This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: vRrjzOglHjaLlZxQ56hqSghMErth9SUOicwLAPP9LjQ= Subject key identifier: 26:CA:D7:F6:C9:05:BD:E3:EF:3D:50:44:08:5F:50:26:21:44:4D:C4 Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584C645C072170D2656376B01200 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:07:21:70:d2:65:63:76:b0:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=b2ae7dcc-5039-4cd9-8dd1-d04c7b32c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:72:37:a9:53:2e:70:7a:90:64:87:d6:07: 95:f6:41:77:96:0d:f6:e9:6a:5c:18:07:30:07:80: 92:ab:38:56:0f:82:d8:0e:4e:54:5b:d2:f1:67:87: 52:45:a2:b9:68:d1:57:68:70:49:ce:88:fe:0e:54: 59:86:7c:69:65:86:04:43:fe:85:d0:44:a3:9a:d2: f9:69:18:4a:ea:01:42:67:e6:95:9d:d8:8e:58:44: 87:24:c6:c0:ca:1d:87:33:73:47:24:c9:38:1f:9a: c3:c8:b4:2b:af:b6:d8:99:5d:7f:78:f9:d6:79:a9: 7e:8f:9a:99:e7:bc:d8:82:b3:33:b7:94:d7:df:c2: 86:d1:08:f2:43:2f:42:46:44:8a:ed:ab:16:2c:20: 51:b8:35:72:32:de:65:4b:b2:70:eb:b3:49:50:44: e0:e7:a1:4f:de:5e:c8:cd:48:c7:6f:2b:55:a3:2b: d2:17:85:98:02:02:10:6f:b4:74:25:56:d2:41:c2: 20:3c:23:35:43:f4:19:0e:ab:99:15:6d:10:87:a7: f5:9e:b9:e5:9a:f6:17:1d:9d:37:60:f7:8b:e2:b6: 7d:c8:24:ed:f8:de:d0:a7:f3:49:33:06:d9:51:af: c1:45:9a:24:24:87:c1:e8:f5:79:ad:8c:56:0c:2e: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:D7:F6:C9:05:BD:E3:EF:3D:50:44:08:5F:50:26:21:44:4D:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f5:bd:f4:84:7e:22:5a:cc:59:86:0d:a6:6f:82:08:4a:b3: 12:23:4a:93:9b:d0:96:aa:a0:94:d1:b5:91:28:ca:fc:1c:3d: 46:cb:ae:40:8c:4b:94:05:29:90:ca:fd:c2:f4:ce:9c:11:4b: 87:eb:8d:7b:fd:62:ca:72:d7:54:1c:69:45:09:f3:06:88:10: 07:ee:fc:d0:8c:33:1c:bd:0c:5f:03:ed:16:f0:63:b8:70:1d: d9:66:2b:e4:d9:d4:1e:06:b9:6e:f1:4f:cc:63:be:8b:e4:62: 2a:c7:ec:38:f0:d7:11:f2:6f:a2:ee:a5:86:c1:f1:e5:56:26: b2:4a:f6:54:4f:c4:e3:1a:e6:a1:14:79:f4:de:50:97:83:f1: ed:34:b4:ea:c0:47:b1:d7:cf:30:98:92:c3:29:05:ff:a1:5f: 1e:6a:65:5d:16:59:5a:91:4f:3f:23:d5:97:7c:5b:aa:a8:47: 07:f3:52:17:c7:0f:5c:a9:b6:c8:95:63:64:d0:90:b9:b5:14: 01:b7:44:f0:cd:bb:a4:f4:b4:8a:b7:e5:63:3c:33:ea:dd:8f: 80:c4:3c:6b:05:9c:6e:9b:f0:cd:c0:6c:ee:39:f9:33:00:62: 6a:75:1c:cc:51:9f:ef:cf:ac:aa:a3:1b:96:3e:76:82:9f:32: fd:4e:bd:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExkXAchcNJlY3awEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk YjJhZTdkY2MtNTAzOS00Y2Q5LThkZDEtZDA0YzdiMzJjOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/FyN6lTLnB6kGSH1geV9kF3lg326WpcGAcw B4CSqzhWD4LYDk5UW9LxZ4dSRaK5aNFXaHBJzoj+DlRZhnxpZYYEQ/6F0ESjmtL5 aRhK6gFCZ+aVndiOWESHJMbAyh2HM3NHJMk4H5rDyLQrr7bYmV1/ePnWeal+j5qZ 57zYgrMzt5TX38KG0QjyQy9CRkSK7asWLCBRuDVyMt5lS7Jw67NJUETg56FP3l7I zUjHbytVoyvSF4WYAgIQb7R0JVbSQcIgPCM1Q/QZDquZFW0Qh6f1nrnlmvYXHZ03 YPeL4rZ9yCTt+N7Qp/NJMwbZUa/BRZokJIfB6PV5rYxWDC77UQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCbK1/bJBb3j7z1QRAhfUCYhRE3EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJX1vfSEfiJazFmGDaZvgghKsxIjSpOb0JaqoJTRtZEoyvwcPUbL rkCMS5QFKZDK/cL0zpwRS4frjXv9Yspy11QcaUUJ8waIEAfu/NCMMxy9DF8D7Rbw Y7hwHdlmK+TZ1B4GuW7xT8xjvovkYirH7Djw1xHyb6LupYbB8eVWJrJK9lRPxOMa 5qEUefTeUJeD8e00tOrAR7HXzzCYksMpBf+hXx5qZV0WWVqRTz8j1Zd8W6qoRwfz UhfHD1yptsiVY2TQkLm1FAG3RPDNu6T0tIq35WM8M+rdj4DEPGsFnG6b8M3AbO45 +TMAYmp1HMxRn+/PrKqjG5Y+doKfMv1OvTI= -----END CERTIFICATE-----Generated at Sat Jan 10 07:04:03 2026 by rpki-client