This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa File: a298af95-2ee0-38a9-a1e4-b40b04c90319.roa (raw, json) Hash identifier: vO4pHmusXcAChmR+vh1UKYNswvnKyQpB1FYgFPZ/m0g= Subject key identifier: D9:86:A8:BB:21:EE:F6:4C:02:4A:41:58:0A:90:2F:3F:28:00:07:EA Certificate issuer: /CN=2ac961ff-f406-4f80-b06d-e1284358815a Certificate serial: 010D0C9F4328584C751F8A2494D7D314794A4A80 Authority key identifier: F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 11096 IP address blocks: 35.128.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1f:8a:24:94:d7:d3:14:79:4a:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac961ff-f406-4f80-b06d-e1284358815a Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=68bdf8ef-c43d-423f-89b1-7679be5b835e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d0:3c:51:18:cd:b4:e1:66:89:f7:5f:85:68: 49:57:d2:16:9e:81:ea:96:51:85:0b:a9:44:20:1c: b5:50:c1:26:b1:96:7f:18:5f:2f:b7:59:85:e0:46: ee:fe:5c:31:fa:a0:65:49:6c:89:8f:89:8b:6a:08: cb:47:83:9e:6e:70:c4:60:85:cc:a6:cb:f2:f9:0c: 89:c2:2f:58:79:d9:af:ba:ee:4b:97:df:80:89:af: 63:aa:a9:75:60:f3:5d:ed:b2:48:a9:5e:0b:e6:6c: ae:d3:91:17:c5:16:e1:3e:3f:cc:76:c7:30:5a:02: 5c:0e:c6:f2:bc:c9:61:bb:3a:c2:da:46:d1:f3:7c: ee:82:f0:15:88:4c:46:14:4c:a7:b6:a7:51:21:ec: f9:55:50:6a:aa:17:a9:a3:79:02:d7:25:ff:14:f9: cb:13:69:7b:46:c9:7a:8d:37:4d:0d:63:ff:f6:49: 58:56:11:01:de:89:fe:6d:8d:47:8f:13:77:6e:4f: a2:14:1c:ce:47:33:ae:eb:04:b9:8e:9b:11:b0:df: 60:1b:70:e8:c6:bd:ca:19:3e:bb:c1:39:18:77:8d: e0:14:a4:b7:03:82:82:66:d2:ce:4b:95:9c:1c:6e: bb:05:aa:58:10:d3:b9:3c:10:ef:77:b0:51:0b:05: d1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:86:A8:BB:21:EE:F6:4C:02:4A:41:58:0A:90:2F:3F:28:00:07:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/a298af95-2ee0-38a9-a1e4-b40b04c90319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a/2ac961ff-f406-4f80-b06d-e1284358815a.crl X509v3 Authority Key Identifier: keyid:F1:8B:7A:5B:F8:87:E4:DB:31:6B:FC:B1:6D:1A:67:DE:31:B5:7C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ac961ff-f406-4f80-b06d-e1284358815a.cer sbgp-ipAddrBlock: critical IPv4: 35.128.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:25:da:23:4d:6e:9d:e0:8d:55:52:e7:21:5c:49:82:8d:3c: ac:68:b2:7e:9f:8c:18:c9:ad:ec:73:5c:47:cc:8a:eb:6c:5c: 7b:da:50:85:cf:c9:28:05:04:14:ca:e4:8e:b1:7e:3d:c3:4e: 77:e9:0a:ed:29:98:6e:75:68:01:8d:85:1b:78:3b:93:2e:6f: d8:39:e3:62:d7:23:57:d2:fd:6e:b1:38:ba:74:06:1e:ae:12: 05:b2:b3:bb:4c:e4:38:78:86:e4:76:e3:41:6b:5d:2a:1d:10: 00:e1:66:29:69:db:23:4b:3e:83:18:ac:53:28:41:a8:cc:36: b9:46:d9:60:66:5b:0c:ef:b9:01:10:05:d9:c6:c7:f4:a7:b5: ea:a2:0e:95:41:b9:6a:61:dc:d9:6d:0d:6f:69:85:d0:12:c9: 9c:80:36:dd:31:3a:37:d7:52:78:1f:6e:58:98:7e:87:08:0b: 78:21:ed:09:4e:99:c8:c1:4d:07:14:90:d4:0b:09:c6:fa:5f: 3c:5e:60:5e:00:94:2b:b5:ca:16:21:59:2b:d3:de:dd:c5:d1: 73:4b:d8:cc:81:36:3c:df:6c:55:00:da:05:8f:42:b6:d0:4a: 6c:12:15:4b:1d:d5:08:bc:1b:dc:1f:49:5c:4a:27:b8:87:30: d9:cb:ba:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1H4oklNfTFHlKSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFjOTYxZmYtZjQwNi00ZjgwLWIwNmQtZTEyODQzNTg4 MTVhMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk NjhiZGY4ZWYtYzQzZC00MjNmLTg5YjEtNzY3OWJlNWI4MzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9A8URjNtOFmifdfhWhJV9IWnoHqllGFC6lE IBy1UMEmsZZ/GF8vt1mF4Ebu/lwx+qBlSWyJj4mLagjLR4OebnDEYIXMpsvy+QyJ wi9Yedmvuu5Ll9+Aia9jqql1YPNd7bJIqV4L5myu05EXxRbhPj/MdscwWgJcDsby vMlhuzrC2kbR83zugvAViExGFEyntqdRIez5VVBqqhepo3kC1yX/FPnLE2l7Rsl6 jTdNDWP/9klYVhEB3on+bY1HjxN3bk+iFBzORzOu6wS5jpsRsN9gG3Doxr3KGT67 wTkYd43gFKS3A4KCZtLOS5WcHG67BapYENO5PBDvd7BRCwXR2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmGqLsh7vZMAkpBWAqQLz8oAAfqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5 NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4NDM1ODgxNWEvYTI5OGFmOTUtMmVlMC0z OGE5LWExZTQtYjQwYjA0YzkwMzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmFjOTYxZmYtZjQwNi00ZjgwLWIw NmQtZTEyODQzNTg4MTVhLzJhYzk2MWZmLWY0MDYtNGY4MC1iMDZkLWUxMjg0MzU4 ODE1YS5jcmwwHwYDVR0jBBgwFoAU8Yt6W/iH5Nsxa/yxbRpn3jG1fJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYWM5NjFmZi1mNDA2LTRmODAtYjA2ZC1lMTI4 NDM1ODgxNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAI4DDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABol2iNNbp3gjVVS5yFcSYKNPKxosn6fjBjJrexzXEfMiutsXHvaUIXP ySgFBBTK5I6xfj3DTnfpCu0pmG51aAGNhRt4O5Mub9g542LXI1fS/W6xOLp0Bh6u EgWys7tM5Dh4huR240FrXSodEADhZilp2yNLPoMYrFMoQajMNrlG2WBmWwzvuQEQ BdnGx/SnteqiDpVBuWph3NltDW9phdASyZyANt0xOjfXUngfbliYfocIC3gh7QlO mcjBTQcUkNQLCcb6XzxeYF4AlCu1yhYhWSvT3t3F0XNL2MyBNjzfbFUA2gWPQrbQ SmwSFUsd1Qi8G9wfSVxKJ7iHMNnLuqk= -----END CERTIFICATE-----Generated at Sun Jan 25 16:03:11 2026 by rpki-client