This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa File: 389a20f9-3cdc-387c-8a6b-5afb25917a53.roa (raw, json) Hash identifier: 39LJgP8qkW7W4Z6fQbPGYiYKXJLh2KQ5/9Q7Pa90gi4= Subject key identifier: 03:84:62:9F:41:0A:47:85:D5:98:60:C1:7B:66:2C:C2:57:8D:B7:84 Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f Certificate serial: 010D0C9F4328584C992DCC225562475670518710 Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa Signing time: Wed 21 Jan 2026 12:05:35 +0000 ROA not before: Wed 21 Jan 2026 12:05:35 +0000 ROA not after: Tue 21 Apr 2026 11:05:35 +0000 asID: 26286 IP address blocks: 2602:f689:10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:2d:cc:22:55:62:47:56:70:51:87:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f Validity Not Before: Jan 21 12:05:35 2026 GMT Not After : Apr 21 11:05:35 2026 GMT Subject: CN=b83b87b7-accd-4e2b-bcc9-c6473767a400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:59:77:ce:c9:05:c0:4f:07:1c:aa:79:63: 7f:66:7b:37:a4:fe:4c:5c:1e:74:48:a5:91:3c:fc: c0:44:8d:c6:a2:af:10:9a:84:0c:a2:37:ff:a2:bf: 5d:51:66:7e:fb:dc:ce:18:9b:9b:64:57:05:5a:1d: d6:61:bf:70:5a:65:57:a0:af:5f:02:71:91:7c:f1: 59:75:db:21:fe:32:7d:3e:a3:98:40:f7:46:7b:38: 27:62:a4:b5:a0:39:e5:82:65:9f:b2:e2:37:a3:53: 68:29:d6:d8:6c:76:82:39:4b:65:1b:57:10:5a:02: 32:7c:39:9a:16:67:74:dd:42:c6:2e:7c:88:b1:52: 07:55:80:7e:aa:87:5f:fa:71:f2:1e:a8:2d:a1:5f: 7d:7e:f4:6b:41:89:3b:84:57:3e:93:b9:11:2e:69: 4b:d6:9a:e8:8f:ba:b0:5c:53:98:14:81:7d:6b:54: bd:1a:b0:32:c7:07:68:53:ee:de:b3:c3:b1:07:64: 33:83:eb:13:47:fd:8d:26:8e:77:a6:07:47:24:11: 90:04:13:c3:57:f0:f2:d4:d3:5c:54:84:36:3b:2c: fc:62:00:6e:7b:f1:99:e8:64:d8:66:13:70:7c:64: 19:c4:be:10:3a:03:4e:e9:df:67:c6:9d:4e:05:92: 63:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:84:62:9F:41:0A:47:85:D5:98:60:C1:7B:66:2C:C2:57:8D:B7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl X509v3 Authority Key Identifier: keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer sbgp-ipAddrBlock: critical IPv6: 2602:f689:10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b6:7c:7d:84:60:36:2a:ca:4a:74:d9:3d:ea:0f:03:72:d2: 22:e7:71:15:d0:9d:09:74:6f:ac:a8:b4:4d:71:fb:e5:2d:62: ae:13:77:02:d0:b7:44:ff:f0:a6:e2:96:14:d7:aa:aa:96:d8: 31:ae:e7:31:df:a6:4d:52:cf:9a:1c:e9:67:b2:ec:b2:a6:f7: e1:5e:5b:1d:7d:40:0b:31:66:a0:60:74:5e:d2:27:17:6a:e0: b9:41:6f:61:15:b7:c9:0c:be:3a:a5:81:ae:81:76:4a:c2:86: 01:01:42:44:16:00:ca:3d:ba:0d:81:58:dc:d7:eb:ae:d7:d3: 18:f3:c6:02:3e:91:3c:f2:43:73:7a:50:5e:fd:fd:b7:d9:94: f4:0e:8f:5a:2a:3a:ec:26:c6:91:3a:fd:ce:68:d5:6f:17:64: c5:24:39:9b:ed:fe:ac:d4:cc:ce:70:cd:fb:6e:fa:a8:8c:94: 5a:8c:ba:e7:e7:07:c1:75:2e:22:6c:4b:90:00:d4:ae:8c:14: 89:02:ac:86:ee:0c:0b:3b:37:7b:1f:6c:37:9a:a9:e1:e8:e2: 89:08:76:5e:65:c8:1d:d2:09:84:d1:e9:bf:8f:52:f7:d4:ea: 03:77:6d:07:da:5f:7a:ce:74:c3:0c:b7:79:3d:60:35:a0:5e: 6c:bd:8a:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyZLcwiVWJHVnBRhxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk4MTE3ZjAtMDMwYy00ZmNhLThhN2YtYzM1MDE3ODMw ZjhmMB4XDTI2MDEyMTEyMDUzNVoXDTI2MDQyMTExMDUzNVowLzEtMCsGA1UEAxMk YjgzYjg3YjctYWNjZC00ZTJiLWJjYzktYzY0NzM3NjdhNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzVZd87JBcBPBxyqeWN/Zns3pP5MXB50SKWR PPzARI3Goq8QmoQMojf/or9dUWZ++9zOGJubZFcFWh3WYb9wWmVXoK9fAnGRfPFZ ddsh/jJ9PqOYQPdGezgnYqS1oDnlgmWfsuI3o1NoKdbYbHaCOUtlG1cQWgIyfDma Fmd03ULGLnyIsVIHVYB+qodf+nHyHqgtoV99fvRrQYk7hFc+k7kRLmlL1proj7qw XFOYFIF9a1S9GrAyxwdoU+7es8OxB2Qzg+sTR/2NJo53pgdHJBGQBBPDV/Dy1NNc VIQ2Oyz8YgBue/GZ6GTYZhNwfGQZxL4QOgNO6d9nxp1OBZJjdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAOEYp9BCkeF1ZhgwXtmLMJXjbeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgx MTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUwMTc4MzBmOGYvMzg5YTIwZjktM2NkYy0z ODdjLThhNmItNWFmYjI1OTE3YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4MTE3ZjAtMDMwYy00ZmNhLThh N2YtYzM1MDE3ODMwZjhmLzM5ODExN2YwLTAzMGMtNGZjYS04YTdmLWMzNTAxNzgz MGY4Zi5jcmwwHwYDVR0jBBgwFoAU0zqWn+U3hLo1c9gddq3vnpZd4cIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgxMTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUw MTc4MzBmOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL2iQAQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFm2fH2EYDYqykp02T3qDwNy0iLncRXQnQl0b6yotE1x++UtYq4T dwLQt0T/8KbilhTXqqqW2DGu5zHfpk1Sz5oc6Wey7LKm9+FeWx19QAsxZqBgdF7S Jxdq4LlBb2EVt8kMvjqlga6BdkrChgEBQkQWAMo9ug2BWNzX667X0xjzxgI+kTzy Q3N6UF79/bfZlPQOj1oqOuwmxpE6/c5o1W8XZMUkOZvt/qzUzM5wzftu+qiMlFqM uufnB8F1LiJsS5AA1K6MFIkCrIbuDAs7N3sfbDeaqeHo4okIdl5lyB3SCYTR6b+P UvfU6gN3bQfaX3rOdMMMt3k9YDWgXmy9iik= -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:43 2026 by rpki-client