This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ceb3789-b354-318f-a0ce-9c9de894d9be.roa File: 1ceb3789-b354-318f-a0ce-9c9de894d9be.roa (raw, json) Hash identifier: CdTjScNXpRpih1k8cAutG7fKY8Js5Z2Tyvt3ljxjs78= Subject key identifier: C1:3C:08:6B:50:FF:37:4D:7E:5A:D1:2F:8F:48:1F:EA:B9:C0:E5:BD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C205B79981084DDC0E460 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ceb3789-b354-318f-a0ce-9c9de894d9be.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396566 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:20:5b:79:98:10:84:dd:c0:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=848d9540-6a23-4c59-bc82-b4571bff2f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:93:32:6b:65:c6:c3:81:b6:70:e9:ce:75:1c: 08:ed:27:20:83:88:64:63:dc:b8:a6:73:d8:5d:ac: e9:fe:b6:ac:51:83:0b:c1:01:11:ec:93:b7:de:7f: 4f:d0:32:b7:81:4b:aa:4f:46:98:0b:d9:ce:a1:20: 41:19:8f:3d:8a:41:27:60:b1:3c:41:93:06:77:c2: 5c:db:2d:5f:08:0d:b7:f4:e6:f3:60:90:d9:b7:ce: e8:74:6e:a1:14:db:dc:f3:85:9f:a4:0d:d4:26:e8: bc:62:ca:1a:ea:71:ce:f2:b8:2b:2f:9b:a1:e9:1c: 1c:31:21:65:8d:55:94:f9:a9:df:f7:02:13:b6:98: a9:44:de:1e:03:80:7e:c4:c1:af:22:ca:ab:28:79: ef:6c:5c:9e:9f:51:d8:7a:d8:61:05:e1:63:91:45: d7:8f:50:68:b3:20:fb:75:d2:b3:8d:66:6c:65:c0: e3:6c:9c:24:3e:a9:c8:41:75:27:ea:91:d0:6f:17: 90:61:e0:30:91:72:2d:a1:0d:c0:a3:54:6c:11:48: a1:20:15:cf:5f:04:a2:0d:56:6d:26:29:f8:5e:c7: 50:bf:61:c9:94:5c:40:71:a3:c7:e0:22:7b:f0:bc: 9a:b8:3f:34:a4:04:c4:5e:a5:d5:a8:6c:03:7f:b9: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3C:08:6B:50:FF:37:4D:7E:5A:D1:2F:8F:48:1F:EA:B9:C0:E5:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1ceb3789-b354-318f-a0ce-9c9de894d9be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:00:2d:82:d1:c2:bc:12:14:16:9f:66:25:e7:f6:9a:44:c9: 2c:84:35:43:23:f3:54:b6:a8:f9:ae:c4:98:23:23:14:73:cf: 28:35:71:a8:44:cf:5f:a1:76:e9:ed:73:df:e1:c5:9e:c5:68: ae:4f:5c:6d:cf:45:48:26:93:11:c9:47:43:90:2f:70:f9:28: e0:36:00:f7:f2:4b:ca:09:79:67:d2:f6:80:ac:fa:22:bd:97: 2a:07:6b:4f:35:db:e5:f9:c6:73:c1:80:f7:b7:b5:63:64:84: 96:d3:f8:eb:f6:f6:c7:2b:c0:8f:f1:b5:0d:a2:41:e4:44:88: e7:19:6b:46:2d:b7:e8:19:59:5d:9f:cf:6b:eb:80:f7:24:ce: cd:06:61:a9:d9:02:2e:0e:1b:a8:fc:b2:7d:6e:2e:d7:b6:cd: 91:1a:92:ad:67:17:b5:28:c3:19:d1:23:e2:fd:70:d4:f8:45: 84:f1:06:36:28:4a:b0:9d:ed:b6:f8:fe:17:9e:f7:0e:8c:04: f5:30:ef:24:5d:5e:f5:ef:03:fe:13:38:a4:ef:39:b9:67:0f: e6:73:89:b3:0d:d9:f9:cd:d2:9c:2a:d6:3c:09:54:fe:0d:a3: a4:16:ee:53:25:d9:55:2e:79:84:1a:a4:f0:9a:35:f4:c1:f2: aa:5f:3d:f9 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXCBbeZgQhN3A5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk ODQ4ZDk1NDAtNmEyMy00YzU5LWJjODItYjQ1NzFiZmYyZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJMya2XGw4G2cOnOdRwI7Scgg4hkY9y4pnPY Xazp/rasUYMLwQER7JO33n9P0DK3gUuqT0aYC9nOoSBBGY89ikEnYLE8QZMGd8Jc 2y1fCA239ObzYJDZt87odG6hFNvc84WfpA3UJui8Ysoa6nHO8rgrL5uh6RwcMSFl jVWU+anf9wITtpipRN4eA4B+xMGvIsqrKHnvbFyen1HYethhBeFjkUXXj1BosyD7 ddKzjWZsZcDjbJwkPqnIQXUn6pHQbxeQYeAwkXItoQ3Ao1RsEUihIBXPXwSiDVZt Jin4XsdQv2HJlFxAcaPH4CJ78LyauD80pATEXqXVqGwDf7lU4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFME8CGtQ/zdNflrRL49IH+q5wOW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMWNlYjM3ODktYjM1NC0z MThmLWEwY2UtOWM5ZGU4OTRkOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBYAC2C0cK8EhQWn2Yl5/aaRMkshDVDI/NUtqj5 rsSYIyMUc88oNXGoRM9foXbp7XPf4cWexWiuT1xtz0VIJpMRyUdDkC9w+SjgNgD3 8kvKCXln0vaArPoivZcqB2tPNdvl+cZzwYD3t7VjZISW0/jr9vbHK8CP8bUNokHk RIjnGWtGLbfoGVldn89r64D3JM7NBmGp2QIuDhuo/LJ9bi7Xts2RGpKtZxe1KMMZ 0SPi/XDU+EWE8QY2KEqwne22+P4XnvcOjAT1MO8kXV717wP+Ezik7zm5Zw/mc4mz Ddn5zdKcKtY8CVT+DaOkFu5TJdlVLnmEGqTwmjX0wfKqXz35 -----END CERTIFICATE-----Generated at Sun Jan 25 21:45:49 2026 by rpki-client