This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa File: 86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa (raw, json) Hash identifier: gsuT7X8NLBdp/xxL6YhQ4JEFyk50Ul8xSH5EnX7oDU0= Subject key identifier: 7F:07:70:0C:47:FC:22:2F:B4:23:6C:F6:32:94:8C:D4:2B:4D:3E:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BC6A04387967B0FA8B0576700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa Signing time: Fri 07 Nov 2025 02:00:30 +0000 ROA not before: Fri 07 Nov 2025 02:00:30 +0000 ROA not after: Thu 05 Feb 2026 02:00:30 +0000 asID: 31898 IP address blocks: 2603:c000:1e00::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c6:a0:43:87:96:7b:0f:a8:b0:57:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 7 02:00:30 2025 GMT Not After : Feb 5 02:00:30 2026 GMT Subject: CN=bfeaf660-b6d9-4da6-a7ec-66098de629cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:de:bc:af:01:05:c3:15:6d:12:71:dc:f9:50: cd:8c:48:b4:86:f6:5d:00:ef:27:8b:4a:75:db:0a: 22:90:d1:52:91:59:51:e8:7d:bb:52:6d:f5:2c:5a: de:a8:11:72:a7:24:86:9c:b0:19:b4:5d:e6:da:bf: 6c:5f:8d:4b:70:9a:9d:b8:b9:33:72:ba:ca:7c:bb: 63:1a:98:da:87:fe:ca:e9:e7:b9:97:05:74:6c:3f: 3b:3b:d8:a4:5e:6f:a5:d1:3a:ab:88:a3:6f:fb:68: 4d:57:60:44:cd:a3:5d:cc:7f:00:b1:cf:e7:0d:41: 99:ec:bc:84:9c:d9:7e:e1:c9:58:fb:07:8f:4f:d7: 77:62:36:97:bb:49:6f:96:11:16:e7:1c:71:3c:c0: 15:8d:2b:f0:35:b1:a2:d9:ad:a8:66:fc:8b:81:fa: f0:1e:d7:4e:44:82:fb:df:1a:89:95:7b:be:e3:b3: 88:0f:cd:0a:5b:32:86:52:05:cf:f1:f5:9b:6c:f9: 40:3b:a4:86:2f:15:ea:8d:a5:f5:c2:0f:f9:3d:4b: 9a:24:e3:5b:a5:3f:2f:c1:83:12:53:27:d2:ef:fd: fa:4e:ad:47:fe:8f:d1:44:39:90:f0:a2:7a:c5:72: 24:d8:39:30:d1:8e:49:11:1c:aa:95:97:3b:5b:3d: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:07:70:0C:47:FC:22:2F:B4:23:6C:F6:32:94:8C:D4:2B:4D:3E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/86ce3032-c278-3e5c-abb9-03af9cc46a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c000:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:a5:fa:0c:e1:56:a6:70:2c:a2:99:fd:86:f1:1b:8b:6c:86: 6c:02:0f:48:21:47:bc:a8:a7:44:4c:92:59:f1:30:52:6c:b1: 4f:b0:3a:f7:cc:3d:58:29:70:65:5f:63:e0:28:62:91:4f:3c: c4:9c:4a:17:17:6d:d7:fa:86:19:57:78:d0:20:67:bc:31:04: f9:8e:86:30:8f:44:80:0d:ed:0a:0c:6e:9a:38:db:9e:0c:09: 52:a0:c2:6e:9e:da:39:3f:b5:cb:fd:e9:be:92:54:67:bd:20: 9f:56:b9:e7:0a:78:94:47:5d:9a:00:6c:c9:bf:ef:4d:18:88: 4e:79:a3:e2:2e:94:b3:17:a5:a9:01:07:f9:78:f6:8f:20:b9: 9e:ce:dc:19:f9:49:d1:67:03:55:e7:a8:81:0c:79:7a:dd:3b: 95:6b:d0:de:07:08:6c:5a:4b:a9:f4:f3:d9:34:2f:c8:4d:9e: f8:90:5e:a3:9b:e1:2f:5b:8f:12:f6:1b:0c:e6:af:de:59:78: e1:49:71:79:c8:29:1a:5b:c1:ab:43:30:72:ea:7b:c1:fc:1d: 0c:89:4a:75:23:ac:59:13:a4:e2:4b:ef:75:e6:04:02:26:3b: cb:b5:16:59:61:db:61:9f:74:84:57:7f:b4:0a:94:74:8b:24: 8d:ca:08:e4 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvGoEOHlnsPqLBXZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTEwNzAyMDAzMFoXDTI2MDIwNTAyMDAzMFowLzEtMCsGA1UEAxMk YmZlYWY2NjAtYjZkOS00ZGE2LWE3ZWMtNjYwOThkZTYyOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj968rwEFwxVtEnHc+VDNjEi0hvZdAO8ni0p1 2woikNFSkVlR6H27Um31LFreqBFypySGnLAZtF3m2r9sX41LcJqduLkzcrrKfLtj Gpjah/7K6ee5lwV0bD87O9ikXm+l0TqriKNv+2hNV2BEzaNdzH8Asc/nDUGZ7LyE nNl+4clY+wePT9d3YjaXu0lvlhEW5xxxPMAVjSvwNbGi2a2oZvyLgfrwHtdORIL7 3xqJlXu+47OID80KWzKGUgXP8fWbbPlAO6SGLxXqjaX1wg/5PUuaJONbpT8vwYMS UyfS7/36Tq1H/o/RRDmQ8KJ6xXIk2Dkw0Y5JERyqlZc7Wz3wtQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFH8HcAxH/CIvtCNs9jKUjNQrTT4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODZjZTMwMzItYzI3OC0z ZTVjLWFiYjktMDNhZjljYzQ2YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgPAAB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKaX6DOFWpnAsopn9hvEbi2yGbAIPSCFHvKinREySWfEwUmyxT7A6 98w9WClwZV9j4ChikU88xJxKFxdt1/qGGVd40CBnvDEE+Y6GMI9EgA3tCgxumjjb ngwJUqDCbp7aOT+1y/3pvpJUZ70gn1a55wp4lEddmgBsyb/vTRiITnmj4i6Usxel qQEH+Xj2jyC5ns7cGflJ0WcDVeeogQx5et07lWvQ3gcIbFpLqfTz2TQvyE2e+JBe o5vhL1uPEvYbDOav3ll44UlxecgpGlvBq0Mwcup7wfwdDIlKdSOsWROk4kvvdeYE AiY7y7UWWWHbYZ90hFd/tAqUdIskjcoI5A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:25:55 2025 by rpki-client