This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa File: 69592875-b7cb-3401-bb4e-78d533ad8011.roa (raw, json) Hash identifier: PDrg15g/HffAkO6mKi7PtEmcr23zjlYyaP+KrDyHnok= Subject key identifier: 42:8B:47:6F:67:D1:53:B3:12:80:FD:A2:9E:CE:CE:9F:5F:B4:7F:C1 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584C4F6BDDC7790AA0BE0BA37800 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 19637 IP address blocks: 2604:b040:588::/48 maxlen: 48 2604:b040:589::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:dd:c7:79:0a:a0:be:0b:a3:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=6133d852-fe31-4669-8480-d21d53de550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:88:81:b6:b9:9d:78:51:1d:9a:4d:00:46:e3: 76:eb:b1:27:88:5e:7e:31:ee:8c:6a:bf:bb:94:5b: 7e:fb:e7:48:4a:89:b4:9d:a5:35:03:64:e1:93:9f: b0:7d:2d:22:a5:ab:b4:94:15:ef:05:7c:af:1f:de: 34:39:fd:01:26:39:ac:b8:a8:57:78:06:89:af:89: 0e:ad:3d:c3:db:bd:3c:95:78:71:92:87:d1:ed:23: fc:8a:73:c4:ce:fc:7f:6b:31:6c:b3:d0:f7:df:00: 67:54:7f:d8:7f:63:98:5a:c2:2b:22:80:72:aa:f3: 1b:b1:f6:6a:43:e2:d8:e6:af:65:19:76:1c:10:e0: e8:33:af:3b:95:44:0c:78:f8:d8:70:89:30:1a:7d: 17:87:98:77:c4:8b:8c:1b:1e:a2:3f:81:d0:0e:3c: 09:a8:a1:8f:d0:25:02:e8:32:ac:a7:3d:b7:26:e1: 17:0d:e6:17:fd:b5:64:0b:17:37:a2:64:c6:24:b0: f2:14:c9:2b:34:2a:0c:57:e9:33:9e:73:8d:86:48: a1:37:8c:92:07:20:a2:8b:66:6b:09:e0:32:e5:0f: 75:16:29:83:3e:8a:24:9e:de:b9:c5:0d:ac:73:fa: fa:e5:8f:8d:5a:97:b8:9d:d3:13:a9:75:c9:9b:ed: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8B:47:6F:67:D1:53:B3:12:80:FD:A2:9E:CE:CE:9F:5F:B4:7F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/69592875-b7cb-3401-bb4e-78d533ad8011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv6: 2604:b040:588::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:69:f3:b2:5d:fa:9d:3b:35:84:b7:07:82:b7:cb:8a:88:13: bc:82:a8:0a:d3:1b:0f:e8:73:05:91:ab:27:9a:b5:a8:3b:01: 8d:ef:f3:fd:da:60:e3:81:47:58:76:9b:ad:c6:ac:35:70:a7: ae:65:dd:de:fe:af:2d:b3:86:09:a6:10:53:a2:93:57:11:69: 94:cc:91:81:b0:ad:8b:e0:d5:9a:cb:d4:32:9f:32:ab:50:60: d7:32:c9:95:04:e7:49:24:d4:98:e9:93:7a:d2:60:63:6c:21: 97:3e:0a:7a:ef:35:cc:32:82:41:fc:3e:2d:d8:c5:37:5f:53: e2:91:1f:30:02:66:88:30:d0:0f:4c:f5:3a:53:02:b1:1d:be: 50:e4:84:0f:1b:ba:1f:76:16:90:34:13:7a:e3:18:62:b5:5e: d1:93:10:4d:0e:d0:a7:e5:a1:aa:6c:f7:7b:82:20:ef:eb:37: 2c:6f:9c:31:66:a4:49:4f:04:05:7b:af:c2:9e:05:88:84:9b: c1:10:a6:b7:0c:ec:09:23:b1:c7:4c:1d:76:26:37:9a:2b:6e: 0a:4d:ed:18:78:5a:8b:cc:73:70:74:6d:91:3f:34:3d:04:b9: fb:ab:99:de:67:b5:87:e6:3e:01:21:50:22:6a:d7:69:58:42: 0b:45:df:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExPa93HeQqgvgujeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk NjEzM2Q4NTItZmUzMS00NjY5LTg0ODAtZDIxZDUzZGU1NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4iBtrmdeFEdmk0ARuN267EniF5+Me6Mar+7 lFt+++dISom0naU1A2Thk5+wfS0ipau0lBXvBXyvH940Of0BJjmsuKhXeAaJr4kO rT3D2708lXhxkofR7SP8inPEzvx/azFss9D33wBnVH/Yf2OYWsIrIoByqvMbsfZq Q+LY5q9lGXYcEODoM687lUQMePjYcIkwGn0Xh5h3xIuMGx6iP4HQDjwJqKGP0CUC 6DKspz23JuEXDeYX/bVkCxc3omTGJLDyFMkrNCoMV+kznnONhkihN4ySByCii2Zr CeAy5Q91FimDPooknt65xQ2sc/r65Y+NWpe4ndMTqXXJm+0kvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKLR29n0VOzEoD9op7Ozp9ftH/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNjk1OTI4NzUtYjdjYi0z NDAxLWJiNGUtNzhkNTMzYWQ4MDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgSwQAWI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAZp87Jd+p07NYS3B4K3y4qIE7yCqArTGw/ocwWRqyeatag7AY3v 8/3aYOOBR1h2m63GrDVwp65l3d7+ry2zhgmmEFOik1cRaZTMkYGwrYvg1ZrL1DKf MqtQYNcyyZUE50kk1Jjpk3rSYGNsIZc+CnrvNcwygkH8Pi3YxTdfU+KRHzACZogw 0A9M9TpTArEdvlDkhA8buh92FpA0E3rjGGK1XtGTEE0O0Kfloaps93uCIO/rNyxv nDFmpElPBAV7r8KeBYiEm8EQprcM7AkjscdMHXYmN5orbgpN7Rh4WovMc3B0bZE/ ND0Eufurmd5ntYfmPgEhUCJq12lYQgtF35Q= -----END CERTIFICATE-----Generated at Sun Jan 25 19:04:28 2026 by rpki-client