This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa File: 43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa (raw, json) Hash identifier: dUJxngL2aK34nEgOg8C56p4C/htFNmiPAPqmUkN2tR8= Subject key identifier: C4:06:17:0F:21:80:D8:49:48:86:85:45:80:51:0B:FC:98:1A:2F:74 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584C76818B5A1D4DE7E1DBBD2A80 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 0 IP address blocks: 2001:504:99::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:8b:5a:1d:4d:e7:e1:db:bd:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=d8b15a3b-88d2-48ee-bfbe-1c4c5975ec0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:da:77:ea:7b:c6:78:23:b4:f5:f4:13:b8:43: 44:9b:75:0c:a7:a8:3e:f6:31:27:4d:e4:fd:e0:fd: b7:2d:71:0d:a8:19:6a:27:5e:14:a4:b5:71:e3:36: 7e:5a:ef:ba:d7:a4:97:1a:0d:e2:c9:d6:bf:d7:fe: 75:75:f9:b6:6b:85:79:f2:9d:34:1e:3b:bd:2d:43: f9:a3:75:35:87:d0:49:bc:98:f1:bc:05:2b:89:f6: e1:77:bf:ed:3a:a7:08:d1:c2:1f:37:12:69:cc:8c: 31:64:f4:d5:09:cd:2c:45:d2:ea:f8:f4:fe:cb:a4: b8:81:1a:b8:04:23:5a:ef:9b:84:a2:22:59:d1:a0: 39:6f:05:75:f4:64:87:4b:96:ad:82:07:75:8b:5a: 7a:27:82:f9:88:52:5a:ca:42:c0:20:f9:0a:1a:d9: ac:a4:73:68:93:b0:81:64:a3:d3:4a:37:63:fc:a1: 9d:92:68:33:7a:38:22:58:30:ed:34:d6:90:07:a6: f3:6e:32:21:18:f1:11:3b:c4:ae:9d:1f:98:74:d1: 23:a8:69:bf:2b:91:9b:8a:05:ca:6a:56:a2:04:08: 1a:62:c5:0a:05:9c:b0:5a:7d:55:dd:4e:c2:2a:58: a3:95:fe:79:e9:db:ae:79:ad:09:bc:24:bc:62:f9: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:06:17:0F:21:80:D8:49:48:86:85:45:80:51:0B:FC:98:1A:2F:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/43d3e14c-ef4a-3283-bb79-bb78acc4c933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:99::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:bf:26:45:30:4b:51:d1:2b:06:0f:ac:17:de:30:45:ad:c7: 99:be:4e:13:21:16:af:12:a3:3a:f7:f5:4a:56:a4:0e:ed:eb: 6a:cd:67:0c:c1:b4:32:13:51:45:4c:f9:2f:c6:cf:b1:15:d3: 98:85:ba:58:a2:a9:c0:9e:73:ac:f1:37:a2:03:85:d9:7b:d1: c1:44:9a:36:ba:dd:d5:23:9f:a5:e4:4c:c7:2a:b5:8d:f0:60: 2e:71:4c:90:3c:82:35:57:11:01:39:e0:cb:94:59:af:b6:32: 0e:d9:bb:27:64:a1:ab:4e:f5:3f:75:e6:b5:d4:bb:4a:94:a8: 89:e6:6f:20:9c:09:27:bf:6c:cf:da:71:e6:70:de:20:48:97: b2:0a:aa:3d:12:9f:e9:c7:1a:36:1b:5b:84:0e:56:17:c5:3e: b8:c8:5a:dd:cb:81:24:00:d7:47:7e:16:f1:9b:f3:46:d4:79: 72:49:fc:4f:1e:f3:d5:78:05:e0:23:d1:75:7c:df:84:42:9c: 38:a0:51:95:df:ee:cc:7c:77:be:d1:e5:25:d3:52:9d:7b:c1: 96:3c:71:4d:2c:7a:f0:44:87:22:c9:93:41:de:c7:27:b9:a8: 11:7c:41:60:d7:e1:8f:98:aa:d6:4f:65:39:29:c1:7d:cd:17: 7f:b7:6a:88 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEx2gYtaHU3n4du9KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDhiMTVhM2ItODhkMi00OGVlLWJmYmUtMWM0YzU5NzVlYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdp36nvGeCO09fQTuENEm3UMp6g+9jEnTeT9 4P23LXENqBlqJ14UpLVx4zZ+Wu+616SXGg3iyda/1/51dfm2a4V58p00Hju9LUP5 o3U1h9BJvJjxvAUrifbhd7/tOqcI0cIfNxJpzIwxZPTVCc0sRdLq+PT+y6S4gRq4 BCNa75uEoiJZ0aA5bwV19GSHS5atggd1i1p6J4L5iFJaykLAIPkKGtmspHNok7CB ZKPTSjdj/KGdkmgzejgiWDDtNNaQB6bzbjIhGPERO8SunR+YdNEjqGm/K5GbigXK alaiBAgaYsUKBZywWn1V3U7CKlijlf556duuea0JvCS8Yvn+iQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFMQGFw8hgNhJSIaFRYBRC/yYGi90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvNDNkM2UxNGMtZWY0YS0z MjgzLWJiNzktYmI3OGFjYzRjOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACZ AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAir8mRTBLUdErBg+sF94wRa3Hmb5OEyEWrxKjOvf1SlakDu3r as1nDMG0MhNRRUz5L8bPsRXTmIW6WKKpwJ5zrPE3ogOF2XvRwUSaNrrd1SOfpeRM xyq1jfBgLnFMkDyCNVcRATngy5RZr7YyDtm7J2Shq071P3XmtdS7SpSoieZvIJwJ J79sz9px5nDeIEiXsgqqPRKf6ccaNhtbhA5WF8U+uMha3cuBJADXR34W8ZvzRtR5 ckn8Tx7z1XgF4CPRdXzfhEKcOKBRld/uzHx3vtHlJdNSnXvBljxxTSx68ESHIsmT Qd7HJ7moEXxBYNfhj5iq1k9lOSnBfc0Xf7dqiA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:26 2026 by rpki-client