This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa File: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (raw, json) Hash identifier: RLqzb4fxxBb9VJOIYNU2pY0vO4md+2UAzXg3R18tmio= Subject key identifier: D5:74:DD:FE:0C:17:67:69:A0:33:3B:2A:9E:D3:2D:BC:5D:48:69:8B Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584C8A0C73BA22CDF24D32F95000 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 27589 IP address blocks: 64.59.64.0/18 maxlen: 24 66.244.144.0/20 maxlen: 24 74.206.160.0/19 maxlen: 24 99.192.128.0/17 maxlen: 24 104.193.120.0/22 maxlen: 24 162.250.76.0/22 maxlen: 24 184.94.144.0/20 maxlen: 24 199.19.200.0/21 maxlen: 24 199.59.88.0/21 maxlen: 24 199.182.104.0/21 maxlen: 24 199.241.96.0/21 maxlen: 24 208.74.148.0/22 maxlen: 24 208.122.192.0/19 maxlen: 24 2607:f5a8::/32 maxlen: 48 2607:ffb8::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:73:ba:22:cd:f2:4d:32:f9:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=59be9f0e-63b9-4f14-86ff-4bd1e40300c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:fa:59:66:9f:d0:b0:39:11:37:a1:5b:85: 6a:6c:33:93:d4:87:b2:43:6c:8b:4d:b1:ac:06:88: 65:72:49:47:85:b5:9e:63:f9:52:4e:ed:07:28:1c: 3b:f9:00:ca:09:41:9b:48:54:26:11:66:9e:fc:95: b4:6f:56:8d:dd:22:45:1d:93:34:cd:fd:91:23:0a: ba:3b:6c:b9:f8:f0:c6:a6:3b:bc:99:00:cf:3e:1d: a0:33:f9:d1:9c:84:80:85:65:08:73:a2:3e:59:1f: 3b:26:2b:62:6a:07:b6:8e:c7:01:ad:d6:24:51:da: 7d:d7:0e:19:eb:8c:e1:13:ef:89:54:94:39:81:29: 1b:2f:d9:d6:f6:18:2c:a9:92:b9:88:f4:52:7d:6b: a6:cd:b6:5f:1b:3c:c8:fd:c6:68:40:99:7d:13:97: f6:1f:a8:44:1a:df:bd:a0:7b:97:e9:13:47:a1:78: fd:c8:6f:72:cb:89:96:c2:fd:40:71:81:2a:2b:c9: 71:87:0c:67:e4:3b:00:b2:7a:fa:1b:8e:db:48:e9: bf:b4:6f:d5:6b:b8:e0:57:42:69:51:fb:5c:46:cf: 08:15:a1:62:c2:6d:22:fb:08:b3:8e:54:02:ad:f5: df:76:3c:dc:b2:5d:94:87:60:15:fd:b2:6b:1b:0e: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:74:DD:FE:0C:17:67:69:A0:33:3B:2A:9E:D3:2D:BC:5D:48:69:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/828c35a4-d70a-329b-afc8-43f0c6744f3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: 64.59.64.0/18 66.244.144.0/20 74.206.160.0/19 99.192.128.0/17 104.193.120.0/22 162.250.76.0/22 184.94.144.0/20 199.19.200.0/21 199.59.88.0/21 199.182.104.0/21 199.241.96.0/21 208.74.148.0/22 208.122.192.0/19 IPv6: 2607:f5a8::/32 2607:ffb8::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3a:27:5a:3c:08:87:2c:22:b1:11:31:e4:31:98:fe:17:5b: 98:3b:a5:22:4a:c7:7b:18:48:3e:dc:99:7d:9a:3b:1d:ac:48: cd:26:1a:6e:b3:3f:f7:5c:28:19:18:97:5b:10:2d:a6:a8:99: dd:68:8a:5c:26:93:95:5f:f7:ee:e8:16:01:1a:d5:07:f4:62: 3e:e9:d8:9f:1f:8c:60:b1:07:05:0c:84:c2:ea:f0:c8:83:8d: bd:0b:c8:0e:32:c9:46:7c:c1:99:2f:c2:b0:23:b5:32:c2:0b: a6:5f:13:07:a8:57:78:88:9a:44:0c:fd:13:13:df:e3:7b:cb: d6:34:c0:58:33:cb:4c:9d:98:a7:f6:5a:b4:2b:60:a5:80:cd: ed:f4:95:1c:98:a6:95:3f:5a:e2:7e:19:35:fc:88:df:bf:24: 5a:0c:e7:1c:41:5b:bf:a9:e5:d6:38:fe:be:23:ec:ce:6d:28: c2:3d:d5:2c:cd:8b:dd:63:e9:94:5c:be:bb:41:be:b2:30:2a: b2:de:5f:0a:47:eb:b5:7b:b9:eb:86:cf:d3:64:72:4f:ad:8a: 05:c2:aa:fe:ee:d4:c6:ea:b1:4f:8b:72:1c:9b:d8:41:2d:28: 13:46:aa:7d:63:a5:d6:e1:b6:94:5d:52:54:85:74:f6:ab:67: ed:d3:ef:09 -----BEGIN CERTIFICATE----- MIIGoTCCBYmgAwIBAgIUAQ0Mn0MoWEyKDHO6Is3yTTL5UAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NTliZTlmMGUtNjNiOS00ZjE0LTg2ZmYtNGJkMWU0MDMwMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi936WWaf0LA5ETehW4VqbDOT1IeyQ2yLTbGs BohlcklHhbWeY/lSTu0HKBw7+QDKCUGbSFQmEWae/JW0b1aN3SJFHZM0zf2RIwq6 O2y5+PDGpju8mQDPPh2gM/nRnISAhWUIc6I+WR87Jitiage2jscBrdYkUdp91w4Z 64zhE++JVJQ5gSkbL9nW9hgsqZK5iPRSfWumzbZfGzzI/cZoQJl9E5f2H6hEGt+9 oHuX6RNHoXj9yG9yy4mWwv1AcYEqK8lxhwxn5DsAsnr6G47bSOm/tG/Va7jgV0Jp UftcRs8IFaFiwm0i+wizjlQCrfXfdjzcsl2Uh2AV/bJrGw7XpQIDAQABo4IDszCC A68wHQYDVR0OBBYEFNV03f4MF2dpoDM7Kp7TLbxdSGmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvODI4YzM1YTQtZDcwYS0z MjliLWFmYzgtNDNmMGM2NzQ0ZjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQGQDtAAwQE QvSQAwQFSs6gAwQHY8CAAwQCaMF4AwQCovpMAwQEuF6QAwQDxxPIAwQDxztYAwQD x7ZoAwQDx/FgAwQC0EqUAwQF0HrAMBQEAgACMA4DBQAmB/WoAwUAJgf/uDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBvOidaPAiHLCKxETHkMZj+F1uYO6UiSsd7GEg+3Jl9mjsdrEjNJhpusz/3 XCgZGJdbEC2mqJndaIpcJpOVX/fu6BYBGtUH9GI+6difH4xgsQcFDITC6vDIg429 C8gOMslGfMGZL8KwI7UywgumXxMHqFd4iJpEDP0TE9/je8vWNMBYM8tMnZin9lq0 K2ClgM3t9JUcmKaVP1rifhk1/IjfvyRaDOccQVu/qeXWOP6+I+zObSjCPdUszYvd Y+mUXL67Qb6yMCqy3l8KR+u1e7nrhs/TZHJPrYoFwqr+7tTG6rFPi3Icm9hBLSgT Rqp9Y6XW4baUXVJUhXT2q2ft0+8J -----END CERTIFICATE-----Generated at Sun Jan 25 11:21:45 2026 by rpki-client