This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa File: 689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa (raw, json) Hash identifier: XkWfk8ZuBoijtW55VcURpvIOlNGkf8G27Q210dgAG+Y= Subject key identifier: 94:10:67:47:44:29:67:7C:CF:F6:BF:C4:66:8B:A3:04:D0:5E:6B:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C29BBE6DD7CFFBF37E2CCD380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 20940 IP address blocks: 2600:1488:a140::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:e6:dd:7c:ff:bf:37:e2:cc:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=a028e1ae-79e5-42e9-a9ff-19999c777677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:f2:d4:9a:11:28:77:01:c2:cd:96:fe:74: ed:69:62:cd:63:a0:92:55:70:91:ff:50:b7:83:43: ad:58:49:ac:42:4c:e9:73:af:0e:f2:59:e7:5d:60: d9:5a:13:b5:3a:a2:24:4c:a6:79:55:b2:54:83:90: 08:82:94:f8:97:04:78:1e:80:03:7b:df:b1:ad:d1: cb:75:a2:80:94:75:76:fa:7a:b6:1e:ef:f7:09:b3: ca:2b:7a:c9:e8:0c:b8:31:45:58:dc:e6:aa:43:b5: 43:af:fb:2e:fb:fc:20:db:df:15:64:9c:f6:43:e6: 56:b3:c6:94:d4:46:51:47:37:cf:75:8f:d0:5c:a4: 91:b8:ab:27:df:b5:89:51:7a:46:6f:c6:7e:96:3b: 54:9e:85:34:b3:f0:21:b0:7b:2d:e4:34:10:83:67: 8a:8d:e6:94:9c:50:4f:8a:7f:bd:90:3f:37:36:99: df:d4:8e:12:f1:d8:e1:cb:f6:0a:1b:76:e3:c7:17: 67:e4:a8:99:4a:6e:11:44:8d:91:50:c6:a6:06:83: d6:5c:09:03:da:fe:90:13:f3:da:8a:b6:b8:80:d8: e4:55:9b:a5:4b:22:0e:40:7c:f4:f2:37:0d:e7:82: 3d:bc:df:d2:75:1a:34:aa:95:b3:b5:03:b6:99:c7: 8b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:67:47:44:29:67:7C:CF:F6:BF:C4:66:8B:A3:04:D0:5E:6B:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/689b1f82-c2e0-37ad-a894-b8b3337a4f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv6: 2600:1488:a140::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:44:f8:3c:e6:dc:a1:09:67:21:36:b1:ab:a6:89:2a:87:23: d0:b0:b9:67:27:ba:84:0b:3a:24:04:7a:49:29:59:dc:72:28: a3:92:bb:c5:bd:5b:c2:cc:8a:c0:a9:d1:03:5d:f4:6e:db:a4: 3c:e5:2b:a5:70:4d:ac:a2:d5:60:71:b2:7f:d7:58:65:67:13: 6c:c9:8d:0f:e1:c7:fe:71:e9:6e:56:73:d1:ec:7f:35:6d:bd: 24:4b:01:d6:85:d2:a7:f5:7a:41:5b:a2:b7:a3:51:10:5c:c0: 44:56:27:92:1a:73:89:7d:82:ce:43:29:b3:70:9b:d1:54:89: 24:3d:3e:0a:80:3e:10:9c:0f:d7:78:cd:74:26:41:04:04:fd: 98:36:01:2c:9b:e2:23:ab:5b:11:ff:66:b6:a7:b9:16:c4:bd: 67:53:98:f2:e0:0c:08:f6:8a:4f:f9:06:f7:f8:47:d0:23:68: c3:b6:85:30:c7:6e:89:1f:6a:e4:70:43:2c:19:3f:22:60:99: dd:a7:ea:38:77:94:39:b5:25:dd:de:d3:f1:1e:cd:24:b8:f1: cf:d5:fe:8f:55:27:99:be:fb:a9:67:d0:e3:14:94:cc:ff:d4: 48:93:33:23:5c:7a:9e:e4:e8:2f:08:bd:1a:1a:d4:b0:9d:c0: 9e:0d:9f:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu+bdfP+/N+LM04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YTAyOGUxYWUtNzllNS00MmU5LWE5ZmYtMTk5OTljNzc3Njc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcDy1JoRKHcBws2W/nTtaWLNY6CSVXCR/1C3 g0OtWEmsQkzpc68O8lnnXWDZWhO1OqIkTKZ5VbJUg5AIgpT4lwR4HoADe9+xrdHL daKAlHV2+nq2Hu/3CbPKK3rJ6Ay4MUVY3OaqQ7VDr/su+/wg298VZJz2Q+ZWs8aU 1EZRRzfPdY/QXKSRuKsn37WJUXpGb8Z+ljtUnoU0s/AhsHst5DQQg2eKjeaUnFBP in+9kD83Npnf1I4S8djhy/YKG3bjxxdn5KiZSm4RRI2RUMamBoPWXAkD2v6QE/Pa ira4gNjkVZulSyIOQHz08jcN54I9vN/SdRo0qpWztQO2mceLvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJQQZ0dEKWd8z/a/xGaLowTQXmtLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjg5YjFmODItYzJlMC0z N2FkLWE4OTQtYjhiMzMzN2E0ZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgAUiKFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlE+Dzm3KEJZyE2saumiSqHI9CwuWcnuoQLOiQEekkpWdxyKKOS u8W9W8LMisCp0QNd9G7bpDzlK6VwTayi1WBxsn/XWGVnE2zJjQ/hx/5x6W5Wc9Hs fzVtvSRLAdaF0qf1ekFborejURBcwERWJ5Iac4l9gs5DKbNwm9FUiSQ9PgqAPhCc D9d4zXQmQQQE/Zg2ASyb4iOrWxH/ZranuRbEvWdTmPLgDAj2ik/5Bvf4R9AjaMO2 hTDHbokfauRwQywZPyJgmd2n6jh3lDm1Jd3e0/EezSS48c/V/o9VJ5m++6ln0OMU lMz/1EiTMyNcep7k6C8IvRoa1LCdwJ4Nn7I= -----END CERTIFICATE-----Generated at Sat Dec 20 09:26:01 2025 by rpki-client