This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json)
Hash identifier: XaQk/BmmAl2stDEG3u9HxHydGbaLYIYThg04Gp56OZM=
Subject key identifier: B3:12:1C:19:06:CC:75:57:E3:18:BD:55:5A:55:BF:A6:96:EB:70:7E
Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial: 010D0C9F4328584C8A0C31BB0A5FBF6FD7E4E200
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
Signing time: Fri 16 Jan 2026 02:00:31 +0000
ROA not before: Fri 16 Jan 2026 02:00:31 +0000
ROA not after: Thu 16 Apr 2026 01:00:31 +0000
asID: 12980
IP address blocks: 129.35.160.0/20 maxlen: 20
170.225.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Jan 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8a:0c:31:bb:0a:5f:bf:6f:d7:e4:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
Validity
Not Before: Jan 16 02:00:31 2026 GMT
Not After : Apr 16 01:00:31 2026 GMT
Subject: CN=6e2ce3ff-3c98-4d70-ad9d-ac4679097b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:3a:d8:70:d8:72:6c:df:33:e4:d2:32:db:
73:58:e4:38:88:2a:36:36:82:83:02:b4:32:b4:44:
57:f4:5a:a7:f7:16:f1:01:50:20:99:19:47:b5:a0:
e9:df:cb:e8:e8:9d:05:70:c3:1e:fa:37:3f:53:13:
df:12:15:e3:fa:8e:2b:61:19:0c:3b:7a:60:27:a6:
dd:04:6b:9b:4b:54:fd:99:8d:f9:da:26:ad:c3:62:
0c:be:c6:a1:c2:2d:c7:12:83:37:03:40:e5:88:e8:
06:ff:e3:00:7c:59:f8:eb:ff:27:d9:1d:09:bd:9e:
bd:bb:e8:d7:4b:18:6d:8a:34:50:df:07:85:9e:d7:
be:1a:61:f7:54:c0:29:d5:57:31:b3:3c:1e:7f:c3:
ab:44:e1:09:f0:89:c6:e1:8a:e8:b4:69:eb:cb:64:
88:46:ea:a7:16:27:51:48:43:6c:56:7a:4a:9a:3b:
38:a7:e4:9f:e5:d8:a5:35:4b:dc:ba:1d:b3:64:2c:
50:a1:e2:7c:a1:ea:1e:6d:e7:43:db:95:6d:9e:77:
fd:9e:b8:97:a2:1c:bf:af:f3:f3:40:3f:9d:d0:2d:
8c:73:e8:b8:c6:26:96:6d:a2:4c:0c:11:83:79:32:
f7:e3:43:6d:bf:87:db:29:14:6a:51:99:b2:e4:37:
f0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:12:1C:19:06:CC:75:57:E3:18:BD:55:5A:55:BF:A6:96:EB:70:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
X509v3 Authority Key Identifier:
keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
sbgp-ipAddrBlock: critical
IPv4:
129.35.160.0/20
170.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:4f:58:4c:bc:37:98:d5:93:e2:d9:a2:48:8c:7b:64:34:ed:
81:9c:ae:df:b3:85:08:d5:0a:9a:f4:45:17:a8:8c:9a:39:86:
b8:8d:99:19:f9:0e:27:0d:72:5c:1b:95:97:ae:fb:e1:95:c0:
ff:74:05:d7:5f:29:32:bb:27:9e:76:a8:d5:6a:2e:62:ee:10:
e5:79:a5:24:65:ad:b1:1c:53:c7:5f:81:52:aa:fa:a9:8f:7a:
41:8a:53:9f:75:06:ea:22:1c:9d:a9:a6:ee:a4:09:4e:df:5c:
34:a0:2b:28:a4:83:17:29:31:4d:59:70:74:a3:c0:72:dd:fa:
bd:f2:3e:8a:19:31:0b:cd:f9:f0:09:b4:aa:f5:f5:aa:4e:7b:
57:ec:25:1e:f5:bf:b1:fd:28:f9:ee:39:0c:1d:eb:c0:36:db:
e1:ab:4a:5c:c4:5f:31:c0:ee:cb:09:63:3b:db:ad:0f:59:2c:
f9:db:08:e0:f9:1a:57:3f:a4:84:d4:fa:97:0c:b7:b8:a9:4e:
a4:6f:0f:2f:83:55:01:e7:92:ad:64:bb:b6:9e:f1:d3:57:83:
47:01:3c:7b:69:e3:d2:6f:a1:44:be:63:b2:23:ac:c9:16:f4:
a4:d5:30:6d:ad:11:b4:b6:4d:ff:ac:61:dd:1b:35:5f:28:ea:
1e:b8:c4:f6
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEyKDDG7Cl+/b9fk4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy
NjExMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk
NmUyY2UzZmYtM2M5OC00ZDcwLWFkOWQtYWM0Njc5MDk3YjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko462HDYcmzfM+TSMttzWOQ4iCo2NoKDArQy
tERX9Fqn9xbxAVAgmRlHtaDp38vo6J0FcMMe+jc/UxPfEhXj+o4rYRkMO3pgJ6bd
BGubS1T9mY352iatw2IMvsahwi3HEoM3A0DliOgG/+MAfFn46/8n2R0JvZ69u+jX
SxhtijRQ3weFnte+GmH3VMAp1Vcxszwef8OrROEJ8InG4YrotGnry2SIRuqnFidR
SENsVnpKmjs4p+Sf5dilNUvcuh2zZCxQoeJ8oeoebedD25Vtnnf9nriXohy/r/Pz
QD+d0C2Mc+i4xiaWbaJMDBGDeTL340Ntv4fbKRRqUZmy5DfwFQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLMSHBkGzHVX4xi9VVpVv6aW63B+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0
YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvODY2MDRjMWUtZTUyNi0z
MzRlLWFiNjEtMWZiMzM5M2ZiMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3
NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4
MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4
MDk1ODI2MTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEgSOgAwQE
quGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACdPWEy8N5jVk+LZokiMe2Q07YGcrt+zhQjVCpr0RReojJo5
hriNmRn5DicNclwblZeu++GVwP90BddfKTK7J552qNVqLmLuEOV5pSRlrbEcU8df
gVKq+qmPekGKU591BuoiHJ2ppu6kCU7fXDSgKyikgxcpMU1ZcHSjwHLd+r3yPooZ
MQvN+fAJtKr19apOe1fsJR71v7H9KPnuOQwd68A22+GrSlzEXzHA7ssJYzvbrQ9Z
LPnbCOD5Glc/pITU+pcMt7ipTqRvDy+DVQHnkq1ku7ae8dNXg0cBPHtp49JvoUS+
Y7IjrMkW9KTVMG2tEbS2Tf+sYd0bNV8o6h64xPY=
-----END CERTIFICATE-----
Generated at Sun Jan 18 17:59:17 2026 by rpki-client