This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: 5TsLcR3x/wlIEF1wsclK0Yh+/NmdEg4A7dp4pI+0ap0= Subject key identifier: E7:6F:0C:43:BE:70:97:5F:96:50:2B:2D:44:3E:CB:35:26:CF:66:67 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584CB28729BB990EA53E3A8E4100 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Feb 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:29:bb:99:0e:a5:3e:3a:8e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=651ed967-483d-47ab-99c7-08b8dce3ed68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:8f:bf:b8:19:b6:18:2a:91:73:19:df:50: b6:3d:4e:d1:54:03:6d:9a:e2:36:86:ad:16:1f:41: 72:99:c4:0e:f3:36:b6:3d:64:d3:10:c0:1a:48:8c: 11:00:f9:f7:a1:6c:3c:df:35:c9:01:3f:b9:ee:43: 7e:37:10:7a:22:1a:b7:08:b4:a3:9b:4d:84:df:c1: 2d:6f:0f:86:0c:ce:b2:f4:e0:55:84:0f:4c:82:1a: ee:6a:be:8d:d7:a9:a4:ff:0d:d7:4e:f2:ad:d6:61: 7c:60:ba:6d:a8:c7:a1:b7:a0:b9:20:e1:dd:39:2e: 86:c2:ff:3c:89:44:31:64:e1:03:41:5e:17:3d:86: 45:70:23:d1:dd:49:77:84:33:87:bb:d2:aa:1c:4b: c9:32:9c:05:27:f5:4e:17:a3:ab:eb:f6:fc:9a:0d: 78:c2:4d:24:11:6d:38:25:fb:bb:39:7d:57:35:a7: 06:21:6a:ee:b7:7c:dc:0f:e7:d7:50:bd:a3:9c:8a: 5a:df:af:94:70:74:02:40:cd:7e:77:09:19:0b:84: 74:21:5d:84:56:ef:a1:c5:fc:ab:a9:4a:e4:7d:c2: 86:b0:3e:13:da:42:1c:5f:79:d0:46:98:36:65:27: 5a:0a:5f:a0:7c:8a:d1:1b:c0:47:cd:84:19:27:57: b3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:0C:43:BE:70:97:5F:96:50:2B:2D:44:3E:CB:35:26:CF:66:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:04:8c:06:5d:06:78:97:3e:7e:f3:c1:a3:39:b0:fe:5e:29: 8a:b2:04:3b:f2:1b:eb:e7:50:4e:31:b4:3f:d5:1a:8a:8c:eb: 9a:a7:07:a1:4c:94:5a:7f:aa:21:1e:91:15:63:51:78:f8:25: 0c:88:a2:bb:75:94:5b:1c:2c:c5:f1:0b:ba:1e:a7:8e:7f:93: f2:a8:fb:c8:de:f4:94:d6:fe:b1:2f:77:5d:a1:e1:25:20:78: e8:8c:65:e9:8b:38:fd:71:cc:63:c2:41:69:92:32:66:73:a0: a4:33:17:f2:bd:22:2a:25:77:27:5e:92:44:6f:d5:91:34:9e: db:12:6f:a6:c4:77:c6:c0:25:88:89:5e:cd:43:bc:64:d7:9b: a4:75:70:13:58:f2:67:fa:95:02:53:35:c7:d8:06:3a:14:43: 44:87:b5:1a:8b:f5:9f:58:1b:33:7d:ae:49:85:d0:80:1d:ca: 62:3c:72:cd:cf:f4:71:0c:ca:25:cb:4e:4d:2c:4b:22:a5:98: 86:87:d3:8f:ad:87:3a:5d:43:83:50:c3:ce:75:8b:04:0d:95: 5c:1b:39:97:d6:37:d2:b7:62:8a:bd:98:db:ed:d5:f7:c9:65: d6:46:ea:c7:47:96:8c:e8:42:da:09:3b:b1:f5:d8:1a:3e:b7: a2:f5:0c:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhym7mQ6lPjqOQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk NjUxZWQ5NjctNDgzZC00N2FiLTk5YzctMDhiOGRjZTNlZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoASPv7gZthgqkXMZ31C2PU7RVANtmuI2hq0W H0FymcQO8za2PWTTEMAaSIwRAPn3oWw83zXJAT+57kN+NxB6Ihq3CLSjm02E38Et bw+GDM6y9OBVhA9Mghruar6N16mk/w3XTvKt1mF8YLptqMeht6C5IOHdOS6Gwv88 iUQxZOEDQV4XPYZFcCPR3Ul3hDOHu9KqHEvJMpwFJ/VOF6Or6/b8mg14wk0kEW04 Jfu7OX1XNacGIWrut3zcD+fXUL2jnIpa36+UcHQCQM1+dwkZC4R0IV2EVu+hxfyr qUrkfcKGsD4T2kIcX3nQRpg2ZSdaCl+gfIrRG8BHzYQZJ1ezWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdvDEO+cJdfllArLUQ+yzUmz2ZnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYEjAZdBniXPn7zwaM5sP5eKYqyBDvyG+vnUE4xtD/VGoqM65qnB6FM lFp/qiEekRVjUXj4JQyIort1lFscLMXxC7oep45/k/Ko+8je9JTW/rEvd12h4SUg eOiMZemLOP1xzGPCQWmSMmZzoKQzF/K9IioldydekkRv1ZE0ntsSb6bEd8bAJYiJ Xs1DvGTXm6R1cBNY8mf6lQJTNcfYBjoUQ0SHtRqL9Z9YGzN9rkmF0IAdymI8cs3P 9HEMyiXLTk0sSyKlmIaH04+thzpdQ4NQw851iwQNlVwbOZfWN9K3Yoq9mNvt1ffJ ZdZG6sdHlozoQtoJO7H12Bo+t6L1DEs= -----END CERTIFICATE-----Generated at Wed Feb 11 08:30:10 2026 by rpki-client