This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa File: aa71b912-ec1b-36e2-9852-18906b9fa27f.roa (raw, json) Hash identifier: 7PFTHKh19I6QVOQJ7hPTvZMVXcfEhE4ZQZGotqsyUow= Subject key identifier: FF:ED:DE:21:2E:F2:36:19:01:16:9A:80:F9:6C:39:5D:21:CF:64:7E Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C645C1D2E5C2B927008C8C580 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 396597 IP address blocks: 2620:74:2a::31/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:64:5c:1d:2e:5c:2b:92:70:08:c8:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=009af081-345c-4ec6-9eca-bdda0d210f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:64:57:e9:ef:16:6d:19:dd:63:e5:72:7a:9c: 63:b7:0d:fc:fb:d6:06:67:cf:a4:c5:66:8c:7f:1b: 4c:f4:a8:94:df:a6:ef:8c:58:0b:ec:b7:8a:3b:70: 85:99:08:ec:9d:4a:25:2f:11:ad:9b:ed:b9:2e:9e: f2:42:bb:7c:c1:9c:34:08:b0:2a:62:d9:75:60:cf: 29:f8:0e:58:c7:c0:df:ae:92:f6:29:75:5d:f8:16: a9:13:55:29:a4:7e:31:6c:3c:2c:2d:e2:3b:b9:af: 42:2d:70:36:9a:ca:d5:e1:a9:79:fa:b3:ef:82:c3: 39:e7:03:79:09:96:e1:3c:10:81:e4:96:07:27:c7: e4:37:d0:a1:5b:54:22:0e:c3:7f:8a:c2:af:4e:ba: 98:be:87:fd:b7:0e:57:ee:e2:ea:55:c7:e2:60:4a: 00:ae:72:2b:81:9c:e2:cb:73:59:12:3d:61:41:fe: 40:5b:de:1e:4f:29:9d:bb:0e:0a:22:22:76:d1:b3: 2d:64:da:1a:f4:98:4a:13:14:55:68:a9:a8:82:a1: 69:81:d1:e3:25:ee:62:a7:8f:d6:bc:80:57:bf:2f: 78:3f:79:34:9f:03:21:7c:c0:95:2a:f4:2f:bd:1f: 7d:01:5e:13:da:7c:f2:26:73:c7:2b:84:1e:38:de: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:ED:DE:21:2E:F2:36:19:01:16:9A:80:F9:6C:39:5D:21:CF:64:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aa71b912-ec1b-36e2-9852-18906b9fa27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2a:0:0:0:0:31/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:db:29:95:5b:36:fe:e7:20:bb:04:ce:3b:52:bc:e9:57:0c: 0d:72:99:79:6c:7b:65:40:b6:51:f1:86:62:be:54:e2:ce:a2: 0c:96:94:68:84:9f:aa:98:49:1a:e1:2f:e6:1d:a8:a4:aa:a3: c9:e1:c4:2c:e2:e9:7d:1a:0d:b3:26:ef:6a:58:6a:15:03:39: fb:36:7e:24:d2:59:53:6a:4a:f0:60:99:19:0b:fd:cb:e4:c2: f2:ed:f4:e9:e8:09:0f:b7:01:a8:96:4a:9c:f0:db:15:a7:7b: 83:40:1b:70:59:1c:e0:2c:60:7d:5f:a7:94:db:20:67:01:e7: e7:84:83:9b:c2:ee:a1:ba:a2:14:45:fc:37:bc:0c:58:49:6d: 05:58:d5:20:1d:80:63:d7:9f:41:21:ba:5e:7c:39:3d:37:8e: 75:a3:58:db:4b:ec:57:d0:d4:5d:9f:6f:28:47:d1:32:7c:2f: 1a:f6:9d:f7:a6:51:3e:06:60:6f:1e:be:fe:8f:9e:8e:5a:f9: 8e:2b:8b:11:dd:43:18:42:95:5b:fd:63:53:fd:1f:1e:7e:7b: 16:6d:d2:c9:ea:c1:ec:7a:44:53:3f:b3:c6:18:fe:bd:49:16: d9:ab:00:3a:ec:a0:58:60:0e:d6:bf:64:5e:6a:a5:d2:ea:05: 1a:e4:8a:51 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWExkXB0uXCuScAjIxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk MDA5YWYwODEtMzQ1Yy00ZWM2LTllY2EtYmRkYTBkMjEwZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmRX6e8WbRndY+Vyepxjtw38+9YGZ8+kxWaM fxtM9KiU36bvjFgL7LeKO3CFmQjsnUolLxGtm+25Lp7yQrt8wZw0CLAqYtl1YM8p +A5Yx8DfrpL2KXVd+BapE1UppH4xbDwsLeI7ua9CLXA2msrV4al5+rPvgsM55wN5 CZbhPBCB5JYHJ8fkN9ChW1QiDsN/isKvTrqYvof9tw5X7uLqVcfiYEoArnIrgZzi y3NZEj1hQf5AW94eTymduw4KIiJ20bMtZNoa9JhKExRVaKmogqFpgdHjJe5ip4/W vIBXvy94P3k0nwMhfMCVKvQvvR99AV4T2nzyJnPHK4QeON6P5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFP/t3iEu8jYZARaagPlsOV0hz2R+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWE3MWI5MTItZWMxYi0z NmUyLTk4NTItMTg5MDZiOWZhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAdAAq AAAAAAAAAAAAMTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAK2ymVWzb+5yC7BM47UrzpVwwNcpl5bHtlQLZR 8YZivlTizqIMlpRohJ+qmEka4S/mHaikqqPJ4cQs4ul9Gg2zJu9qWGoVAzn7Nn4k 0llTakrwYJkZC/3L5MLy7fTp6AkPtwGolkqc8NsVp3uDQBtwWRzgLGB9X6eU2yBn AefnhIObwu6huqIURfw3vAxYSW0FWNUgHYBj159BIbpefDk9N451o1jbS+xX0NRd n28oR9EyfC8a9p33plE+BmBvHr7+j56OWvmOK4sR3UMYQpVb/WNT/R8efnsWbdLJ 6sHsekRTP7PGGP69SRbZqwA67KBYYA7Wv2ReaqXS6gUa5IpR -----END CERTIFICATE-----Generated at Sun Jan 25 18:31:57 2026 by rpki-client