This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa File: e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa (raw, json) Hash identifier: lZSpN7RxG/3hNUx9KswP22nTwIomS/oGcrfwPoTrGZU= Subject key identifier: 62:FA:11:24:E6:3E:5D:DE:41:0D:81:0B:E2:5B:7A:7A:EE:66:9B:29 Certificate issuer: /CN=253f385b-feb4-4b22-9447-502d6e3a69ac Certificate serial: 010D0C9F4328584C1BC636D674F38362067F9300 Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa Signing time: Sun 07 Dec 2025 14:00:38 +0000 ROA not before: Sun 07 Dec 2025 14:00:38 +0000 ROA not after: Sat 07 Mar 2026 14:00:38 +0000 asID: 401081 IP address blocks: 2604:ae0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1b:c6:36:d6:74:f3:83:62:06:7f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac Validity Not Before: Dec 7 14:00:38 2025 GMT Not After : Mar 7 14:00:38 2026 GMT Subject: CN=09bba466-a04e-4a70-a172-e83e47b06e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:08:f9:10:1f:f9:b0:2c:0e:a8:04:02:38: 88:4e:dc:26:90:71:a2:9c:4c:3a:a9:1c:bc:43:11: b3:08:01:9e:cf:e6:bb:75:00:12:0a:fe:58:97:2e: 38:eb:a8:1a:ee:24:27:2b:ee:aa:fb:ba:35:b7:a4: f2:13:47:df:74:8e:33:74:4c:d3:e6:fc:62:f3:33: 5a:44:19:74:9a:fd:b5:66:77:96:15:22:1b:f7:7e: 49:12:87:eb:e5:65:7e:59:50:22:e1:95:d6:7e:75: 43:d6:96:04:65:45:44:70:7a:d9:e7:7f:06:07:80: 5f:ae:5e:b2:4b:67:6e:99:c1:31:c1:8b:f9:aa:44: 2e:86:e7:f4:0a:b9:c4:a5:c8:fe:17:42:f6:26:63: 42:e5:49:4b:5f:d6:44:b5:c9:cb:6d:65:22:a4:bb: 5c:9f:9a:49:a5:9e:98:a5:12:9b:da:65:bc:ad:26: d5:e3:6e:59:69:51:97:e7:78:f0:f6:b3:3c:c4:b5: 60:bc:12:45:78:1f:be:79:19:ea:e7:47:4c:f4:ad: 01:fa:0d:27:aa:8b:3d:bd:a1:82:15:ac:af:2a:8b: 91:ad:58:a0:df:ff:8a:cd:22:8f:05:b4:f7:32:b2: ea:b7:74:fc:78:24:2e:ba:43:bf:b1:0c:c0:90:a4: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FA:11:24:E6:3E:5D:DE:41:0D:81:0B:E2:5B:7A:7A:EE:66:9B:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/e33c6a11-ada3-335b-9442-e3f18f2ccd32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl X509v3 Authority Key Identifier: keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer sbgp-ipAddrBlock: critical IPv6: 2604:ae0:200::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:99:e9:60:c6:27:d1:82:88:b3:df:e2:41:5a:de:59:03:98: 0f:ff:f3:29:b0:41:5c:41:68:1f:09:1f:98:b6:f0:a5:13:d1: f5:51:59:ba:75:ab:c3:7e:f2:d4:b8:88:ff:7b:e9:56:e2:ae: 91:26:75:7f:1f:39:3a:b9:0f:0f:8f:a0:b4:45:4e:d3:6d:35: cf:d3:68:0e:67:f9:a5:e6:06:1c:85:c5:7a:ff:53:72:34:cd: 7d:32:c2:c0:43:53:44:41:34:c8:89:69:c8:63:84:0f:35:84: 4f:c5:f2:29:b8:cf:87:a6:ee:6f:5e:db:3c:9e:13:dc:bc:0b: 5b:8a:15:e1:2d:03:83:9f:51:29:b6:2e:1f:7b:76:88:39:6f: 55:a6:63:37:ac:1a:eb:5c:e9:e5:03:df:ac:70:0c:6f:a0:4f: a4:ae:d9:48:11:88:e1:c4:e6:c2:c0:f5:df:de:0c:40:ae:f9: fb:f1:dd:d5:a5:28:ed:db:9b:43:3e:e3:37:5d:2d:44:3a:55: 77:53:5e:63:3b:5f:59:6d:0b:69:7a:66:a9:ef:a4:1c:42:08: 4c:79:6e:3f:af:6c:7f:dc:bb:da:23:e0:77:a8:d9:6c:43:8c: ed:11:d2:27:9e:71:7a:70:49:dc:e5:6b:b8:04:3a:6f:05:c1: c6:1d:64:a8 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEwbxjbWdPODYgZ/kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2 OWFjMB4XDTI1MTIwNzE0MDAzOFoXDTI2MDMwNzE0MDAzOFowLzEtMCsGA1UEAxMk MDliYmE0NjYtYTA0ZS00YTcwLWExNzItZTgzZTQ3YjA2ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmMI+RAf+bAsDqgEAjiITtwmkHGinEw6qRy8 QxGzCAGez+a7dQASCv5Yly4466ga7iQnK+6q+7o1t6TyE0ffdI4zdEzT5vxi8zNa RBl0mv21ZneWFSIb935JEofr5WV+WVAi4ZXWfnVD1pYEZUVEcHrZ538GB4Bfrl6y S2dumcExwYv5qkQuhuf0CrnEpcj+F0L2JmNC5UlLX9ZEtcnLbWUipLtcn5pJpZ6Y pRKb2mW8rSbV425ZaVGX53jw9rM8xLVgvBJFeB++eRnq50dM9K0B+g0nqos9vaGC FayvKouRrVig3/+KzSKPBbT3MrLqt3T8eCQuukO/sQzAkKTwTQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGL6ESTmPl3eQQ2BC+JbenruZpspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvZTMzYzZhMTEtYWRhMy0z MzViLTk0NDItZTNmMThmMmNjZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0 NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk NmUzYTY5YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgQK4AIw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAkpnpYMYn0YKIs9/iQVreWQOYD//zKbBBXEFoHwkfmLbwpRPR9VFZ unWrw37y1LiI/3vpVuKukSZ1fx85OrkPD4+gtEVO0201z9NoDmf5peYGHIXFev9T cjTNfTLCwENTREE0yIlpyGOEDzWET8XyKbjPh6bub17bPJ4T3LwLW4oV4S0Dg59R KbYuH3t2iDlvVaZjN6wa61zp5QPfrHAMb6BPpK7ZSBGI4cTmwsD1394MQK75+/Hd 1aUo7dubQz7jN10tRDpVd1NeYztfWW0LaXpmqe+kHEIITHluP69sf9y72iPgd6jZ bEOM7RHSJ55xenBJ3OVruAQ6bwXBxh1kqA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:37 2025 by rpki-client