This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa File: 677c9e94-c45b-345c-8a40-a975fad8cd7d.roa (raw, json) Hash identifier: 3vNIOwJeIXF+/F9urGTbjlm/ZBfTr5+yQGDn6EG5TeA= Subject key identifier: 0E:62:94:DB:3E:F4:FA:8A:8B:EC:94:CE:42:0F:46:2D:D5:5A:8D:55 Certificate issuer: /CN=669f938e-8371-4220-9059-9081449ba23b Certificate serial: 010D0C9F4328584C5BFBE0AA0795DE220FA3A100 Authority key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa Signing time: Tue 30 Dec 2025 14:00:38 +0000 ROA not before: Tue 30 Dec 2025 14:00:38 +0000 ROA not after: Mon 30 Mar 2026 13:00:38 +0000 asID: 46694 IP address blocks: 66.209.240.0/20 maxlen: 24 192.68.190.0/24 maxlen: 24 2607:6280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:fb:e0:aa:07:95:de:22:0f:a3:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=669f938e-8371-4220-9059-9081449ba23b Validity Not Before: Dec 30 14:00:38 2025 GMT Not After : Mar 30 13:00:38 2026 GMT Subject: CN=d8e68a1d-1f9c-49ad-bdf2-4163e8fceedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:68:2e:3e:1f:e4:6e:90:6e:83:d1:99:1f:f3: 05:68:2d:d8:d1:b4:9f:73:6d:54:7a:5c:c2:2c:5d: 01:8d:f0:77:42:7c:a4:a4:9d:70:4c:f4:fc:77:dc: c2:67:52:9d:75:bd:6a:2e:42:c3:96:f0:60:bf:58: dc:51:1f:f8:a2:ce:73:78:b0:6a:90:a5:9b:24:03: 2d:41:a3:1d:51:69:0d:cb:c6:87:6d:61:d1:7f:ae: 6b:17:30:04:67:26:40:20:f3:ab:a6:9e:fb:51:df: 46:c3:37:bb:65:bf:45:7e:e0:3e:3a:2b:42:2d:f3: 79:f6:04:ee:db:33:50:28:77:37:8a:c0:6d:b9:31: ae:83:88:a5:cd:a8:37:e4:3d:2c:6f:1c:9b:3c:d8: 48:88:b3:29:64:86:41:f2:32:79:f6:fa:21:8b:df: 01:6f:2f:03:2b:97:39:bc:60:33:d0:44:4d:9c:0a: 1a:f1:04:04:8a:0e:98:e0:a2:dc:64:b5:9c:7b:54: 89:2e:fb:d2:b6:56:87:6c:a1:50:52:da:26:3a:93: ed:15:cf:91:d8:91:06:be:0d:5b:08:82:e9:9f:9b: 38:fb:70:bb:3a:5c:d2:6e:57:25:3c:9c:5c:f0:46: 76:43:ff:90:7c:ac:8d:9f:9f:c2:19:73:b8:a4:3d: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:62:94:DB:3E:F4:FA:8A:8B:EC:94:CE:42:0F:46:2D:D5:5A:8D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/677c9e94-c45b-345c-8a40-a975fad8cd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.crl X509v3 Authority Key Identifier: keyid:D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 192.68.190.0/24 IPv6: 2607:6280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8f:1d:3e:50:68:da:ee:7b:5b:a3:4a:31:0a:53:7a:e6:79: a1:74:4b:b0:b7:31:47:7a:6e:38:cb:3e:9f:73:06:81:e4:30: 6d:87:e4:e3:a2:b1:9e:81:5d:f1:88:a2:88:7e:95:ba:aa:23: 70:3a:9b:ac:64:4f:27:e6:13:f3:53:fa:5b:ec:69:06:93:1e: 7f:bb:f6:8d:09:66:fd:10:f6:88:ee:16:3f:6a:54:3e:b4:16: 66:1e:9a:92:bc:69:34:d4:80:7f:e7:8c:f3:83:30:d4:84:e9: bc:e6:51:d5:63:5c:de:b0:d0:14:20:ff:36:eb:45:5a:e2:1d: c9:57:e8:6c:d1:d8:15:60:c8:69:4a:c9:5d:e0:e6:fd:d8:00: f0:2e:68:84:7d:c2:b6:d4:52:29:80:98:e6:3c:9a:90:e3:c8: 01:e1:0b:30:fb:c9:76:d1:20:60:a6:b6:24:dd:99:fc:31:ab: 6a:83:ff:75:22:c2:38:5c:da:d1:a6:42:56:17:a2:e4:23:51: b1:01:d0:c9:3d:12:90:9b:bb:c7:92:8e:ec:e3:bf:5a:6b:d6: 9e:a9:32:79:3a:c2:4a:57:e7:b5:a7:05:5c:6e:c2:f1:da:4b: e1:15:09:31:69:7f:43:0a:d3:48:8e:28:c1:aa:d1:c4:de:cb: 95:eb:69:f1 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWExb++CqB5XeIg+joQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJh MjNiMB4XDTI1MTIzMDE0MDAzOFoXDTI2MDMzMDEzMDAzOFowLzEtMCsGA1UEAxMk ZDhlNjhhMWQtMWY5Yy00OWFkLWJkZjItNDE2M2U4ZmNlZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWguPh/kbpBug9GZH/MFaC3Y0bSfc21UelzC LF0BjfB3QnykpJ1wTPT8d9zCZ1Kddb1qLkLDlvBgv1jcUR/4os5zeLBqkKWbJAMt QaMdUWkNy8aHbWHRf65rFzAEZyZAIPOrpp77Ud9Gwze7Zb9FfuA+OitCLfN59gTu 2zNQKHc3isBtuTGug4ilzag35D0sbxybPNhIiLMpZIZB8jJ59vohi98Bby8DK5c5 vGAz0ERNnAoa8QQEig6Y4KLcZLWce1SJLvvStlaHbKFQUtomOpPtFc+R2JEGvg1b CILpn5s4+3C7OlzSblclPJxc8EZ2Q/+QfKyNn5/CGXO4pD0fPQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFA5ilNs+9PqKi+yUzkIPRi3VWo1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82Njlm OTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvNjc3YzllOTQtYzQ1Yi0z NDVjLThhNDAtYTk3NWZhZDhjZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjY5ZjkzOGUtODM3MS00MjIwLTkw NTktOTA4MTQ0OWJhMjNiLzY2OWY5MzhlLTgzNzEtNDIyMC05MDU5LTkwODE0NDli YTIzYi5jcmwwHwYDVR0jBBgwFoAU0DQ2yYzKs+8Zker3PLDZ8S9TQcgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgx NDQ5YmEyM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEQtHwAwQA wES+MA0EAgACMAcDBQAmB2KAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFCPHT5QaNrue1ujSjEKU3rmeaF0 S7C3MUd6bjjLPp9zBoHkMG2H5OOisZ6BXfGIooh+lbqqI3A6m6xkTyfmE/NT+lvs aQaTHn+79o0JZv0Q9ojuFj9qVD60FmYempK8aTTUgH/njPODMNSE6bzmUdVjXN6w 0BQg/zbrRVriHclX6GzR2BVgyGlKyV3g5v3YAPAuaIR9wrbUUimAmOY8mpDjyAHh CzD7yXbRIGCmtiTdmfwxq2qD/3Uiwjhc2tGmQlYXouQjUbEB0Mk9EpCbu8eSjuzj v1pr1p6pMnk6wkpX57WnBVxuwvHaS+EVCTFpf0MK00iOKMGq0cTey5XrafE= -----END CERTIFICATE-----Generated at Sat Jan 10 21:08:30 2026 by rpki-client