This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa File: de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa (raw, json) Hash identifier: mCXxdrJ/DcJLlmI/mLJy+Gwp9cy/hjkoqT45a2iAQyM= Subject key identifier: D3:BE:B3:3E:F4:11:B4:BB:53:C2:BB:D9:C6:17:94:EC:63:4F:9A:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C14CB7E251F36CDDF3DFC5360 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 54253 IP address blocks: 2603:c0c2::/35 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:7e:25:1f:36:cd:df:3d:fc:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=b0b3d7f7-d3c8-446d-bbe7-64f24837c2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:87:39:81:92:ea:b2:c0:fe:c4:d4:1a:fa: a4:be:83:48:f0:b0:45:bc:2d:b1:a5:6e:c4:11:2d: a6:f4:d1:d4:df:ce:57:08:23:4b:80:4b:24:c5:5a: 8e:dc:cc:89:b8:ff:0e:d9:0f:b3:cb:cb:ae:1f:61: 35:c0:76:45:11:27:ec:d3:e8:ca:7c:0b:94:af:e4: 5a:17:21:15:e2:c6:e4:01:0d:23:8e:a6:90:26:af: cf:da:45:03:a6:68:e1:0c:85:85:e9:bd:1b:97:28: 10:7e:6b:fe:01:ae:72:a7:80:63:2e:34:c6:83:e8: ea:49:a2:8d:c3:28:36:41:5d:2b:69:84:1d:c7:6c: 58:2d:26:44:03:24:54:26:87:41:35:d3:2d:d3:c3: 30:0f:9f:59:2a:9c:7c:4b:b8:d0:3c:66:2b:26:6e: 65:4b:5d:b3:e2:52:ae:e4:db:b9:b7:91:f1:ce:0b: c9:1b:17:21:35:d3:d7:3e:3c:f4:22:52:84:af:0f: ec:7b:5e:be:a9:2e:8f:6b:ee:8e:16:ff:79:5e:a0: cc:a4:4b:4e:53:1d:c0:bc:63:b2:fe:de:40:bb:3f: 1c:7b:4a:c4:06:a6:a4:3f:e9:36:cb:f2:f1:92:d9: 7f:c3:98:07:8f:42:ef:5c:10:fc:7f:d5:bd:20:19: 8b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BE:B3:3E:F4:11:B4:BB:53:C2:BB:D9:C6:17:94:EC:63:4F:9A:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/de77bbf4-c3f4-3e57-af32-cf310eb07c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv6: 2603:c0c2::/35 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d2:e2:1d:c8:78:78:06:a4:9d:46:b4:51:83:d1:82:d1:f2: b5:d7:28:7a:34:c6:c8:34:3c:6b:7a:c8:0b:c1:a9:c9:aa:24: f4:1a:f1:0a:97:a7:cf:0c:fc:11:6f:33:d4:dd:f5:22:15:33: 89:2d:69:d3:ea:8a:d1:84:38:b0:c7:14:2d:ce:31:9e:3b:4f: e6:af:bc:33:ec:2e:83:da:a6:7f:b5:9c:7f:84:c6:72:3b:58: fb:e2:cd:c3:29:a3:82:48:e8:aa:5a:7b:ee:14:ed:12:7e:c3: 07:40:d0:f9:2e:5c:ba:26:22:07:7d:9c:77:ef:46:01:3a:06: 72:29:f7:93:33:65:b6:32:29:de:a4:d1:ae:0e:e4:45:c5:e9: 99:cd:dc:f2:d2:bb:75:51:64:a7:0b:2d:9b:1b:08:03:46:c9: fb:78:cf:d9:fc:a2:16:b2:81:6c:4c:af:d1:f4:31:fe:64:94: 0a:e8:11:a4:41:af:30:03:bd:1e:06:20:17:21:bd:8a:a6:48: 96:63:50:19:46:35:30:cb:f1:4f:b6:eb:af:cd:a0:67:fa:89: 34:c9:74:01:51:21:66:00:d8:9a:60:86:70:6a:01:b2:84:6e: 90:dd:9b:ec:01:b2:25:2d:0b:09:26:25:bb:a0:44:fe:c0:b9: ec:63:ce:20 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwUy34lHzbN3z38U2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk YjBiM2Q3ZjctZDNjOC00NDZkLWJiZTctNjRmMjQ4MzdjMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj26HOYGS6rLA/sTUGvqkvoNI8LBFvC2xpW7E ES2m9NHU385XCCNLgEskxVqO3MyJuP8O2Q+zy8uuH2E1wHZFESfs0+jKfAuUr+Ra FyEV4sbkAQ0jjqaQJq/P2kUDpmjhDIWF6b0blygQfmv+Aa5yp4BjLjTGg+jqSaKN wyg2QV0raYQdx2xYLSZEAyRUJodBNdMt08MwD59ZKpx8S7jQPGYrJm5lS12z4lKu 5Nu5t5HxzgvJGxchNdPXPjz0IlKErw/se16+qS6Pa+6OFv95XqDMpEtOUx3AvGOy /t5Auz8ce0rEBqakP+k2y/Lxktl/w5gHj0LvXBD8f9W9IBmL7QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNO+sz70EbS7U8K72cYXlOxjT5pRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGU3N2JiZjQtYzNmNC0z ZTU3LWFmMzItY2YzMTBlYjA3YzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAwgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAWdLiHch4eAaknUa0UYPRgtHytdcoejTGyDQ8a3rIC8Gpyaok9Brx Cpenzwz8EW8z1N31IhUziS1p0+qK0YQ4sMcULc4xnjtP5q+8M+wug9qmf7Wcf4TG cjtY++LNwymjgkjoqlp77hTtEn7DB0DQ+S5cuiYiB32cd+9GAToGcin3kzNltjIp 3qTRrg7kRcXpmc3c8tK7dVFkpwstmxsIA0bJ+3jP2fyiFrKBbEyv0fQx/mSUCugR pEGvMAO9HgYgFyG9iqZIlmNQGUY1MMvxT7brr82gZ/qJNMl0AVEhZgDYmmCGcGoB soRukN2b7AGyJS0LCSYlu6BE/sC57GPOIA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:31 2025 by rpki-client