This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa File: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (raw, json) Hash identifier: HbVH5Ev7fMt1A1bn5Ekcl7UsANcHtzvJZeWCulYTsew= Subject key identifier: C9:95:67:CF:F5:2E:89:4A:5C:15:91:73:7F:06:97:04:0D:8E:EA:4A Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584C42DBEF106D8A8BE086BDB880 Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 11913 IP address blocks: 2602:816:3000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:ef:10:6d:8a:8b:e0:86:bd:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=71d3ea24-9f16-4032-bcb1-69aa639be8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:07:f5:43:7a:5b:f6:ce:90:49:dc:11:39:77: 19:8c:82:4f:8e:3e:b2:07:f2:0e:37:e3:36:5d:79: 1a:41:12:46:f8:a7:d4:3a:e9:79:cc:40:c6:3c:24: cd:62:71:70:64:0e:2a:b6:b6:ee:0d:7b:4a:cb:91: 79:df:e0:67:f5:8e:05:54:84:36:d0:9e:01:7d:11: c8:97:5f:06:94:0e:e3:c1:d1:3d:f1:f9:08:c2:ae: b4:25:a1:fa:9f:f3:16:bb:17:49:7b:88:0e:c1:d2: 9c:0e:07:84:ea:97:8f:52:84:4b:24:64:eb:18:b6: 6e:47:ef:da:15:dc:1b:e6:5f:df:bc:ea:20:d8:9b: ce:f6:61:5d:f1:f1:8d:86:b9:63:8f:60:67:bf:0f: c1:c4:07:c9:63:71:06:a4:61:bf:77:91:81:63:2f: 61:71:3b:34:a2:3f:68:b8:f4:36:4d:c0:86:3c:62: 4b:50:d4:27:6b:38:18:37:9c:cf:08:a0:44:c9:65: 4e:89:7a:66:89:81:fb:99:37:97:70:03:d7:1f:de: fe:fa:ae:60:0a:f9:ed:66:02:88:97:39:4f:cc:fe: 87:82:7d:12:68:dc:00:8f:4d:1f:58:7d:88:bb:6e: 85:2e:d9:cd:02:8d:1a:69:b3:24:05:6c:fc:2e:fb: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:95:67:CF:F5:2E:89:4A:5C:15:91:73:7F:06:97:04:0D:8E:EA:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv6: 2602:816:3000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a6:eb:17:5d:60:6b:f9:7f:20:01:3c:76:73:c9:0a:4c:74: 09:c7:f2:ab:e2:51:ab:ef:cd:22:bf:31:51:0c:98:a4:63:ff: 89:c1:6a:7d:08:96:72:cf:da:7e:72:6c:ed:af:82:bd:8b:47: 20:f6:59:9d:c4:fb:84:ba:fd:27:05:ba:73:4c:a1:59:48:63: 77:83:26:c8:b8:55:eb:fe:c0:86:cc:57:1c:86:68:02:e6:98: 57:05:64:ae:ec:62:dc:20:21:eb:42:15:09:40:44:cd:e5:97: a5:18:35:66:56:c7:d3:ba:0f:b4:4b:ed:8c:a2:ec:3c:f1:47: b9:c5:81:92:1b:84:63:58:12:ef:75:a9:36:7e:39:47:69:2f: 6f:fa:28:45:30:df:ac:3f:dc:04:bf:6c:a9:e2:ed:f7:a5:89: 65:3f:29:ae:ee:89:35:97:8d:13:60:ba:55:6b:c9:e9:25:91: c7:f3:d7:05:ca:da:91:23:3e:9d:ad:e2:c7:99:10:94:60:71: ed:10:31:a5:88:79:cd:57:7a:af:14:6f:49:32:fc:e7:ba:d4: 5a:e2:b4:df:ac:b5:eb:43:65:52:47:6e:5a:56:22:21:be:ff: ef:95:9c:41:0f:4e:1e:f6:0c:d5:9b:0c:1c:1d:3f:91:44:47: 09:f1:00:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExC2+8QbYqL4Ia9uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NzFkM2VhMjQtOWYxNi00MDMyLWJjYjEtNjlhYTYzOWJlOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwf1Q3pb9s6QSdwROXcZjIJPjj6yB/ION+M2 XXkaQRJG+KfUOul5zEDGPCTNYnFwZA4qtrbuDXtKy5F53+Bn9Y4FVIQ20J4BfRHI l18GlA7jwdE98fkIwq60JaH6n/MWuxdJe4gOwdKcDgeE6pePUoRLJGTrGLZuR+/a Fdwb5l/fvOog2JvO9mFd8fGNhrljj2Bnvw/BxAfJY3EGpGG/d5GBYy9hcTs0oj9o uPQ2TcCGPGJLUNQnazgYN5zPCKBEyWVOiXpmiYH7mTeXcAPXH97++q5gCvntZgKI lzlPzP6Hgn0SaNwAj00fWH2Iu26FLtnNAo0aabMkBWz8LvvtMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmVZ8/1LolKXBWRc38GlwQNjupKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvZDlmOWFjYzktYzMyNC0z NzNlLWEyYzQtZTQ2MDRmNTZkNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIFjAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGym6xddYGv5fyABPHZzyQpMdAnH8qviUavvzSK/MVEMmKRj/4nB an0IlnLP2n5ybO2vgr2LRyD2WZ3E+4S6/ScFunNMoVlIY3eDJsi4Vev+wIbMVxyG aALmmFcFZK7sYtwgIetCFQlARM3ll6UYNWZWx9O6D7RL7Yyi7DzxR7nFgZIbhGNY Eu91qTZ+OUdpL2/6KEUw36w/3AS/bKni7feliWU/Ka7uiTWXjRNgulVryeklkcfz 1wXK2pEjPp2t4seZEJRgce0QMaWIec1Xeq8Ub0ky/Oe61FritN+stetDZVJHblpW IiG+/++VnEEPTh72DNWbDBwdP5FERwnxAMI= -----END CERTIFICATE-----Generated at Mon Dec 22 15:53:47 2025 by rpki-client