This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa
File: cfa1457e-6b66-3dc3-b8d4-52718701d476.roa (raw, json)
Hash identifier: VZa/nDMMzNAR5Un97/tGml5vTs3Ifll9+mGv7qME/b0=
Subject key identifier: 84:C8:04:ED:D1:EB:5F:42:F2:27:06:AE:79:F9:8F:E1:5A:DD:3D:4E
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F4328584C8FA1A8446C30F3210FB61000
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa
Signing time: Sun 18 Jan 2026 02:00:31 +0000
ROA not before: Sun 18 Jan 2026 02:00:31 +0000
ROA not after: Sat 18 Apr 2026 01:00:31 +0000
asID: 54113
IP address blocks: 131.125.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 19 Jan 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8f:a1:a8:44:6c:30:f3:21:0f:b6:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Jan 18 02:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=b0071353-c79c-4cdf-a60f-293964473a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:14:72:35:ac:19:d7:37:a6:04:28:2d:de:
6d:54:63:04:05:7e:6e:46:25:55:bf:15:7e:e1:c5:
e9:f5:3e:61:91:a9:ba:90:81:f3:dc:29:48:54:0f:
4f:6b:66:99:33:eb:98:c6:da:f3:f7:26:29:1f:e2:
57:13:b6:21:39:62:66:c1:fc:76:b5:d5:e4:f9:19:
e2:8a:05:8c:67:8d:c3:a6:6e:e8:d0:87:db:49:dc:
2f:70:7a:ef:fb:46:60:80:6e:59:a4:e3:f1:75:2a:
5d:54:cc:25:f0:2a:37:a7:4b:4f:61:71:41:6e:5f:
34:6f:14:d0:87:87:aa:03:4f:32:43:37:ff:63:2f:
b7:29:05:cc:3d:86:95:08:1f:39:3e:ce:16:37:b2:
4e:f4:ce:09:35:9e:0d:55:d1:98:ce:7e:a4:9d:ed:
1b:61:99:fa:ae:45:08:be:f0:35:99:2e:af:f8:4b:
ee:52:4b:28:86:f9:b1:b4:11:01:56:0b:82:25:1b:
3a:94:71:1e:4c:4d:ec:30:47:de:2f:79:ad:6f:52:
55:cd:1f:42:ee:db:95:20:4d:32:8b:00:d2:32:69:
31:03:83:37:e7:15:67:43:85:cf:d8:64:54:87:93:
c9:00:2e:02:e3:2f:bd:da:e0:c7:d8:4b:2f:7b:3a:
55:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:04:ED:D1:EB:5F:42:F2:27:06:AE:79:F9:8F:E1:5A:DD:3D:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cfa1457e-6b66-3dc3-b8d4-52718701d476.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
131.125.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:da:96:33:70:62:62:43:ac:1c:d2:80:51:bf:d7:71:ed:b2:
1f:f5:68:43:e6:63:9f:9b:16:64:cb:5b:2f:43:d2:0f:22:b4:
3b:e1:16:a1:40:65:6b:bf:ca:6b:54:3b:b2:12:09:0e:a7:d6:
62:cb:5c:46:6b:59:71:62:e0:42:d4:24:78:45:09:08:6d:e0:
ac:d6:6b:d7:3e:e3:ff:76:83:9d:cb:4f:08:7a:6d:93:04:28:
98:2f:d2:10:74:08:2c:23:f1:d1:79:51:9c:67:46:e2:64:d0:
62:a3:b5:dc:0c:58:67:db:7e:52:8b:a3:40:e3:5b:7a:91:91:
12:ce:f4:a3:cd:f4:bc:a1:e0:36:8b:17:17:27:6c:82:cf:5a:
d0:67:d9:ca:45:fe:4f:1f:d0:a3:33:11:2d:eb:c9:55:cd:ce:
99:ab:d1:36:b6:ce:15:cc:a3:06:88:45:e1:13:13:38:f6:d0:
25:f0:f7:75:5d:47:43:71:42:52:42:18:ef:14:5e:05:fe:8d:
d1:35:1b:8a:65:35:ad:2f:da:3f:7c:36:80:9a:4a:3d:58:50:
05:e6:7d:8d:b4:b3:20:ef:c7:a8:27:4e:52:66:80:17:da:5e:
6b:c1:f3:06:e9:18:c1:59:39:56:5c:83:5b:96:ba:c3:49:d9:
6a:ac:c7:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyPoahEbDDzIQ+2EAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDExODAyMDAzMVoXDTI2MDQxODAxMDAzMVowLzEtMCsGA1UEAxMk
YjAwNzEzNTMtYzc5Yy00Y2RmLWE2MGYtMjkzOTY0NDczYTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilUUcjWsGdc3pgQoLd5tVGMEBX5uRiVVvxV+
4cXp9T5hkam6kIHz3ClIVA9Pa2aZM+uYxtrz9yYpH+JXE7YhOWJmwfx2tdXk+Rni
igWMZ43Dpm7o0IfbSdwvcHrv+0ZggG5ZpOPxdSpdVMwl8Co3p0tPYXFBbl80bxTQ
h4eqA08yQzf/Yy+3KQXMPYaVCB85Ps4WN7JO9M4JNZ4NVdGYzn6kne0bYZn6rkUI
vvA1mS6v+EvuUksohvmxtBEBVguCJRs6lHEeTE3sMEfeL3mtb1JVzR9C7tuVIE0y
iwDSMmkxA4M35xVnQ4XP2GRUh5PJAC4C4y+92uDH2EsvezpVaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITIBO3R619C8icGrnn5j+Fa3T1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2ZhMTQ1N2UtNmI2Ni0z
ZGMzLWI4ZDQtNTI3MTg3MDFkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg318MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbaljNwYmJDrBzSgFG/13Htsh/1aEPmY5+bFmTLWy9D0g8itDvhFqFA
ZWu/ymtUO7ISCQ6n1mLLXEZrWXFi4ELUJHhFCQht4KzWa9c+4/92g53LTwh6bZME
KJgv0hB0CCwj8dF5UZxnRuJk0GKjtdwMWGfbflKLo0DjW3qRkRLO9KPN9Lyh4DaL
FxcnbILPWtBn2cpF/k8f0KMzES3ryVXNzpmr0Ta2zhXMowaIReETEzj20CXw93Vd
R0NxQlJCGO8UXgX+jdE1G4plNa0v2j98NoCaSj1YUAXmfY20syDvx6gnTlJmgBfa
XmvB8wbpGMFZOVZcg1uWusNJ2Wqsxyc=
-----END CERTIFICATE-----
Generated at Sun Jan 18 13:20:11 2026 by rpki-client