This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa File: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (raw, json) Hash identifier: Od/KSU0Ftyeu4BCWVzoNXjPc7H4GozDPw8k3dzRhYDg= Subject key identifier: C0:7B:C5:3A:50:82:C8:F3:64:1A:7E:6F:96:79:BD:1B:C7:7E:84:84 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584C85DC222C1C80F7BD3384B620 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa Signing time: Wed 14 Jan 2026 14:00:38 +0000 ROA not before: Wed 14 Jan 2026 14:00:38 +0000 ROA not after: Tue 14 Apr 2026 13:00:38 +0000 asID: 3359 IP address blocks: 129.128.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:85:dc:22:2c:1c:80:f7:bd:33:84:b6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jan 14 14:00:38 2026 GMT Not After : Apr 14 13:00:38 2026 GMT Subject: CN=e2a39298-9d9c-48eb-95ae-d7fc054788b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:dd:4c:72:1d:72:ae:22:3b:16:97:32:d6:07: 11:82:a2:00:88:b9:ac:9a:2f:98:af:66:48:a1:7c: 71:ab:37:41:1f:70:18:63:de:91:40:a0:37:26:24: 6a:47:ef:9e:88:18:84:26:d0:57:d0:25:21:d6:87: f7:bb:f6:75:1f:db:e2:71:44:aa:d5:f7:40:8a:14: d6:73:3f:2e:a0:68:e1:f1:e5:06:ad:a4:33:3d:d4: ec:14:bd:e9:48:84:e7:f0:b7:30:97:8d:a0:6b:ce: f3:af:0a:d7:02:2d:80:be:ca:2f:0f:79:43:8e:08: 74:b1:96:27:3a:da:57:c7:8a:2f:d4:49:f7:36:ea: 46:89:5d:7a:0b:08:1d:c9:ba:75:9a:73:68:56:61: 5a:d0:8e:f1:f3:c8:d2:4d:9c:da:ab:8e:c4:e7:00: c2:84:b4:31:83:f8:27:79:10:d9:c9:fe:a2:e6:92: 1b:34:b0:cb:4d:85:e8:03:0b:0b:af:91:7e:8d:79: 0e:76:09:1a:65:60:fd:a6:d1:c3:b8:43:c4:8d:ab: 0d:af:ec:78:37:de:1f:f1:f1:0a:c1:78:a5:8a:35: 20:57:76:ed:b9:d3:95:74:46:56:d0:18:3b:f9:36: 7e:15:db:84:4a:07:0a:73:ef:b6:71:8d:1e:60:e8: 35:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7B:C5:3A:50:82:C8:F3:64:1A:7E:6F:96:79:BD:1B:C7:7E:84:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/84a820e8-2494-3391-a8ed-9f54f9e78765.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 129.128.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:57:bf:28:c9:98:a1:42:e1:7b:32:8f:d5:e3:de:a7:04: 55:07:63:d7:b9:cd:2f:5b:0f:3f:9f:85:23:f3:ce:4d:7f:5a: 71:4c:a1:0b:a3:42:09:e3:f4:c1:a0:cc:92:47:af:33:32:e7: ff:d8:16:1b:ab:a9:b6:a8:b0:33:56:02:ab:78:5e:31:a5:de: 62:2b:bb:7e:35:57:32:d2:1a:b7:fb:79:9a:7b:96:1f:2f:5b: f2:8a:e6:20:68:9d:60:c2:f0:1a:ac:2a:36:cc:d7:05:c1:81: 13:1e:e3:1e:f0:ba:5a:39:3f:1f:33:91:ae:30:88:d8:ea:fa: 04:2d:fb:4b:39:9b:20:85:d6:5b:32:30:2b:39:02:ac:fc:c2: 4c:5e:95:39:25:0b:1b:f6:2b:cf:29:e1:58:d6:f1:d7:4a:55: 86:8f:bc:b2:fb:04:03:fd:c9:5f:53:0e:8a:4b:26:da:73:41: 0e:af:5b:a3:5f:48:23:c5:8e:7b:2f:5f:ea:d3:4a:76:5b:1f: 5a:6a:c5:7d:60:f1:09:b6:df:2f:a3:93:97:2a:01:6e:39:7a: ba:68:fe:0e:9a:9c:a7:bd:27:3a:49:a0:cd:08:da:d1:e3:22: fc:c9:bd:8c:79:4e:37:da:6b:0b:b9:59:78:d3:12:0c:bf:b6: 9e:f6:8a:a1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEyF3CIsHID3vTOEtiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDExNDE0MDAzOFoXDTI2MDQxNDEzMDAzOFowLzEtMCsGA1UEAxMk ZTJhMzkyOTgtOWQ5Yy00OGViLTk1YWUtZDdmYzA1NDc4OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN1Mch1yriI7Fpcy1gcRgqIAiLmsmi+Yr2ZI oXxxqzdBH3AYY96RQKA3JiRqR++eiBiEJtBX0CUh1of3u/Z1H9vicUSq1fdAihTW cz8uoGjh8eUGraQzPdTsFL3pSITn8Lcwl42ga87zrwrXAi2AvsovD3lDjgh0sZYn OtpXx4ov1En3NupGiV16Cwgdybp1mnNoVmFa0I7x88jSTZzaq47E5wDChLQxg/gn eRDZyf6i5pIbNLDLTYXoAwsLr5F+jXkOdgkaZWD9ptHDuEPEjasNr+x4N94f8fEK wXilijUgV3btudOVdEZW0Bg7+TZ+FduESgcKc++2cY0eYOg15QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMB7xTpQgsjzZBp+b5Z5vRvHfoSEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvODRhODIwZTgtMjQ5NC0z MzkxLWE4ZWQtOWY1NGY5ZTc4NzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgYAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAP6pXvyjJmKFC4Xsyj9Xj3qcEVQdj17nNL1sPP5+FI/POTX9acUyhC6NC CeP0waDMkkevMzLn/9gWG6uptqiwM1YCq3heMaXeYiu7fjVXMtIat/t5mnuWHy9b 8ormIGidYMLwGqwqNszXBcGBEx7jHvC6Wjk/HzORrjCI2Or6BC37SzmbIIXWWzIw KzkCrPzCTF6VOSULG/YrzynhWNbx10pVho+8svsEA/3JX1MOiksm2nNBDq9bo19I I8WOey9f6tNKdlsfWmrFfWDxCbbfL6OTlyoBbjl6umj+Dpqcp70nOkmgzQja0eMi /Mm9jHlON9prC7lZeNMSDL+2nvaKoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:40:33 2026 by rpki-client