This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa File: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (raw, json) Hash identifier: if8zgtzM2usFyn2wZSGsZXfbuhqS2ym1iBkrYf8p3Ps= Subject key identifier: 37:76:EC:C3:FD:A8:52:B0:E0:EB:E7:BD:AB:66:13:B8:84:9C:2A:2B Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584C8A0C71F124E0B78CB7AF9C40 Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 0 IP address blocks: 2001:504:3d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:71:f1:24:e0:b7:8c:b7:af:9c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=6aba490e-79ff-4ee8-898d-dfe501cfad8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:c9:a8:97:28:e1:ad:24:a5:50:71:ca:84: 57:20:4c:b1:b6:26:ba:c7:7b:53:45:a2:d6:d7:ee: 64:f5:82:63:49:cf:ae:6e:c3:b7:1c:26:7b:e6:f6: 2d:1c:72:67:0b:ee:7d:b5:a6:2b:e8:d3:50:dd:ba: 9e:1a:7e:ec:cb:59:24:2b:32:28:d9:8b:f5:be:20: 6f:db:58:88:35:4d:c2:52:aa:8c:f6:98:b3:7a:ba: 82:33:6e:02:d3:30:96:82:91:71:1e:69:71:1a:fe: e2:a7:84:be:4b:d0:f5:ab:0b:e1:a5:36:1e:75:03: c5:a9:7a:0a:05:6a:f6:5c:e0:d9:37:a9:be:44:22: ed:bd:d6:b4:da:fe:6f:5e:04:d6:1b:90:f3:1f:8b: ef:4f:2e:cb:ef:bc:b6:e0:d6:9d:83:57:5a:3f:b6: c0:71:c8:a0:2f:b6:76:9e:a6:d6:7b:70:a4:af:e3: 30:97:30:5c:cd:c0:78:4e:a5:b6:a0:eb:bd:a9:28: a6:d0:8b:c6:37:1b:e8:f8:4b:f5:ca:3f:7a:a7:1b: 57:8c:9d:85:99:cb:fe:78:10:da:42:a5:99:d1:86: 09:43:22:38:3f:ed:07:e3:00:a6:71:af:61:f5:7f: f3:7b:da:99:52:c6:47:45:bd:39:31:58:03:24:be: 9e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:76:EC:C3:FD:A8:52:B0:E0:EB:E7:BD:AB:66:13:B8:84:9C:2A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/2aa7585f-d51c-30da-a0fb-36d9463654ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:3d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:62:8c:a0:b7:5f:67:0f:45:24:65:fc:fd:4d:88:cc:7f:dd: 44:d1:7c:b1:72:83:24:62:c6:e3:ad:5d:3d:f7:75:dd:c2:a4: be:f5:52:f9:25:b6:ad:cb:43:45:49:8e:e5:c3:9f:3e:94:7a: 93:fe:d7:26:67:ca:bc:2b:5e:e9:6e:b4:39:3b:89:38:88:e1: 62:3b:76:6d:f1:c4:36:21:72:d5:d5:3b:d2:1c:61:8b:d5:bb: d9:c2:33:a6:b5:18:92:82:d8:f4:97:84:da:17:9d:04:a2:23: 4f:6a:2d:3b:d9:78:0c:74:af:e0:83:6a:ba:81:34:42:56:bb: 82:0b:c3:4d:16:fa:28:32:19:cb:c4:d9:1e:91:69:ba:d7:5e: 25:77:e4:ea:8d:e4:a5:99:f9:f5:af:56:37:89:a2:96:5f:f0: 0e:83:43:f8:c0:67:c6:a4:e7:c1:df:65:a8:b7:53:12:86:e5: 5f:b4:0a:e6:91:ad:24:ff:4f:2d:d8:ca:30:8e:0f:0d:08:8f: c8:58:6e:59:5f:f7:36:ff:d3:e8:b9:97:0c:6c:1f:f0:95:dd: 15:db:39:0b:e8:ea:49:fe:21:85:03:c6:74:93:5d:c1:ea:b4: b5:86:ce:ad:e0:dc:fd:0c:88:9f:c0:43:cf:38:5f:98:34:0f: 71:cc:a4:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyKDHHxJOC3jLevnEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NmFiYTQ5MGUtNzlmZi00ZWU4LTg5OGQtZGZlNTAxY2ZhZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0nJqJco4a0kpVBxyoRXIEyxtia6x3tTRaLW 1+5k9YJjSc+ubsO3HCZ75vYtHHJnC+59taYr6NNQ3bqeGn7sy1kkKzIo2Yv1viBv 21iINU3CUqqM9pizerqCM24C0zCWgpFxHmlxGv7ip4S+S9D1qwvhpTYedQPFqXoK BWr2XODZN6m+RCLtvda02v5vXgTWG5DzH4vvTy7L77y24Nadg1daP7bAccigL7Z2 nqbWe3Ckr+MwlzBczcB4TqW2oOu9qSim0IvGNxvo+Ev1yj96pxtXjJ2Fmcv+eBDa QqWZ0YYJQyI4P+0H4wCmca9h9X/ze9qZUsZHRb05MVgDJL6e/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDd27MP9qFKw4OvnvatmE7iEnCorMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvMmFhNzU4NWYtZDUxYy0z MGRhLWEwZmItMzZkOTQ2MzY1NGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAA9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtijKC3X2cPRSRl/P1NiMx/3UTRfLFygyRixuOtXT33dd3CpL71 Uvkltq3LQ0VJjuXDnz6UepP+1yZnyrwrXulutDk7iTiI4WI7dm3xxDYhctXVO9Ic YYvVu9nCM6a1GJKC2PSXhNoXnQSiI09qLTvZeAx0r+CDarqBNEJWu4ILw00W+igy GcvE2R6RabrXXiV35OqN5KWZ+fWvVjeJopZf8A6DQ/jAZ8ak58HfZai3UxKG5V+0 CuaRrST/Ty3YyjCODw0Ij8hYbllf9zb/0+i5lwxsH/CV3RXbOQvo6kn+IYUDxnST XcHqtLWGzq3g3P0MiJ/AQ884X5g0D3HMpHY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:14:12 2026 by rpki-client