This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa File: bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa (raw, json) Hash identifier: jzK5nN02H1y9n7LD+nqKys6zgvfXRPfTje4LvtwCYXM= Subject key identifier: E8:A1:94:28:28:52:4F:45:89:6E:09:B6:E0:7C:1C:35:70:ED:85:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E939BB4BE43EDD5B16E9A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 33287 IP address blocks: 2001:559:2ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:9b:b4:be:43:ed:d5:b1:6e:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=eaca7eb5-701b-46ee-991c-bcab58c0f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b4:ee:10:f2:d8:aa:83:7f:2e:b3:d8:b8:54: fb:d4:ad:ac:09:b0:92:ee:b7:20:c5:04:2b:d3:9b: 69:82:3f:6a:42:9b:b7:36:be:f9:58:e2:36:40:af: 65:0b:cc:46:25:9d:fd:7e:a5:34:3d:2c:62:8a:70: 40:b1:d1:04:f0:d7:60:a3:e8:a2:4f:d7:f8:27:48: e6:9c:d7:8f:f4:6f:f0:5d:f0:28:44:60:ab:aa:66: a6:3a:35:31:13:67:54:ac:7a:4a:76:0e:f9:da:c2: 09:89:df:eb:97:ce:b9:41:6e:41:18:3a:72:6c:86: f8:68:d4:98:95:c8:4c:48:ca:f9:4b:1a:40:63:11: 11:2d:e8:f1:58:b5:57:71:2b:64:37:ed:2d:e6:a1: 56:66:fe:fc:ec:6d:a0:7a:97:79:3b:db:e7:d1:f5: aa:b5:9b:5a:77:48:ec:35:8a:76:fe:9a:b1:bb:51: 4f:ff:19:38:a3:64:f0:95:67:14:22:aa:d9:16:f4: 5f:fa:61:be:32:2b:b7:29:1e:38:19:71:6c:d6:be: b9:1c:9c:b6:b1:a9:06:20:c4:7d:88:53:56:fb:42: 34:5e:07:ed:21:bc:d2:e0:53:31:03:4d:62:5b:61: 84:03:3f:73:b6:0a:5d:cc:51:8e:a5:5b:71:56:b2: 6c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:94:28:28:52:4F:45:89:6E:09:B6:E0:7C:1C:35:70:ED:85:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb897b32-226d-3e53-94bc-18ad57cbfd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bc:ea:81:e4:94:60:3c:3d:62:71:de:a4:d8:40:c3:8c:8f: 30:27:f9:4d:49:bc:8d:84:e0:e9:e8:00:d9:2f:c5:f1:73:56: 1b:d5:90:70:7c:e6:e0:1e:43:3e:a9:6c:82:e6:53:13:ac:57: ad:0f:21:70:76:8a:49:71:57:68:06:26:12:e2:5d:f0:6f:13: e7:0f:0d:13:63:6e:73:91:87:ac:99:d2:98:08:ab:b4:ab:da: a6:a0:0d:c6:ab:0d:1e:db:4e:1f:64:59:6b:09:9d:f9:5e:f0: 0e:83:9a:e5:a7:f8:3e:e6:ed:ba:11:3c:2d:c3:af:dd:b6:79: 8c:07:a2:9f:a0:45:88:20:48:49:20:54:0a:27:06:8d:02:22: ae:e6:7d:f1:66:ee:8c:fa:18:c7:3c:78:60:35:a1:9c:34:13: f7:67:56:0a:59:90:af:ce:93:91:a7:38:cd:e2:77:9e:67:c5: 7e:0a:0f:ab:04:dd:27:72:3d:e5:86:23:91:4d:0d:92:b7:8c: 1e:c4:ce:f3:66:e9:b8:70:11:22:3c:02:b5:90:39:80:a7:04: 72:76:5d:d3:f6:74:ef:5c:fa:29:83:3f:47:ad:1a:c2:30:a9: 16:6b:d0:80:90:00:86:02:67:96:d1:71:c6:ca:04:28:56:8a: e3:5a:b7:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwek5u0vkPt1bFumkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk ZWFjYTdlYjUtNzAxYi00NmVlLTk5MWMtYmNhYjU4YzBmMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrTuEPLYqoN/LrPYuFT71K2sCbCS7rcgxQQr 05tpgj9qQpu3Nr75WOI2QK9lC8xGJZ39fqU0PSxiinBAsdEE8Ndgo+iiT9f4J0jm nNeP9G/wXfAoRGCrqmamOjUxE2dUrHpKdg752sIJid/rl865QW5BGDpybIb4aNSY lchMSMr5SxpAYxERLejxWLVXcStkN+0t5qFWZv787G2gepd5O9vn0fWqtZtad0js NYp2/pqxu1FP/xk4o2TwlWcUIqrZFvRf+mG+Miu3KR44GXFs1r65HJy2sakGIMR9 iFNW+0I0XgftIbzS4FMxA01iW2GEAz9ztgpdzFGOpVtxVrJs0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOihlCgoUk9FiW4JtuB8HDVw7YX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmI4OTdiMzItMjI2ZC0z ZTUzLTk0YmMtMThhZDU3Y2JmZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABi86oHklGA8PWJx3qTYQMOMjzAn+U1JvI2E4OnoANkvxfFzVhvV kHB85uAeQz6pbILmUxOsV60PIXB2iklxV2gGJhLiXfBvE+cPDRNjbnORh6yZ0pgI q7Sr2qagDcarDR7bTh9kWWsJnfle8A6DmuWn+D7m7boRPC3Dr922eYwHop+gRYgg SEkgVAonBo0CIq7mffFm7oz6GMc8eGA1oZw0E/dnVgpZkK/Ok5GnOM3id55nxX4K D6sE3SdyPeWGI5FNDZK3jB7EzvNm6bhwESI8ArWQOYCnBHJ2XdP2dO9c+imDP0et GsIwqRZr0ICQAIYCZ5bRccbKBChWiuNat8k= -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:15 2025 by rpki-client