This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa File: a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa (raw, json) Hash identifier: 0yI5/G6DPNulI8XLZbrRx8KM68PO6K9Tf4O9wC7NSo0= Subject key identifier: 59:AA:8F:37:02:2A:C6:A2:3D:22:EC:DB:64:DF:4D:AC:EF:22:21:36 Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584C215B9D2166D5AF31DCFD1C00 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 17378 IP address blocks: 2001:19b8::/32 maxlen: 48 2001:4970::/32 maxlen: 48 2600:2c00::/30 maxlen: 48 2604:7e00::/32 maxlen: 48 2604:7f80::/32 maxlen: 48 2606:a700::/32 maxlen: 48 2607:f1d0::/32 maxlen: 48 2607:f3f8::/32 maxlen: 48 2607:fc38::/32 maxlen: 48 2607:fdb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:9d:21:66:d5:af:31:dc:fd:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=2fedc747-c619-4722-bd4f-1fdac40b5377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d7:93:1e:0c:f5:85:c7:7f:4d:c3:47:4d:3e: 71:b5:e4:3a:54:0f:da:23:6d:3b:7e:67:63:4e:60: c3:88:eb:b6:9f:c6:3a:35:b7:29:35:3b:3e:fa:5f: a2:63:bb:b4:70:07:68:cd:bc:0c:f6:21:81:03:f3: a6:db:b0:a0:19:02:1f:8f:a1:2d:af:1d:ca:9d:61: f4:c6:94:af:29:ef:6a:7a:53:2b:3c:9a:35:20:00: 10:e0:2a:99:82:aa:8e:43:95:70:16:88:24:2e:57: be:69:1e:08:06:41:79:37:0c:ce:b4:6d:e5:ff:5d: 8a:f2:a9:83:da:b4:cd:0e:93:b0:ff:d3:75:b5:18: cf:b7:0e:d3:4c:1c:4a:53:0f:1c:59:90:62:cc:76: 78:4d:8c:cc:8a:e7:cf:55:a8:88:20:f2:c0:d6:c5: a0:a8:37:5e:0d:f7:82:0e:b9:0c:05:c1:ab:ce:4a: 4d:c0:0f:a4:ee:80:ae:91:1a:c9:fd:b6:49:33:f6: f6:57:2c:fb:d9:70:59:a5:6a:50:98:bb:05:da:1e: 53:2e:13:5e:74:62:76:7c:a8:c5:9f:55:fd:00:ff: e2:ad:5e:1a:cc:69:35:fc:29:34:98:51:cc:d2:29: 7f:ec:2b:f6:40:00:63:37:02:88:6a:e7:93:ec:6d: c9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:8F:37:02:2A:C6:A2:3D:22:EC:DB:64:DF:4D:AC:EF:22:21:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/a42cd5dc-c9fb-3065-bfd3-17ce64eb897d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b8::/32 2001:4970::/32 2600:2c00::/30 2604:7e00::/32 2604:7f80::/32 2606:a700::/32 2607:f1d0::/32 2607:f3f8::/32 2607:fc38::/32 2607:fdb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9c:81:76:54:89:bc:20:de:81:f3:0a:ca:84:e5:ca:9b:71: 0b:56:26:a9:8c:31:0b:b2:f4:1f:01:7b:2a:2b:c7:a4:b2:76: 21:6d:e1:ee:35:3e:b4:c3:4b:09:0e:e7:a6:76:4e:15:bd:a2: 57:29:2f:dc:85:45:15:dc:1b:11:f6:c0:a2:27:96:56:bb:41: 93:5d:69:ff:61:b4:5a:9a:15:0a:85:32:dd:43:81:d3:07:42: d2:53:f0:a5:30:d7:14:b8:18:22:f1:3a:e9:36:e1:d0:e6:82: eb:fd:1e:c4:2e:8f:f9:a1:ce:f1:44:17:82:90:d6:71:2e:8b: c9:66:03:c3:3a:9e:fc:cc:88:65:6b:b2:96:68:d5:2f:08:62: ea:db:c2:a0:bb:2c:ac:3d:d5:be:fd:0c:53:e7:37:56:bb:80: a2:d4:9e:61:da:51:9e:02:0f:9b:a4:d5:9e:9a:ba:28:48:e1: 64:aa:26:4c:07:6a:2e:0a:ce:fa:10:b9:a1:70:80:66:06:94: ff:a3:ec:ca:e4:55:57:44:ba:5b:3f:7a:4f:23:9c:9b:16:bf: 12:5f:de:eb:0b:6a:d5:6f:04:72:7f:32:02:6b:18:b8:1d:26: 7d:c7:a5:70:7d:19:4f:fa:c7:8e:08:6e:a0:37:e7:e8:b2:ae: 03:f6:13:ad -----BEGIN CERTIFICATE----- MIIGgzCCBWugAwIBAgIUAQ0Mn0MoWEwhW50hZtWvMdz9HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk MmZlZGM3NDctYzYxOS00NzIyLWJkNGYtMWZkYWM0MGI1Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49eTHgz1hcd/TcNHTT5xteQ6VA/aI207fmdj TmDDiOu2n8Y6NbcpNTs++l+iY7u0cAdozbwM9iGBA/Om27CgGQIfj6Etrx3KnWH0 xpSvKe9qelMrPJo1IAAQ4CqZgqqOQ5VwFogkLle+aR4IBkF5NwzOtG3l/12K8qmD 2rTNDpOw/9N1tRjPtw7TTBxKUw8cWZBizHZ4TYzMiufPVaiIIPLA1sWgqDdeDfeC DrkMBcGrzkpNwA+k7oCukRrJ/bZJM/b2Vyz72XBZpWpQmLsF2h5TLhNedGJ2fKjF n1X9AP/irV4azGk1/Ck0mFHM0il/7Cv2QABjNwKIaueT7G3J9wIDAQABo4IDlTCC A5EwHQYDVR0OBBYEFFmqjzcCKsaiPSLs22TfTazvIiE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvYTQyY2Q1ZGMtYzlmYi0z MDY1LWJmZDMtMTdjZTY0ZWI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAAjBGAwUAIAEZuAMF ACABSXADBQImACwAAwUAJgR+AAMFACYEf4ADBQAmBqcAAwUAJgfx0AMFACYH8/gD BQAmB/w4AwUAJgf9uDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBznIF2VIm8IN6B8wrKhOXKm3ELViapjDEL svQfAXsqK8eksnYhbeHuNT60w0sJDuemdk4VvaJXKS/chUUV3BsR9sCiJ5ZWu0GT XWn/YbRamhUKhTLdQ4HTB0LSU/ClMNcUuBgi8TrpNuHQ5oLr/R7ELo/5oc7xRBeC kNZxLovJZgPDOp78zIhla7KWaNUvCGLq28KguyysPdW+/QxT5zdWu4Ci1J5h2lGe Ag+bpNWemrooSOFkqiZMB2ouCs76ELmhcIBmBpT/o+zK5FVXRLpbP3pPI5ybFr8S X97rC2rVbwRyfzICaxi4HSZ9x6VwfRlP+seOCG6gN+fosq4D9hOt -----END CERTIFICATE-----Generated at Sat Dec 20 11:39:50 2025 by rpki-client