This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f76642b-caa4-395f-a79e-50eae6a364dc.roa File: 2f76642b-caa4-395f-a79e-50eae6a364dc.roa (raw, json) Hash identifier: J0cGO92Xg8oj8Wz7ipXG+jskAeS/AWoOF2xhysYCwHE= Subject key identifier: 71:5F:97:06:34:B6:65:50:17:EF:5E:27:17:37:97:55:AD:E0:6F:9E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C7EE1650EE394FE12A8FE2CD8 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f76642b-caa4-395f-a79e-50eae6a364dc.roa Signing time: Mon 12 Jan 2026 02:00:30 +0000 ROA not before: Mon 12 Jan 2026 02:00:30 +0000 ROA not after: Sun 12 Apr 2026 01:00:30 +0000 asID: 46558 IP address blocks: 129.153.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7e:e1:65:0e:e3:94:fe:12:a8:fe:2c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 12 02:00:30 2026 GMT Not After : Apr 12 01:00:30 2026 GMT Subject: CN=3e62a683-3d75-478e-aaec-a975fb8e1a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:82:e2:7d:89:bb:88:37:e2:7e:85:a3:d7:4b: e4:52:f1:9a:71:fe:8a:f7:18:9b:ba:ad:cf:33:01: 9d:fe:72:a9:c0:e1:c5:f5:8a:be:b0:36:1e:3d:47: 39:9a:c5:70:19:18:c9:e4:11:1b:bc:8a:d8:cc:32: ae:6e:9a:c5:12:2d:10:6a:f4:b6:03:26:52:c0:78: 6a:f5:b0:14:c6:5a:39:1a:56:18:d3:19:fc:10:12: 39:33:6d:5d:38:a1:f0:71:31:52:c1:bb:aa:7f:2f: c8:77:01:c7:32:db:1a:bb:72:37:09:c8:30:26:ff: 3c:52:64:2f:8b:8a:9e:cd:f2:f4:9d:c4:c0:76:22: 47:bf:37:3a:66:84:e2:4b:78:30:49:d7:d9:fa:c4: 5a:18:c7:eb:aa:e3:4c:be:64:51:0f:2d:f3:73:73: b2:f4:d7:d8:5a:c6:2d:2c:f9:47:d0:3e:35:ec:02: 67:ab:e6:b5:6b:06:91:2c:d9:f0:8a:53:a0:c7:d6: 24:7f:33:ae:f0:54:b8:6f:2b:d3:e9:fd:36:33:2c: 41:1a:09:d7:59:72:21:5b:ae:2c:55:aa:d2:68:17: f6:60:2a:81:20:10:58:64:11:7e:8c:18:98:a0:45: 33:ed:e1:0d:9b:99:b1:46:ad:fa:3d:cd:85:cb:52: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5F:97:06:34:B6:65:50:17:EF:5E:27:17:37:97:55:AD:E0:6F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2f76642b-caa4-395f-a79e-50eae6a364dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.153.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:99:40:83:89:0c:1a:9e:02:93:d7:9d:59:83:84:79:13:a2: 48:f0:cd:91:2d:52:bd:2f:04:0a:41:1a:79:88:b7:3a:00:5a: 26:16:54:a9:16:79:4f:38:1f:89:a6:c0:3f:b1:4b:9b:72:46: 08:52:fe:69:4a:9f:63:94:6f:0e:2c:2b:81:c1:a4:d5:61:12: 41:74:81:66:c8:11:37:a6:3a:b7:5b:d2:b4:af:a9:d5:c8:18: 32:fa:02:6d:94:dd:76:bd:62:16:c2:d3:8c:41:6f:86:71:0e: 39:1c:e6:66:64:68:19:5f:c3:11:24:75:36:18:52:85:b6:2d: b8:b6:6b:9b:d0:b6:88:b5:04:7c:d8:fd:4a:09:1b:37:12:f2: 3b:37:61:7b:fe:b0:da:1d:76:47:86:9d:2b:4d:7f:34:d4:b6: f7:c0:5c:dc:c9:3a:72:66:95:35:5c:e6:01:f8:a3:5c:09:4f: 8b:54:61:29:f8:31:39:0f:11:1b:38:4c:d0:7d:d7:3b:1f:47: 14:c8:d6:52:9b:c3:c2:4e:fc:50:2a:1d:30:94:55:90:55:c9: 76:37:63:81:5e:31:92:5d:95:51:90:25:cf:3d:17:0a:41:81: e5:08:57:e7:c0:64:d7:9a:79:c0:6e:90:57:92:cc:ec:43:2a: 3f:d3:dc:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx+4WUO45T+Eqj+LNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExMjAyMDAzMFoXDTI2MDQxMjAxMDAzMFowLzEtMCsGA1UEAxMk M2U2MmE2ODMtM2Q3NS00NzhlLWFhZWMtYTk3NWZiOGUxYTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YLifYm7iDfifoWj10vkUvGacf6K9xibuq3P MwGd/nKpwOHF9Yq+sDYePUc5msVwGRjJ5BEbvIrYzDKubprFEi0QavS2AyZSwHhq 9bAUxlo5GlYY0xn8EBI5M21dOKHwcTFSwbuqfy/IdwHHMtsau3I3CcgwJv88UmQv i4qezfL0ncTAdiJHvzc6ZoTiS3gwSdfZ+sRaGMfrquNMvmRRDy3zc3Oy9NfYWsYt LPlH0D417AJnq+a1awaRLNnwilOgx9YkfzOu8FS4byvT6f02MyxBGgnXWXIhW64s VarSaBf2YCqBIBBYZBF+jBiYoEUz7eENm5mxRq36Pc2Fy1IEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFflwY0tmVQF+9eJxc3l1Wt4G+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmY3NjY0MmItY2FhNC0z OTVmLWE3OWUtNTBlYWU2YTM2NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgZn4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2ZQIOJDBqeApPXnVmDhHkTokjwzZEtUr0vBApBGnmItzoAWiYWVKkW eU84H4mmwD+xS5tyRghS/mlKn2OUbw4sK4HBpNVhEkF0gWbIETemOrdb0rSvqdXI GDL6Am2U3Xa9YhbC04xBb4ZxDjkc5mZkaBlfwxEkdTYYUoW2Lbi2a5vQtoi1BHzY /UoJGzcS8js3YXv+sNoddkeGnStNfzTUtvfAXNzJOnJmlTVc5gH4o1wJT4tUYSn4 MTkPERs4TNB91zsfRxTI1lKbw8JO/FAqHTCUVZBVyXY3Y4FeMZJdlVGQJc89FwpB geUIV+fAZNeaecBukFeSzOxDKj/T3DM= -----END CERTIFICATE-----Generated at Mon Jan 26 04:01:10 2026 by rpki-client