This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa File: 04bc0d16-6259-3e63-bf07-ce76906fc12f.roa (raw, json) Hash identifier: oaQ5Of/DQeDjvJBUup8xJGInBoYMPYqfVie+pM31LA8= Subject key identifier: 43:D7:A7:6D:20:A6:00:28:52:A1:CA:28:C2:5A:8F:EB:B3:BA:F3:61 Certificate issuer: /CN=b18afa70-561d-4db9-a167-25cd94a409b4 Certificate serial: 010D0C9F4328584C3A7BC3FF91D57DC6A7613E80 Authority key identifier: 8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa Signing time: Thu 18 Dec 2025 14:00:39 +0000 ROA not before: Thu 18 Dec 2025 14:00:39 +0000 ROA not after: Wed 18 Mar 2026 13:00:39 +0000 asID: 402020 IP address blocks: 2604:22e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:c3:ff:91:d5:7d:c6:a7:61:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b18afa70-561d-4db9-a167-25cd94a409b4 Validity Not Before: Dec 18 14:00:39 2025 GMT Not After : Mar 18 13:00:39 2026 GMT Subject: CN=2dc59c83-1899-402d-af86-3a177065a79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:18:87:4d:f3:58:b5:8c:1c:6b:33:f9:ec: 39:84:94:b3:e0:f7:30:e9:2e:64:d7:80:1f:97:d0: a8:07:f0:43:a1:b5:6d:eb:f6:67:71:71:cd:5d:06: 7a:68:be:d2:a6:c6:5f:c9:9f:65:8f:a1:00:ae:b4: 3c:92:a5:e3:8a:08:6f:09:f9:16:a9:81:fd:7b:76: 47:46:66:50:5e:cf:a6:26:af:17:56:b2:e2:c0:3e: 19:02:9a:5e:f0:3e:99:c1:07:bf:8c:47:2a:5c:39: cb:75:5b:0c:13:79:69:97:81:76:0a:9a:4a:22:0a: c8:51:9b:15:8a:17:b9:fa:d7:fa:61:31:a5:c2:43: 15:e4:95:9c:24:b6:61:1d:0d:9d:c9:30:7a:41:cd: 47:4f:3b:19:7e:ff:d4:4b:af:59:a9:dc:23:3f:a8: b4:9c:79:9e:95:f5:c1:51:00:26:f8:2a:63:81:d1: 88:0a:e0:70:49:2b:59:41:32:0f:c3:74:99:49:8f: e9:2c:aa:e3:14:f6:13:d0:bc:04:dc:f6:69:22:a9: 48:b5:e4:9d:34:c9:16:7c:04:6b:11:4d:e6:f0:bc: 72:e8:d9:5c:0b:14:3a:35:49:e4:05:26:09:b4:25: 29:b2:ad:c7:ff:eb:93:1d:84:9c:81:6b:67:67:15: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:A7:6D:20:A6:00:28:52:A1:CA:28:C2:5A:8F:EB:B3:BA:F3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/04bc0d16-6259-3e63-bf07-ce76906fc12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4/b18afa70-561d-4db9-a167-25cd94a409b4.crl X509v3 Authority Key Identifier: keyid:8A:F3:37:52:DB:E5:86:3D:18:07:F9:62:64:D1:45:C6:FB:A1:D3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b18afa70-561d-4db9-a167-25cd94a409b4.cer sbgp-ipAddrBlock: critical IPv6: 2604:22e0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:93:7a:09:a3:00:63:e1:64:a4:0b:47:b3:fa:d9:84:b8:91: 6c:f9:4c:9a:5d:5d:01:b4:95:54:e5:a2:64:69:d6:7c:15:c0: c4:8f:61:29:88:44:ab:18:ad:6e:e1:6c:87:09:20:65:f8:88: 77:0b:ed:9e:d7:64:a6:77:96:84:de:b4:e0:f3:75:ac:3d:05: 1f:ff:b0:9b:6f:57:a5:38:d0:85:da:24:25:b2:67:83:a0:dd: 8a:ce:59:d1:0f:fb:c5:b4:e9:1a:91:13:4a:08:bb:11:7f:d1: 96:94:c5:ef:b5:36:6c:fd:35:c2:38:d6:dd:42:cc:08:6d:60: 7d:a1:c4:53:2a:7f:62:21:21:a0:38:d7:03:c2:7d:96:dc:ff: bb:b2:1d:8f:e7:e7:bb:71:93:af:89:fe:4c:f7:39:1d:4c:24: 45:cc:68:f4:ae:52:25:2d:74:1a:ff:8d:d0:21:29:54:9c:16: 86:3f:2c:a5:ef:00:12:28:52:33:f0:92:72:87:b9:03:9a:62: 34:88:ef:3c:85:05:44:bd:ec:89:b1:f3:ce:23:1e:c9:2d:3b: f7:9a:e5:09:01:f0:65:9e:cb:2e:0c:d2:d9:0c:f4:10:2d:fd: 46:fa:e9:a8:55:64:8c:8c:5e:30:c4:63:fa:5a:6e:8c:48:e5: 79:76:94:54 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEw6e8P/kdV9xqdhPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE4YWZhNzAtNTYxZC00ZGI5LWExNjctMjVjZDk0YTQw OWI0MB4XDTI1MTIxODE0MDAzOVoXDTI2MDMxODEzMDAzOVowLzEtMCsGA1UEAxMk MmRjNTljODMtMTg5OS00MDJkLWFmODYtM2ExNzcwNjVhNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil4Yh03zWLWMHGsz+ew5hJSz4Pcw6S5k14Af l9CoB/BDobVt6/ZncXHNXQZ6aL7SpsZfyZ9lj6EArrQ8kqXjighvCfkWqYH9e3ZH RmZQXs+mJq8XVrLiwD4ZAppe8D6ZwQe/jEcqXDnLdVsME3lpl4F2CppKIgrIUZsV ihe5+tf6YTGlwkMV5JWcJLZhHQ2dyTB6Qc1HTzsZfv/US69ZqdwjP6i0nHmelfXB UQAm+CpjgdGICuBwSStZQTIPw3SZSY/pLKrjFPYT0LwE3PZpIqlIteSdNMkWfARr EU3m8Lxy6NlcCxQ6NUnkBSYJtCUpsq3H/+uTHYScgWtnZxXITQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEPXp20gpgAoUqHKKMJaj+uzuvNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMThh ZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNkOTRhNDA5YjQvMDRiYzBkMTYtNjI1OS0z ZTYzLWJmMDctY2U3NjkwNmZjMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjE4YWZhNzAtNTYxZC00ZGI5LWEx NjctMjVjZDk0YTQwOWI0L2IxOGFmYTcwLTU2MWQtNGRiOS1hMTY3LTI1Y2Q5NGE0 MDliNC5jcmwwHwYDVR0jBBgwFoAUivM3Utvlhj0YB/liZNFFxvuh00swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMThhZmE3MC01NjFkLTRkYjktYTE2Ny0yNWNk OTRhNDA5YjQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQi4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvk3oJowBj4WSkC0ez+tmEuJFs+UyaXV0BtJVU5aJkadZ8FcDEj2Ep iESrGK1u4WyHCSBl+Ih3C+2e12Smd5aE3rTg83WsPQUf/7Cbb1elONCF2iQlsmeD oN2KzlnRD/vFtOkakRNKCLsRf9GWlMXvtTZs/TXCONbdQswIbWB9ocRTKn9iISGg ONcDwn2W3P+7sh2P5+e7cZOvif5M9zkdTCRFzGj0rlIlLXQa/43QISlUnBaGPyyl 7wASKFIz8JJyh7kDmmI0iO88hQVEveyJsfPOIx7JLTv3muUJAfBlnssuDNLZDPQQ Lf1G+umoVWSMjF4wxGP6Wm6MSOV5dpRU -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:46 2025 by rpki-client