This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa File: d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa (raw, json) Hash identifier: MmPYabONqdU8pfkINzYLTjtXn2W2i4WyH6wpiIXw/eA= Subject key identifier: C3:56:3C:ED:38:C0:0F:30:57:23:EE:13:7F:DC:36:48:09:73:FA:DE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E938ECF5BA0DE7B6F6CFA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 13367 IP address blocks: 2001:559:3b7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:8e:cf:5b:a0:de:7b:6f:6c:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=8e7daed6-a9a8-4ad6-8aff-15ac74454d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:5c:b5:c6:d6:9d:b8:be:60:d7:dc:02:81:e4: 3b:ce:52:52:98:af:23:63:d9:67:74:78:28:5c:b7: ae:aa:39:e5:46:c9:cd:82:0d:ab:8f:42:cb:54:5e: 87:22:4f:07:14:d5:a7:6e:bd:aa:60:8d:1a:10:ec: 99:59:9b:ce:1a:16:7d:5d:6b:e0:83:84:f4:89:40: d8:a9:b6:67:a5:33:4b:80:0e:db:a8:13:b7:7b:92: c0:36:1f:02:65:b3:ed:58:e0:35:b7:c7:4a:df:ab: 62:88:d7:e7:ac:6e:31:76:0d:cf:0a:31:1a:37:c2: 90:72:49:9e:35:1e:3c:1f:cb:25:e5:e6:63:ef:b8: 72:65:e9:3c:95:3f:90:5b:84:38:7e:d5:02:ff:86: 4f:39:6f:b2:04:7b:b3:ec:59:db:8d:ed:22:37:f6: 5e:f2:f8:08:d8:79:34:9c:99:21:c0:2b:71:1e:24: 59:ab:e0:7e:6d:e8:c2:e4:b7:72:5e:80:a5:fb:c2: ea:01:20:a0:bb:6f:10:94:6e:c5:8d:0d:10:56:55: 3d:2a:5a:37:38:77:23:06:6b:99:cd:b5:6b:63:8e: 0e:b1:a7:e7:a3:52:36:e5:ec:26:66:7c:f5:c3:40: cf:e5:4c:c4:30:6d:f9:b9:70:4b:19:18:02:23:1f: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:56:3C:ED:38:C0:0F:30:57:23:EE:13:7F:DC:36:48:09:73:FA:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3b7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:92:09:46:63:76:a2:49:ec:e9:4d:6d:16:56:2f:aa:a0:87: e7:cc:8a:93:23:e2:dd:fc:4e:f5:75:5e:52:82:36:df:24:31: 7e:0b:7c:8d:86:48:b1:74:f2:bd:f1:1e:fd:01:11:4d:aa:d8: 02:ee:81:3b:d8:1c:93:b0:ad:f2:ac:0f:15:91:b2:9c:e2:4b: 95:b8:df:bf:64:52:39:a7:de:ac:8b:fe:23:27:5a:6f:48:65: 78:10:17:60:4c:9e:48:ac:ca:5d:2f:0f:ac:ad:b3:42:02:e5: e3:9f:53:cb:85:cd:89:fc:f5:a6:9a:bc:57:0b:4f:42:9e:e1: 99:be:b8:5a:c8:4e:a6:2f:c6:85:59:6a:a2:9d:26:36:75:42: b7:c7:78:cb:d0:d4:f1:52:23:05:71:b9:72:18:84:7e:ce:74: a8:f7:2c:45:ed:e5:f6:ca:13:d6:b0:8c:2a:36:7b:e7:a8:5c: 48:f9:df:fe:b2:5d:10:a3:26:10:a9:e5:75:8b:ed:92:7f:15: 0a:6b:90:5c:15:09:bf:95:10:f1:ab:c6:2e:0d:b8:b5:d6:03: db:68:52:3f:d7:34:da:e0:dc:a5:cf:38:a1:2c:ca:64:f7:b8: 0b:ec:55:e3:03:12:02:ca:7b:d0:95:50:fb:45:ae:08:ed:47: af:ac:d5:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwek47PW6Dee29s+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk OGU3ZGFlZDYtYTlhOC00YWQ2LThhZmYtMTVhYzc0NDU0ZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1y1xtaduL5g19wCgeQ7zlJSmK8jY9lndHgo XLeuqjnlRsnNgg2rj0LLVF6HIk8HFNWnbr2qYI0aEOyZWZvOGhZ9XWvgg4T0iUDY qbZnpTNLgA7bqBO3e5LANh8CZbPtWOA1t8dK36tiiNfnrG4xdg3PCjEaN8KQckme NR48H8sl5eZj77hyZek8lT+QW4Q4ftUC/4ZPOW+yBHuz7Fnbje0iN/Ze8vgI2Hk0 nJkhwCtxHiRZq+B+bejC5LdyXoCl+8LqASCgu28QlG7FjQ0QVlU9Klo3OHcjBmuZ zbVrY44Osafno1I25ewmZnz1w0DP5UzEMG35uXBLGRgCIx80YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNWPO04wA8wVyPuE3/cNkgJc/reMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhYzhkNjctMzkyZS0z ODcyLWIxNGUtOGU3ZDliYTM0MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE2SCUZjdqJJ7OlNbRZWL6qgh+fMipMj4t38TvV1XlKCNt8kMX4L fI2GSLF08r3xHv0BEU2q2ALugTvYHJOwrfKsDxWRspziS5W4379kUjmn3qyL/iMn Wm9IZXgQF2BMnkisyl0vD6yts0IC5eOfU8uFzYn89aaavFcLT0Ke4Zm+uFrITqYv xoVZaqKdJjZ1QrfHeMvQ1PFSIwVxuXIYhH7OdKj3LEXt5fbKE9awjCo2e+eoXEj5 3/6yXRCjJhCp5XWL7ZJ/FQprkFwVCb+VEPGrxi4NuLXWA9toUj/XNNrg3KXPOKEs ymT3uAvsVeMDEgLKe9CVUPtFrgjtR6+s1cA= -----END CERTIFICATE-----Generated at Sat Dec 20 03:00:06 2025 by rpki-client