This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa File: a531e496-8f60-365a-9f71-97f429bea4f3.roa (raw, json) Hash identifier: nRUZ0D2PFmL1e0OqxJ9QW7OwCEMwr84XIsk9gPhIRG4= Subject key identifier: D8:74:5F:75:60:E6:E0:A5:4F:79:EF:00:2A:0E:61:4D:A6:CB:E9:FA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C5EC6F0D79915019B9246967F Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 40717 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:f0:d7:99:15:01:9b:92:46:96:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=2fc3a2c5-14c1-4bbb-8b80-6a52e831bf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:8d:05:5c:62:96:58:16:40:14:d7:28:1c: 6a:4f:d8:93:a0:76:68:42:2c:d0:a7:ec:b2:ea:3c: c5:60:78:ca:68:d2:31:e5:c7:3c:c5:44:58:ab:b2: 67:e0:6b:25:3d:31:82:16:c9:27:78:ec:1e:68:94: 37:a7:71:48:f4:07:63:df:2b:62:f0:58:4a:cc:d0: 2f:e7:d1:a9:a5:9f:41:ee:7d:55:77:bd:2f:ab:6a: 58:4c:aa:4e:2e:b3:75:51:3e:ea:85:85:8c:32:91: 4e:c0:79:b3:d5:e0:b2:17:52:83:7c:c0:a5:cb:0c: 1a:2c:ae:31:9b:25:d7:6a:d7:69:52:7e:85:72:b8: bf:c8:ca:e9:be:11:16:97:7b:a4:ca:63:a5:51:25: 21:ae:0f:23:23:6e:b5:ae:d8:d4:55:c5:ee:f3:66: 3d:6d:00:29:d8:17:a3:6e:bc:bc:6a:de:e7:a0:db: 32:4a:95:7d:0d:b9:92:60:69:a8:df:26:c1:c9:6a: 4b:8d:37:96:68:7c:1a:90:b1:81:f1:48:86:04:6a: 09:70:12:b3:fe:bd:14:82:05:91:df:26:d6:49:0f: 4c:16:22:02:ed:45:5b:06:6a:00:a3:02:58:53:4d: a6:49:0d:df:25:9d:bb:c0:cd:a9:43:e2:e1:cb:2e: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:5F:75:60:E6:E0:A5:4F:79:EF:00:2A:0E:61:4D:A6:CB:E9:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a531e496-8f60-365a-9f71-97f429bea4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:53:b0:de:b0:12:13:cc:f1:f1:a6:67:0e:8a:09:57:76:e8: 2c:03:fe:ff:17:fe:7b:51:91:c1:25:be:03:76:75:12:92:a1: 24:66:55:87:b3:26:c8:9d:2f:3f:e0:db:94:46:40:1d:bc:ea: 54:9e:bd:21:ad:a9:b4:d3:30:73:f7:d0:34:a4:4d:ff:32:32: 26:80:fd:88:ac:77:0e:e9:14:a1:53:64:d1:b9:42:07:be:63: 3c:a2:35:aa:1f:14:fc:af:9c:6c:1d:ce:5d:ee:55:a5:b7:88: 60:f7:a2:c9:f8:7e:15:18:6c:8c:f2:34:76:25:97:e4:ca:8c: dc:a6:c8:d0:97:2a:1c:41:4b:7b:37:03:cb:14:d6:06:b2:c3: 3d:ce:ab:e3:30:79:23:a1:56:54:eb:9b:ce:de:46:b3:00:4e: 8d:9a:b0:63:77:93:42:c6:47:07:08:6e:80:a2:94:b8:0a:d9: a9:47:47:87:7d:9a:b2:63:76:a1:78:0a:3f:c9:2f:b1:8b:ed: 19:12:ea:8a:31:89:69:5e:73:6a:e7:6a:82:37:b2:88:86:d4: 08:d5:d0:20:b3:fb:a4:eb:f5:eb:ff:fd:3f:b1:64:89:d9:fb: 6d:30:4a:88:17:64:9c:d2:54:c1:a5:11:73:cc:3d:41:be:c5: 5a:51:96:46 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExexvDXmRUBm5JGln8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk MmZjM2EyYzUtMTRjMS00YmJiLThiODAtNmE1MmU4MzFiZjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB2NBVxillgWQBTXKBxqT9iToHZoQizQp+yy 6jzFYHjKaNIx5cc8xURYq7Jn4GslPTGCFskneOweaJQ3p3FI9Adj3yti8FhKzNAv 59GppZ9B7n1Vd70vq2pYTKpOLrN1UT7qhYWMMpFOwHmz1eCyF1KDfMClywwaLK4x myXXatdpUn6Fcri/yMrpvhEWl3ukymOlUSUhrg8jI261rtjUVcXu82Y9bQAp2Bej bry8at7noNsySpV9DbmSYGmo3ybByWpLjTeWaHwakLGB8UiGBGoJcBKz/r0UggWR 3ybWSQ9MFiIC7UVbBmoAowJYU02mSQ3fJZ27wM2pQ+Lhyy5zZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNh0X3Vg5uClT3nvACoOYU2my+n6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUzMWU0OTYtOGY2MC0z NjVhLTlmNzEtOTdmNDI5YmVhNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA8U7DesBITzPHxpmcOiglXdugsA/7/F/57UZHBJb4DdnUSkqEkZlWH sybInS8/4NuURkAdvOpUnr0hram00zBz99A0pE3/MjImgP2IrHcO6RShU2TRuUIH vmM8ojWqHxT8r5xsHc5d7lWlt4hg96LJ+H4VGGyM8jR2JZfkyozcpsjQlyocQUt7 NwPLFNYGssM9zqvjMHkjoVZU65vO3kazAE6NmrBjd5NCxkcHCG6AopS4CtmpR0eH fZqyY3aheAo/yS+xi+0ZEuqKMYlpXnNq52qCN7KIhtQI1dAgs/uk6/Xr//0/sWSJ 2fttMEqIF2Sc0lTBpRFzzD1BvsVaUZZG -----END CERTIFICATE-----Generated at Sun Jan 25 23:12:56 2026 by rpki-client