This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa File: d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa (raw, json) Hash identifier: 67etG7WfPaYygoodPe4khA8zHtqon9xBof7ZB66KjPY= Subject key identifier: 54:80:C8:C3:55:8A:76:7F:01:04:76:D4:10:AB:17:5B:51:E5:D9:D4 Certificate issuer: /CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Certificate serial: 010D0C9F4328584C56671A8F63B045D189E10310 Authority key identifier: DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 15130 IP address blocks: 2607:f330::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:67:1a:8f:63:b0:45:d1:89:e1:03:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fec04c2-2b6c-4e9a-8062-e420ac1a257a Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=aaf92859-e562-41f8-939f-cb344721aa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e8:61:a0:53:bf:64:ac:d0:45:b6:57:58:85: 9f:99:a3:27:42:78:5e:29:68:19:d2:5c:0a:e1:ce: cf:44:3a:f1:c2:19:5d:8e:6e:9f:9f:a3:1b:04:36: b8:8a:94:30:b2:95:db:ee:48:e9:e7:6d:9d:12:4e: 77:88:10:6e:f6:e9:25:7b:a9:11:ec:31:99:8e:34: 35:3b:8c:06:79:b0:65:a1:8b:44:42:ab:52:2e:0d: 72:b9:2b:1b:db:f3:8e:be:a5:6a:0e:ea:1c:c5:17: e5:e6:35:ee:1e:37:c4:da:7a:cc:93:10:1b:d8:0a: ad:69:2b:35:37:e2:60:61:d7:98:af:5a:f3:00:15: ae:c8:0d:28:2a:a7:cd:54:b9:5d:d4:c6:86:3e:2b: 4f:29:42:d7:6b:91:e2:8d:aa:53:06:00:c0:5c:aa: bc:be:4f:e2:14:f4:fc:67:59:fb:16:b2:de:40:cf: 58:5c:b7:a4:86:8e:01:50:65:ba:45:a1:12:19:bd: 5d:24:d4:d1:92:88:81:b1:e3:92:21:3b:10:69:9f: 3c:c2:f3:9e:db:49:32:ed:c0:0d:a5:58:ff:bf:50: 80:44:d4:09:4a:6e:db:1a:e6:40:ea:59:e7:31:3b: 3d:2b:61:a3:40:84:9b:3f:ca:09:eb:b1:e2:37:d9: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:80:C8:C3:55:8A:76:7F:01:04:76:D4:10:AB:17:5B:51:E5:D9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/d9e8402b-f0af-3dd1-806f-ada7baa0fa6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.crl X509v3 Authority Key Identifier: keyid:DA:A6:FB:CD:8D:FF:22:68:C4:1E:BA:AC:CE:80:24:86:BD:CD:D3:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1fec04c2-2b6c-4e9a-8062-e420ac1a257a.cer sbgp-ipAddrBlock: critical IPv6: 2607:f330::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:90:83:bf:1f:b7:27:38:61:4d:a7:1e:08:f4:2e:1e:92:5e: 32:73:25:a6:88:52:e2:9c:f9:61:d5:a4:fa:13:7f:9f:29:94: c8:4c:22:14:34:6e:7c:15:ee:4b:5b:1b:cb:be:a0:eb:fe:12: 89:f9:a7:b5:10:ce:e3:7c:4f:ea:3a:02:48:bd:af:3c:04:4a: 3e:cd:eb:55:15:16:80:49:48:c1:48:b2:cb:ef:34:9e:07:82: 90:5a:a9:6b:4b:b8:1b:5b:df:2c:61:45:0a:4d:74:df:10:38: 7d:e1:77:5c:4e:a4:9d:e3:96:11:1d:c4:3e:d4:f8:57:c4:a5: 44:b6:f2:7e:3c:41:74:8f:60:9e:63:cd:44:f8:06:b3:a8:01: 96:4c:8e:a9:d8:aa:b7:b1:00:1d:16:1a:99:4e:9d:76:d5:0a: 73:b6:d5:f3:7b:4c:2b:89:16:b4:b2:7c:92:b7:d4:42:60:14: 01:c9:f8:af:bf:b7:e1:10:9f:cd:17:48:4d:47:02:92:f3:24: 6e:ad:cf:04:5d:64:63:f4:b8:d7:8d:b0:a6:28:55:b5:22:0f: bb:c3:af:c5:36:22:7c:6d:6d:2d:95:d3:82:f4:d2:bd:b6:a5: 3f:60:a9:96:5e:22:b8:72:7e:30:94:75:04:92:42:73:0c:9d: 05:c9:d1:7e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExWZxqPY7BF0YnhAxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlYzA0YzItMmI2Yy00ZTlhLTgwNjItZTQyMGFjMWEy NTdhMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YWFmOTI4NTktZTU2Mi00MWY4LTkzOWYtY2IzNDQ3MjFhYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlehhoFO/ZKzQRbZXWIWfmaMnQnheKWgZ0lwK 4c7PRDrxwhldjm6fn6MbBDa4ipQwspXb7kjp522dEk53iBBu9ukle6kR7DGZjjQ1 O4wGebBloYtEQqtSLg1yuSsb2/OOvqVqDuocxRfl5jXuHjfE2nrMkxAb2AqtaSs1 N+JgYdeYr1rzABWuyA0oKqfNVLld1MaGPitPKULXa5HijapTBgDAXKq8vk/iFPT8 Z1n7FrLeQM9YXLekho4BUGW6RaESGb1dJNTRkoiBseOSITsQaZ88wvOe20ky7cAN pVj/v1CARNQJSm7bGuZA6lnnMTs9K2GjQISbP8oJ67HiN9kCcwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFSAyMNVinZ/AQR21BCrF1tR5dnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZmVj MDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIwYWMxYTI1N2EvZDllODQwMmItZjBhZi0z ZGQxLTgwNmYtYWRhN2JhYTBmYTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWZlYzA0YzItMmI2Yy00ZTlhLTgw NjItZTQyMGFjMWEyNTdhLzFmZWMwNGMyLTJiNmMtNGU5YS04MDYyLWU0MjBhYzFh MjU3YS5jcmwwHwYDVR0jBBgwFoAU2qb7zY3/ImjEHrqszoAkhr3N00QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZmVjMDRjMi0yYjZjLTRlOWEtODA2Mi1lNDIw YWMxYTI1N2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgfzMDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWkIO/H7cnOGFNpx4I9C4ekl4ycyWmiFLinPlh1aT6E3+fKZTITCIU NG58Fe5LWxvLvqDr/hKJ+ae1EM7jfE/qOgJIva88BEo+zetVFRaASUjBSLLL7zSe B4KQWqlrS7gbW98sYUUKTXTfEDh94XdcTqSd45YRHcQ+1PhXxKVEtvJ+PEF0j2Ce Y81E+AazqAGWTI6p2Kq3sQAdFhqZTp121QpzttXze0wriRa0snySt9RCYBQByfiv v7fhEJ/NF0hNRwKS8yRurc8EXWRj9LjXjbCmKFW1Ig+7w6/FNiJ8bW0tldOC9NK9 tqU/YKmWXiK4cn4wlHUEkkJzDJ0FydF+ -----END CERTIFICATE-----Generated at Sun Jan 11 08:19:28 2026 by rpki-client