This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa File: 1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa (raw, json) Hash identifier: Ee8MWztjauhNHCyYOsiagCKPk1W1JPAr/wGKDf8gf+Y= Subject key identifier: 01:85:69:CA:48:21:59:28:3A:37:15:E8:D8:CD:16:D2:B9:5D:9D:82 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584C8476EDABB4C7879764EEB980 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 396998 IP address blocks: 64.68.193.0/24 maxlen: 24 2620:49:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:ed:ab:b4:c7:87:97:64:ee:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=733cafed-2698-4177-bec5-4b92e43949ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7a:be:9b:81:d3:69:1d:51:55:09:7a:aa:8c: 5a:e1:54:21:db:d2:7b:7f:95:79:b0:a9:ba:4d:95: 2d:46:9a:a5:9b:27:b7:4c:14:55:c4:5a:fb:3c:da: ec:1d:13:cd:2d:92:20:79:57:36:85:54:f6:b2:88: 2f:c6:dc:17:bb:61:95:ba:17:7b:47:94:bd:9a:38: d8:5f:0d:70:92:2c:46:04:52:cf:d5:4c:40:f8:4e: 94:76:29:2c:bd:b9:ac:af:27:ba:e7:f2:0f:4d:0a: 5d:96:6c:1e:89:02:42:5c:07:e4:74:6c:c4:61:38: 4a:f5:1c:48:b0:2c:19:f8:3d:bb:55:19:c2:a9:e0: 73:6e:1c:8f:8a:20:15:b7:cf:63:ee:60:fd:43:f1: 76:4c:94:c6:c4:a5:ac:11:1e:40:f3:88:ce:8e:6d: 7e:82:6d:85:43:3c:c7:29:54:12:d5:f6:49:d0:94: 7b:af:05:6a:42:11:3a:86:6d:cc:86:7a:16:df:be: 37:53:ac:a5:ef:f6:0c:2d:e6:60:f4:20:30:fe:19: 7c:67:ad:df:fa:68:ea:23:b1:3d:a3:97:d7:b0:49: 59:ce:da:3f:ef:20:a6:d8:94:76:13:8f:52:0d:53: 12:14:ff:b6:b9:8b:b7:72:a4:05:dd:44:d7:f3:27: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:85:69:CA:48:21:59:28:3A:37:15:E8:D8:CD:16:D2:B9:5D:9D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/1a35dd1e-1d37-3d0a-abf1-a2f655deded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.193.0/24 IPv6: 2620:49:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:d9:c2:0f:c0:d6:fb:d8:97:8f:18:a8:ea:63:38:0b:41:87: 94:52:92:60:8a:14:e5:c8:94:9a:5e:02:ec:be:5a:d5:aa:17: 55:3d:15:47:7d:b2:64:b1:ea:43:78:1c:81:f5:8f:7d:41:07: c9:ec:8b:44:be:6a:ab:95:aa:d5:c1:c8:7d:d3:ed:87:01:2f: 88:e6:ba:80:f8:de:f2:ea:9d:2a:9b:32:04:80:b2:d0:30:95: 18:de:61:92:a9:5c:29:b5:bd:54:4a:74:ec:75:43:00:d5:e9: 22:ff:39:41:98:cc:5e:fe:90:b0:31:ae:d2:f3:bb:1e:0d:f8: ec:17:3a:08:96:30:d4:27:66:76:f4:de:90:3a:9a:0d:32:fe: 11:a3:22:6f:e8:f5:18:4e:0c:d3:e9:8b:19:d3:19:23:c2:5b: 3f:28:16:37:56:67:0f:37:cb:2b:e8:68:a0:8e:32:7d:67:c9: b1:79:27:e9:2a:fd:e3:9c:6e:66:cb:8a:55:be:e6:d4:9e:ec: 94:06:3f:de:3f:87:5f:3d:c5:1a:07:1d:40:b1:68:0e:ce:54: 1a:96:ba:1e:66:ed:01:f6:7d:0a:aa:21:15:3c:bd:1b:f3:b9: 42:8d:de:61:60:2a:53:81:c5:a1:bc:ff:3a:9e:c6:f1:c5:af: bb:d8:b9:90 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEyEdu2rtMeHl2TuuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk NzMzY2FmZWQtMjY5OC00MTc3LWJlYzUtNGI5MmU0Mzk0OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHq+m4HTaR1RVQl6qoxa4VQh29J7f5V5sKm6 TZUtRpqlmye3TBRVxFr7PNrsHRPNLZIgeVc2hVT2sogvxtwXu2GVuhd7R5S9mjjY Xw1wkixGBFLP1UxA+E6Udiksvbmsrye65/IPTQpdlmweiQJCXAfkdGzEYThK9RxI sCwZ+D27VRnCqeBzbhyPiiAVt89j7mD9Q/F2TJTGxKWsER5A84jOjm1+gm2FQzzH KVQS1fZJ0JR7rwVqQhE6hm3MhnoW3743U6yl7/YMLeZg9CAw/hl8Z63f+mjqI7E9 o5fXsElZzto/7yCm2JR2E49SDVMSFP+2uYu3cqQF3UTX8yc1ZQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAGFacpIIVkoOjcV6NjNFtK5XZ2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMWEzNWRkMWUtMWQzNy0z ZDBhLWFiZjEtYTJmNjU1ZGVkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETBMA8E AgACMAkDBwAmIABJAAIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdNnCD8DW+9iXjxio6mM4C0GHlFKSYIoU 5ciUml4C7L5a1aoXVT0VR32yZLHqQ3gcgfWPfUEHyeyLRL5qq5Wq1cHIfdPthwEv iOa6gPje8uqdKpsyBICy0DCVGN5hkqlcKbW9VEp07HVDANXpIv85QZjMXv6QsDGu 0vO7Hg347Bc6CJYw1CdmdvTekDqaDTL+EaMib+j1GE4M0+mLGdMZI8JbPygWN1Zn DzfLK+hooI4yfWfJsXkn6Sr945xuZsuKVb7m1J7slAY/3j+HXz3FGgcdQLFoDs5U Gpa6HmbtAfZ9CqohFTy9G/O5Qo3eYWAqU4HFobz/Op7G8cWvu9i5kA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:46 2026 by rpki-client