This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa0c025b-0dae-3495-9131-9851eccf81c7.roa File: aa0c025b-0dae-3495-9131-9851eccf81c7.roa (raw, json) Hash identifier: 4hryMFmViqUaT500kdQj1bmgGlOYtxyGUPy7ksSBuDU= Subject key identifier: A4:17:F9:A5:A4:F7:E4:0D:6E:67:5F:CF:E5:52:7B:4C:9B:18:DD:DD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C83D8BFC598AB2DDAF0FA7A20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa0c025b-0dae-3495-9131-9851eccf81c7.roa Signing time: Tue 13 Jan 2026 20:42:15 +0000 ROA not before: Tue 13 Jan 2026 20:42:15 +0000 ROA not after: Mon 13 Apr 2026 19:42:15 +0000 asID: 19905 IP address blocks: 2604:2d81:8800::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:83:d8:bf:c5:98:ab:2d:da:f0:fa:7a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jan 13 20:42:15 2026 GMT Not After : Apr 13 19:42:15 2026 GMT Subject: CN=cac4f80e-bcbf-43e4-8310-d178518f953f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:34:83:ed:80:52:bc:21:fe:1b:de:be:41: 1e:c3:de:16:ab:13:50:81:71:a9:1b:93:ea:c0:26: 68:a0:1a:69:6f:7b:af:b1:cd:71:41:ea:2e:cf:dd: b0:7b:ed:88:0a:f3:f9:55:d6:f8:59:45:47:c4:eb: bd:2f:9c:d2:36:e2:3d:35:87:54:f5:4c:22:32:01: 94:e0:15:a3:66:1b:84:eb:a4:d3:a5:d0:84:e4:37: 0c:20:e4:f0:54:7f:6d:6d:9d:93:79:dc:11:dd:f9: c3:e7:8b:77:f6:e6:08:e1:35:85:4d:ec:54:10:57: b8:68:a4:3b:09:ce:d7:b6:71:13:71:7d:b9:32:bf: 23:64:02:1b:2c:60:28:d6:dd:6b:3a:0c:03:ef:8b: 4c:09:14:ad:16:05:79:11:6f:e7:71:d4:ef:30:c9: 9a:20:38:0f:25:04:71:b0:ba:f0:01:14:6b:9b:ba: 79:aa:79:e1:95:67:c2:38:87:f3:de:25:7a:a9:52: 53:97:96:4f:cb:7d:d8:aa:44:d6:c1:e7:ba:48:85: e3:7f:1b:4e:5a:2c:85:9d:39:c7:0f:d8:51:f9:dd: d5:0c:64:f3:47:ca:be:fb:f2:8d:eb:ba:4d:d9:ea: cb:bb:e8:41:7d:b4:94:7c:1e:3c:65:e6:c0:e2:4d: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:17:F9:A5:A4:F7:E4:0D:6E:67:5F:CF:E5:52:7B:4C:9B:18:DD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa0c025b-0dae-3495-9131-9851eccf81c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv6: 2604:2d81:8800::/41 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:38:e3:2e:09:29:48:4a:ea:cf:bd:03:0e:42:53:37:62:47: b9:3c:bf:7c:93:32:94:ee:2d:e9:bf:e5:d9:ca:00:23:ef:2f: 2e:44:62:52:6a:57:42:a8:da:21:c0:c9:fc:df:65:18:6f:9b: 58:60:1e:e3:6c:01:da:06:f6:49:48:73:84:2f:b6:89:17:2d: cd:0b:e2:41:20:d5:9f:fe:34:cf:67:5d:0a:cd:1e:f3:ce:9a: 2d:4e:fb:a8:45:23:9d:24:51:11:45:bb:2d:86:32:d0:4b:a2: 31:a6:e3:86:ab:fc:2d:e7:12:1a:5c:c4:c9:52:e9:49:04:c1: bc:ba:c5:06:2f:fb:78:e8:1b:ba:2e:f3:0f:5f:e0:21:65:01: 87:b3:b7:b6:68:61:df:b2:46:92:31:d4:c1:f7:41:44:b8:4a: 52:20:e6:ba:31:6b:37:10:7f:c7:c1:4b:df:33:39:de:2a:6d: 5e:c2:04:c9:bf:a6:0d:9b:34:7a:04:aa:43:0d:5a:75:79:a8: 6a:e8:2b:0c:b1:fc:30:90:f0:b5:33:85:18:1d:67:7d:8f:7d: 15:fa:31:f6:0f:3e:2e:2f:4b:19:d3:bf:cd:a4:c6:15:b7:3c: 7c:73:7e:53:94:6d:31:d1:d5:6a:f6:80:b0:8b:d9:c3:3a:29: 93:d3:bc:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyD2L/FmKst2vD6eiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDExMzIwNDIxNVoXDTI2MDQxMzE5NDIxNVowLzEtMCsGA1UEAxMk Y2FjNGY4MGUtYmNiZi00M2U0LTgzMTAtZDE3ODUxOGY5NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xY0g+2AUrwh/hvevkEew94WqxNQgXGpG5Pq wCZooBppb3uvsc1xQeouz92we+2ICvP5Vdb4WUVHxOu9L5zSNuI9NYdU9UwiMgGU 4BWjZhuE66TTpdCE5DcMIOTwVH9tbZ2TedwR3fnD54t39uYI4TWFTexUEFe4aKQ7 Cc7XtnETcX25Mr8jZAIbLGAo1t1rOgwD74tMCRStFgV5EW/ncdTvMMmaIDgPJQRx sLrwARRrm7p5qnnhlWfCOIfz3iV6qVJTl5ZPy33YqkTWwee6SIXjfxtOWiyFnTnH D9hR+d3VDGTzR8q++/KN67pN2erLu+hBfbSUfB48ZebA4k2MSQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKQX+aWk9+QNbmdfz+VSe0ybGN3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWEwYzAyNWItMGRhZS0z NDk1LTkxMzEtOTg1MWVjY2Y4MWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgYgA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA044y4JKUhK6s+9Aw5CUzdiR7k8v3yTMpTuLem/5dnKACPvLy5E YlJqV0Ko2iHAyfzfZRhvm1hgHuNsAdoG9klIc4QvtokXLc0L4kEg1Z/+NM9nXQrN HvPOmi1O+6hFI50kURFFuy2GMtBLojGm44ar/C3nEhpcxMlS6UkEwby6xQYv+3jo G7ou8w9f4CFlAYezt7ZoYd+yRpIx1MH3QUS4SlIg5roxazcQf8fBS98zOd4qbV7C BMm/pg2bNHoEqkMNWnV5qGroKwyx/DCQ8LUzhRgdZ32PfRX6MfYPPi4vSxnTv82k xhW3PHxzflOUbTHR1Wr2gLCL2cM6KZPTvKw= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:15 2026 by rpki-client