This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa File: 628a939b-46a5-388f-b483-e30641717869.roa (raw, json) Hash identifier: f/ocBosrWjVN6B+XLs1i87wd3zvWA5cG3dlNv8iMxzg= Subject key identifier: 46:AA:79:90:BA:E8:D5:A1:1E:A0:B8:F3:3F:A9:77:AC:C7:31:D1:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E921659235F27DAFF004C20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33287 IP address blocks: 2001:559:59a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:92:16:59:23:5f:27:da:ff:00:4c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=2156fab2-b20c-4b70-9cc1-323f76f95461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:59:b3:40:6e:56:b3:e0:cc:cd:7b:cd:df:e2: 29:45:5d:5b:4d:31:39:4a:a7:6f:fe:03:04:af:79: ac:6e:6c:af:41:28:5b:55:62:3d:04:e4:84:f3:8c: 8f:82:0c:9b:c2:c7:09:3e:e8:15:ba:da:83:2e:70: d3:92:a5:69:d3:7d:30:87:0f:18:8a:1a:86:3e:a2: 96:a5:90:f0:e7:7b:bf:f0:23:40:ee:01:54:5e:da: 7d:a2:be:2e:78:7e:11:37:1a:9e:f8:56:64:78:f7: dd:6c:d1:7f:43:d3:a6:4c:1a:80:25:1d:77:9d:0d: 29:2d:1a:0a:ca:b2:f1:43:34:a1:2b:70:62:f9:95: c2:97:30:d9:ee:8b:5a:70:42:e5:d2:23:88:a0:95: fc:74:47:31:16:60:a1:6d:a4:99:63:42:51:e3:13: d0:7e:1e:f3:6b:bb:4f:50:50:96:6d:25:f4:04:f7: e0:ac:a2:90:ee:80:e8:dc:9c:db:31:9e:39:92:07: b4:74:fb:05:03:cf:51:b6:d3:c6:7a:ab:45:27:3b: 2e:c7:be:91:8d:5a:a3:bf:38:90:d5:a1:35:2a:94: a9:14:3e:a2:77:be:19:be:33:69:e7:3e:0a:56:8a: b9:fa:4a:35:e1:d8:a9:d7:20:13:4f:81:7f:fb:5a: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AA:79:90:BA:E8:D5:A1:1E:A0:B8:F3:3F:A9:77:AC:C7:31:D1:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:59a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:d8:d2:90:b8:f0:3c:8f:d7:12:23:85:8a:6b:35:fe:14:35: e0:e9:36:8f:8b:60:1a:ef:37:b7:66:c4:17:b7:d6:64:93:b0: 3e:e0:c2:10:0f:97:8d:15:e0:b8:70:36:56:13:15:7d:00:ca: 7c:2e:80:58:85:0e:5b:3b:4e:99:95:75:f6:f6:26:6f:e2:e4: bd:62:66:1c:87:d7:6e:f9:09:5d:c0:c5:cb:c3:dc:e7:f8:f7: fd:b8:66:ff:65:21:0a:7b:82:05:2e:80:71:15:88:e1:bd:3d: 66:b3:9d:d1:ae:f2:7a:9c:86:b2:d3:30:ba:5f:c8:30:17:65: 4c:e4:77:98:cd:d1:7a:a9:e4:a3:01:7e:a1:66:89:51:0b:a3: f1:15:c5:01:8e:55:77:78:ee:db:c9:00:1e:31:5c:a6:87:b7: 29:cb:dc:90:5b:28:42:6a:8c:fa:00:c1:66:76:b0:9b:cd:33: 5b:e2:42:d8:47:bf:d1:9c:a0:03:fa:ae:73:c7:64:27:8d:ce: 15:fb:24:33:8f:4c:fe:9a:95:42:30:76:63:97:41:5a:ea:ab: ac:1f:93:9f:fd:cb:59:3e:7c:41:49:3a:29:7f:a7:d8:9a:c1: 59:2e:10:72:ef:be:1a:c2:18:85:d5:62:70:f1:ca:1a:5e:cd: d5:1c:0c:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwekhZZI18n2v8ATCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk MjE1NmZhYjItYjIwYy00YjcwLTljYzEtMzIzZjc2Zjk1NDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVmzQG5Ws+DMzXvN3+IpRV1bTTE5Sqdv/gME r3msbmyvQShbVWI9BOSE84yPggybwscJPugVutqDLnDTkqVp030whw8YihqGPqKW pZDw53u/8CNA7gFUXtp9or4ueH4RNxqe+FZkePfdbNF/Q9OmTBqAJR13nQ0pLRoK yrLxQzShK3Bi+ZXClzDZ7otacELl0iOIoJX8dEcxFmChbaSZY0JR4xPQfh7za7tP UFCWbSX0BPfgrKKQ7oDo3JzbMZ45kge0dPsFA89RttPGeqtFJzsux76RjVqjvziQ 1aE1KpSpFD6id74ZvjNp5z4KVoq5+ko14dip1yATT4F/+1p/DwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaqeZC66NWhHqC48z+pd6zHMdELMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4YTkzOWItNDZhNS0z ODhmLWI0ODMtZTMwNjQxNzE3ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANbY0pC48DyP1xIjhYprNf4UNeDpNo+LYBrvN7dmxBe31mSTsD7g whAPl40V4LhwNlYTFX0AynwugFiFDls7TpmVdfb2Jm/i5L1iZhyH1275CV3AxcvD 3Of49/24Zv9lIQp7ggUugHEViOG9PWazndGu8nqchrLTMLpfyDAXZUzkd5jN0Xqp 5KMBfqFmiVELo/EVxQGOVXd47tvJAB4xXKaHtynL3JBbKEJqjPoAwWZ2sJvNM1vi QthHv9GcoAP6rnPHZCeNzhX7JDOPTP6alUIwdmOXQVrqq6wfk5/9y1k+fEFJOil/ p9iawVkuEHLvvhrCGIXVYnDxyhpezdUcDJQ= -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:38 2025 by rpki-client