This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/f0606dda-d4ec-3600-8b92-ec65128be8dd.roa File: f0606dda-d4ec-3600-8b92-ec65128be8dd.roa (raw, json) Hash identifier: t9G5v75g1QkOLZf45oWs0zrA+5kQvvjX+PY9e5E+2XY= Subject key identifier: 28:B1:11:D7:84:23:32:79:77:63:0E:9C:B6:EA:78:C2:E4:53:4B:C2 Certificate issuer: /CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Certificate serial: 010D0C9F4328584BF67DDEFD7BFB091BED5C5660 Authority key identifier: 67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/f0606dda-d4ec-3600-8b92-ec65128be8dd.roa Signing time: Thu 13 Nov 2025 21:55:35 +0000 ROA not before: Thu 13 Nov 2025 21:55:35 +0000 ROA not after: Wed 11 Feb 2026 21:55:35 +0000 asID: 20446 IP address blocks: 204.154.108.0/24 maxlen: 24 2602:f4ca::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:7d:de:fd:7b:fb:09:1b:ed:5c:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686dfae3-1a9a-4471-9592-9f404f78a8dc Validity Not Before: Nov 13 21:55:35 2025 GMT Not After : Feb 11 21:55:35 2026 GMT Subject: CN=b767af11-b4b4-403e-ba1e-39a7079269d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:f9:99:05:3c:29:75:c3:4b:9b:fc:ac:f6: da:e4:7f:e5:4b:3b:ad:c0:49:82:43:12:f1:bc:83: 03:f4:d5:82:11:8c:f4:79:f9:8f:99:f1:fa:37:16: 29:5d:72:0e:5f:f3:06:56:e2:3a:9c:5d:30:9e:3e: ae:58:77:a6:a3:df:39:a2:d7:b8:61:ca:97:d5:09: 38:9b:90:34:32:12:fd:d9:81:92:cd:be:e3:6f:55: 81:db:34:f9:ff:a6:85:ff:bf:32:99:82:97:63:42: bc:e6:55:89:12:9f:04:4c:2a:f2:2f:f5:91:38:13: 29:5a:d9:61:5e:2d:f5:8c:92:ae:ea:86:09:c1:1e: 2c:4f:01:7d:5b:cf:21:e3:6e:57:db:0b:d2:26:7f: 6b:c0:f7:0c:63:94:b1:c4:22:cb:75:10:2e:9e:33: 21:17:d9:6a:f5:31:b6:ca:2d:f9:78:38:53:46:26: 48:45:f9:77:7c:67:32:10:86:48:85:bb:78:68:e2: fc:a1:18:02:d0:80:af:1b:53:9a:1e:d6:c5:d2:ce: 99:51:04:8d:1f:b1:af:f8:cb:55:39:85:77:9e:a7: dd:05:08:48:64:80:7e:9a:31:8f:7e:4d:0e:8b:d5: 55:fe:92:92:b3:3c:f2:a6:83:6b:fd:f9:47:88:6c: 3c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:11:D7:84:23:32:79:77:63:0E:9C:B6:EA:78:C2:E4:53:4B:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/f0606dda-d4ec-3600-8b92-ec65128be8dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc/686dfae3-1a9a-4471-9592-9f404f78a8dc.crl X509v3 Authority Key Identifier: keyid:67:B6:B0:66:11:44:C4:30:E2:59:D0:39:C8:AD:D9:F4:F6:33:BA:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/686dfae3-1a9a-4471-9592-9f404f78a8dc.cer sbgp-ipAddrBlock: critical IPv4: 204.154.108.0/24 IPv6: 2602:f4ca::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:04:58:dd:c0:f1:52:a8:1a:7f:2c:4f:55:79:0d:37:d4:87: 5b:b6:f8:cb:4a:2c:19:ff:1e:11:40:b6:92:ca:e3:17:c2:d6: c8:2e:13:7c:f3:b0:b6:b5:7b:0d:9e:94:36:73:39:e0:ae:91: 66:21:a5:24:69:5d:90:50:46:a1:55:35:ba:00:65:8c:15:cd: 07:2c:18:2f:ed:82:83:71:90:d2:73:7c:8b:54:1f:7f:43:b2: 14:aa:ef:b0:45:dc:3d:49:5a:50:c1:e8:7c:3f:48:fb:fc:cb: 66:f6:c2:38:37:8c:15:f5:55:fb:91:22:5d:06:74:0d:5c:90: 04:40:61:42:1e:c2:e5:eb:02:25:5d:89:bd:a1:55:0c:de:06: 03:f3:ed:90:7f:88:63:4b:c5:5a:f7:b4:e6:0c:05:34:1c:7c: 25:4c:9d:26:dd:09:62:61:13:1c:4a:a7:2b:ab:4a:5e:bf:b2: 7e:f5:92:89:c0:20:66:b1:08:8a:df:30:99:2d:33:aa:f5:92: 4a:e9:d5:f9:c7:2d:d3:a6:84:d2:2d:96:6a:19:05:45:6a:ce: 94:cc:11:25:42:33:0a:fc:c5:c2:87:44:b5:8b:15:be:db:f5: e9:34:64:ee:e6:ed:4c:9f:b0:24:48:4c:44:d5:10:54:9a:4e: cf:a5:de:df -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEv2fd79e/sJG+1cVmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2ZGZhZTMtMWE5YS00NDcxLTk1OTItOWY0MDRmNzhh OGRjMB4XDTI1MTExMzIxNTUzNVoXDTI2MDIxMTIxNTUzNVowLzEtMCsGA1UEAxMk Yjc2N2FmMTEtYjRiNC00MDNlLWJhMWUtMzlhNzA3OTI2OWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZr5mQU8KXXDS5v8rPba5H/lSzutwEmCQxLx vIMD9NWCEYz0efmPmfH6NxYpXXIOX/MGVuI6nF0wnj6uWHemo985ote4YcqX1Qk4 m5A0MhL92YGSzb7jb1WB2zT5/6aF/78ymYKXY0K85lWJEp8ETCryL/WROBMpWtlh Xi31jJKu6oYJwR4sTwF9W88h425X2wvSJn9rwPcMY5SxxCLLdRAunjMhF9lq9TG2 yi35eDhTRiZIRfl3fGcyEIZIhbt4aOL8oRgC0ICvG1OaHtbF0s6ZUQSNH7Gv+MtV OYV3nqfdBQhIZIB+mjGPfk0Oi9VV/pKSszzypoNr/flHiGw8awIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCixEdeEIzJ5d2MOnLbqeMLkU0vCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82ODZk ZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQwNGY3OGE4ZGMvZjA2MDZkZGEtZDRlYy0z NjAwLThiOTItZWM2NTEyOGJlOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjg2ZGZhZTMtMWE5YS00NDcxLTk1 OTItOWY0MDRmNzhhOGRjLzY4NmRmYWUzLTFhOWEtNDQ3MS05NTkyLTlmNDA0Zjc4 YThkYy5jcmwwHwYDVR0jBBgwFoAUZ7awZhFExDDiWdA5yK3Z9PYzuq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82ODZkZmFlMy0xYTlhLTQ0NzEtOTU5Mi05ZjQw NGY3OGE4ZGMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzJpsMA4E AgACMAgDBgAmAvTKADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANBFjdwPFSqBp/LE9VeQ031IdbtvjLSiwZ /x4RQLaSyuMXwtbILhN887C2tXsNnpQ2czngrpFmIaUkaV2QUEahVTW6AGWMFc0H LBgv7YKDcZDSc3yLVB9/Q7IUqu+wRdw9SVpQweh8P0j7/Mtm9sI4N4wV9VX7kSJd BnQNXJAEQGFCHsLl6wIlXYm9oVUM3gYD8+2Qf4hjS8Va97TmDAU0HHwlTJ0m3Qli YRMcSqcrq0pev7J+9ZKJwCBmsQiK3zCZLTOq9ZJK6dX5xy3TpoTSLZZqGQVFas6U zBElQjMK/MXCh0S1ixW+2/XpNGTu5u1Mn7AkSExE1RBUmk7Ppd7f -----END CERTIFICATE-----Generated at Sun Nov 30 16:21:43 2025 by rpki-client