This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd3f9fa0-7d83-3564-b857-696665a0e5a5.roa File: bd3f9fa0-7d83-3564-b857-696665a0e5a5.roa (raw, json) Hash identifier: 0XQ384bazGyrgj+L8dHJXt8Qm0z8WrA9Ty55JXGnA4k= Subject key identifier: 28:B0:9B:A9:1A:41:1D:79:27:29:3E:63:58:48:2B:35:6B:8B:31:F5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584BCF006F559CDDC871880E94E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd3f9fa0-7d83-3564-b857-696665a0e5a5.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 31898 IP address blocks: 2603:c020:8000::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:6f:55:9c:dd:c8:71:88:0e:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=8afdbced-245e-476d-a368-d84f811aa520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:f5:31:26:f6:36:4c:f1:bb:45:ef:44:21: 61:13:b8:af:e7:3e:e1:60:23:45:f8:dc:7b:32:0a: 86:07:d4:56:fa:ae:2f:2c:13:e2:51:8c:a9:0d:de: 4d:fa:60:4a:84:e9:a4:8c:53:ec:12:42:d5:43:19: d4:68:a4:c7:09:7d:c6:3a:0f:b8:9f:a2:26:4a:80: 42:d5:4b:50:86:a9:3d:2f:cf:bb:22:df:31:49:6a: d0:d8:a6:5e:dc:ff:a5:71:a7:c9:fd:b2:56:bf:0f: ea:d2:5b:42:b0:37:58:50:0f:47:29:38:9f:5c:98: 47:a3:5f:58:4d:c3:24:83:74:b7:ad:25:ca:0a:af: 52:e8:85:cf:21:af:11:ac:95:24:63:3e:fa:c7:48: 7c:09:66:cb:bd:f0:e1:5d:36:53:e6:3c:d3:23:2b: 24:f3:ae:bc:de:d7:0d:4a:ec:ea:56:c8:3e:e1:81: d8:f3:d0:2c:b5:14:57:a0:72:32:f4:70:f2:19:0a: 35:1c:64:1c:a4:04:5c:47:00:4e:7b:6e:3d:b6:6b: 66:98:5e:4c:00:e1:62:c9:79:b2:b0:be:fc:3b:4f: 9d:5b:ff:8f:dc:57:38:5a:63:50:c0:66:a2:3e:9f: a8:db:1d:8f:f5:5e:a3:fd:d6:a8:f6:97:a7:64:50: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B0:9B:A9:1A:41:1D:79:27:29:3E:63:58:48:2B:35:6B:8B:31:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bd3f9fa0-7d83-3564-b857-696665a0e5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c020:8000::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9e:36:51:11:c5:02:1b:21:3f:7d:3e:7c:79:8a:8b:7d:75: 13:5f:0d:b4:9e:36:a2:17:9b:02:55:75:1f:63:b5:eb:e4:81: bf:28:2f:25:8f:18:97:9b:ec:5f:cf:07:27:76:d5:77:4f:a3: 25:95:95:d4:50:0e:94:37:18:37:6b:35:67:13:7b:1d:e7:ca: 97:9f:be:f3:31:b9:7c:28:fa:51:4a:de:20:d0:23:8d:f1:be: 9e:d9:19:3f:c2:e9:14:9e:d9:76:b8:5d:8a:f3:88:c5:b9:39: 80:8b:51:76:83:82:2e:96:b7:a3:2e:72:28:9a:41:c2:84:8b: 5b:bb:e4:83:5c:97:f7:66:9f:05:7e:38:3d:de:ce:a7:10:b8: 7a:e9:27:5d:0e:5e:8e:6c:02:9c:46:60:a8:9c:7a:91:e4:ad: 85:b7:99:09:26:be:b8:e0:1f:2b:4b:af:8d:71:53:cb:c5:a9: dc:bd:9c:90:4b:5d:2b:91:e8:af:81:58:15:02:9d:63:ac:2d: 2d:8f:8e:e7:f4:4d:8f:22:0b:d8:52:3d:65:02:ec:c1:ac:5e: 4b:50:a6:fa:6c:0f:58:69:c6:60:c2:8f:70:35:0f:fa:41:44: 68:31:50:38:4d:d8:81:a4:e0:ba:9a:73:2c:cb:50:42:0d:1f: bb:90:0c:d9 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEvPAG9VnN3IcYgOlOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk OGFmZGJjZWQtMjQ1ZS00NzZkLWEzNjgtZDg0ZjgxMWFhNTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjr1MSb2Nkzxu0XvRCFhE7iv5z7hYCNF+Nx7 MgqGB9RW+q4vLBPiUYypDd5N+mBKhOmkjFPsEkLVQxnUaKTHCX3GOg+4n6ImSoBC 1UtQhqk9L8+7It8xSWrQ2KZe3P+lcafJ/bJWvw/q0ltCsDdYUA9HKTifXJhHo19Y TcMkg3S3rSXKCq9S6IXPIa8RrJUkYz76x0h8CWbLvfDhXTZT5jzTIysk86683tcN SuzqVsg+4YHY89AstRRXoHIy9HDyGQo1HGQcpARcRwBOe249tmtmmF5MAOFiyXmy sL78O0+dW/+P3Fc4WmNQwGaiPp+o2x2P9V6j/dao9penZFCu4wIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCiwm6kaQR15Jyk+Y1hIKzVrizH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmQzZjlmYTAtN2Q4My0z NTY0LWI4NTctNjk2NjY1YTBlNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAIIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZJ42URHFAhshP30+fHmKi311E18NtJ42ohebAlV1H2O16+SBvygv JY8Yl5vsX88HJ3bVd0+jJZWV1FAOlDcYN2s1ZxN7HefKl5++8zG5fCj6UUreINAj jfG+ntkZP8LpFJ7ZdrhdivOIxbk5gItRdoOCLpa3oy5yKJpBwoSLW7vkg1yX92af BX44Pd7OpxC4euknXQ5ejmwCnEZgqJx6keSthbeZCSa+uOAfK0uvjXFTy8Wp3L2c kEtdK5Hor4FYFQKdY6wtLY+O5/RNjyIL2FI9ZQLswaxeS1Cm+mwPWGnGYMKPcDUP +kFEaDFQOE3YgaTguppzLMtQQg0fu5AM2Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:25:12 2025 by rpki-client