This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c654353-a3e9-32a1-846b-0a6d514b1201.roa File: 3c654353-a3e9-32a1-846b-0a6d514b1201.roa (raw, json) Hash identifier: 4c1u3gnP1vZ7QA6IkLOKiYyifvFKUM9ROr+Z5Rtj2iQ= Subject key identifier: AE:0C:35:1B:0D:C0:E1:33:0A:33:FC:17:89:18:D6:FE:E1:09:F8:1C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF00664C76DF35ECAD18F930 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c654353-a3e9-32a1-846b-0a6d514b1201.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 2603:c001:4400::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:66:4c:76:df:35:ec:ad:18:f9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=de07b435-fc17-431d-8527-3a1c242153af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:1a:b4:8b:4f:ff:50:50:0b:51:bc:f6:ab: d2:3f:76:60:25:ff:e9:fa:e9:03:cd:35:64:79:9d: ea:d6:d3:be:78:e7:69:20:b0:70:d3:c9:3a:03:c0: 52:be:84:d8:fc:6d:a9:d0:a4:63:ca:0f:23:d5:38: a0:de:dc:90:32:4e:f4:b8:15:60:27:b7:9b:f6:b6: 7c:a6:69:99:6f:a3:fc:c0:d1:fc:26:98:2b:ad:80: 74:96:c1:2f:ec:28:af:a6:5c:13:f1:83:25:5c:df: fd:f4:37:0d:5a:5d:49:91:7b:33:fa:7f:29:7e:75: bf:01:3c:1a:79:ea:73:07:69:93:35:1f:2f:43:0c: 25:d3:a0:b8:e3:51:a2:4d:82:fa:99:78:e2:7b:40: 60:89:d5:e1:28:e0:31:3b:dc:6d:52:54:21:95:f9: d8:8b:83:96:7f:c8:87:10:ca:3c:0c:48:ad:11:7a: f1:47:57:bc:30:56:43:5b:7a:47:a9:7e:78:e4:8e: 1e:df:60:2c:5d:c7:39:ce:9b:53:2c:bb:a4:97:75: ec:0d:30:da:76:8f:9f:d5:7d:1d:4d:11:88:38:dd: 17:30:8e:f9:c7:b3:3c:36:b5:25:93:e7:18:b6:fa: f0:f9:d1:9c:0b:81:87:52:2a:f9:5f:d2:cb:9b:cd: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:35:1B:0D:C0:E1:33:0A:33:FC:17:89:18:D6:FE:E1:09:F8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3c654353-a3e9-32a1-846b-0a6d514b1201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c001:4400::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:5d:25:c6:0e:5b:53:d0:97:1b:19:e3:02:3d:a4:7d:09:f2: 6a:7a:61:bd:b4:55:d5:d3:70:41:18:6f:cd:4e:27:23:e4:70: 20:49:a9:b6:ae:5a:6f:d6:ef:51:c1:0b:17:34:fc:5d:b9:14: 81:17:a3:99:48:39:26:d3:10:5a:cf:de:58:86:46:32:80:b1: 78:54:31:2f:bf:97:69:a2:e5:62:4b:7e:c7:2c:7d:d2:92:51: 1e:b5:a1:ad:7c:fe:0d:bc:1d:e6:ae:69:da:bc:31:33:ac:b1: 0f:5a:83:07:5f:fb:db:0e:c6:86:d0:11:a5:1c:bc:d6:1a:a4: 21:12:57:97:c9:1e:1c:41:46:8d:10:9d:21:70:37:b3:b4:5a: 15:ce:e7:c4:95:57:93:97:5e:30:8b:08:9b:c2:c9:6c:d9:bd: 85:44:b7:dc:eb:85:dd:df:f3:f1:cf:7f:20:fe:44:38:80:66: a9:6b:a7:d0:99:6d:cd:e5:0f:93:70:8d:1d:b6:46:94:b8:29: 30:28:57:e9:83:df:f8:6d:c1:31:ef:0e:14:2e:81:90:59:0d: 1e:f1:a3:cf:7a:ee:7b:1a:d4:ff:e7:c7:e1:20:a1:20:2c:2e: 23:8b:00:67:cb:94:22:0b:d8:26:a9:d7:54:16:0c:2c:ab:a6: 48:55:f5:cb -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvPAGZMdt817K0Y+TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZGUwN2I0MzUtZmMxNy00MzFkLTg1MjctM2ExYzI0MjE1M2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkQatItP/1BQC1G89qvSP3ZgJf/p+ukDzTVk eZ3q1tO+eOdpILBw08k6A8BSvoTY/G2p0KRjyg8j1Tig3tyQMk70uBVgJ7eb9rZ8 pmmZb6P8wNH8JpgrrYB0lsEv7CivplwT8YMlXN/99DcNWl1JkXsz+n8pfnW/ATwa eepzB2mTNR8vQwwl06C441GiTYL6mXjie0BgidXhKOAxO9xtUlQhlfnYi4OWf8iH EMo8DEitEXrxR1e8MFZDW3pHqX545I4e32AsXcc5zptTLLukl3XsDTDado+f1X0d TRGION0XMI75x7M8NrUlk+cYtvrw+dGcC4GHUir5X9LLm82y6QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK4MNRsNwOEzCjP8F4kY1v7hCfgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2M2NTQzNTMtYTNlOS0z MmExLTg0NmItMGE2ZDUxNGIxMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAAUQw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGl0lxg5bU9CXGxnjAj2kfQnyanphvbRV1dNwQRhvzU4nI+RwIEmp tq5ab9bvUcELFzT8XbkUgRejmUg5JtMQWs/eWIZGMoCxeFQxL7+XaaLlYkt+xyx9 0pJRHrWhrXz+Dbwd5q5p2rwxM6yxD1qDB1/72w7GhtARpRy81hqkIRJXl8keHEFG jRCdIXA3s7RaFc7nxJVXk5deMIsIm8LJbNm9hUS33OuF3d/z8c9/IP5EOIBmqWun 0JltzeUPk3CNHbZGlLgpMChX6YPf+G3BMe8OFC6BkFkNHvGjz3ruexrU/+fH4SCh ICwuI4sAZ8uUIgvYJqnXVBYMLKumSFX1yw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:40 2025 by rpki-client