This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa File: 1ceb588f-5296-3bfd-a944-b17939ae58a4.roa (raw, json) Hash identifier: 51H1/TMAMB58EsTyAVWrn9bo7/h/2zarkTObEBPfZCM= Subject key identifier: C6:67:F6:2D:6C:65:8F:84:7B:6E:C5:4F:7D:D7:C4:82:65:C7:DD:48 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584C61915A9F74FFE01173128C80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 271 IP address blocks: 128.189.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5a:9f:74:ff:e0:11:73:12:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=d8abab5f-0b95-4c68-a096-cade13cdbe65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6d:d5:47:08:0e:83:45:6c:be:b6:b0:02:9a: ff:3a:bf:dc:ab:ae:3c:c8:bf:f2:65:08:0d:14:8b: da:dc:81:a8:83:79:03:78:c3:2b:a0:4d:12:c3:48: c3:dd:93:63:3d:66:f6:94:cd:e8:41:f1:49:43:fe: aa:ae:e9:a8:9d:83:32:bf:a8:b4:b9:69:10:1b:c1: 11:e8:2e:79:a5:b1:87:2c:27:01:97:4a:fd:d8:a1: 8b:f1:d2:3e:5a:51:9c:43:e1:25:22:8d:b2:7d:35: fb:29:eb:ce:6e:fd:4c:58:b6:69:14:a2:91:3e:a9: d5:9e:c4:d3:81:38:31:59:45:ba:f8:b2:f3:68:75: 7a:87:80:b3:c8:1e:c6:65:51:29:c7:eb:ed:a9:13: 70:fc:8e:02:9f:b7:49:71:ab:ff:3a:4d:64:8f:3d: 0f:c0:1f:62:0d:18:6c:e8:a3:c0:f5:3f:cf:70:7b: a5:15:b5:39:7c:ce:ad:89:d1:b6:0e:63:b4:a7:63: dd:c3:84:64:5c:63:c1:11:d3:be:d7:48:ea:43:96: cb:8a:18:ee:b1:23:98:f8:21:40:f6:a4:44:45:95: dd:ee:69:ba:cc:a2:86:64:8e:32:32:54:f8:ef:b4: 77:4e:5d:ad:49:b0:2f:1b:c9:45:17:d5:bd:9b:a0: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:F6:2D:6C:65:8F:84:7B:6E:C5:4F:7D:D7:C4:82:65:C7:DD:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/1ceb588f-5296-3bfd-a944-b17939ae58a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ab:ff:25:28:42:b6:e5:7f:7d:09:68:d5:54:b2:36:b9:d8: 58:c2:0b:dc:29:10:ab:c2:b1:f8:d6:83:4a:26:95:d8:13:91: 4d:05:a5:c5:7f:6e:0f:ad:d4:09:b0:37:6f:0a:64:fc:99:3e: aa:6f:d1:7d:82:c5:54:b3:54:0e:2f:5d:18:89:9b:9e:1b:aa: 60:ed:21:61:22:a3:5e:39:5e:71:b6:f4:1b:db:7c:d2:b1:85: 74:9b:71:65:ab:9c:69:f4:06:e0:17:dc:a1:f4:32:35:83:18: 4c:06:3a:84:55:d2:10:79:99:18:8a:a5:d5:bc:c1:68:f2:a2: 6b:eb:9f:d5:13:4a:45:75:5d:a9:2c:5c:9d:15:36:bd:49:03: c3:be:6d:84:85:0a:15:d9:16:5e:99:87:14:c9:3c:dd:c5:3c: 95:71:19:00:e9:86:1c:1a:39:1f:ab:f6:48:e9:7b:d9:54:4b: 59:4e:95:ac:57:8c:1c:e5:7f:ad:6c:50:69:93:a5:3d:00:e8: 15:e9:8f:39:4a:08:f3:a6:8f:27:52:20:22:fe:26:9d:de:83: 36:da:1e:bc:85:e3:5b:cc:ea:42:92:35:b2:a1:47:6b:88:06: 26:cf:e9:48:4a:06:45:13:b0:7d:17:95:10:f1:18:f8:3c:1a: 9b:6a:6e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkVqfdP/gEXMSjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk ZDhhYmFiNWYtMGI5NS00YzY4LWEwOTYtY2FkZTEzY2RiZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW3VRwgOg0VsvrawApr/Or/cq648yL/yZQgN FIva3IGog3kDeMMroE0Sw0jD3ZNjPWb2lM3oQfFJQ/6qrumonYMyv6i0uWkQG8ER 6C55pbGHLCcBl0r92KGL8dI+WlGcQ+ElIo2yfTX7KevObv1MWLZpFKKRPqnVnsTT gTgxWUW6+LLzaHV6h4CzyB7GZVEpx+vtqRNw/I4Cn7dJcav/Ok1kjz0PwB9iDRhs 6KPA9T/PcHulFbU5fM6tidG2DmO0p2Pdw4RkXGPBEdO+10jqQ5bLihjusSOY+CFA 9qRERZXd7mm6zKKGZI4yMlT477R3Tl2tSbAvG8lFF9W9m6DKpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZn9i1sZY+Ee27FT33XxIJlx91IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMWNlYjU4OGYtNTI5Ni0z YmZkLWE5NDQtYjE3OTM5YWU1OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgL0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGr/yUoQrblf30JaNVUsja52FjCC9wpEKvCsfjWg0omldgTkU0FpcV/ bg+t1AmwN28KZPyZPqpv0X2CxVSzVA4vXRiJm54bqmDtIWEio145XnG29BvbfNKx hXSbcWWrnGn0BuAX3KH0MjWDGEwGOoRV0hB5mRiKpdW8wWjyomvrn9UTSkV1Xaks XJ0VNr1JA8O+bYSFChXZFl6ZhxTJPN3FPJVxGQDphhwaOR+r9kjpe9lUS1lOlaxX jBzlf61sUGmTpT0A6BXpjzlKCPOmjydSICL+Jp3egzbaHryF41vM6kKSNbKhR2uI BibP6UhKBkUTsH0XlRDxGPg8GptqbpU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:55:59 2026 by rpki-client