This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json) Hash identifier: a2MJ61Obml6dLifowaBphg1/3x4mNHKopjmfQIv6Udg= Subject key identifier: EC:C2:3A:7F:1F:F6:97:B4:E6:B4:D8:AB:25:11:B4:02:27:CB:12:BA Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584C7252134A34BB4406793F2880 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 29752 IP address blocks: 23.251.35.0/24 maxlen: 24 107.151.194.0/24 maxlen: 24 198.44.172.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:52:13:4a:34:bb:44:06:79:3f:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=dfed1fbf-a076-408c-b1b2-c7913fb301c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dc:e9:45:c8:66:71:d8:96:e5:74:68:91:c2: 18:47:60:01:da:43:d7:c7:35:74:1c:f3:95:12:12: e2:85:66:8c:d7:7b:27:bf:c0:97:91:6b:de:92:77: 06:6f:a1:65:dd:5d:b7:07:0c:aa:5d:cd:62:84:08: 1f:2b:1c:75:b5:4d:f6:70:da:5f:6f:04:e4:dc:90: 43:77:00:46:90:02:59:4e:40:72:27:8c:7c:9a:a6: 4c:e0:02:47:cb:15:e8:73:e3:a5:b9:cb:f0:8b:41: 66:51:f6:51:d8:bb:ab:c5:50:46:4c:0d:e4:fc:0f: 90:1a:4f:72:bb:a7:00:09:dd:fe:93:0c:82:83:b1: 6f:3f:6f:f6:c3:0c:a7:e4:df:f8:cc:01:6f:e3:33: b2:b5:fb:5d:66:d1:f2:1c:b2:96:25:95:0c:a5:bd: e1:8b:1c:81:99:b3:50:f5:dc:fc:86:ff:6f:3e:ad: 70:44:73:0d:83:4a:41:81:07:b4:8f:31:42:5d:d1: 96:db:c7:bf:2b:79:ed:6d:39:44:54:86:39:bd:d1: 20:c8:d6:ae:4e:b6:5b:04:83:58:e2:c7:d3:33:8c: fe:c1:0b:43:31:24:50:c4:9a:8c:7d:b0:12:fe:38: 1b:97:f6:64:da:7d:91:1a:69:08:46:4d:c2:88:e6: c6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C2:3A:7F:1F:F6:97:B4:E6:B4:D8:AB:25:11:B4:02:27:CB:12:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.35.0/24 107.151.194.0/24 198.44.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0f:cf:5e:5f:b5:a0:e1:38:1d:28:a8:06:31:7d:b9:4a:52: 52:72:4e:a5:29:86:de:f7:89:ec:8f:b5:35:ef:82:a7:ac:df: a9:19:0d:16:0a:f2:8a:49:fd:1b:34:2d:aa:22:4a:96:a0:de: a4:d3:e2:00:41:29:84:92:36:c7:4c:66:8b:90:06:ba:fb:f8: 6a:71:0f:54:ad:88:ac:49:f8:9e:93:a9:1d:4c:8c:68:88:78: b9:f5:42:0b:1a:dc:c6:84:7b:af:67:4d:ee:c0:75:9f:95:48: 50:5f:56:e4:fb:05:43:f0:f3:70:92:cb:eb:6b:57:f1:9e:58: 6b:7d:25:d8:cf:85:36:2b:23:f1:3c:73:cb:f8:c7:93:4c:59: c7:89:0d:77:6e:e5:b9:67:49:a2:a3:3a:64:3a:11:3c:8d:78: e1:48:f4:92:a1:56:09:96:60:57:b3:ed:94:52:49:91:a0:e0: 22:5f:a7:11:48:d8:64:26:68:60:91:ab:7e:d4:51:bd:c6:5e: 2a:10:cc:c6:0e:30:7a:05:05:3b:a4:25:4f:11:09:33:54:d1: 75:0f:81:28:8c:87:ab:c7:3a:3f:db:58:2a:f8:d8:9a:18:44: 9a:b4:5f:c8:d9:8e:bd:11:43:09:1c:d0:ab:42:fa:34:e0:0f: 8c:a6:6f:d4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWExyUhNKNLtEBnk/KIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk ZGZlZDFmYmYtYTA3Ni00MDhjLWIxYjItYzc5MTNmYjMwMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodzpRchmcdiW5XRokcIYR2AB2kPXxzV0HPOV EhLihWaM13snv8CXkWvekncGb6Fl3V23BwyqXc1ihAgfKxx1tU32cNpfbwTk3JBD dwBGkAJZTkByJ4x8mqZM4AJHyxXoc+Olucvwi0FmUfZR2LurxVBGTA3k/A+QGk9y u6cACd3+kwyCg7FvP2/2wwyn5N/4zAFv4zOytftdZtHyHLKWJZUMpb3hixyBmbNQ 9dz8hv9vPq1wRHMNg0pBgQe0jzFCXdGW28e/K3ntbTlEVIY5vdEgyNauTrZbBINY 4sfTM4z+wQtDMSRQxJqMfbAS/jgbl/Zk2n2RGmkIRk3CiObGhQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOzCOn8f9pe05rTYqyURtAInyxK6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMzFjMGE1ZDgtM2VkZS0z MTk5LWJhZmUtZjZhNzEzNGQ5M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF/sjAwQA a5fCAwQCxiysMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAUPz15ftaDhOB0oqAYxfblKUlJyTqUpht73ieyP tTXvgqes36kZDRYK8opJ/Rs0LaoiSpag3qTT4gBBKYSSNsdMZouQBrr7+GpxD1St iKxJ+J6TqR1MjGiIeLn1Qgsa3MaEe69nTe7AdZ+VSFBfVuT7BUPw83CSy+trV/Ge WGt9JdjPhTYrI/E8c8v4x5NMWceJDXdu5blnSaKjOmQ6ETyNeOFI9JKhVgmWYFez 7ZRSSZGg4CJfpxFI2GQmaGCRq37UUb3GXioQzMYOMHoFBTukJU8RCTNU0XUPgSiM h6vHOj/bWCr42JoYRJq0X8jZjr0RQwkc0KtC+jTgD4ymb9Q= -----END CERTIFICATE-----Generated at Sun Jan 25 14:17:42 2026 by rpki-client