This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa File: 28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json) Hash identifier: jj/ajaS5Zf9Eh8//ldw4nxDnI3RqpVZ5+MTxfab5uOU= Subject key identifier: 67:3A:D8:D7:42:81:3E:00:C4:92:C0:48:BD:F2:47:11:80:A6:F5:B0 Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Certificate serial: 010D0C9F4328584C9536D651B65A31C2D33F1680 Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 14618 IP address blocks: 52.144.58.0/24 maxlen: 24 168.245.151.0/24 maxlen: 24 192.139.134.0/24 maxlen: 24 199.19.89.0/24 maxlen: 24 199.19.90.0/24 maxlen: 24 199.19.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:d6:51:b6:5a:31:c2:d3:3f:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=28a6f906-eb19-4c98-bbac-9f58ce8afb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d2:b2:3a:58:27:37:4b:53:bc:b7:c3:8a:41: 8c:db:13:1b:93:cb:c5:73:ba:f4:f7:2e:be:e3:62: e7:05:90:f9:b4:43:f0:4d:40:24:83:1c:d5:d9:a0: 2b:23:fd:80:71:ba:d0:f4:34:ee:15:39:a1:82:e7: 9f:eb:76:ee:61:9d:d3:82:f4:87:0c:47:ab:80:be: b3:f9:84:0f:01:e1:05:70:0c:da:ca:ab:52:af:6c: 83:73:12:4e:26:b0:7a:0e:06:15:89:9d:a7:b5:3f: 9b:21:64:a5:fa:19:34:d6:7d:1e:c8:70:72:54:12: 82:f5:e7:86:da:93:5e:38:4a:8e:72:7e:19:f7:60: 77:55:6a:b6:10:19:e6:1c:c4:0a:34:6e:9b:4f:91: f4:a8:9a:68:62:a1:35:a6:9a:1e:20:75:6b:f4:f8: d8:15:5f:f7:c9:f4:01:ab:16:b8:3e:d2:d6:0f:23: af:41:c2:7b:67:9f:dd:bb:c5:76:18:ef:73:1d:5e: dc:ac:4c:7e:70:78:d9:d7:8d:b2:6c:aa:37:12:8f: 56:e6:94:47:bd:1f:78:f0:79:05:d1:5f:92:fc:68: 39:9a:97:15:c4:db:dd:fa:f2:e8:9e:2a:46:b1:0c: 1c:3d:26:f0:06:8c:50:a6:51:9b:6e:53:24:cd:02: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3A:D8:D7:42:81:3E:00:C4:92:C0:48:BD:F2:47:11:80:A6:F5:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl X509v3 Authority Key Identifier: keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer sbgp-ipAddrBlock: critical IPv4: 52.144.58.0/24 168.245.151.0/24 192.139.134.0/24 199.19.89.0-199.19.91.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:2c:6c:95:e9:d8:2a:d8:6e:f2:00:8a:1e:4e:f7:4a:8b:82: af:2f:6b:2a:4a:3d:e1:9a:21:d5:88:39:17:1f:36:04:4f:4c: 90:9e:ce:a4:8e:f5:bc:74:22:20:5d:0c:ed:4e:35:f9:78:5d: d6:46:7c:a3:44:f2:e2:a8:6b:80:be:49:46:8b:33:90:55:3b: 07:35:2b:2c:0a:b2:6a:9f:15:96:66:76:a8:5f:85:44:01:f7: b8:ff:c8:98:8e:87:a2:a4:c1:d6:c3:c3:14:c8:42:c2:fd:c7: 09:89:5c:14:18:8c:35:80:bc:87:50:60:07:f6:88:24:b9:29: 1c:a4:31:93:b4:2c:6c:a9:d6:53:a0:ab:20:0c:15:c4:40:b4: e9:6c:c4:54:e9:53:30:4d:45:b3:2e:0d:51:98:a1:99:19:b5: 91:1c:cc:da:dd:43:98:00:e9:86:99:47:d8:60:6f:45:2e:da: b6:a7:e7:8f:9e:fb:8b:b6:64:36:06:c0:c5:75:db:c1:97:42: 9b:b3:0d:cc:ba:66:cf:b2:44:3d:d3:11:b5:d9:ae:08:a6:46: ce:fd:da:89:19:00:4a:28:ff:40:b7:b5:af:f9:2d:48:4c:38: ff:a5:fa:35:02:ac:3e:94:33:09:5d:da:6c:70:c3:ff:28:fb: 97:78:e8:06 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEyVNtZRtloxwtM/FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzJlM2EzYWQtYjFhYy00MTNkLThmOTgtYTY5NDI5YTZj YTk4MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk MjhhNmY5MDYtZWIxOS00Yzk4LWJiYWMtOWY1OGNlOGFmYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9KyOlgnN0tTvLfDikGM2xMbk8vFc7r09y6+ 42LnBZD5tEPwTUAkgxzV2aArI/2AcbrQ9DTuFTmhguef63buYZ3TgvSHDEergL6z +YQPAeEFcAzayqtSr2yDcxJOJrB6DgYViZ2ntT+bIWSl+hk01n0eyHByVBKC9eeG 2pNeOEqOcn4Z92B3VWq2EBnmHMQKNG6bT5H0qJpoYqE1ppoeIHVr9PjYFV/3yfQB qxa4PtLWDyOvQcJ7Z5/du8V2GO9zHV7crEx+cHjZ142ybKo3Eo9W5pRHvR948HkF 0V+S/Gg5mpcVxNvd+vLonipGsQwcPSbwBoxQplGbblMkzQJBEQIDAQABo4IDbzCC A2swHQYDVR0OBBYEFGc62NdCgT4AxJLASL3yRxGApvWwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUz YTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0MjlhNmNhOTgvMjg2NjRhOWEtZTEyMC0z NzAxLWIwYjctYjU4NTg2NThiZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJlM2EzYWQtYjFhYy00MTNkLThm OTgtYTY5NDI5YTZjYTk4LzMyZTNhM2FkLWIxYWMtNDEzZC04Zjk4LWE2OTQyOWE2 Y2E5OC5jcmwwHwYDVR0jBBgwFoAUyZVUezn1d+0L44pwe/Z3Q/qsyX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmUzYTNhZC1iMWFjLTQxM2QtOGY5OC1hNjk0 MjlhNmNhOTguY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQANJA6AwQA qPWXAwQAwIuGMAwDBADHE1kDBALHE1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjSxslenYKthu8gCKHk73 SouCry9rKko94Zoh1Yg5Fx82BE9MkJ7OpI71vHQiIF0M7U41+Xhd1kZ8o0Ty4qhr gL5JRoszkFU7BzUrLAqyap8VlmZ2qF+FRAH3uP/ImI6HoqTB1sPDFMhCwv3HCYlc FBiMNYC8h1BgB/aIJLkpHKQxk7QsbKnWU6CrIAwVxEC06WzEVOlTME1Fsy4NUZih mRm1kRzM2t1DmADphplH2GBvRS7atqfnj577i7ZkNgbAxXXbwZdCm7MNzLpmz7JE PdMRtdmuCKZGzv3aiRkASij/QLe1r/ktSEw4/6X6NQKsPpQzCV3abHDD/yj7l3jo Bg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:58:37 2026 by rpki-client