This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa File: 85985089-2f5a-32ff-85ee-dc5151c11388.roa (raw, json) Hash identifier: lRGS8M1lrn/6LuGbkPUmAC1Od+k7RY+jeKc6XGh0zFk= Subject key identifier: AC:1C:1D:4D:3B:DB:C4:01:A9:43:7C:07:FB:49:86:32:39:AE:B7:6F Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584C794C6BCB1EE9E2A54988BC00 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 135069 IP address blocks: 2001:470:1d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:6b:cb:1e:e9:e2:a5:49:88:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=f9cea3c5-a77a-41bc-b622-14342289f500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:49:3d:fd:f3:bb:10:44:f5:b6:c5:3f:15:4e: 69:b6:f2:10:46:fd:10:1e:d5:42:54:9f:55:e6:e4: 12:dd:b1:bf:c5:4d:15:43:c2:0b:d6:d4:57:f3:83: 62:83:39:28:60:0a:74:e7:19:68:2e:f2:28:cb:44: 0d:2a:3d:68:4c:b1:42:0e:cb:d3:9e:c4:da:f5:18: e3:97:8b:4d:30:b7:27:b1:a5:ee:d5:54:cc:9f:39: 9f:08:1e:aa:69:34:94:ff:fe:8c:c9:42:8f:7c:0f: 53:8c:65:4f:49:23:0f:65:3d:c4:9f:11:b6:7f:a6: 6a:4d:95:6a:6e:70:fb:3b:ea:81:e5:07:14:cd:f7: 74:a6:83:43:5b:b1:1a:f4:f6:cd:a5:a5:83:25:6b: 89:23:fa:77:c4:5f:5b:6c:dc:10:16:ed:a0:28:49: fe:8b:c7:51:71:a7:a5:7e:64:71:ff:94:39:d0:07: 24:3f:21:bd:5c:8a:c4:a5:1e:e4:14:8b:84:46:ee: e1:5d:e2:bf:9d:9c:cb:57:cc:68:53:0a:12:96:a9: 45:44:53:f0:2b:13:3e:35:3b:45:0f:05:20:3a:be: 35:12:e2:14:fc:c6:26:1f:cc:c4:13:71:bb:4c:4a: 9d:03:0f:49:b2:a4:d0:79:12:4a:e5:19:2c:a5:5f: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:1D:4D:3B:DB:C4:01:A9:43:7C:07:FB:49:86:32:39:AE:B7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/85985089-2f5a-32ff-85ee-dc5151c11388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:1d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:2e:ad:bf:30:8c:a9:0e:3a:50:51:9b:bd:60:7e:53:b6:c2: e3:7f:0f:eb:83:9a:c2:fc:8d:e9:c0:44:09:51:55:3d:12:43: bc:89:1c:b7:f3:6e:53:91:9e:1b:3e:b7:6a:1e:c8:37:65:e5: 71:d5:5b:90:48:60:46:52:e6:f6:04:4e:55:1c:57:fc:b2:ce: bf:16:98:69:1e:db:86:17:e7:bb:a2:9a:49:bc:ce:5a:0e:7b: 82:87:0d:aa:da:36:0a:e4:1f:b3:60:72:0c:61:e7:f1:60:cd: d8:f3:c2:2d:6b:2a:74:f5:6e:5d:12:00:97:6f:d7:37:af:85: 88:1a:72:b4:d0:76:6e:f8:fa:f4:84:41:b0:d8:5a:a1:b4:cf: 8d:b2:a5:3d:0f:78:b0:79:aa:24:3f:17:28:27:92:c9:80:93: 67:be:2a:dd:e9:6d:a6:af:75:dd:05:89:a7:de:a7:3b:80:91: b7:e0:b7:68:fc:f0:2b:47:06:b6:25:b6:e9:de:8e:77:2d:38: 9f:81:97:dc:19:2f:54:bb:b3:da:52:2d:3e:17:d6:b1:ee:2d: 2d:ed:91:37:16:24:77:9d:f7:d3:c1:25:6f:1e:e1:d2:78:f9: 7e:a9:d2:73:aa:bf:04:a6:7b:ee:35:1f:7b:92:46:63:48:3c: d5:27:c7:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TGvLHunipUmIvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjljZWEzYzUtYTc3YS00MWJjLWI2MjItMTQzNDIyODlmNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkk9/fO7EET1tsU/FU5ptvIQRv0QHtVCVJ9V 5uQS3bG/xU0VQ8IL1tRX84NigzkoYAp05xloLvIoy0QNKj1oTLFCDsvTnsTa9Rjj l4tNMLcnsaXu1VTMnzmfCB6qaTSU//6MyUKPfA9TjGVPSSMPZT3EnxG2f6ZqTZVq bnD7O+qB5QcUzfd0poNDW7Ea9PbNpaWDJWuJI/p3xF9bbNwQFu2gKEn+i8dRcael fmRx/5Q50AckPyG9XIrEpR7kFIuERu7hXeK/nZzLV8xoUwoSlqlFRFPwKxM+NTtF DwUgOr41EuIU/MYmH8zEE3G7TEqdAw9JsqTQeRJK5RkspV8nKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKwcHU0728QBqUN8B/tJhjI5rrdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvODU5ODUwODktMmY1YS0z MmZmLTg1ZWUtZGM1MTUxYzExMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIsurb8wjKkOOlBRm71gflO2wuN/D+uDmsL8jenARAlRVT0SQ7yJ HLfzblORnhs+t2oeyDdl5XHVW5BIYEZS5vYETlUcV/yyzr8WmGke24YX57uimkm8 zloOe4KHDaraNgrkH7Ngcgxh5/Fgzdjzwi1rKnT1bl0SAJdv1zevhYgacrTQdm74 +vSEQbDYWqG0z42ypT0PeLB5qiQ/FygnksmAk2e+Kt3pbaavdd0FiafepzuAkbfg t2j88CtHBrYltunejnctOJ+Bl9wZL1S7s9pSLT4X1rHuLS3tkTcWJHed99PBJW8e 4dJ4+X6p0nOqvwSme+41H3uSRmNIPNUnx7o= -----END CERTIFICATE-----Generated at Sun Jan 25 12:36:22 2026 by rpki-client