This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa File: d4b45eb4-09b2-3b7d-a70a-922354aad665.roa (raw, json) Hash identifier: UTCDundTn/lyRFmslyk22o4S94ypaxNoY6n7cCe/44o= Subject key identifier: 1D:19:37:5F:ED:D0:1C:4B:2D:CC:D3:77:E1:AB:F4:B0:0D:5A:3C:F1 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584C9536DBB9A9C20D4DA6B4A260 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 394111 IP address blocks: 2607:6f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:db:b9:a9:c2:0d:4d:a6:b4:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=ca469dd3-6716-4833-a330-e9196b01931f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:c8:64:e4:d3:4d:02:c6:f0:78:95:d9:b5: 92:49:98:3c:99:73:e7:14:15:25:99:a9:a9:ed:1c: 28:55:f6:a6:4f:b8:aa:dd:1d:2f:37:eb:79:31:98: 15:02:e7:98:81:64:ac:b3:b0:d3:aa:b2:52:13:21: 6d:42:a4:23:d3:c8:1c:96:94:09:66:52:c7:19:69: ee:03:d8:64:e8:a7:24:ae:e1:d9:4e:ae:fe:40:78: 4a:12:31:06:4a:f2:d3:82:ef:be:c2:90:90:f2:22: 2e:8d:1e:e0:f9:de:8b:ca:b2:f3:e4:e8:d2:12:37: e0:65:d5:29:5d:15:bd:d2:47:af:ba:a3:90:a2:95: 96:4a:78:46:16:8d:62:01:b5:cd:f6:0a:8d:8f:52: 6e:77:00:b7:ec:d2:f1:4b:a5:d1:78:e9:f1:b0:66: d5:04:ca:41:17:ac:8d:da:d8:48:cf:90:86:77:b8: d7:4f:f7:fa:98:b7:eb:59:5e:64:f4:21:e5:50:35: ee:fd:1c:81:aa:0b:c9:7f:f9:56:05:07:fe:1f:18: e1:74:f6:7e:f6:ca:59:8b:b7:19:e5:fe:d3:13:bb: a1:86:02:97:6f:4b:d3:ac:03:ec:26:26:35:d0:26: 53:2e:5b:0e:66:86:fe:0a:6d:39:54:b3:16:6e:81: 99:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:19:37:5F:ED:D0:1C:4B:2D:CC:D3:77:E1:AB:F4:B0:0D:5A:3C:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/d4b45eb4-09b2-3b7d-a70a-922354aad665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv6: 2607:6f00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:59:31:13:98:e0:7b:0c:c8:f5:f8:31:64:1a:8a:2d:33:ee: 3c:88:77:b0:7c:51:b1:98:01:a3:db:a2:dc:3d:f9:f3:9a:16: 34:55:15:62:34:93:9d:5a:35:c4:56:91:1b:d7:a1:9f:52:55: 66:e0:73:6d:57:b0:f3:c0:e3:c6:42:2e:b7:5b:fe:5c:51:07: 1e:5e:d5:8a:e4:64:45:e8:a2:d2:42:48:de:cb:22:e1:fb:a6: 6a:9c:8a:bb:17:82:10:84:57:35:f5:ca:f9:a3:10:51:19:71: 93:c7:9c:34:54:d7:12:f1:81:79:ae:98:75:40:a3:21:dc:b4: bf:76:d6:14:66:8a:69:5d:e4:46:7b:bd:8b:5c:8a:0b:4b:de: 58:9a:91:d3:50:08:dd:27:3d:43:84:08:26:14:6d:5e:ec:77: 1b:8a:a3:c0:a4:3a:e0:b8:e8:f9:55:bc:40:a7:31:ad:26:c1: 10:ae:a5:89:3c:d5:49:f3:09:64:09:b1:c5:b4:8e:c2:3a:a1: 74:00:25:47:53:a8:9e:b5:32:0e:3f:75:5f:f3:fe:78:dc:d9: 86:14:ca:26:cf:43:03:70:5c:bc:79:8d:39:d0:64:fb:bd:ac: 6e:89:a8:5a:84:8a:f3:46:c9:f0:86:31:dd:ac:54:28:d4:e9: 10:f9:8f:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyVNtu5qcINTaa0omAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk Y2E0NjlkZDMtNjcxNi00ODMzLWEzMzAtZTkxOTZiMDE5MzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDfIZOTTTQLG8HiV2bWSSZg8mXPnFBUlmamp 7RwoVfamT7iq3R0vN+t5MZgVAueYgWSss7DTqrJSEyFtQqQj08gclpQJZlLHGWnu A9hk6KckruHZTq7+QHhKEjEGSvLTgu++wpCQ8iIujR7g+d6LyrLz5OjSEjfgZdUp XRW90kevuqOQopWWSnhGFo1iAbXN9gqNj1JudwC37NLxS6XReOnxsGbVBMpBF6yN 2thIz5CGd7jXT/f6mLfrWV5k9CHlUDXu/RyBqgvJf/lWBQf+HxjhdPZ+9spZi7cZ 5f7TE7uhhgKXb0vTrAPsJiY10CZTLlsOZob+Cm05VLMWboGZVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB0ZN1/t0BxLLczTd+Gr9LANWjzxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvZDRiNDVlYjQtMDliMi0z YjdkLWE3MGEtOTIyMzU0YWFkNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdvADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCTWTETmOB7DMj1+DFkGootM+48iHewfFGxmAGj26LcPfnzmhY0VRVi NJOdWjXEVpEb16GfUlVm4HNtV7DzwOPGQi63W/5cUQceXtWK5GRF6KLSQkjeyyLh +6ZqnIq7F4IQhFc19cr5oxBRGXGTx5w0VNcS8YF5rph1QKMh3LS/dtYUZoppXeRG e72LXIoLS95YmpHTUAjdJz1DhAgmFG1e7HcbiqPApDrguOj5VbxApzGtJsEQrqWJ PNVJ8wlkCbHFtI7COqF0ACVHU6ietTIOP3Vf8/543NmGFMomz0MDcFy8eY050GT7 vaxuiahahIrzRsnwhjHdrFQo1OkQ+Y+w -----END CERTIFICATE-----Generated at Wed Feb 11 08:30:20 2026 by rpki-client