This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa File: aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa (raw, json) Hash identifier: iO32b4wZHZTKePwwc20b0zA9H3x6E2kx2WP5CAYaF18= Subject key identifier: BC:25:46:CB:5A:6F:97:14:03:90:A0:1B:FA:D2:5A:F4:A5:97:3D:11 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584C28562B241C41D32B8076A580 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 209181 IP address blocks: 2607:740:1f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:2b:24:1c:41:d3:2b:80:76:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=1215afa4-6710-4a79-954a-0180714d20ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:79:27:28:4a:61:68:9e:bc:9a:fa:d0:3c: 9c:da:b3:cc:fb:62:00:7e:c2:80:06:4d:aa:47:ab: bc:99:ce:2b:4c:6b:cb:94:9a:d6:8e:57:01:64:c4: 1c:63:1d:a3:89:90:44:5d:ed:9c:0e:8c:ec:a3:1e: 4d:b1:36:ce:7e:7b:35:c0:e5:ea:8a:b2:c3:4d:bf: 2d:14:c2:fc:53:69:9c:e5:d7:e7:f7:e7:d6:5a:a7: 29:59:65:8a:12:7f:e4:58:a0:9a:4a:26:0b:d5:a7: 02:ff:1a:9e:9b:cd:0d:8c:1f:d5:0f:39:1a:12:47: ce:ca:18:25:7c:b4:0a:63:62:18:e3:a7:c3:c1:61: 4b:bf:36:8a:51:fa:e7:29:91:ae:97:8f:d2:48:bb: 2c:8d:89:f0:ee:00:35:08:e3:59:c5:0b:47:96:51: ec:cc:98:1f:c3:db:05:2b:b8:b8:9a:82:fd:21:82: 17:ba:72:53:2f:1f:62:ab:ec:4e:9f:64:ef:3e:8f: 9d:34:15:a8:5f:1e:06:ff:6c:2f:ac:7a:20:d0:3e: f2:ae:98:09:25:a6:53:35:e0:3e:e7:84:4c:8b:c0: 3e:d7:60:1e:65:63:07:7c:2a:ad:ac:55:73:63:39: 42:dc:ff:a1:a3:5b:f4:be:bc:d2:d1:2f:b0:66:bc: 4b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:25:46:CB:5A:6F:97:14:03:90:A0:1B:FA:D2:5A:F4:A5:97:3D:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/aefb5f97-5ce0-3bb4-b810-7bd8aa414470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv6: 2607:740:1f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c1:d5:40:f8:31:53:6c:2b:e6:6e:b7:cb:ba:22:20:70:17: 0e:bf:80:76:a5:5a:e4:8a:02:6b:96:79:0f:f0:48:17:be:b3: 24:31:00:e5:f5:79:70:53:56:12:f6:65:e7:05:d3:cf:58:f8: a8:62:02:e9:ac:2b:27:49:43:66:82:58:59:9e:31:13:ae:3e: 5b:c4:0c:13:72:4e:f8:df:2b:1c:df:95:4e:71:d2:b6:fb:4e: a8:81:3f:6b:4d:30:ae:5f:3f:cf:e1:d4:42:4d:ef:76:e6:c6: 1f:99:90:47:fe:75:7e:f2:82:b7:0f:ea:82:45:10:9e:01:d6: 19:48:d1:24:12:da:38:41:0a:66:0b:cb:46:10:10:d0:2b:9f: 22:10:9a:a0:4b:f1:00:94:75:c4:26:ef:64:38:38:22:00:14: 5c:41:83:11:6e:ab:f9:e2:92:63:0a:a2:5f:cd:8e:de:0f:de: 88:29:45:f4:91:4c:68:00:a9:3b:49:de:59:75:d4:9d:40:67: bc:47:a0:ca:32:c2:7c:94:de:9d:b7:b2:17:c6:14:f2:ab:ed: 25:3d:c0:b1:60:bc:2e:13:08:03:01:50:0a:ac:57:5b:b7:90: 6b:b5:8a:45:8f:22:74:2d:9e:c9:ba:12:5b:93:e8:a7:bf:80: c9:15:31:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwoViskHEHTK4B2pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk MTIxNWFmYTQtNjcxMC00YTc5LTk1NGEtMDE4MDcxNGQyMGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7x5JyhKYWievJr60Dyc2rPM+2IAfsKABk2q R6u8mc4rTGvLlJrWjlcBZMQcYx2jiZBEXe2cDozsox5NsTbOfns1wOXqirLDTb8t FML8U2mc5dfn9+fWWqcpWWWKEn/kWKCaSiYL1acC/xqem80NjB/VDzkaEkfOyhgl fLQKY2IY46fDwWFLvzaKUfrnKZGul4/SSLssjYnw7gA1CONZxQtHllHszJgfw9sF K7i4moL9IYIXunJTLx9iq+xOn2TvPo+dNBWoXx4G/2wvrHog0D7yrpgJJaZTNeA+ 54RMi8A+12AeZWMHfCqtrFVzYzlC3P+ho1v0vrzS0S+wZrxLHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLwlRstab5cUA5CgG/rSWvSllz0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvYWVmYjVmOTctNWNlMC0z YmI0LWI4MTAtN2JkOGFhNDE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQAAf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjB1UD4MVNsK+Zut8u6IiBwFw6/gHalWuSKAmuWeQ/wSBe+syQx AOX1eXBTVhL2ZecF089Y+KhiAumsKydJQ2aCWFmeMROuPlvEDBNyTvjfKxzflU5x 0rb7TqiBP2tNMK5fP8/h1EJN73bmxh+ZkEf+dX7ygrcP6oJFEJ4B1hlI0SQS2jhB CmYLy0YQENArnyIQmqBL8QCUdcQm72Q4OCIAFFxBgxFuq/nikmMKol/Njt4P3ogp RfSRTGgAqTtJ3ll11J1AZ7xHoMoywnyU3p23shfGFPKr7SU9wLFgvC4TCAMBUAqs V1u3kGu1ikWPInQtnsm6EluT6Ke/gMkVMZ4= -----END CERTIFICATE-----Generated at Sat Dec 20 09:29:02 2025 by rpki-client