This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa File: 3ae91796-d0c5-382c-af8b-cc422804c680.roa (raw, json) Hash identifier: BZQoC8E8eh35oWrXq2PWI5PMqJXLVJxBU3ltgn9di3E= Subject key identifier: 0B:1E:14:98:D5:FD:B0:EF:80:A1:A6:52:DA:8B:00:BC:18:7A:A4:C7 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584C50D12A08AB9E6B9DDAFF5D00 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 63062 IP address blocks: 67.44.112.0/20 maxlen: 24 174.32.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:2a:08:ab:9e:6b:9d:da:ff:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=5abe8b06-16c0-4780-aac4-7c8b48023883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:5c:4e:85:48:5b:26:34:24:73:27:12:2e: 4d:fd:cf:0e:aa:e5:69:68:0e:e1:bb:8e:0f:79:85: de:ff:56:c9:7a:b6:cb:98:80:5e:c6:cc:66:b0:0c: 07:cd:77:22:43:42:22:66:cd:06:d5:1d:80:72:e8: 83:e0:e5:04:28:9f:75:e7:6d:06:b8:db:e3:c7:cc: 74:27:76:1f:71:41:5d:19:83:a6:7b:9e:6b:33:2f: ee:81:b1:8a:65:fa:2f:4e:25:5d:89:bd:a0:1d:9f: 71:29:fa:39:ba:bf:90:e2:a5:10:27:25:da:f2:51: 0b:7a:9d:f3:e8:69:4f:b2:c2:35:c7:cf:73:69:08: 82:db:30:c9:cc:d8:f2:73:e9:89:3f:13:17:97:ab: c1:9b:5b:8d:8f:f7:83:5f:c1:40:6c:0f:85:97:c0: 2e:03:ae:0f:57:0d:55:7b:10:6f:93:a2:1c:9e:da: 4c:46:fe:f0:8d:07:a9:cf:36:53:ca:5a:3f:57:86: 0a:a9:e7:2d:34:d7:3b:32:a2:a9:a3:47:a4:95:7e: 54:17:a8:b4:be:d1:81:59:a7:0e:7b:c4:b5:c6:e1: 2f:68:79:79:b6:56:4c:d4:97:25:0a:af:df:15:b9: c7:20:71:0d:aa:be:4a:ad:13:78:84:7b:76:50:55: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1E:14:98:D5:FD:B0:EF:80:A1:A6:52:DA:8B:00:BC:18:7A:A4:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3ae91796-d0c5-382c-af8b-cc422804c680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.112.0/20 174.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:84:28:79:08:5c:e0:61:c9:8d:4f:87:d2:f8:6c:15:bf:62: bb:ae:20:c0:63:1a:07:fe:bb:0c:50:6b:5b:5e:b1:b3:53:dd: c1:76:b5:c6:97:0b:8d:88:62:87:fb:4b:6b:af:ed:d7:5d:f4: 19:b5:04:d5:c0:fa:93:db:78:f0:dd:e0:c1:5a:f0:89:90:79: fc:5f:bc:aa:5f:ca:70:47:8d:97:60:bf:c6:35:3d:0b:ff:55: 8b:f7:7f:dc:85:24:f1:ef:8c:88:ca:ff:b6:e4:1c:a4:d0:b6: 0e:c0:56:40:46:9a:0a:83:01:b6:19:dc:c4:19:6b:d8:5e:c5: df:43:13:39:03:73:7c:fc:b6:c6:23:9d:c2:68:38:1a:2b:5d: 73:1e:3d:bc:90:8d:06:3d:46:23:2e:8f:94:33:ee:1f:84:81: 50:db:3d:3f:a8:91:e5:aa:bf:7c:aa:62:60:39:f6:24:57:83: ca:fb:96:a6:04:7b:4c:9a:af:ed:9f:38:05:d6:e1:5e:23:17: 49:7b:73:b7:41:4b:d7:95:1f:45:0b:20:9b:00:b9:91:f8:7b: 87:d0:3b:48:71:fa:89:7b:2e:59:e7:0c:b5:d5:1c:fb:fb:2e: b2:e3:1c:d9:77:7d:da:13:b8:01:e0:db:cf:90:64:6f:45:37: f3:ae:5d:5f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExQ0SoIq55rndr/XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk NWFiZThiMDYtMTZjMC00NzgwLWFhYzQtN2M4YjQ4MDIzODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYxcToVIWyY0JHMnEi5N/c8OquVpaA7hu44P eYXe/1bJerbLmIBexsxmsAwHzXciQ0IiZs0G1R2AcuiD4OUEKJ91520GuNvjx8x0 J3YfcUFdGYOme55rMy/ugbGKZfovTiVdib2gHZ9xKfo5ur+Q4qUQJyXa8lELep3z 6GlPssI1x89zaQiC2zDJzNjyc+mJPxMXl6vBm1uNj/eDX8FAbA+Fl8AuA64PVw1V exBvk6IcntpMRv7wjQepzzZTylo/V4YKqectNNc7MqKpo0eklX5UF6i0vtGBWacO e8S1xuEvaHl5tlZM1JclCq/fFbnHIHENqr5KrRN4hHt2UFWTKQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAseFJjV/bDvgKGmUtqLALwYeqTHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvM2FlOTE3OTYtZDBjNS0z ODJjLWFmOGItY2M0MjI4MDRjNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEQyxwAwQE riBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAICEKHkIXOBhyY1Ph9L4bBW/YruuIMBjGgf+uwxQa1tesbNT 3cF2tcaXC42IYof7S2uv7ddd9Bm1BNXA+pPbePDd4MFa8ImQefxfvKpfynBHjZdg v8Y1PQv/VYv3f9yFJPHvjIjK/7bkHKTQtg7AVkBGmgqDAbYZ3MQZa9hexd9DEzkD c3z8tsYjncJoOBorXXMePbyQjQY9RiMuj5Qz7h+EgVDbPT+okeWqv3yqYmA59iRX g8r7lqYEe0yar+2fOAXW4V4jF0l7c7dBS9eVH0ULIJsAuZH4e4fQO0hx+ol7Llnn DLXVHPv7LrLjHNl3fdoTuAHg28+QZG9FN/OuXV8= -----END CERTIFICATE-----Generated at Sun Jan 25 11:33:29 2026 by rpki-client