This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa File: afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa (raw, json) Hash identifier: jbdFp5rej7Lrnso2EVBf4DEuHe8a3J7u2+r9Q+RnEyo= Subject key identifier: 70:7C:14:D0:01:39:60:B7:A8:47:70:F5:6C:4F:4A:B0:A7:10:B5:69 Certificate issuer: /CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Certificate serial: 010D0C9F4328584C8476DC3F4957C366E2DA4E80 Authority key identifier: 43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 30110 IP address blocks: 198.59.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:dc:3f:49:57:c3:66:e2:da:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4bcfc8-e6e7-4500-b985-5cb859f88fec Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=b678dabf-687e-46cd-975a-00cd2d294587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e4:b5:a6:6c:9a:32:81:53:6a:88:be:0d:f7: 12:f6:b2:78:98:f9:1c:72:50:f5:12:7d:c1:25:b0: 81:1f:c4:9c:6c:71:75:3b:04:3a:96:67:2e:7d:ed: 5b:e6:b6:4f:ba:19:7b:ec:dc:40:14:30:be:ce:21: 14:e1:c8:b9:d3:8c:3a:18:6e:3b:e1:fb:d7:de:3e: 20:c3:a8:09:46:d8:c1:97:30:e4:56:1e:a5:82:63: dd:96:7e:24:49:91:a2:c9:d8:da:cc:fb:e2:b7:41: b2:e8:61:97:0d:a6:69:41:eb:5e:e0:73:5d:24:78: a0:90:96:a7:72:3b:d0:25:28:12:e9:54:58:6e:0f: b2:0e:42:47:0b:b8:3a:36:17:7a:cd:53:30:3b:69: 82:87:64:c8:42:95:e5:94:05:5c:39:49:bf:d3:8a: 3c:ef:1c:c3:a5:15:d5:b7:96:59:24:45:ca:0c:27: 4a:3d:0f:2b:0a:c5:d7:aa:ac:a9:58:71:82:a1:21: 04:d1:87:98:a1:ef:76:18:58:b3:44:f4:47:fd:11: dc:71:bf:54:bd:1a:92:43:f8:e1:a9:23:b5:d2:f9: db:a5:2c:6b:4e:3c:6c:5f:22:3f:f8:3e:d1:fd:e0: 27:82:7a:18:0b:c9:e3:cc:11:b8:5b:ee:af:a5:17: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:7C:14:D0:01:39:60:B7:A8:47:70:F5:6C:4F:4A:B0:A7:10:B5:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/afe66f95-be4a-36f9-b41a-d8a2fd5db157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.crl X509v3 Authority Key Identifier: keyid:43:80:2B:58:E9:27:0F:D7:36:12:60:FF:0C:06:3D:38:94:E4:09:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c4bcfc8-e6e7-4500-b985-5cb859f88fec.cer sbgp-ipAddrBlock: critical IPv4: 198.59.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a4:df:57:8a:a6:c9:cf:d6:c3:2b:98:e1:4f:36:f0:58:4b: be:00:f4:e8:f1:95:42:52:c8:d9:c0:e0:b3:d8:a3:9a:a9:af: 54:cf:d8:70:fb:fa:c0:86:7b:f1:67:1a:d6:bf:30:bf:2c:ea: 3c:2f:c4:51:37:0e:b6:b3:7d:b2:c3:c0:13:55:7e:9c:12:cf: 0c:af:e1:e7:71:e2:ab:e3:ff:04:8d:4c:cd:fc:1e:7b:0a:ab: 03:37:7b:12:73:55:3e:05:57:7e:d0:02:29:ec:6a:aa:d7:8a: 24:59:29:bc:c9:52:26:4e:89:c1:d2:f0:c5:ae:25:6e:10:64: 97:6f:e6:51:7b:5b:75:67:6d:66:c8:a1:e6:87:7c:0e:a3:4a: 14:88:38:46:bc:5e:bd:5c:59:a2:a7:e3:54:d6:f0:b6:84:a1: 14:45:52:be:a5:cc:88:79:7e:71:8b:c0:83:94:30:43:47:30: 0a:51:95:8b:8c:22:95:06:6a:2b:5f:f7:db:65:5f:b0:f8:b8: 08:3c:70:da:b1:88:89:8a:e2:d3:17:76:5f:08:17:a7:09:20: 36:b4:0e:cc:a7:56:9d:19:27:6a:bc:ff:3d:5c:3b:1b:2b:bd: ea:d3:b9:ba:6d:ea:a0:1b:d2:19:a5:6d:77:55:d5:c8:c1:1d: 46:5f:63:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdtw/SVfDZuLaToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM0YmNmYzgtZTZlNy00NTAwLWI5ODUtNWNiODU5Zjg4 ZmVjMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YjY3OGRhYmYtNjg3ZS00NmNkLTk3NWEtMDBjZDJkMjk0NTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OS1pmyaMoFTaoi+DfcS9rJ4mPkcclD1En3B JbCBH8ScbHF1OwQ6lmcufe1b5rZPuhl77NxAFDC+ziEU4ci504w6GG474fvX3j4g w6gJRtjBlzDkVh6lgmPdln4kSZGiydjazPvit0Gy6GGXDaZpQete4HNdJHigkJan cjvQJSgS6VRYbg+yDkJHC7g6Nhd6zVMwO2mCh2TIQpXllAVcOUm/04o87xzDpRXV t5ZZJEXKDCdKPQ8rCsXXqqypWHGCoSEE0YeYoe92GFizRPRH/RHccb9UvRqSQ/jh qSO10vnbpSxrTjxsXyI/+D7R/eAngnoYC8njzBG4W+6vpRev9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB8FNABOWC3qEdw9WxPSrCnELVpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRi Y2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4NTlmODhmZWMvYWZlNjZmOTUtYmU0YS0z NmY5LWI0MWEtZDhhMmZkNWRiMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM0YmNmYzgtZTZlNy00NTAwLWI5 ODUtNWNiODU5Zjg4ZmVjLzBjNGJjZmM4LWU2ZTctNDUwMC1iOTg1LTVjYjg1OWY4 OGZlYy5jcmwwHwYDVR0jBBgwFoAUQ4ArWOknD9c2EmD/DAY9OJTkCZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzRiY2ZjOC1lNmU3LTQ1MDAtYjk4NS01Y2I4 NTlmODhmZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxjuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+k31eKpsnP1sMrmOFPNvBYS74A9OjxlUJSyNnA4LPYo5qpr1TP2HD7 +sCGe/FnGta/ML8s6jwvxFE3DrazfbLDwBNVfpwSzwyv4edx4qvj/wSNTM38HnsK qwM3exJzVT4FV37QAinsaqrXiiRZKbzJUiZOicHS8MWuJW4QZJdv5lF7W3VnbWbI oeaHfA6jShSIOEa8Xr1cWaKn41TW8LaEoRRFUr6lzIh5fnGLwIOUMENHMApRlYuM IpUGaitf99tlX7D4uAg8cNqxiImK4tMXdl8IF6cJIDa0DsynVp0ZJ2q8/z1cOxsr verTubpt6qAb0hmlbXdV1cjBHUZfYzE= -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:19 2026 by rpki-client