This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa File: ffaf171b-accf-3357-80be-1cc3a9494500.roa (raw, json) Hash identifier: JaZ/yTXMeXoq8ZAIoAxqE2GeZrd7ldrQpRO/hQEp8A4= Subject key identifier: 51:39:6C:CD:C9:C8:85:4B:04:AC:C8:D0:07:9F:E1:07:C9:13:79:4F Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Certificate serial: 010D0C9F4328584CA5F702690CFD2C64E1324798 Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 32806 IP address blocks: 2604:9900:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:02:69:0c:fd:2c:64:e1:32:47:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=f53cc573-167e-430a-8802-86824f3ec85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4c:53:2e:1b:27:dd:93:d9:a6:50:e3:d7:3c: f9:16:04:47:b5:2d:36:82:86:8d:24:aa:a8:f5:d7: 16:78:27:3a:65:9c:25:98:d8:cf:04:ce:13:43:f9: d2:af:ec:3a:e0:92:a6:23:57:c9:62:29:dd:98:6d: ad:66:e7:13:63:6f:3c:b7:8c:bf:50:7b:1c:ce:44: 2f:c6:58:00:fc:23:1c:aa:c0:80:3a:07:8e:c4:1e: 58:1e:c5:70:66:f8:fa:84:d7:68:98:4a:82:83:ec: e0:36:74:81:10:03:b1:eb:a2:9a:9e:42:9d:fe:4f: 53:3c:63:3c:d0:06:39:07:0e:a1:08:f6:6b:8b:54: 26:f3:fa:71:9a:02:0f:30:cc:9a:49:d3:59:9d:a3: f3:e9:8e:a1:39:7f:91:c2:73:53:ec:77:e3:2c:0f: 55:bb:6d:94:45:02:0f:9a:c9:d8:4a:88:05:3b:c2: 29:1d:09:e1:c9:ff:d5:45:03:49:0c:29:13:eb:50: f8:ed:37:87:9f:ab:6c:5b:ef:5d:66:7f:85:5c:af: 47:3f:7e:54:b6:3c:43:27:b1:1a:3b:73:52:85:fd: a5:5d:e2:a4:80:1e:2f:9d:a4:c8:55:9a:1f:77:ff: 97:81:44:d6:44:42:b7:73:92:90:a0:17:5a:7f:5a: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:6C:CD:C9:C8:85:4B:04:AC:C8:D0:07:9F:E1:07:C9:13:79:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/ffaf171b-accf-3357-80be-1cc3a9494500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl X509v3 Authority Key Identifier: keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer sbgp-ipAddrBlock: critical IPv6: 2604:9900:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:bb:18:af:57:53:22:9b:39:20:8c:4f:3e:ef:4f:ee:e2:c1: ab:2e:40:eb:43:fb:38:66:ab:e9:75:7a:d9:9e:5e:72:60:c0: 7e:ce:3f:e2:69:ad:76:01:3b:0a:5f:0d:ff:05:cc:a0:c6:a0: 4a:f5:72:ae:b7:fb:cd:53:8b:e3:3c:10:fe:0e:a6:53:a5:e9: df:21:a7:79:de:9c:e6:74:4b:7e:06:80:74:cf:bb:ee:a4:56: 2a:1d:bc:61:0b:e2:52:ec:99:a0:11:a5:b1:3b:da:f5:36:23: 5f:89:92:c0:2e:bc:fc:15:67:77:49:86:be:55:f4:68:be:d8: 46:d4:cc:7c:c7:3a:5f:ea:3f:8f:9e:a7:89:00:f2:2f:a2:0c: 35:06:a7:58:53:98:b0:04:ce:62:63:ef:f0:29:bc:67:04:ec: e9:9a:83:9c:62:83:c8:c1:3d:12:a2:62:08:78:4b:41:fa:b4: 1e:15:65:dc:86:c8:89:a2:57:e1:60:0b:71:5f:ce:77:46:34: b2:00:5b:81:76:34:0d:a4:f2:d2:4b:31:88:df:dd:f8:32:ae: 8f:cb:0d:4b:cc:10:ae:7c:5b:10:f6:60:60:fc:6f:3b:bf:7c: 99:58:e3:37:3a:90:67:24:39:4a:aa:4a:6c:c2:17:21:e8:e9: 5b:09:83:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyl9wJpDP0sZOEyR5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJiYTdmZjQtMjQwNy00ZWUyLWFmMjQtYmQwNjQxZTU1 OGQwMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZjUzY2M1NzMtMTY3ZS00MzBhLTg4MDItODY4MjRmM2VjODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUxTLhsn3ZPZplDj1zz5FgRHtS02goaNJKqo 9dcWeCc6ZZwlmNjPBM4TQ/nSr+w64JKmI1fJYindmG2tZucTY288t4y/UHsczkQv xlgA/CMcqsCAOgeOxB5YHsVwZvj6hNdomEqCg+zgNnSBEAOx66KankKd/k9TPGM8 0AY5Bw6hCPZri1Qm8/pxmgIPMMyaSdNZnaPz6Y6hOX+RwnNT7HfjLA9Vu22URQIP msnYSogFO8IpHQnhyf/VRQNJDCkT61D47TeHn6tsW+9dZn+FXK9HP35UtjxDJ7Ea O3NShf2lXeKkgB4vnaTIVZofd/+XgUTWREK3c5KQoBdaf1q3+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFE5bM3JyIVLBKzI0Aef4QfJE3lPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJh N2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2NDFlNTU4ZDAvZmZhZjE3MWItYWNjZi0z MzU3LTgwYmUtMWNjM2E5NDk0NTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzJiYTdmZjQtMjQwNy00ZWUyLWFm MjQtYmQwNjQxZTU1OGQwLzMyYmE3ZmY0LTI0MDctNGVlMi1hZjI0LWJkMDY0MWU1 NThkMC5jcmwwHwYDVR0jBBgwFoAURrxcUerXCsPx2td5/dfW0rqzLwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMmJhN2ZmNC0yNDA3LTRlZTItYWYyNC1iZDA2 NDFlNTU4ZDAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgSZAAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACu7GK9XUyKbOSCMTz7vT+7iwasuQOtD+zhmq+l1etmeXnJgwH7O P+JprXYBOwpfDf8FzKDGoEr1cq63+81Ti+M8EP4OplOl6d8hp3nenOZ0S34GgHTP u+6kViodvGEL4lLsmaARpbE72vU2I1+JksAuvPwVZ3dJhr5V9Gi+2EbUzHzHOl/q P4+ep4kA8i+iDDUGp1hTmLAEzmJj7/ApvGcE7Omag5xig8jBPRKiYgh4S0H6tB4V ZdyGyImiV+FgC3FfzndGNLIAW4F2NA2k8tJLMYjf3fgyro/LDUvMEK58WxD2YGD8 bzu/fJlY4zc6kGckOUqqSmzCFyHo6VsJg68= -----END CERTIFICATE-----Generated at Sat Feb 7 11:41:23 2026 by rpki-client