This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa File: ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa (raw, json) Hash identifier: kfI535aZkvtJSQjlSy/Bt3EzZi7DxhcdrLwKvtpwL1c= Subject key identifier: E8:16:96:40:E8:DC:68:C3:77:7E:F8:26:AD:DD:46:1E:91:DB:2D:9C Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584C2856317B208CE847B229AF20 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 209181 IP address blocks: 2607:740:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:31:7b:20:8c:e8:47:b2:29:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=a75022f4-0499-4665-a366-b2619097d225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:2a:c9:f3:35:b0:ef:02:79:7c:51:48:73: ec:d6:90:1f:cf:3e:4a:69:f4:3e:98:65:29:57:5f: 71:08:ba:d1:36:f3:d2:d5:92:bd:e3:92:b4:e4:af: 86:62:41:26:14:c5:1e:fa:83:0f:63:0a:f2:e8:0d: 63:33:1b:a9:6a:62:00:6a:dd:42:32:73:be:15:46: af:bf:1a:b8:94:3d:5f:77:06:cb:67:d2:35:4e:9d: e8:bf:1d:7c:76:c0:9e:35:28:9b:92:ca:1a:f1:8d: 1e:b5:76:71:b0:3d:c1:a0:86:96:81:dc:11:9b:c8: 7b:f7:14:78:32:07:ea:a4:16:20:d9:77:83:56:b8: b0:b1:2f:66:cc:0f:f1:4a:c9:5c:d4:26:36:c2:8f: 9c:dd:8c:2c:95:6b:6c:04:25:4b:e0:59:59:7e:0c: f3:ab:84:bd:2d:7f:f6:d0:5d:7f:9d:d6:36:c0:8d: 80:d1:2e:37:17:f0:36:06:53:45:23:d3:c0:c6:ba: ad:c8:24:9a:57:9e:da:e0:c9:0f:55:f7:15:c0:81: 19:5b:6a:80:3a:2c:59:de:2c:ea:55:89:66:67:70: 89:3d:05:4d:be:f4:8a:59:5d:0d:9f:53:f3:67:71: 63:33:bc:94:47:8f:02:5a:93:91:14:19:b8:3d:b5: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:16:96:40:E8:DC:68:C3:77:7E:F8:26:AD:DD:46:1E:91:DB:2D:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/ac7a9f07-c810-333a-9479-9ad1d926b3b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:20::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e6:c5:16:48:e4:d5:7b:f3:c1:7d:e6:49:63:9d:9e:d4:ab: 1c:90:28:e7:b0:f7:4a:f2:09:86:ef:5c:f2:87:16:cd:57:a0: 5a:b0:db:27:8c:e7:b1:c3:8d:84:c8:c8:52:a7:7e:7e:62:c6: b3:82:cf:41:c3:40:7d:fe:ba:af:98:88:5c:35:0c:ee:04:83: 0b:39:f3:11:c1:cb:a5:2f:dd:37:59:8d:07:0d:5b:09:c2:8b: 7e:af:a7:b9:a5:45:d0:09:c4:25:b0:67:b7:9f:3a:cc:0d:68: 74:b5:fb:53:4e:3d:db:35:51:14:81:6e:e0:51:2e:ae:06:9b: 0a:d2:a0:2b:84:e1:36:28:b5:f8:e3:f5:46:ab:18:25:0f:56: 40:5e:8d:78:4f:5b:b8:3d:6f:74:28:37:9d:3a:4f:3f:cb:e0: 26:e8:8a:bd:52:06:78:98:06:77:56:8e:cd:84:a7:6b:7c:52: 0e:ac:66:ec:51:21:94:20:e1:75:7b:eb:9d:be:f6:eb:5c:fc: 2a:d0:33:4f:4e:ad:2d:ba:e5:3b:0c:74:7a:2d:8b:e9:25:54: 6b:5c:2e:e1:f6:f3:11:2a:1d:95:12:2e:35:cf:d1:17:88:e9: f1:a8:b7:80:7d:61:9c:f8:dd:7d:5f:f2:0f:1f:5e:5c:7d:5e: 5c:f8:c3:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwoVjF7IIzoR7IpryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk YTc1MDIyZjQtMDQ5OS00NjY1LWEzNjYtYjI2MTkwOTdkMjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxQqyfM1sO8CeXxRSHPs1pAfzz5KafQ+mGUp V19xCLrRNvPS1ZK945K05K+GYkEmFMUe+oMPYwry6A1jMxupamIAat1CMnO+FUav vxq4lD1fdwbLZ9I1Tp3ovx18dsCeNSibksoa8Y0etXZxsD3BoIaWgdwRm8h79xR4 MgfqpBYg2XeDVriwsS9mzA/xSslc1CY2wo+c3YwslWtsBCVL4FlZfgzzq4S9LX/2 0F1/ndY2wI2A0S43F/A2BlNFI9PAxrqtyCSaV57a4MkPVfcVwIEZW2qAOixZ3izq VYlmZ3CJPQVNvvSKWV0Nn1PzZ3FjM7yUR48CWpORFBm4PbVnVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOgWlkDo3GjDd374Jq3dRh6R2y2cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWM3YTlmMDctYzgxMC0z MzNhLTk0NzktOWFkMWQ5MjZiM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADPmxRZI5NV788F95kljnZ7UqxyQKOew90ryCYbvXPKHFs1XoFqw 2yeM57HDjYTIyFKnfn5ixrOCz0HDQH3+uq+YiFw1DO4Egws58xHBy6Uv3TdZjQcN WwnCi36vp7mlRdAJxCWwZ7efOswNaHS1+1NOPds1URSBbuBRLq4GmwrSoCuE4TYo tfjj9UarGCUPVkBejXhPW7g9b3QoN506Tz/L4Cboir1SBniYBndWjs2Ep2t8Ug6s ZuxRIZQg4XV7652+9utc/CrQM09OrS265TsMdHoti+klVGtcLuH28xEqHZUSLjXP 0ReI6fGot4B9YZz43X1f8g8fXlx9Xlz4wyE= -----END CERTIFICATE-----Generated at Sat Dec 20 14:43:14 2025 by rpki-client