This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20cf2377-242a-36e5-8415-b494eb9de43f.roa File: 20cf2377-242a-36e5-8415-b494eb9de43f.roa (raw, json) Hash identifier: oS7G24ynifr8by8cGi5OvGGIUAsFgYh4TXAfmON2ksA= Subject key identifier: 73:CC:8E:37:11:E2:C3:1E:52:54:F8:87:3D:9A:71:79:0D:D9:E4:97 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CA061F5BE08EBB4A70921A200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20cf2377-242a-36e5-8415-b494eb9de43f.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 7725 IP address blocks: 71.59.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:f5:be:08:eb:b4:a7:09:21:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=8d1b9483-04f5-4afb-89d8-5beb9955a398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:68:27:f6:26:63:a5:4a:46:03:3f:60:65:29: 0a:1f:9e:06:61:07:d6:53:7c:28:16:b6:c3:6b:91: 10:f6:47:20:ed:ab:a9:4b:63:aa:f1:86:71:cd:d6: 6b:12:d1:11:e6:f5:51:30:3d:e3:91:c7:4c:27:c3: 89:83:18:3c:35:bc:c4:17:86:1c:4d:26:11:6f:b1: 5d:35:56:cf:0f:af:4a:10:67:a7:3d:b5:ae:ad:a9: a9:d3:93:d3:c9:dd:5e:6f:4b:96:3b:dd:93:84:48: 80:60:9e:42:38:ce:5b:1a:e3:7e:2c:6e:d6:e6:4c: 81:ed:34:56:ec:79:43:2c:40:e0:e2:49:d2:30:cd: d2:d4:09:a8:66:f7:5d:75:0f:60:5c:f4:b4:52:f0: f4:8c:f8:e6:83:56:64:ac:f6:8d:a9:4c:14:5f:4b: a4:ff:44:74:31:77:d8:04:6c:e0:3b:56:73:63:b2: 52:a5:14:62:4f:de:82:08:4b:d1:72:a3:c7:ff:b8: b0:2f:47:d7:45:5e:18:c4:a7:aa:e7:d3:87:3c:56: 57:e6:94:e4:d4:3f:67:38:3a:9d:30:ae:ef:71:e2: 89:09:e3:f6:c3:c1:0d:01:b8:9e:46:13:5e:81:18: 9d:a1:1a:62:e4:a8:c6:aa:ca:6d:b1:21:20:b1:d8: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CC:8E:37:11:E2:C3:1E:52:54:F8:87:3D:9A:71:79:0D:D9:E4:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20cf2377-242a-36e5-8415-b494eb9de43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.59.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:c6:55:2c:99:78:e2:24:69:0a:02:6e:77:be:9d:5a:11:3a: 06:c6:9c:b6:31:72:16:95:f8:2a:d3:b1:ed:51:5a:65:a1:50: 4c:40:80:3e:63:2e:0c:b6:77:31:43:74:70:80:3a:33:2b:c4: 71:43:1e:5d:e8:f4:f5:c2:ac:a8:c7:53:d7:02:8f:93:33:be: 81:ed:6a:f6:2a:29:1d:83:20:24:8e:ff:99:21:95:27:77:f2: 89:7a:ed:aa:55:6a:c3:50:2b:36:3f:1f:18:4e:d0:7f:99:8a: 58:74:8c:40:c7:21:02:cd:f1:34:8b:2b:9b:30:02:b3:58:79: bd:9c:c5:b2:55:32:74:28:3a:fc:7e:f4:88:19:6a:9b:4f:1c: c0:ab:7f:3b:04:1c:25:68:00:78:b2:83:b4:0e:5e:f1:1a:b1: 14:7c:08:9e:c5:0f:73:0d:dd:2d:2a:c5:2e:41:ca:99:61:b1: 87:5e:6e:ac:e7:6f:88:d9:00:f1:2e:e2:4f:44:7e:b7:88:2c: fe:f2:c5:81:74:eb:f4:1a:43:98:1d:39:5d:a4:9c:cd:11:cc: d0:55:92:27:e8:d2:80:55:e1:61:87:80:af:3c:88:7b:f1:f4: 2b:8a:9f:d4:41:d8:f3:c7:e1:8b:59:33:49:e7:d9:74:e1:6c: a5:03:2f:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEygYfW+COu0pwkhogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk OGQxYjk0ODMtMDRmNS00YWZiLTg5ZDgtNWJlYjk5NTVhMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWgn9iZjpUpGAz9gZSkKH54GYQfWU3woFrbD a5EQ9kcg7aupS2Oq8YZxzdZrEtER5vVRMD3jkcdMJ8OJgxg8NbzEF4YcTSYRb7Fd NVbPD69KEGenPbWuramp05PTyd1eb0uWO92ThEiAYJ5COM5bGuN+LG7W5kyB7TRW 7HlDLEDg4knSMM3S1AmoZvdddQ9gXPS0UvD0jPjmg1ZkrPaNqUwUX0uk/0R0MXfY BGzgO1ZzY7JSpRRiT96CCEvRcqPH/7iwL0fXRV4YxKeq59OHPFZX5pTk1D9nODqd MK7vceKJCeP2w8ENAbieRhNegRidoRpi5KjGqsptsSEgsdjY9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPMjjcR4sMeUlT4hz2acXkN2eSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjBjZjIzNzctMjQyYS0z NmU1LTg0MTUtYjQ5NGViOWRlNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfGVSyZeOIkaQoCbne+nVoROgbGnLYxchaV+CrTse1RWmWhUExAgD5j Lgy2dzFDdHCAOjMrxHFDHl3o9PXCrKjHU9cCj5MzvoHtavYqKR2DICSO/5khlSd3 8ol67apVasNQKzY/HxhO0H+Zilh0jEDHIQLN8TSLK5swArNYeb2cxbJVMnQoOvx+ 9IgZaptPHMCrfzsEHCVoAHiyg7QOXvEasRR8CJ7FD3MN3S0qxS5ByplhsYdebqzn b4jZAPEu4k9EfreILP7yxYF06/QaQ5gdOV2knM0RzNBVkifo0oBV4WGHgK88iHvx 9CuKn9RB2PPH4YtZM0nn2XThbKUDL3E= -----END CERTIFICATE-----Generated at Sun Jan 25 09:42:57 2026 by rpki-client