This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa File: baf5385d-2f68-372a-9c60-6ed99c881111.roa (raw, json) Hash identifier: gVbmTya4RY91oso35vp4S5DLqpOzJajLZ76I1jnG2JU= Subject key identifier: 39:F1:07:FE:D9:7B:2F:5F:33:E8:A3:30:F7:87:ED:96:8D:2A:12:DA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C1ED75AABD3D71C936780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396592 IP address blocks: 2620:74:2a::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:1e:d7:5a:ab:d3:d7:1c:93:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=79555429-d8ff-487f-acd9-4c8aa4f5f40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:6c:cc:c7:38:67:73:7f:2c:aa:79:ce:4a: c6:25:0b:07:c3:2b:36:d0:1c:9c:9d:cd:43:7c:30: f8:6c:95:64:73:a4:fc:79:af:56:8d:13:4f:ba:ce: 2e:8c:2d:62:ac:20:0d:1d:59:20:ac:23:d5:a1:27: 1b:ac:5d:ba:1c:1a:6a:f7:99:4b:8f:e6:1c:3e:d6: 9d:61:57:73:22:27:17:e0:10:34:18:b4:72:d7:50: 92:97:ba:2f:2c:00:01:6c:c7:e3:ba:65:ad:f0:6a: 28:7e:4d:28:61:ae:54:85:28:08:b8:94:83:b9:6a: 1c:ad:7d:61:13:ed:ea:98:44:aa:85:91:10:60:f2: 1c:03:b6:57:4b:f7:ae:dd:4b:8d:ef:a9:69:26:e2: de:2c:1f:ca:83:e3:2d:50:b8:2e:ec:70:83:9d:1f: e4:28:d9:41:65:52:f1:08:8e:9e:a1:45:7c:2c:c3: 7b:e9:83:16:42:8c:8e:ed:d1:0f:25:d7:b2:6f:3d: 36:94:ac:f3:ff:71:16:2f:1c:e8:09:66:58:05:97: 88:44:8e:d5:50:66:53:70:d4:4b:62:56:49:f4:5b: 24:4f:e0:d9:ac:8e:1a:09:d3:97:73:76:4e:96:ca: 70:c4:0d:6e:c4:11:b9:2b:87:fc:82:7c:bc:c2:3b: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F1:07:FE:D9:7B:2F:5F:33:E8:A3:30:F7:87:ED:96:8D:2A:12:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/baf5385d-2f68-372a-9c60-6ed99c881111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3b:d9:71:3c:27:3e:0c:c7:f4:4a:90:38:78:cd:a8:03:79: 05:38:78:7f:92:6e:d7:88:cc:0e:45:a7:e9:64:2d:6b:1d:8a: ae:d5:9b:f9:c3:e8:ab:9f:d8:70:f2:9c:2c:62:ed:f1:04:d5: dd:2a:b3:49:91:cf:7d:8a:cb:e6:8d:ad:59:4a:f3:ff:ba:1f: b3:d3:e7:88:91:0d:84:4a:d6:cb:65:0b:41:c1:8e:d4:d4:b0: 34:ca:0c:07:d7:68:9d:cd:b7:ca:39:88:76:16:b6:3e:55:89: bd:09:cb:c9:ac:97:6c:b4:6e:da:31:2e:87:fd:2d:b5:40:bb: b2:86:5b:92:02:fe:a9:cc:ab:d5:60:60:8c:80:36:60:f7:91: 9f:de:06:c1:8d:e8:b4:3f:37:7c:57:35:46:b7:55:bb:be:4c: 89:c6:db:3c:66:5c:b2:12:dc:a6:f1:eb:32:69:5d:03:db:d5: 07:da:cd:fc:63:dc:91:ea:bc:bc:fb:15:ea:a9:8d:72:7c:a4: 7d:3e:2a:59:99:ef:85:4d:67:c1:d2:d1:88:2f:59:89:68:ae: 72:12:fe:6b:30:e0:ef:d0:b5:e1:f4:69:ff:b2:4a:a3:fb:f5: 31:b1:21:fc:a6:89:03:91:e8:39:a8:b4:64:0f:c4:37:6f:0b: a0:9d:87:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXB7XWqvT1xyTZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk Nzk1NTU0MjktZDhmZi00ODdmLWFjZDktNGM4YWE0ZjVmNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tszMc4Z3N/LKp5zkrGJQsHwys20Bycnc1D fDD4bJVkc6T8ea9WjRNPus4ujC1irCANHVkgrCPVoScbrF26HBpq95lLj+YcPtad YVdzIicX4BA0GLRy11CSl7ovLAABbMfjumWt8Goofk0oYa5UhSgIuJSDuWocrX1h E+3qmESqhZEQYPIcA7ZXS/eu3UuN76lpJuLeLB/Kg+MtULgu7HCDnR/kKNlBZVLx CI6eoUV8LMN76YMWQoyO7dEPJdeybz02lKzz/3EWLxzoCWZYBZeIRI7VUGZTcNRL YlZJ9FskT+DZrI4aCdOXc3ZOlspwxA1uxBG5K4f8gny8wjtlQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDnxB/7Zey9fM+ijMPeH7ZaNKhLaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmFmNTM4NWQtMmY2OC0z NzJhLTljNjAtNmVkOTljODgxMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAzO9lxPCc+DMf0SpA4eM2oA3kFOHh/km7XiMwO RafpZC1rHYqu1Zv5w+irn9hw8pwsYu3xBNXdKrNJkc99isvmja1ZSvP/uh+z0+eI kQ2EStbLZQtBwY7U1LA0ygwH12idzbfKOYh2FrY+VYm9CcvJrJdstG7aMS6H/S21 QLuyhluSAv6pzKvVYGCMgDZg95Gf3gbBjei0Pzd8VzVGt1W7vkyJxts8ZlyyEtym 8esyaV0D29UH2s38Y9yR6ry8+xXqqY1yfKR9PipZme+FTWfB0tGIL1mJaK5yEv5r MODv0LXh9Gn/skqj+/UxsSH8pokDkeg5qLRkD8Q3bwugnYcL -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:11 2026 by rpki-client