This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa File: 21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa (raw, json) Hash identifier: 8ESfABmDhMDCb7DtwWc61WYV0iLASXiGJbapek+AIH8= Subject key identifier: 83:BA:F7:C3:60:B1:97:96:23:57:80:AC:31:34:3B:BC:27:37:F3:F7 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584C8B60620BAFD548A6F830E500 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 7029 IP address blocks: 2601:20f0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:60:62:0b:af:d5:48:a6:f8:30:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=ff6b1cbc-4096-4a99-8989-2af067f8f680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2d:1a:68:d1:6e:f9:91:60:a1:b4:e9:2d:1d: c7:8b:21:35:2c:62:09:85:12:d3:93:7f:93:d4:c6: 60:fb:9b:bf:2e:97:8f:04:08:12:fa:ec:03:ef:8c: 3a:a3:59:53:e9:65:eb:9e:f2:27:5a:bc:21:99:5d: 8f:74:5c:97:2a:18:50:bc:02:3c:26:cb:7c:97:b3: 0d:46:86:d2:22:c7:0c:65:31:b2:e5:6e:0a:b0:36: c7:26:78:2a:74:05:54:23:13:6b:a2:04:a6:81:cd: 7a:6b:d3:2e:ad:5e:14:c7:63:f7:d1:b6:21:35:43: 22:53:66:de:aa:53:8a:fc:48:32:1c:89:0e:1c:47: 32:c2:80:f0:dc:ed:03:2f:b6:fe:70:42:da:30:37: 8d:a6:09:4e:83:6d:ae:6e:9f:87:57:9b:eb:b4:44: 07:56:b2:01:6c:3e:77:df:ed:38:a5:34:28:42:d2: 46:1a:ff:24:7b:f9:70:61:dc:de:af:7d:a3:9d:ad: f1:1f:f1:7c:cb:e1:e6:c0:8d:1d:31:51:9c:d2:b0: 91:9c:e5:c5:29:8d:b2:6a:0b:9a:e6:51:8a:e2:23: f9:b3:bd:87:ea:10:d7:e7:ff:21:c7:d9:70:b0:28: 47:6a:16:a1:54:1c:fd:0b:fe:96:c2:6b:79:4c:09: a3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BA:F7:C3:60:B1:97:96:23:57:80:AC:31:34:3B:BC:27:37:F3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/21b1f58a-0a7e-34b8-9938-7cbc2975e554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv6: 2601:20f0::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:8a:a9:ff:78:1f:c3:f7:8a:64:11:74:a5:65:40:fa:3b:ae: 30:9f:38:7d:ce:8d:a4:66:8a:67:11:d6:f2:d5:41:81:e9:d7: 73:34:1f:5a:09:bb:fc:dc:fe:6f:d9:67:1a:59:0a:07:48:b3: e1:9e:cd:30:f4:ef:1d:bc:c7:13:63:1d:68:df:42:ca:b9:9b: c3:15:80:b2:34:65:e3:69:28:11:20:a3:a5:b3:d4:11:19:18: ea:b7:eb:c6:a9:18:47:28:a3:05:04:a3:a6:37:53:41:00:d3: 62:13:6c:9a:2b:48:c3:e3:77:ff:86:39:43:3f:55:9e:0a:d7: a4:61:ef:b6:13:fc:1e:ae:93:8e:f4:a4:ff:71:47:6c:4b:8b: 75:72:69:8f:0a:0c:a3:99:e8:f6:46:0c:e9:48:95:32:ba:5e: 6c:02:a3:ab:81:44:10:6a:26:25:ea:1e:e1:ec:06:53:9f:9a: 81:b9:49:0f:12:52:70:6f:eb:82:87:a9:86:db:e3:53:fc:5b: 26:5d:9d:c4:27:05:fe:df:25:16:5d:8d:6e:20:1c:49:36:ed: 19:ce:22:6f:4e:e7:ae:a7:6a:15:17:36:d1:a1:aa:31:6b:b5: 2c:e7:92:ba:95:9b:ac:45:05:89:07:69:ad:52:38:bd:d7:38: 2f:14:9d:00 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyLYGILr9VIpvgw5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZmY2YjFjYmMtNDA5Ni00YTk5LTg5ODktMmFmMDY3ZjhmNjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy0aaNFu+ZFgobTpLR3HiyE1LGIJhRLTk3+T 1MZg+5u/LpePBAgS+uwD74w6o1lT6WXrnvInWrwhmV2PdFyXKhhQvAI8Jst8l7MN RobSIscMZTGy5W4KsDbHJngqdAVUIxNrogSmgc16a9MurV4Ux2P30bYhNUMiU2be qlOK/EgyHIkOHEcywoDw3O0DL7b+cELaMDeNpglOg22ubp+HV5vrtEQHVrIBbD53 3+04pTQoQtJGGv8ke/lwYdzer32jna3xH/F8y+HmwI0dMVGc0rCRnOXFKY2yagua 5lGK4iP5s72H6hDX5/8hx9lwsChHahahVBz9C/6Wwmt5TAmjewIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIO698NgsZeWI1eArDE0O7wnN/P3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMjFiMWY1OGEtMGE3ZS0z NGI4LTk5MzgtN2NiYzI5NzVlNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDJgEg8DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBHiqn/eB/D94pkEXSlZUD6O64wnzh9zo2kZopnEdby1UGB6ddzNB9a Cbv83P5v2WcaWQoHSLPhns0w9O8dvMcTYx1o30LKuZvDFYCyNGXjaSgRIKOls9QR GRjqt+vGqRhHKKMFBKOmN1NBANNiE2yaK0jD43f/hjlDP1WeCtekYe+2E/werpOO 9KT/cUdsS4t1cmmPCgyjmej2RgzpSJUyul5sAqOrgUQQaiYl6h7h7AZTn5qBuUkP ElJwb+uCh6mG2+NT/FsmXZ3EJwX+3yUWXY1uIBxJNu0ZziJvTueup2oVFzbRoaox a7Us55K6lZusRQWJB2mtUji91zgvFJ0A -----END CERTIFICATE-----Generated at Sun Jan 25 09:49:40 2026 by rpki-client