This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa File: b774099a-dd3b-3026-8a7d-507329420ac7.roa (raw, json) Hash identifier: pyyyroPVQvia083zHQr+YsiDOVP0uXxLToifyNtzbG4= Subject key identifier: 33:0E:4C:D0:DB:18:BB:06:59:18:0A:08:91:8F:AF:B9:8A:7C:A6:EF Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584C2F50FBE9A59FDFFA979C8100 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa Signing time: Sun 14 Dec 2025 14:00:39 +0000 ROA not before: Sun 14 Dec 2025 14:00:39 +0000 ROA not after: Sat 14 Mar 2026 13:00:39 +0000 asID: 211014 IP address blocks: 2604:f440:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:50:fb:e9:a5:9f:df:fa:97:9c:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Dec 14 14:00:39 2025 GMT Not After : Mar 14 13:00:39 2026 GMT Subject: CN=2d9826ca-cf5a-48fa-b099-0ceddeff9911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:60:92:b9:4a:1d:2f:f3:b0:bb:25:b3:44:0c: d7:17:97:ad:ea:ef:f4:0a:42:75:f6:a1:59:a4:04: e5:5a:ec:c6:fa:7d:4f:8b:ee:bc:a6:a6:22:ed:59: 18:39:6d:1a:fd:eb:3a:90:19:14:be:9a:3f:37:95: ca:20:fd:8d:79:17:f9:53:65:e8:e8:99:d7:ea:76: 44:a3:9d:a6:32:33:eb:b9:1a:55:e1:ad:06:3a:ce: c6:19:c5:2e:40:a7:35:aa:4a:50:cf:5d:37:e0:e9: 13:37:a6:4b:54:9d:0b:8b:2f:b9:4a:71:4c:b2:1e: 6d:b5:02:9c:2c:8c:c5:3a:57:20:39:41:99:08:f0: 48:4d:b5:e6:6c:dc:96:e1:61:cb:8a:ce:21:79:14: 30:aa:37:bc:cb:47:35:0a:55:53:f6:5a:c6:58:e1: 9d:bc:b1:81:ab:ce:7a:0d:72:a4:dd:cc:d3:7c:83: e0:34:02:14:2f:95:4d:27:5e:3b:77:11:96:4d:99: ab:4e:38:e0:01:8d:d8:72:33:a3:ae:38:b3:48:5a: 34:40:2b:30:b5:3e:23:58:80:4a:02:e5:93:4e:43: 2e:32:e0:b7:ae:fc:57:fc:ca:53:57:09:d1:5c:a6: cf:54:b6:5b:e8:ca:5b:e2:19:55:65:1a:f6:43:0a: f3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0E:4C:D0:DB:18:BB:06:59:18:0A:08:91:8F:AF:B9:8A:7C:A6:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/b774099a-dd3b-3026-8a7d-507329420ac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv6: 2604:f440:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:62:d7:56:dc:06:fd:e7:ab:8e:2e:19:7b:e3:5d:93:1f:70: f4:6c:7a:07:a9:45:6c:b8:d7:3d:ea:e1:7c:44:03:a7:bf:1d: d0:e8:1f:dc:b7:8b:24:3a:bb:07:04:36:b3:80:7a:1a:d5:97: 38:79:c4:d3:d5:e9:b2:ae:d5:a7:bc:14:38:52:ce:fc:20:16: a5:36:0e:e6:73:a1:b8:ca:a3:35:a8:a9:7b:e2:a7:94:c5:69: e3:c9:2d:d9:b8:c2:30:a9:2b:a5:06:0c:24:66:61:e3:12:6e: 29:f4:6c:69:43:e9:1f:4c:95:bc:2c:c7:24:1c:32:2a:f1:00: 44:a7:93:36:7e:6e:e9:aa:03:53:9a:12:2a:64:d2:6c:80:35: fa:07:84:c9:a3:96:f5:a4:b4:d2:59:e4:89:a2:e3:96:1c:81: 4d:08:e4:f2:c6:9d:d2:43:ef:bb:19:69:72:91:0e:cb:4a:1c: c7:34:70:c4:a5:77:7e:54:d0:31:52:5a:aa:bf:8b:bc:97:b8: c4:78:3c:03:20:cd:6b:0b:63:27:6f:cf:87:ef:87:be:2b:4d: 95:a6:fd:36:4f:0a:c5:64:de:60:66:58:da:b9:29:a9:8c:2e: 87:0b:b3:ff:69:91:e3:0d:c7:52:35:fb:7d:74:db:1c:8f:da: 1c:e5:f8:a5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwvUPvppZ/f+pecgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI1MTIxNDE0MDAzOVoXDTI2MDMxNDEzMDAzOVowLzEtMCsGA1UEAxMk MmQ5ODI2Y2EtY2Y1YS00OGZhLWIwOTktMGNlZGRlZmY5OTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGCSuUodL/OwuyWzRAzXF5et6u/0CkJ19qFZ pATlWuzG+n1Pi+68pqYi7VkYOW0a/es6kBkUvpo/N5XKIP2NeRf5U2Xo6JnX6nZE o52mMjPruRpV4a0GOs7GGcUuQKc1qkpQz1034OkTN6ZLVJ0Liy+5SnFMsh5ttQKc LIzFOlcgOUGZCPBITbXmbNyW4WHLis4heRQwqje8y0c1ClVT9lrGWOGdvLGBq856 DXKk3czTfIPgNAIUL5VNJ147dxGWTZmrTjjgAY3YcjOjrjizSFo0QCswtT4jWIBK AuWTTkMuMuC3rvxX/MpTVwnRXKbPVLZb6Mpb4hlVZRr2QwrztQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDMOTNDbGLsGWRgKCJGPr7mKfKbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYjc3NDA5OWEtZGQzYi0z MDI2LThhN2QtNTA3MzI5NDIwYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgT0QAAL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANFi11bcBv3nq44uGXvjXZMfcPRsegepRWy41z3q4XxEA6e/HdDo H9y3iyQ6uwcENrOAehrVlzh5xNPV6bKu1ae8FDhSzvwgFqU2DuZzobjKozWoqXvi p5TFaePJLdm4wjCpK6UGDCRmYeMSbin0bGlD6R9MlbwsxyQcMirxAESnkzZ+bumq A1OaEipk0myANfoHhMmjlvWktNJZ5Imi45YcgU0I5PLGndJD77sZaXKRDstKHMc0 cMSld35U0DFSWqq/i7yXuMR4PAMgzWsLYydvz4fvh74rTZWm/TZPCsVk3mBmWNq5 KamMLocLs/9pkeMNx1I1+3102xyP2hzl+KU= -----END CERTIFICATE-----Generated at Sat Dec 20 10:02:01 2025 by rpki-client