAvAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAp+6g/I9q8VbHa8rseryIfJxQU3RhMslU7Rx0FmKB2LOArRntfJf3 ++3iwAckHm6KhvAXGMg0RbhQ9GZagypKWEKqC4gaKhZDUASRwj4A7l2TvjsdRvwh 8V+NzA9ttbobGQWWWA2EdCO4Rb6RDGhKGvymZupqAwoW+fxOr2Yt+rO3eyGXOB5U npXBH6oZV3bzH7UAFvu8VgRofTgvj5GlyUel0eeOh+DZhpqZv9gejHOqtECxVVjc b7p7Txo3N2NpvrwWMBHtpPB/SMJnpi1lbSeeaF3rabyJFzZViux/eojDoYXTyBGP piJOdST2D2KfAT6rwJWHanf7zMGIIXIoEA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:20 2025 by rpki-client