This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa File: dd2a5a82-f542-399a-bf49-fb94c1347733.roa (raw, json) Hash identifier: n6wjD2nwMaVRhxWuFqcgl9u8x3L/bkJorhPkMfTXkYg= Subject key identifier: B8:B8:1F:67:25:67:5B:5C:63:93:23:20:E0:7F:A3:D3:37:52:14:CD Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A75C754FDA85D597491B80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 2607:f8b0:4014::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:5c:75:4f:da:85:d5:97:49:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=1e5a67ad-bdf8-4393-b1a0-99ac9fa51387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:ea:94:9c:f7:5c:a5:a4:16:06:fd:f0:71: 99:63:a0:01:44:cc:2a:9f:1d:c6:03:ad:6c:4c:14: a3:3e:d7:37:91:e7:29:28:44:c0:95:b0:ae:05:8c: 4e:39:99:31:e2:9c:1b:2b:fe:ce:d9:48:c8:ff:59: 0b:89:de:fe:07:a2:fe:cf:b4:bb:3b:33:20:77:de: ae:d0:e7:22:c0:f4:91:cf:40:84:e7:de:a4:27:02: a0:c2:c2:31:6f:df:83:75:72:6c:0c:9a:50:74:ad: 51:3f:2b:37:32:04:17:14:04:9c:b3:6d:57:43:97: d2:20:58:ec:ab:52:82:91:5c:61:4a:81:6c:f2:4f: ae:81:4e:0c:44:e5:ec:43:f6:9f:78:a7:d2:c4:2c: ab:0f:d5:4f:fc:a5:98:e6:53:09:8a:c5:85:35:b4: a0:55:81:60:2a:27:e8:c3:b3:b4:ee:3d:a5:8a:4b: e7:c1:6f:1c:9d:20:48:e0:8d:a9:d4:21:1e:57:52: f1:13:54:2e:4f:e4:53:22:da:30:25:a6:7a:ee:48: 70:e7:96:9c:ea:6a:6e:77:8b:48:e1:c2:56:9e:58: 53:32:e8:8f:d3:44:ca:dc:fb:7f:95:40:9b:4e:fc: 2e:0a:5d:43:28:32:ea:59:12:82:1d:a8:06:f6:88: 23:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B8:1F:67:25:67:5B:5C:63:93:23:20:E0:7F:A3:D3:37:52:14:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd2a5a82-f542-399a-bf49-fb94c1347733.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv6: 2607:f8b0:4014::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:7b:6e:59:ec:74:5d:b3:51:d9:4b:b1:cb:61:ac:29:71:ad: be:40:69:9f:a3:aa:08:5b:b5:a1:04:94:ff:32:2a:ca:1d:eb: 1b:17:b9:a5:10:ff:e9:a6:f7:02:50:04:50:e6:7d:ea:40:54: 56:d9:a4:79:7c:60:6b:eb:74:82:16:b6:ac:7a:89:8f:15:a0: 7f:39:c0:18:83:4d:b4:c3:fa:07:63:5e:b6:d4:8e:2c:ee:6c: f4:bc:47:62:75:19:ba:b1:e5:21:58:28:f1:43:b4:0b:3a:5c: 4d:9f:1c:9a:21:4d:fb:e2:22:16:1c:e5:b1:23:51:78:8f:a9: ff:61:0d:70:1d:29:f6:f7:e6:b9:d4:b3:21:2a:fb:78:01:8d: 21:e7:d2:8d:e0:4e:98:a2:ad:85:a0:46:a5:a5:f8:d2:c1:3e: 63:24:17:7b:90:81:db:07:a2:a8:63:64:ba:9d:5b:5b:07:7e: ab:88:d3:55:61:41:66:3e:70:d9:52:9f:4b:89:5d:fe:bc:ee: 17:b4:16:94:90:b9:88:5c:e7:8b:e8:a5:c1:97:66:72:cb:0c: 89:6d:5b:70:24:62:b5:fe:1c:28:56:a4:29:b2:55:d1:a1:de: 27:cd:22:31:ee:da:0b:32:73:8d:06:0f:85:6c:ad:86:b1:30: 09:82:ad:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExFp1x1T9qF1ZdJG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MWU1YTY3YWQtYmRmOC00MzkzLWIxYTAtOTlhYzlmYTUxMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyDqlJz3XKWkFgb98HGZY6ABRMwqnx3GA61s TBSjPtc3kecpKETAlbCuBYxOOZkx4pwbK/7O2UjI/1kLid7+B6L+z7S7OzMgd96u 0OciwPSRz0CE596kJwKgwsIxb9+DdXJsDJpQdK1RPys3MgQXFAScs21XQ5fSIFjs q1KCkVxhSoFs8k+ugU4MROXsQ/afeKfSxCyrD9VP/KWY5lMJisWFNbSgVYFgKifo w7O07j2likvnwW8cnSBI4I2p1CEeV1LxE1QuT+RTItowJaZ67khw55ac6mpud4tI 4cJWnlhTMuiP00TK3Pt/lUCbTvwuCl1DKDLqWRKCHagG9ogjYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLi4H2clZ1tcY5MjIOB/o9M3UhTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGQyYTVhODItZjU0Mi0z OTlhLWJmNDktZmI5NGMxMzQ3NzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgf4sEAU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABh7blnsdF2zUdlLscthrClxrb5AaZ+jqghbtaEElP8yKsod6xsX uaUQ/+mm9wJQBFDmfepAVFbZpHl8YGvrdIIWtqx6iY8VoH85wBiDTbTD+gdjXrbU jizubPS8R2J1Gbqx5SFYKPFDtAs6XE2fHJohTfviIhYc5bEjUXiPqf9hDXAdKfb3 5rnUsyEq+3gBjSHn0o3gTpiirYWgRqWl+NLBPmMkF3uQgdsHoqhjZLqdW1sHfquI 01VhQWY+cNlSn0uJXf687he0FpSQuYhc54vopcGXZnLLDIltW3AkYrX+HChWpCmy VdGh3ifNIjHu2gsyc40GD4VsrYaxMAmCrWY= -----END CERTIFICATE-----Generated at Sun Jan 25 22:36:32 2026 by rpki-client