This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa File: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (raw, json) Hash identifier: LoFB/T8x0KHqNkkojirbFQRdDo8Y2JZvN1Hxddxpsv0= Subject key identifier: 1A:96:01:12:75:86:F6:D9:14:D6:87:50:17:0D:DB:08:A0:8D:C0:21 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915D58149F16C7D1816C00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 2606:e280::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5d:58:14:9f:16:c7:d1:81:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=bd112941-34af-4efb-a5da-a356def30570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:a3:da:b7:c1:73:7e:21:21:0c:e1:e6:15: 24:e7:76:75:73:74:54:06:2b:b4:0f:c1:ac:f1:06: 4e:77:d8:51:21:36:f1:dd:c1:1a:da:66:fd:57:53: e3:d4:08:b4:69:c1:c7:93:13:12:92:6b:4c:d5:d2: 9f:01:00:2f:35:3d:f1:bd:c5:55:a8:63:13:8a:5e: b0:60:8c:e6:8f:fd:1c:92:79:ca:9e:53:66:b8:3b: 88:a8:c0:18:76:a0:d1:63:94:ad:ab:cb:14:b1:ae: b2:77:dd:23:a7:1e:50:b0:16:f4:c1:17:39:c3:be: 43:fb:fc:74:90:c7:16:2a:03:cf:db:d2:f7:26:f9: ee:17:48:ee:29:08:2b:88:1f:99:d1:2d:d5:cd:9a: 89:22:3f:61:a1:5b:65:dd:9f:ff:d6:87:16:e3:84: 34:29:8e:d7:19:6a:d1:9c:41:95:7f:18:7e:a0:cc: d1:f6:b3:42:2a:b3:40:7e:9f:ee:a1:df:83:ec:98: c3:ad:13:6a:0f:b2:f4:f4:ae:65:b1:e2:b2:07:85: c3:07:9e:aa:e5:d8:a3:8f:37:2a:94:62:99:83:5d: a2:29:6b:85:a4:2b:9c:52:f1:48:3a:fe:78:18:8a: c6:54:85:0d:03:27:4e:35:3f:d7:80:61:5f:39:1a: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:01:12:75:86:F6:D9:14:D6:87:50:17:0D:DB:08:A0:8D:C0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv6: 2606:e280::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:be:f0:d7:46:26:71:27:16:33:f8:82:fc:5f:61:6f:ac:5d: dd:03:ad:e5:56:28:95:fa:b5:64:1f:b2:1e:0e:a1:23:15:0a: ed:07:b0:05:76:c7:67:a0:f0:2b:6b:d6:9c:fe:d7:9a:f5:70: 67:e4:c2:53:2e:7a:c2:2b:b5:d6:81:9f:64:ba:eb:26:23:0c: 8d:56:6c:78:f2:be:73:60:06:46:36:48:98:25:c6:f6:79:c7: 58:31:a9:3e:58:10:05:34:00:94:9b:86:d6:0a:27:0c:0b:64: 9e:6a:52:33:dc:6e:1f:e4:44:92:c5:72:60:90:57:6b:cb:9c: cb:1d:a5:5b:d8:6b:e8:d2:75:d1:36:ed:cf:bf:04:be:63:9d: a2:e7:59:a1:5b:19:2d:5b:6d:0b:51:4f:59:5f:ef:5c:a8:de: 25:d2:76:44:e5:79:88:b2:e9:c4:82:04:28:87:a8:ed:9a:25: 59:d1:b1:08:da:30:12:5f:71:7a:e5:f2:e1:32:58:ed:fb:a8: f1:c3:08:48:1f:a4:e5:1c:46:e6:50:73:f0:7b:66:ca:ea:70: 93:36:e0:fa:4e:a9:7c:e3:b9:ae:50:e6:b7:e5:26:92:47:c7: 7e:12:ab:81:2e:44:5a:cd:fa:bf:3f:2a:d6:db:fa:c7:c4:09: a7:f5:53:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExhkV1YFJ8Wx9GBbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk YmQxMTI5NDEtMzRhZi00ZWZiLWE1ZGEtYTM1NmRlZjMwNTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Kj2rfBc34hIQzh5hUk53Z1c3RUBiu0D8Gs 8QZOd9hRITbx3cEa2mb9V1Pj1Ai0acHHkxMSkmtM1dKfAQAvNT3xvcVVqGMTil6w YIzmj/0cknnKnlNmuDuIqMAYdqDRY5Stq8sUsa6yd90jpx5QsBb0wRc5w75D+/x0 kMcWKgPP29L3JvnuF0juKQgriB+Z0S3VzZqJIj9hoVtl3Z//1ocW44Q0KY7XGWrR nEGVfxh+oMzR9rNCKrNAfp/uod+D7JjDrRNqD7L09K5lseKyB4XDB56q5dijjzcq lGKZg12iKWuFpCucUvFIOv54GIrGVIUNAydONT/XgGFfORqUHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBqWARJ1hvbZFNaHUBcN2wigjcAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMjIxOWE1ZGQtZDY4NS0z ZTVmLWFkYTMtYTNlN2EwNWYyODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgbigDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDLvvDXRiZxJxYz+IL8X2FvrF3dA63lViiV+rVkH7IeDqEjFQrtB7AF dsdnoPAra9ac/tea9XBn5MJTLnrCK7XWgZ9kuusmIwyNVmx48r5zYAZGNkiYJcb2 ecdYMak+WBAFNACUm4bWCicMC2SealIz3G4f5ESSxXJgkFdry5zLHaVb2Gvo0nXR Nu3PvwS+Y52i51mhWxktW20LUU9ZX+9cqN4l0nZE5XmIsunEggQoh6jtmiVZ0bEI 2jASX3F65fLhMljt+6jxwwhIH6TlHEbmUHPwe2bK6nCTNuD6Tql847muUOa35SaS R8d+EquBLkRazfq/PyrW2/rHxAmn9VMT -----END CERTIFICATE-----Generated at Sun Jan 11 08:17:11 2026 by rpki-client