This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa File: 5a81a879-7a98-330f-b70f-4e80d2348605.roa (raw, json) Hash identifier: t4o9PrTEx3ZzQAD6jH7+mOyfTAfDAOexrU/75Ldypgs= Subject key identifier: F3:C3:EA:D3:CC:37:41:D3:70:AD:CC:95:E8:71:8C:1D:CA:F7:18:69 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584C926C212D0054AC2D567D7DA0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa Signing time: Mon 19 Jan 2026 02:00:29 +0000 ROA not before: Mon 19 Jan 2026 02:00:29 +0000 ROA not after: Sun 19 Apr 2026 01:00:29 +0000 asID: 812 IP address blocks: 67.231.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:92:6c:21:2d:00:54:ac:2d:56:7d:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Jan 19 02:00:29 2026 GMT Not After : Apr 19 01:00:29 2026 GMT Subject: CN=86c0d3c4-0c88-4239-8e8b-b067468992f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:8c:96:6e:ba:e8:a5:8a:46:56:16:87:b7: 91:e6:48:62:4e:43:6d:5e:49:f1:b5:e4:2b:37:c0: 72:ea:d0:76:3d:4d:37:bc:98:08:4a:71:2d:a7:ff: 13:e8:a9:d6:c1:88:2b:d9:9c:4d:51:a3:a1:7f:ac: d7:66:17:60:26:c2:60:1b:60:71:11:49:9e:91:d9: 39:25:4c:99:1f:81:2d:29:7c:d7:6e:d4:26:bc:73: 64:c7:c9:dd:1f:33:ab:aa:d0:1b:33:8d:b2:b7:d1: dc:9d:72:fa:0c:41:c3:65:02:b6:a9:89:a7:45:e7: 8b:48:9a:68:c5:43:9e:29:97:0c:c0:7d:d2:c5:eb: b9:48:79:35:86:0c:d5:aa:c0:92:88:7c:9c:11:f9: 44:28:48:d2:8a:1e:67:03:1e:94:6a:2b:dc:14:ce: cf:ca:b7:23:25:9b:bc:9c:d3:bc:06:13:45:44:b5: 96:57:0d:aa:32:a9:dd:7c:f4:b4:67:7a:9c:16:bc: a2:fc:0a:99:9e:02:f5:14:ac:97:c5:8f:13:eb:5a: 63:5d:8b:24:f5:ae:59:0d:fe:5f:62:c6:7f:26:5f: a8:81:30:a8:b2:91:5b:63:ca:12:a9:1c:12:ef:32: 49:09:dc:47:6c:b4:24:be:91:a2:09:a0:2b:b9:c8: 36:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C3:EA:D3:CC:37:41:D3:70:AD:CC:95:E8:71:8C:1D:CA:F7:18:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 67.231.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:00:d7:28:ca:fd:28:ba:26:3e:b2:dd:9b:91:eb:ff:14:30: ea:2c:43:46:8d:c4:95:7b:75:52:04:95:f4:f9:d8:e0:25:ee: 25:4f:9d:51:e6:7b:40:5e:ce:fc:78:4a:3e:14:90:dc:6f:4d: cf:25:a2:b2:62:e2:6f:93:e8:44:a4:f3:53:b0:fe:89:6d:04: 37:1c:4b:3a:64:5f:86:88:26:35:f7:05:38:0f:f2:54:2f:c4: d3:76:c7:f9:8f:f5:b5:83:43:f5:2f:4d:98:6e:51:cc:76:01: 19:c2:11:45:e9:81:ef:46:e1:6b:4f:ee:1c:9c:50:25:f3:8d: ce:a6:e6:3d:12:e0:21:ed:08:af:2c:7c:5f:35:61:8f:81:ca: f9:75:7e:8b:7b:5a:b3:d1:cc:6e:20:a8:ba:2f:93:80:6e:be: c0:fa:93:06:8e:5a:0e:31:28:0d:a1:d4:bc:d6:e3:ea:d8:cc: ee:c0:74:a2:ff:48:6c:fd:3a:c7:60:29:13:b1:03:e7:eb:3d: 55:7b:d5:cb:a4:05:16:ac:d5:15:ca:e6:ca:74:6a:a8:83:92: 01:25:0e:fd:58:5b:5c:7c:25:5a:5b:82:62:b9:46:8c:f2:3e: 18:1a:6c:ce:65:de:3e:4c:5a:b2:ca:f4:3d:30:f5:fc:11:8a: 26:92:fb:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEySbCEtAFSsLVZ9faAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDExOTAyMDAyOVoXDTI2MDQxOTAxMDAyOVowLzEtMCsGA1UEAxMk ODZjMGQzYzQtMGM4OC00MjM5LThlOGItYjA2NzQ2ODk5MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UWMlm666KWKRlYWh7eR5khiTkNtXknxteQr N8By6tB2PU03vJgISnEtp/8T6KnWwYgr2ZxNUaOhf6zXZhdgJsJgG2BxEUmekdk5 JUyZH4EtKXzXbtQmvHNkx8ndHzOrqtAbM42yt9HcnXL6DEHDZQK2qYmnReeLSJpo xUOeKZcMwH3Sxeu5SHk1hgzVqsCSiHycEflEKEjSih5nAx6UaivcFM7PyrcjJZu8 nNO8BhNFRLWWVw2qMqndfPS0Z3qcFryi/AqZngL1FKyXxY8T61pjXYsk9a5ZDf5f YsZ/Jl+ogTCospFbY8oSqRwS7zJJCdxHbLQkvpGiCaArucg2ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPPD6tPMN0HTcK3MlehxjB3K9xhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvNWE4MWE4NzktN2E5OC0z MzBmLWI3MGYtNGU4MGQyMzQ4NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4A1yjK/Si6Jj6y3ZuR6/8UMOosQ0aNxJV7dVIElfT52OAl7iVPnVHm e0Bezvx4Sj4UkNxvTc8lorJi4m+T6ESk81Ow/oltBDccSzpkX4aIJjX3BTgP8lQv xNN2x/mP9bWDQ/UvTZhuUcx2ARnCEUXpge9G4WtP7hycUCXzjc6m5j0S4CHtCK8s fF81YY+Byvl1fot7WrPRzG4gqLovk4BuvsD6kwaOWg4xKA2h1LzW4+rYzO7AdKL/ SGz9OsdgKROxA+frPVV71cukBRas1RXK5sp0aqiDkgElDv1YW1x8JVpbgmK5Rozy PhgabM5l3j5MWrLK9D0w9fwRiiaS+0w= -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:08 2026 by rpki-client