This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa File: cfd0de8a-3248-3402-ac95-313029333991.roa (raw, json) Hash identifier: BJaZhWgVBOd2S1O233MJzPOAkOZbF3N0Ty950FI2kEY= Subject key identifier: AF:AB:DC:B9:37:ED:AD:5E:0F:B6:2B:1B:66:5F:00:D8:15:4B:7D:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C7251D8FD9D49C14E9DFE3A04 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 22258 IP address blocks: 2603:3014:2500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:51:d8:fd:9d:49:c1:4e:9d:fe:3a:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=1dd7f86f-f887-47fa-ba11-c04301885254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:5b:e9:f3:f3:6c:8b:a1:5c:1a:e3:f9:d0: 0f:8a:b6:5e:cb:a5:99:7f:20:27:7c:76:5d:ee:21: 54:29:a0:3a:4a:cb:76:80:43:3e:03:6f:7b:b9:d3: ce:0c:f2:1c:5d:cd:9e:10:f5:a0:2b:1c:b8:5b:82: 8e:c1:f6:19:20:e0:a1:f3:b1:06:45:5a:00:ec:e5: 0d:81:99:73:8e:dc:08:a1:3e:a3:87:35:96:d8:79: 8a:35:9c:74:4f:4a:07:a1:04:51:99:37:46:fb:e2: 28:0a:0d:b7:06:0c:6e:58:02:f0:99:b3:77:e1:91: db:2f:b1:4b:b5:5a:ec:a9:f4:05:a1:bf:cc:6f:88: 64:03:d9:7e:5b:ee:b9:26:0d:5b:66:2a:3f:c9:71: f4:5e:b3:5b:4e:5b:b4:b2:c4:a2:18:16:35:2c:b1: 75:b8:58:7b:f9:95:12:d9:9f:2b:49:f7:2e:a9:0c: a2:04:e7:5c:7d:96:b9:a1:eb:ff:2c:d9:2c:c9:af: 1e:39:56:b1:cb:df:cc:79:67:68:b8:41:c1:5a:db: 4b:87:00:9d:5d:f5:a4:ec:39:36:7a:73:14:ba:6c: 42:b9:0f:06:d5:a1:7b:da:20:f9:1c:1f:bc:31:21: c4:e7:1b:c3:36:fd:4d:a2:8e:7e:37:70:74:d4:3d: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:DC:B9:37:ED:AD:5E:0F:B6:2B:1B:66:5F:00:D8:15:4B:7D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfd0de8a-3248-3402-ac95-313029333991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3014:2500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fc:a6:37:83:9b:da:15:7b:f8:52:6c:2b:3f:af:87:6f:d4: 78:6b:5f:82:68:e3:31:02:90:c0:fd:a8:f1:94:9a:2b:fa:19: 88:09:db:00:0f:57:75:8c:32:34:35:a6:c1:d4:ab:b4:95:65: 7a:a2:33:46:11:f6:01:c0:85:4a:65:1c:a6:25:8f:74:53:cd: 0c:55:ba:99:c4:81:44:45:ce:ac:1d:27:d2:8e:ed:1b:52:13: 83:34:cd:de:7a:96:cb:ff:3c:99:73:5f:a0:f9:ee:81:6a:cd: 87:23:cc:c5:99:a6:f8:41:b4:2b:f8:8d:e8:99:d1:8c:59:a6: be:fb:e4:33:ea:11:2d:67:1c:8b:c9:96:c9:1d:2a:6d:94:ea: 06:1a:21:14:dd:65:4b:4b:0e:75:9d:83:a3:64:85:2b:60:83: 4d:a8:b3:db:8d:6a:f7:73:8e:1b:15:95:b3:9c:5e:ac:fa:f6: ad:f1:e6:8a:ff:53:dd:49:ae:33:f5:5a:14:cd:19:d9:f8:7c: 87:14:d9:b2:94:9d:78:0a:13:49:8d:cb:d8:0b:32:99:a0:7d: bf:f4:98:fa:65:09:99:71:d1:50:9d:4c:b7:7e:59:07:ef:08: 57:1f:d2:12:40:73:98:55:c1:52:b4:d8:ec:ee:54:d3:f6:3c: 5c:ff:f0:65 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWExyUdj9nUnBTp3+OgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk MWRkN2Y4NmYtZjg4Ny00N2ZhLWJhMTEtYzA0MzAxODg1MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3Bb6fPzbIuhXBrj+dAPirZey6WZfyAnfHZd 7iFUKaA6Sst2gEM+A297udPODPIcXc2eEPWgKxy4W4KOwfYZIOCh87EGRVoA7OUN gZlzjtwIoT6jhzWW2HmKNZx0T0oHoQRRmTdG++IoCg23BgxuWALwmbN34ZHbL7FL tVrsqfQFob/Mb4hkA9l+W+65Jg1bZio/yXH0XrNbTlu0ssSiGBY1LLF1uFh7+ZUS 2Z8rSfcuqQyiBOdcfZa5oev/LNksya8eOVaxy9/MeWdouEHBWttLhwCdXfWk7Dk2 enMUumxCuQ8G1aF72iD5HB+8MSHE5xvDNv1Noo5+N3B01D20KwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFK+r3Lk37a1eD7YrG2ZfANgVS328MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZkMGRlOGEtMzI0OC0z NDAyLWFjOTUtMzEzMDI5MzMzOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFCUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAjPymN4Ob2hV7+FJsKz+vh2/UeGtfgmjjMQKQwP2o8ZSaK/oZiAnb AA9XdYwyNDWmwdSrtJVleqIzRhH2AcCFSmUcpiWPdFPNDFW6mcSBREXOrB0n0o7t G1ITgzTN3nqWy/88mXNfoPnugWrNhyPMxZmm+EG0K/iN6JnRjFmmvvvkM+oRLWcc i8mWyR0qbZTqBhohFN1lS0sOdZ2Do2SFK2CDTaiz241q93OOGxWVs5xerPr2rfHm iv9T3UmuM/VaFM0Z2fh8hxTZspSdeAoTSY3L2AsymaB9v/SY+mUJmXHRUJ1Mt35Z B+8IVx/SEkBzmFXBUrTY7O5U0/Y8XP/wZQ== -----END CERTIFICATE-----Generated at Tue Jan 20 21:23:40 2026 by rpki-client