This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e488d8eb-1b7e-3293-b5ef-1fe6a17e1a6a.roa File: e488d8eb-1b7e-3293-b5ef-1fe6a17e1a6a.roa (raw, json) Hash identifier: RcfH9Y9VGU5+CudDVN4q3VA2+ZK1R1de9G+o+tNYBsY= Subject key identifier: 4E:F7:A6:65:22:FB:CE:AF:87:C6:EA:85:64:D7:B2:9A:4F:D3:BB:D6 Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584BFFDBCBA2F79E13B9961D2380 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e488d8eb-1b7e-3293-b5ef-1fe6a17e1a6a.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 22773 IP address blocks: 2600:8800:1680::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:cb:a2:f7:9e:13:b9:96:1d:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=6395b017-13a4-4055-bcec-f2677f2fbef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:f3:23:91:db:f6:f7:0e:0d:db:75:c9:74: 8e:fc:cd:25:7b:f9:3a:f8:51:3d:53:cf:e3:97:25: e9:8b:b3:c2:ae:6b:01:6b:b9:79:2e:6f:b8:a9:d3: 3b:41:01:53:f9:48:a2:66:eb:c7:7d:a1:14:b0:09: 49:70:d5:4a:35:69:4a:19:9f:f2:9f:77:12:b7:73: ab:f8:fd:ec:ce:e2:5e:6d:8c:a8:35:6d:87:94:8e: 26:96:ce:40:08:30:b3:25:ee:a3:04:e1:72:c9:60: d2:00:15:c1:3a:97:99:5f:94:5f:fe:7c:b8:50:a1: aa:0e:8e:6b:6d:92:1b:8b:5d:ea:d1:3d:cd:a5:d7: 0a:57:0f:3d:a1:a2:d5:a3:48:6a:67:78:f5:83:d0: 93:d0:97:72:5d:15:cd:8d:24:60:7c:83:5d:b8:65: 71:a9:eb:10:4e:0e:55:92:21:24:7a:36:60:1c:a2: 84:8b:93:6d:1a:c7:39:17:84:02:2a:a2:d6:bd:3e: f2:de:23:82:6b:f3:f1:7c:64:8b:29:64:18:4a:55: ef:19:5e:46:a0:c1:62:ed:a6:5b:05:8e:99:97:5e: 1d:83:0c:b3:0e:05:af:0e:ff:87:6c:f4:e8:e7:22: 71:f4:60:14:08:61:85:0b:be:ed:9c:cd:a6:0d:dc: b3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:A6:65:22:FB:CE:AF:87:C6:EA:85:64:D7:B2:9A:4F:D3:BB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e488d8eb-1b7e-3293-b5ef-1fe6a17e1a6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv6: 2600:8800:1680::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0c:a4:e0:52:54:e4:e1:18:8d:8f:b7:67:1c:24:72:b9:41: 97:25:b4:4b:06:7d:36:dc:ff:60:f4:32:13:58:ea:e9:ae:0b: 1a:54:f2:a8:3b:7f:51:d6:e4:8b:7c:ca:fb:dd:ef:60:a5:ab: f7:3f:dc:bf:7f:02:d5:d6:7c:55:78:e8:e2:82:e7:08:30:0c: a7:fe:04:cf:5a:07:1f:0c:af:61:22:cb:15:3b:fc:42:ec:27: cc:7b:f7:83:4f:52:0b:73:93:a9:7a:2e:a9:4f:41:76:6b:c6: 0f:ef:17:b8:71:e9:33:35:82:c2:d2:70:15:5a:c7:e0:31:aa: 17:fd:fb:35:6d:40:72:66:2a:a1:92:3d:75:07:81:a3:7d:56: fe:3a:dd:83:67:c2:8c:dd:29:f2:37:2a:0e:0e:a9:04:01:8d: 39:a9:6c:09:a7:a1:54:d5:f9:cf:90:7f:ff:26:d4:6f:f2:16: c8:cd:ea:2f:a7:3d:9b:f6:7b:46:04:c4:b8:50:fe:d4:9c:1a: af:77:d1:a3:0e:6d:c1:13:76:08:84:54:84:0b:7a:88:1c:8e: 24:65:4d:10:81:dd:84:dd:51:9d:ec:34:b8:37:5b:31:34:c9: 8e:1c:46:7a:10:5f:45:d9:d1:67:aa:89:91:6e:4e:d3:3f:19: c6:ed:54:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEv/28ui954TuZYdI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk NjM5NWIwMTctMTNhNC00MDU1LWJjZWMtZjI2NzdmMmZiZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWHzI5Hb9vcODdt1yXSO/M0le/k6+FE9U8/j lyXpi7PCrmsBa7l5Lm+4qdM7QQFT+UiiZuvHfaEUsAlJcNVKNWlKGZ/yn3cSt3Or +P3szuJebYyoNW2HlI4mls5ACDCzJe6jBOFyyWDSABXBOpeZX5Rf/ny4UKGqDo5r bZIbi13q0T3NpdcKVw89oaLVo0hqZ3j1g9CT0JdyXRXNjSRgfINduGVxqesQTg5V kiEkejZgHKKEi5NtGsc5F4QCKqLWvT7y3iOCa/PxfGSLKWQYSlXvGV5GoMFi7aZb BY6Zl14dgwyzDgWvDv+HbPTo5yJx9GAUCGGFC77tnM2mDdyzuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE73pmUi+86vh8bqhWTXsppP07vWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTQ4OGQ4ZWItMWI3ZS0z MjkzLWI1ZWYtMWZlNmExN2UxYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIABaA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJoMpOBSVOThGI2Pt2ccJHK5QZcltEsGfTbc/2D0MhNY6umuCxpU 8qg7f1HW5It8yvvd72Clq/c/3L9/AtXWfFV46OKC5wgwDKf+BM9aBx8Mr2EiyxU7 /ELsJ8x794NPUgtzk6l6LqlPQXZrxg/vF7hx6TM1gsLScBVax+Axqhf9+zVtQHJm KqGSPXUHgaN9Vv463YNnwozdKfI3Kg4OqQQBjTmpbAmnoVTV+c+Qf/8m1G/yFsjN 6i+nPZv2e0YExLhQ/tScGq930aMObcETdgiEVIQLeogcjiRlTRCB3YTdUZ3sNLg3 WzE0yY4cRnoQX0XZ0WeqiZFuTtM/GcbtVLg= -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:23 2025 by rpki-client