This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa File: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (raw, json) Hash identifier: 5m9ra8yT6ANocpsIpmlk4LULYnaQErR/BLkmmU1r9Xo= Subject key identifier: 52:13:5C:4E:25:1E:03:6D:46:19:12:C9:A2:8F:32:07:34:1F:E7:DD Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584C8A0C721469433EC8E0AB4380 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 0 IP address blocks: 2001:504:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:72:14:69:43:3e:c8:e0:ab:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=ba5762a6-8121-44cd-b4d5-a6c1c2ec4f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8b:fc:dc:28:e9:dc:bb:a1:bc:bb:4a:34:61: c4:64:66:70:dc:ba:76:9c:39:63:41:99:3e:97:36: 6e:e4:2f:58:4c:2b:2b:e2:f8:0c:27:b4:cc:d5:ea: ff:7e:86:cc:62:7c:7d:fe:32:56:d6:32:91:f0:92: 88:b2:28:68:cf:7f:e1:1c:aa:43:7b:17:ed:65:e3: 12:8e:c0:be:79:1b:13:dc:81:95:c7:ea:ba:e3:00: 2c:73:7b:76:e6:2f:1e:09:f5:6f:ba:b4:12:44:9c: ac:9c:9e:06:a9:a0:cf:26:e8:02:52:be:d1:54:d9: e1:5e:1d:12:92:d0:96:00:01:4b:ab:52:b1:d7:d9: 25:58:4a:69:a3:dd:56:8e:98:af:fd:87:1d:10:6f: 0c:cd:04:19:ac:68:bc:a1:33:70:bd:0a:b5:91:48: 92:48:81:2f:a0:db:2e:fe:a9:48:fd:8b:b9:b8:b6: 9a:4a:48:71:62:12:39:9b:ce:ee:1d:0a:cf:d1:ea: b7:0b:d6:20:b0:77:d9:8f:5a:9b:5d:8a:63:fd:ab: a4:53:34:30:9b:7f:bc:3f:30:9c:58:54:81:af:21: b5:a5:13:2c:96:ea:3a:13:b7:e9:3f:87:6d:ca:af: 97:71:09:1b:61:66:25:46:72:c5:1b:ad:a7:e7:98: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:13:5C:4E:25:1E:03:6D:46:19:12:C9:A2:8F:32:07:34:1F:E7:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2a11ff05-0d1c-3be8-9361-2a091482c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:38::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ba:5a:3c:0d:35:43:91:62:2f:c9:12:00:76:8d:35:f7:4d: 13:c9:61:36:3b:cd:95:e6:f8:3f:ea:8b:f3:f8:ad:77:2e:69: 3c:6b:f5:9f:94:65:f5:2c:4b:4a:e5:40:b3:0b:e7:f9:be:57: e3:11:10:eb:be:cf:dd:7b:48:e9:cb:84:57:02:d8:fa:a1:58: 26:16:5f:5d:95:0a:1f:8e:ae:e2:42:f6:94:4d:49:53:e0:24: ff:5b:26:a5:33:2e:43:65:f2:b6:66:91:77:b5:39:6a:fe:00: 89:8b:a7:6f:4d:39:06:12:a1:7f:e6:01:cb:45:bc:2f:de:91: 55:0b:a9:37:09:0a:c7:17:c1:4b:5a:5d:bc:47:5e:1a:da:fc: ab:f2:56:3b:44:f1:16:27:b3:04:ef:23:67:56:07:42:07:43: 7e:ff:38:d1:36:62:2a:23:98:ac:b6:06:6b:de:46:3a:63:2e: ee:52:c7:24:d2:45:fa:27:70:d9:c2:3e:62:07:11:41:21:33: 74:85:48:de:90:17:6b:4a:82:b5:b1:e0:ab:d3:78:03:7a:3c: cd:16:f8:16:47:ae:e1:61:d0:6e:f2:c9:6a:6e:43:08:0b:35: 51:41:a4:23:68:3e:71:f7:f0:15:57:e5:fc:54:66:ef:51:d0: 85:94:cf:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyKDHIUaUM+yOCrQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk YmE1NzYyYTYtODEyMS00NGNkLWI0ZDUtYTZjMWMyZWM0ZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIv83Cjp3LuhvLtKNGHEZGZw3Lp2nDljQZk+ lzZu5C9YTCsr4vgMJ7TM1er/fobMYnx9/jJW1jKR8JKIsihoz3/hHKpDexftZeMS jsC+eRsT3IGVx+q64wAsc3t25i8eCfVvurQSRJysnJ4GqaDPJugCUr7RVNnhXh0S ktCWAAFLq1Kx19klWEppo91Wjpiv/YcdEG8MzQQZrGi8oTNwvQq1kUiSSIEvoNsu /qlI/Yu5uLaaSkhxYhI5m87uHQrP0eq3C9YgsHfZj1qbXYpj/aukUzQwm3+8PzCc WFSBryG1pRMsluo6E7fpP4dtyq+XcQkbYWYlRnLFG62n55iYpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFITXE4lHgNtRhkSyaKPMgc0H+fdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmExMWZmMDUtMGQxYy0z YmU4LTkzNjEtMmEwOTE0ODJjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA26WjwNNUORYi/JEgB2jTX3TRPJYTY7zZXm+D/qi/P4rXcuaTxr 9Z+UZfUsS0rlQLML5/m+V+MREOu+z917SOnLhFcC2PqhWCYWX12VCh+OruJC9pRN SVPgJP9bJqUzLkNl8rZmkXe1OWr+AImLp29NOQYSoX/mActFvC/ekVULqTcJCscX wUtaXbxHXhra/KvyVjtE8RYnswTvI2dWB0IHQ37/ONE2YiojmKy2BmveRjpjLu5S xyTSRfoncNnCPmIHEUEhM3SFSN6QF2tKgrWx4KvTeAN6PM0W+BZHruFh0G7yyWpu QwgLNVFBpCNoPnH38BVX5fxUZu9R0IWUz3A= -----END CERTIFICATE-----Generated at Sun Jan 25 21:48:04 2026 by rpki-client