This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa
File: cdfb66e4-27c6-35c1-8af5-d00d02307131.roa (raw, json)
Hash identifier: XnKo5VLkEZKADMCgkcJ5W+NnjeoYIvATrvDQeGH6OVc=
Subject key identifier: 85:3C:4E:B0:88:4A:0A:94:A0:44:3A:D2:02:CE:6D:14:B3:CA:49:C7
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584C794C69ED02ACBC74F9A56500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 398357
IP address blocks: 2001:470:1ac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Jan 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:69:ed:02:ac:bc:74:f9:a5:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=5aaef299-bb34-4369-9d15-a3101b6091d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:b0:d5:b3:33:cc:20:73:75:7b:56:00:81:
68:f9:7a:a8:f1:f1:43:b1:0a:96:05:46:78:c2:fb:
dc:47:06:4b:53:bf:cf:cf:fd:77:e7:cd:e8:35:bd:
4b:1c:66:1f:b8:08:b5:bd:e0:01:0f:cd:f2:93:20:
56:a4:8a:73:2c:7c:25:62:24:68:ea:85:a2:ce:39:
fc:9a:cb:df:30:aa:5b:18:cb:41:a1:e4:28:77:d6:
73:96:97:3e:18:0a:df:3e:a7:82:93:45:ee:2e:bd:
84:fa:3d:5c:0f:39:91:5d:37:f1:fd:57:9e:0c:7e:
32:1a:1f:10:10:2f:ff:4f:62:5b:00:55:0a:45:a4:
d9:c9:6b:e9:bb:68:69:5c:ac:b4:61:4d:b0:d5:f5:
c3:66:a8:ec:a8:4e:3a:01:ff:79:43:68:6a:68:a5:
99:38:e1:51:14:b4:1e:07:c1:84:4b:af:79:50:31:
84:cf:8d:e3:81:80:24:c6:a6:96:40:16:49:37:bf:
6f:26:71:c9:40:bb:f6:a7:b9:1d:41:2c:62:aa:99:
a0:0d:14:26:fc:a0:e4:3f:22:fe:2b:32:53:53:2b:
b2:91:3f:8c:37:e8:ab:b4:32:61:e4:03:5f:fb:ad:
5f:0b:91:a8:38:88:bb:62:77:15:8c:c5:c3:b1:5a:
ac:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:4E:B0:88:4A:0A:94:A0:44:3A:D2:02:CE:6D:14:B3:CA:49:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cdfb66e4-27c6-35c1-8af5-d00d02307131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:470:1ac::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:f9:a8:82:0e:99:ad:e7:8c:6d:c2:09:a3:d4:74:11:f6:79:
e0:4a:14:93:a3:30:19:01:00:bf:bf:da:71:14:54:a2:ac:df:
43:47:76:d3:26:79:72:8b:7e:05:d1:09:55:2f:69:65:c7:50:
7b:b8:28:e1:52:78:63:56:c2:65:0f:eb:9b:21:e7:5e:2d:cb:
cf:df:1f:a5:57:af:6e:5a:85:19:50:05:d9:10:68:70:09:ed:
09:09:7f:fc:03:90:3a:8b:a3:71:f7:03:fe:53:13:46:d1:da:
da:38:11:de:b1:c6:9c:db:44:94:9f:71:b5:eb:c3:53:ef:15:
5c:7c:28:4a:b9:f4:a4:63:55:e2:2e:eb:3c:42:09:02:b3:48:
0d:1c:de:a2:21:c1:87:1c:1c:e8:fa:8b:42:4a:12:71:80:66:
25:44:1a:cb:c5:e3:f0:84:e1:b5:fd:66:97:6e:08:d9:4c:03:
42:4d:41:21:d0:50:2f:bc:7f:12:38:82:66:62:33:20:24:a7:
8a:23:e1:78:e4:2f:f2:fe:c6:2e:34:5b:e9:ac:04:37:06:ee:
ca:43:73:8a:10:b4:9a:7a:4b:8b:ae:b9:f2:a6:b4:5d:eb:af:
57:18:23:a3:90:a7:48:f5:19:54:e0:72:68:9c:da:33:a2:ea:
16:11:59:53
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEx5TGntAqy8dPmlZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk
NWFhZWYyOTktYmIzNC00MzY5LTlkMTUtYTMxMDFiNjA5MWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ruw1bMzzCBzdXtWAIFo+Xqo8fFDsQqWBUZ4
wvvcRwZLU7/Pz/13583oNb1LHGYfuAi1veABD83ykyBWpIpzLHwlYiRo6oWizjn8
msvfMKpbGMtBoeQod9Zzlpc+GArfPqeCk0XuLr2E+j1cDzmRXTfx/VeeDH4yGh8Q
EC//T2JbAFUKRaTZyWvpu2hpXKy0YU2w1fXDZqjsqE46Af95Q2hqaKWZOOFRFLQe
B8GES695UDGEz43jgYAkxqaWQBZJN79vJnHJQLv2p7kdQSxiqpmgDRQm/KDkPyL+
KzJTUyuykT+MN+irtDJh5ANf+61fC5GoOIi7YncVjMXDsVqs9QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIU8TrCISgqUoEQ60gLObRSzyknHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvY2RmYjY2ZTQtMjdjNi0z
NWMxLThhZjUtZDAwZDAyMzA3MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGs
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEz5qIIOma3njG3CCaPUdBH2eeBKFJOjMBkBAL+/2nEUVKKs30NH
dtMmeXKLfgXRCVUvaWXHUHu4KOFSeGNWwmUP65sh514ty8/fH6VXr25ahRlQBdkQ
aHAJ7QkJf/wDkDqLo3H3A/5TE0bR2to4Ed6xxpzbRJSfcbXrw1PvFVx8KEq59KRj
VeIu6zxCCQKzSA0c3qIhwYccHOj6i0JKEnGAZiVEGsvF4/CE4bX9ZpduCNlMA0JN
QSHQUC+8fxI4gmZiMyAkp4oj4XjkL/L+xi40W+msBDcG7spDc4oQtJp6S4uuufKm
tF3rr1cYI6OQp0j1GVTgcmic2jOi6hYRWVM=
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:01:59 2026 by rpki-client