This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/88406b58-8a2d-329c-bccb-61d21543342c.roa File: 88406b58-8a2d-329c-bccb-61d21543342c.roa (raw, json) Hash identifier: +1Ly2odKlw7IVf1Vozwjwfaurz92iBPyXwmg36LLKos= Subject key identifier: 18:BD:F9:E5:C9:C0:18:C8:B2:CD:0D:6B:6E:B1:30:1E:67:14:68:41 Certificate issuer: /CN=1570553e-ffe3-43f8-8e8d-a4ca57490e58 Certificate serial: 010D0C9F4328584C3BE12D74D65B56F51FC73400 Authority key identifier: 29:65:CD:57:5D:86:19:B5:3E:B4:C7:1E:87:57:FC:52:BC:08:A9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/88406b58-8a2d-329c-bccb-61d21543342c.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 215207 IP address blocks: 2602:f542:ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/1570553e-ffe3-43f8-8e8d-a4ca57490e58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/1570553e-ffe3-43f8-8e8d-a4ca57490e58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2d:74:d6:5b:56:f5:1f:c7:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1570553e-ffe3-43f8-8e8d-a4ca57490e58 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=717ce10e-159b-4f6a-ae2d-db129c6d5e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:c9:cd:b8:37:cc:d6:eb:33:34:a6:4c:cc: 11:38:18:71:f6:30:ef:c0:36:fa:f7:13:6f:85:c6: 86:2f:b9:b9:c2:dd:54:d9:40:a3:48:95:9a:2c:06: 04:90:08:4d:78:73:44:2e:55:fb:f6:19:5c:17:bb: 3c:27:76:50:de:54:44:f4:83:94:9c:66:58:03:bc: 96:06:8b:5f:c8:8e:26:d6:b3:c4:b7:05:76:ed:34: b0:7a:73:b1:00:91:74:c2:cb:a4:a6:b9:d3:7b:27: 4a:ea:70:87:23:36:df:09:bd:32:d2:b0:56:08:a5: ef:a5:57:3e:37:5e:30:3d:c2:4f:13:bc:7b:a9:67: ca:e8:54:ce:ee:9f:82:fd:f4:0c:4b:dc:d2:a9:ad: e1:9a:3a:bb:56:dc:21:1c:6e:98:75:f4:fc:3f:c1: a5:ef:94:e4:64:f6:6d:48:0b:ab:9e:a2:dc:ce:1a: f0:3c:ff:d7:5d:48:94:a7:59:97:33:1e:a6:6a:17: 70:19:b0:5c:f5:ac:01:05:84:75:0f:d3:27:1f:e0: b0:c6:18:3c:ee:63:f8:47:68:63:35:06:03:ec:fd: ab:60:b3:fb:f4:7e:ed:ea:d9:8a:ea:1d:7d:a4:0a: 96:9f:c0:ff:e3:df:e2:d7:9d:bc:d4:bf:66:0b:43: af:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BD:F9:E5:C9:C0:18:C8:B2:CD:0D:6B:6E:B1:30:1E:67:14:68:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/88406b58-8a2d-329c-bccb-61d21543342c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58/1570553e-ffe3-43f8-8e8d-a4ca57490e58.crl X509v3 Authority Key Identifier: keyid:29:65:CD:57:5D:86:19:B5:3E:B4:C7:1E:87:57:FC:52:BC:08:A9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1570553e-ffe3-43f8-8e8d-a4ca57490e58.cer sbgp-ipAddrBlock: critical IPv6: 2602:f542:ae::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:41:c5:d1:96:95:4b:7e:b2:27:91:a2:bd:7f:c8:55:0f:ce: 07:66:a1:19:cb:2a:87:89:0c:aa:73:c2:73:d7:d7:9c:80:cf: 67:b8:13:7d:93:a8:6e:73:c6:d0:7c:98:74:4e:7b:30:d9:26: cd:92:d4:8d:b8:66:a9:6a:47:ed:aa:20:b3:09:80:cb:58:d6: fb:84:5e:31:52:f3:bc:a3:15:82:3b:1b:8c:b7:c2:27:88:8f: a7:ca:2e:ff:35:1e:0c:80:c0:4b:93:45:b7:34:27:28:12:50: 1a:33:b3:11:5b:b2:03:63:0b:9a:b0:04:b7:a2:05:93:42:7d: df:b4:85:05:d7:8c:8d:bf:6a:68:a1:1d:ff:9c:13:fb:52:7f: c3:8c:86:23:fa:4b:12:5c:44:8c:87:28:84:5b:b2:92:6a:72: ae:f8:7d:79:4e:78:5b:a6:83:69:0f:57:77:a5:9d:56:d6:76: 41:25:ac:04:e8:19:d7:21:77:a9:2b:6c:eb:5b:83:58:ba:90: eb:5c:b3:c2:ae:4f:5e:01:71:6e:a5:53:2e:ad:d4:c2:ce:77: c6:36:84:a0:2a:d3:39:8e:fe:9f:85:5a:fa:85:a8:22:1d:2a: 6a:01:f3:86:ab:97:d2:9f:a7:96:31:1b:ed:15:b9:bc:49:f6: 56:c7:09:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEw74S101ltW9R/HNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU3MDU1M2UtZmZlMy00M2Y4LThlOGQtYTRjYTU3NDkw ZTU4MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk NzE3Y2UxMGUtMTU5Yi00ZjZhLWFlMmQtZGIxMjljNmQ1ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2rJzbg3zNbrMzSmTMwROBhx9jDvwDb69xNv hcaGL7m5wt1U2UCjSJWaLAYEkAhNeHNELlX79hlcF7s8J3ZQ3lRE9IOUnGZYA7yW BotfyI4m1rPEtwV27TSwenOxAJF0wsukprnTeydK6nCHIzbfCb0y0rBWCKXvpVc+ N14wPcJPE7x7qWfK6FTO7p+C/fQMS9zSqa3hmjq7VtwhHG6YdfT8P8Gl75TkZPZt SAurnqLczhrwPP/XXUiUp1mXMx6mahdwGbBc9awBBYR1D9MnH+Cwxhg87mP4R2hj NQYD7P2rYLP79H7t6tmK6h19pAqWn8D/49/i15281L9mC0Ov5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBi9+eXJwBjIss0Na26xMB5nFGhBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNTcw NTUzZS1mZmUzLTQzZjgtOGU4ZC1hNGNhNTc0OTBlNTgvODg0MDZiNTgtOGEyZC0z MjljLWJjY2ItNjFkMjE1NDMzNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTU3MDU1M2UtZmZlMy00M2Y4LThl OGQtYTRjYTU3NDkwZTU4LzE1NzA1NTNlLWZmZTMtNDNmOC04ZThkLWE0Y2E1NzQ5 MGU1OC5jcmwwHwYDVR0jBBgwFoAUKWXNV12GGbU+tMceh1f8UrwIqaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNTcwNTUzZS1mZmUzLTQzZjgtOGU4ZC1hNGNh NTc0OTBlNTguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1QgCu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABJBxdGWlUt+sieRor1/yFUPzgdmoRnLKoeJDKpzwnPX15yAz2e4 E32TqG5zxtB8mHROezDZJs2S1I24ZqlqR+2qILMJgMtY1vuEXjFS87yjFYI7G4y3 wieIj6fKLv81HgyAwEuTRbc0JygSUBozsxFbsgNjC5qwBLeiBZNCfd+0hQXXjI2/ amihHf+cE/tSf8OMhiP6SxJcRIyHKIRbspJqcq74fXlOeFumg2kPV3elnVbWdkEl rAToGdchd6krbOtbg1i6kOtcs8KuT14BcW6lUy6t1MLOd8Y2hKAq0zmO/p+FWvqF qCIdKmoB84arl9Kfp5YxG+0VubxJ9lbHCV0= -----END CERTIFICATE-----Generated at Mon Dec 22 08:28:30 2025 by rpki-client