This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db5f8d85-48e5-31ea-bea9-e00b836dc0f1.roa File: db5f8d85-48e5-31ea-bea9-e00b836dc0f1.roa (raw, json) Hash identifier: EP87MNDkc9MMTZjW6brIyCjBEfsAygyICi4l/6EbAAU= Subject key identifier: A7:37:D5:A1:4A:5E:7E:6D:43:BC:D7:1E:E0:FF:44:60:84:89:03:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C09A0B949F0B074F4F34EA600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db5f8d85-48e5-31ea-bea9-e00b836dc0f1.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 54253 IP address blocks: 2603:c064:1000::/39 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:b9:49:f0:b0:74:f4:f3:4e:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=e87c40d9-222d-4cac-ae7e-4895e338cb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:c0:35:92:55:9b:07:87:57:ff:87:9d:86: 9f:3f:e2:b6:d0:60:1d:64:5c:3c:04:d7:54:cf:34: 33:e0:e2:1d:45:f8:b2:95:65:d9:12:36:ba:43:81: 3b:f2:27:06:9a:9a:66:24:59:e2:03:e1:ab:27:1e: 51:3f:10:51:0b:28:6f:db:1d:0b:39:48:15:be:1f: 85:b1:35:26:dd:c9:cd:84:b7:4b:bf:5a:81:78:1b: 8d:8d:22:ee:49:d9:76:84:ab:5b:7d:1e:dc:a2:8e: c8:9b:ae:84:25:14:95:97:d0:4b:e8:2f:6c:bf:0a: f3:6e:e7:1f:15:6e:29:1d:05:b5:ba:23:51:34:1f: 0e:28:d8:f9:5f:bd:4a:68:51:54:54:50:c1:7c:eb: 86:46:c3:fc:ba:c0:72:07:fe:b5:47:70:18:c3:8f: 2f:61:62:88:38:55:3d:d9:1f:36:54:ca:d0:a2:da: cf:dd:84:cf:3f:23:1d:13:6d:3f:55:52:ba:04:a4: 82:dd:4c:b5:89:bc:5c:9b:67:ec:bd:05:48:48:1f: cd:9d:37:51:d4:ae:54:dc:48:b5:97:6d:06:67:8b: 90:68:85:17:39:0f:b0:c3:f0:1d:81:10:97:33:84: 64:9f:80:be:ca:0c:77:65:17:d6:ea:18:5f:73:8b: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:D5:A1:4A:5E:7E:6D:43:BC:D7:1E:E0:FF:44:60:84:89:03:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/db5f8d85-48e5-31ea-bea9-e00b836dc0f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c064:1000::/39 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c2:5e:c7:bc:5b:31:63:79:8a:78:30:08:f3:40:b5:e3:bf: 93:e3:68:ce:c7:b9:2a:f6:33:4a:22:24:12:7b:78:82:c2:9c: eb:ff:d8:7b:e1:dc:e0:95:9a:2a:d2:95:6c:67:c6:13:f2:06: 13:58:c2:88:3f:cf:a0:2a:58:7a:64:23:33:4e:48:53:12:48: aa:30:31:a3:57:bb:03:35:4e:b8:93:8d:c5:9b:8e:88:93:09: 97:35:ea:1a:21:15:21:ca:45:7c:bb:99:cd:fd:5a:5f:6c:40: d9:4f:cd:b5:6e:71:34:69:58:c5:12:a0:37:d8:7e:63:27:0c: 47:74:14:48:2d:28:51:a6:5e:fd:68:74:9c:bb:c9:b7:bd:7e: 00:2b:db:e5:eb:a6:99:61:ce:7a:bc:2b:a2:d4:74:23:29:a4: 6e:5c:d8:39:40:e7:cd:36:bd:08:39:03:2a:d7:cc:f0:90:e7: 7f:ae:19:c4:bb:7f:42:d7:03:50:95:49:0d:1a:e1:72:f8:ef: 58:ec:69:15:94:93:31:89:fb:7b:18:66:8e:14:2f:ff:6e:4e: 1f:4c:7c:43:a2:a3:de:67:b8:2b:d5:b6:97:3e:18:e6:5f:0d: 18:81:0b:16:39:64:29:be:c6:65:5c:80:e4:21:66:ea:95:0b: 39:f2:b8:93 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwJoLlJ8LB09PNOpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk ZTg3YzQwZDktMjIyZC00Y2FjLWFlN2UtNDg5NWUzMzhjYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPvANZJVmweHV/+HnYafP+K20GAdZFw8BNdU zzQz4OIdRfiylWXZEja6Q4E78icGmppmJFniA+GrJx5RPxBRCyhv2x0LOUgVvh+F sTUm3cnNhLdLv1qBeBuNjSLuSdl2hKtbfR7coo7Im66EJRSVl9BL6C9svwrzbucf FW4pHQW1uiNRNB8OKNj5X71KaFFUVFDBfOuGRsP8usByB/61R3AYw48vYWKIOFU9 2R82VMrQotrP3YTPPyMdE20/VVK6BKSC3Uy1ibxcm2fsvQVISB/NnTdR1K5U3Ei1 l20GZ4uQaIUXOQ+ww/AdgRCXM4Rkn4C+ygx3ZRfW6hhfc4ubqwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKc31aFKXn5tQ7zXHuD/RGCEiQNeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGI1ZjhkODUtNDhlNS0z MWVhLWJlYTktZTAwYjgzNmRjMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYBJgPAZBAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAPcJex7xbMWN5ingwCPNAteO/k+Nozse5KvYzSiIkEnt4gsKc6//Y e+Hc4JWaKtKVbGfGE/IGE1jCiD/PoCpYemQjM05IUxJIqjAxo1e7AzVOuJONxZuO iJMJlzXqGiEVIcpFfLuZzf1aX2xA2U/NtW5xNGlYxRKgN9h+YycMR3QUSC0oUaZe /Wh0nLvJt71+ACvb5eummWHOerwrotR0IymkblzYOUDnzTa9CDkDKtfM8JDnf64Z xLt/QtcDUJVJDRrhcvjvWOxpFZSTMYn7exhmjhQv/25OH0x8Q6Kj3me4K9W2lz4Y 5l8NGIELFjlkKb7GZVyA5CFm6pULOfK4kw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:59 2025 by rpki-client