This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa File: 33e08937-4f17-30a4-a5e7-7341d6901d42.roa (raw, json) Hash identifier: afkgkaCb2fS+zmX9RnOsZAAj2ufGeHIv8Rb0VTLea6Y= Subject key identifier: 38:75:D8:19:A4:71:39:1B:F5:76:5D:D7:A5:83:89:B1:11:1F:1E:2E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584C7AB177175EBC9C71B405F540 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa Signing time: Sat 10 Jan 2026 14:00:39 +0000 ROA not before: Sat 10 Jan 2026 14:00:39 +0000 ROA not after: Fri 10 Apr 2026 13:00:39 +0000 asID: 22616 IP address blocks: 170.85.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7a:b1:77:17:5e:bc:9c:71:b4:05:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 10 14:00:39 2026 GMT Not After : Apr 10 13:00:39 2026 GMT Subject: CN=5cf9f33e-0a1c-41b9-992f-ac9f8358843a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:e8:3c:ce:a1:ad:c7:40:f4:35:2b:d0:28: d1:01:ec:87:d6:56:fc:81:56:ab:5e:21:44:dc:46: 4f:e3:d4:7f:04:7b:3f:02:05:ab:23:e4:17:5e:18: 96:b3:32:16:72:ec:44:53:89:00:8d:f3:ab:35:e6: de:b7:41:f4:66:bc:6d:90:92:d5:88:fa:65:d9:b6: 27:10:a2:76:53:4e:61:e9:fc:88:ca:ca:61:0e:b4: d1:1e:6a:00:c0:01:81:52:a0:01:a2:20:40:30:f4: 80:57:a0:72:d1:bd:cc:44:bc:83:90:98:a5:e0:3f: da:30:b4:f2:2c:f6:d3:67:36:8a:e1:6a:2d:4e:cb: c2:dd:90:aa:25:be:87:a9:64:5e:ad:3f:5b:ea:95: d4:de:5e:e9:de:97:b9:b9:17:f7:de:f4:8e:6f:7f: e0:5a:89:e8:cc:0c:e5:87:bc:a8:62:cd:7c:f3:72: 2c:44:39:7b:dd:39:94:31:c6:0a:36:e5:39:42:9e: 2c:67:02:9d:17:ff:e0:fd:06:88:eb:6c:30:7b:bd: 08:71:1f:90:7c:4d:27:66:82:b3:f7:9e:d0:ca:3a: 13:cf:4a:61:fd:6f:e5:a0:db:7b:66:e5:8b:23:6f: 6c:c7:83:4c:8b:5e:d7:85:c1:d5:3c:4e:bf:1e:85: 2d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:75:D8:19:A4:71:39:1B:F5:76:5D:D7:A5:83:89:B1:11:1F:1E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/33e08937-4f17-30a4-a5e7-7341d6901d42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a7:f8:53:2d:19:cb:a2:59:e5:cf:17:71:41:28:ea:22:4a: 12:f2:c2:2b:db:8f:06:1e:d7:82:bf:06:12:60:f0:97:70:e9: d9:03:67:d9:d2:3e:0f:8e:bd:7b:57:7e:de:a9:a8:78:6d:8a: 0b:7c:f8:64:a1:71:ea:46:fa:7e:6b:d3:12:d0:b0:02:2a:68: c8:69:d9:b4:6e:a3:de:fb:59:d1:78:70:c6:6a:06:ad:b9:eb: 5f:1c:ca:7d:31:98:3f:17:fd:6a:3a:a5:cf:b7:2b:82:36:9a: 0e:8c:c6:bb:ca:f3:24:fd:49:82:59:4f:ee:d5:fc:c9:68:97: ee:97:4c:14:ce:fc:91:16:dd:b9:3a:c6:c5:69:4b:bf:7e:10: d8:be:70:ed:c8:d8:50:bb:23:97:32:61:d5:50:58:c3:17:56: 44:6c:f2:d1:6e:09:cf:8e:8c:34:3b:63:c2:45:36:ad:1e:99: aa:8b:84:cf:b8:99:e8:20:02:c6:d9:ad:20:a9:b6:56:da:1e: b7:5f:06:7b:c2:f6:92:b4:fc:ad:e5:db:c9:79:2b:dc:c8:46: 95:32:ed:a8:00:42:82:55:ff:e2:8f:73:8f:54:d0:de:0c:2d: 94:4e:91:50:90:9c:06:8c:1f:99:57:4f:fd:2e:28:ef:14:d9: 5a:9b:54:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx6sXcXXryccbQF9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDExMDE0MDAzOVoXDTI2MDQxMDEzMDAzOVowLzEtMCsGA1UEAxMk NWNmOWYzM2UtMGExYy00MWI5LTk5MmYtYWM5ZjgzNTg4NDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJzoPM6hrcdA9DUr0CjRAeyH1lb8gVarXiFE 3EZP49R/BHs/AgWrI+QXXhiWszIWcuxEU4kAjfOrNebet0H0ZrxtkJLViPpl2bYn EKJ2U05h6fyIysphDrTRHmoAwAGBUqABoiBAMPSAV6By0b3MRLyDkJil4D/aMLTy LPbTZzaK4WotTsvC3ZCqJb6HqWRerT9b6pXU3l7p3pe5uRf33vSOb3/gWonozAzl h7yoYs1883IsRDl73TmUMcYKNuU5Qp4sZwKdF//g/QaI62wwe70IcR+QfE0nZoKz 957QyjoTz0ph/W/loNt7ZuWLI29sx4NMi17XhcHVPE6/HoUtTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh12BmkcTkb9XZd16WDibERHx4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMzNlMDg5MzctNGYxNy0z MGE0LWE1ZTctNzM0MWQ2OTAxZDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqlVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWn+FMtGcuiWeXPF3FBKOoiShLywivbjwYe14K/BhJg8Jdw6dkDZ9nS Pg+OvXtXft6pqHhtigt8+GShcepG+n5r0xLQsAIqaMhp2bRuo977WdF4cMZqBq25 618cyn0xmD8X/Wo6pc+3K4I2mg6MxrvK8yT9SYJZT+7V/Mlol+6XTBTO/JEW3bk6 xsVpS79+ENi+cO3I2FC7I5cyYdVQWMMXVkRs8tFuCc+OjDQ7Y8JFNq0emaqLhM+4 meggAsbZrSCptlbaHrdfBnvC9pK0/K3l28l5K9zIRpUy7agAQoJV/+KPc49U0N4M LZROkVCQnAaMH5lXT/0uKO8U2VqbVEg= -----END CERTIFICATE-----Generated at Sun Jan 25 12:49:43 2026 by rpki-client