This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa File: 856571e3-0844-3aaf-b208-47df360ac0b7.roa (raw, json) Hash identifier: yWxrCPoM48cf71YXm5By3UfPNzXwd2fm0LIkOggj0nE= Subject key identifier: 90:12:33:43:81:99:C3:60:A9:87:B9:3B:3E:63:63:EE:6C:0A:F9:CA Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Certificate serial: 010D0C9F4328584C285627B1046D969790BBA880 Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 54874 IP address blocks: 2605:f440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:27:b1:04:6d:96:97:90:bb:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=3ad86a6a-50d9-4a41-89a4-95439bb425a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:78:a3:c1:e0:d4:72:83:a4:bf:82:56:39: 20:17:23:28:ae:82:3d:95:85:f1:0c:44:35:45:ad: 8b:f4:71:7f:b0:4d:94:5d:06:97:45:25:95:98:fb: 0b:a7:b1:e4:96:6d:da:db:51:95:fa:77:c4:33:d3: 9a:18:33:a0:68:a8:9e:60:21:85:b2:2d:66:3f:fb: 74:7d:dd:98:b2:ab:02:13:62:ed:00:89:8c:b9:60: 82:71:1a:7c:c9:91:11:0f:ee:09:34:9d:b9:0d:ca: 06:9a:51:f4:34:8f:6a:8b:c4:7a:2c:41:d0:6f:a9: f4:9e:3f:5b:49:e7:d7:4f:fc:2e:84:0b:f2:b0:de: 1e:93:ba:ad:f7:da:8d:d7:64:8d:7e:cb:9d:8d:89: db:56:c4:1f:d4:74:93:32:ef:90:2b:3c:c9:37:1a: 69:be:d1:e5:d4:c7:9a:e2:f3:da:d3:26:a8:c5:f6: 8a:b9:9d:ab:a1:98:fa:10:b0:11:d5:66:71:b3:3c: fc:ce:9e:00:3f:6c:ab:2e:c6:bf:c8:f8:1a:03:cb: cc:90:38:f5:2e:70:c8:4d:1f:59:c2:da:bd:26:46: 45:19:5c:00:32:86:c7:d0:26:cc:b3:33:bb:47:a0: f9:9b:e0:22:ca:9e:d7:3b:3e:ea:89:29:5d:2e:e6: 9a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:33:43:81:99:C3:60:A9:87:B9:3B:3E:63:63:EE:6C:0A:F9:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/856571e3-0844-3aaf-b208-47df360ac0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl X509v3 Authority Key Identifier: keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer sbgp-ipAddrBlock: critical IPv6: 2605:f440::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f9:7c:71:96:cf:98:72:f1:a1:b5:f5:da:31:b3:97:de:8c: c0:4a:9e:fb:70:0c:ed:9b:9d:bd:83:20:eb:59:85:80:60:cb: 0a:ee:9f:97:0d:38:45:36:bc:7d:97:2b:01:ac:47:13:4b:cf: af:44:b2:bf:20:1d:db:8d:6d:4f:cf:9b:e0:da:00:b9:a1:48: dc:db:22:ef:70:e9:c1:a5:ee:d8:a0:f6:a4:a9:a9:55:f0:5d: b1:96:41:02:9d:b6:8b:e5:ca:eb:be:37:6a:b9:dd:3e:2d:3e: 1f:16:74:93:d8:b6:5d:2d:7c:3b:2a:d0:87:30:6f:8c:43:fc: 99:86:8c:40:7b:b0:5b:cd:08:e5:fc:59:78:d4:e6:74:e1:b3: ab:e0:a1:31:5d:db:b5:12:7b:24:62:d7:a2:ef:fd:fd:55:d3: 38:35:fb:a5:b4:08:b6:35:29:80:de:6d:2d:ec:e9:8c:35:07: 89:e9:08:ff:62:21:49:5c:8d:bc:0b:55:4a:d9:2b:68:cc:70: e9:d9:60:43:10:9f:88:8d:37:67:47:bb:d8:5d:36:69:79:11: 8e:af:db:24:1e:0f:8b:e8:d1:62:87:19:4a:56:1e:14:8f:1e: e5:29:b2:39:63:d5:c8:ab:71:48:2e:12:4d:42:dc:14:85:38: a8:0e:f1:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwoViexBG2Wl5C7qIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzZDI1YTAtZjdlNS00MjFkLTg4NDItZmM5NjdiZjA4 ZjcyMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk M2FkODZhNmEtNTBkOS00YTQxLTg5YTQtOTU0MzliYjQyNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukV4o8Hg1HKDpL+CVjkgFyMoroI9lYXxDEQ1 Ra2L9HF/sE2UXQaXRSWVmPsLp7Hklm3a21GV+nfEM9OaGDOgaKieYCGFsi1mP/t0 fd2YsqsCE2LtAImMuWCCcRp8yZERD+4JNJ25DcoGmlH0NI9qi8R6LEHQb6n0nj9b SefXT/wuhAvysN4ek7qt99qN12SNfsudjYnbVsQf1HSTMu+QKzzJNxppvtHl1Mea 4vPa0yaoxfaKuZ2roZj6ELAR1WZxszz8zp4AP2yrLsa/yPgaA8vMkDj1LnDITR9Z wtq9JkZFGVwAMobH0CbMszO7R6D5m+Aiyp7XOz7qiSldLuaaoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJASM0OBmcNgqYe5Oz5jY+5sCvnKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNk MjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2N2JmMDhmNzIvODU2NTcxZTMtMDg0NC0z YWFmLWIyMDgtNDdkZjM2MGFjMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNmYzZDI1YTAtZjdlNS00MjFkLTg4 NDItZmM5NjdiZjA4ZjcyLzZmM2QyNWEwLWY3ZTUtNDIxZC04ODQyLWZjOTY3YmYw OGY3Mi5jcmwwHwYDVR0jBBgwFoAUV9Ck+WN+PQBHgSzdpn7Mfk696aowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82ZjNkMjVhMC1mN2U1LTQyMWQtODg0Mi1mYzk2 N2JmMDhmNzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgX0QDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAc+Xxxls+YcvGhtfXaMbOX3ozASp77cAztm529gyDrWYWAYMsK7p+X DThFNrx9lysBrEcTS8+vRLK/IB3bjW1Pz5vg2gC5oUjc2yLvcOnBpe7YoPakqalV 8F2xlkECnbaL5crrvjdqud0+LT4fFnST2LZdLXw7KtCHMG+MQ/yZhoxAe7BbzQjl /Fl41OZ04bOr4KExXdu1EnskYtei7/39VdM4NfultAi2NSmA3m0t7OmMNQeJ6Qj/ YiFJXI28C1VK2StozHDp2WBDEJ+IjTdnR7vYXTZpeRGOr9skHg+L6NFihxlKVh4U jx7lKbI5Y9XIq3FILhJNQtwUhTioDvHg -----END CERTIFICATE-----Generated at Mon Dec 22 12:18:28 2025 by rpki-client