This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa File: 940cb506-c287-3123-b5cd-8640efc7de0a.roa (raw, json) Hash identifier: z6y+rzmFO+p6fZE85SRtgiziOgasS/PEhQ+TjRAwA+s= Subject key identifier: 68:C0:C2:79:72:CE:1D:05:AB:93:E0:C0:8D:95:21:BE:AD:C9:E5:BE Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584C926C2070618AF4F51F1B4980 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa Signing time: Mon 19 Jan 2026 02:00:29 +0000 ROA not before: Mon 19 Jan 2026 02:00:29 +0000 ROA not after: Sun 19 Apr 2026 01:00:29 +0000 asID: 812 IP address blocks: 64.71.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:92:6c:20:70:61:8a:f4:f5:1f:1b:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Jan 19 02:00:29 2026 GMT Not After : Apr 19 01:00:29 2026 GMT Subject: CN=c996e53d-50e0-4da5-89cb-a111bf77c924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:b9:ba:c1:1d:17:87:0b:53:f2:f3:3a:4b: 13:27:95:eb:8f:f0:40:78:ab:c1:e7:11:6c:3d:d4: c7:7c:b0:e0:73:bd:cd:f7:60:48:6b:23:b5:69:3b: dc:8d:ce:0a:64:7c:d9:0f:77:f0:8e:27:3c:ed:49: ab:dc:ba:f1:5b:42:49:dc:11:a0:da:70:f8:68:48: 07:1a:51:a3:bd:49:e5:03:19:8d:df:fd:f8:0c:9f: ba:2d:70:86:b2:58:1b:4d:c3:1a:9e:7e:94:40:e7: d8:ac:72:a3:37:de:03:d8:99:6e:11:14:26:32:ea: 51:58:02:3a:52:6e:bb:58:67:3e:d3:80:bb:e3:71: 79:91:28:20:b0:7f:aa:42:70:c2:2a:cd:28:0a:7e: 55:ea:60:b4:44:71:39:8d:8e:78:ff:d6:8d:cd:b2: 9f:7a:87:48:41:64:25:f2:30:3e:0b:06:ee:be:57: 68:b7:f9:b8:ad:d8:ed:98:b9:e7:ce:f3:fa:f0:32: 98:f8:2b:4c:61:6f:08:25:3d:8a:0d:d0:50:37:7c: d9:99:6b:9e:34:2d:02:45:b4:26:7e:91:4f:d1:a6: dd:ab:15:e4:80:ec:c4:6f:56:58:a9:96:c6:66:5e: ad:57:6e:1d:e0:a0:40:13:be:3d:8a:da:9f:e0:92: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C0:C2:79:72:CE:1D:05:AB:93:E0:C0:8D:95:21:BE:AD:C9:E5:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/940cb506-c287-3123-b5cd-8640efc7de0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 64.71.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:47:84:a8:94:33:e6:6b:f8:4a:c4:79:f2:58:7c:7c:69:ee: 99:93:73:fb:eb:67:f9:0c:da:87:c0:9c:5c:0d:2f:bb:8a:33: 79:23:e0:1e:0b:1a:52:be:6e:94:16:b8:8f:12:38:df:cc:15: 31:ff:f2:e3:9f:a8:18:bf:37:f0:e4:cd:5c:7b:37:6f:77:a4: 76:53:fb:09:0a:8c:e2:92:c0:70:c6:7f:b4:7a:2a:04:8d:5c: 06:6b:83:75:6d:ac:e1:19:1b:e9:ae:98:54:d9:e4:74:5a:56: 0e:2c:44:b5:0d:0c:7a:25:19:e9:1e:5d:0e:2f:69:62:16:cd: e9:d4:86:92:24:d1:e5:22:3c:52:ea:17:4f:c1:92:54:87:84: de:88:03:16:2f:27:fa:a6:c0:27:c2:f3:f2:cf:35:d9:8b:e7: 89:4a:03:21:36:76:a5:ae:00:40:a3:79:3e:57:d9:bb:f7:83: ae:08:4c:ee:c7:31:13:e4:e0:21:07:54:b8:12:9a:74:de:15: ae:a0:92:95:d7:3c:d5:99:84:8f:64:8b:13:3f:c9:92:f1:97: cb:b2:90:f2:dd:44:ee:83:b7:04:f2:b4:ec:b5:dc:bb:b5:27: 2f:3c:f0:4d:d6:a7:d2:d3:f8:ec:f5:ff:44:9d:ac:99:35:8e: d5:bc:18:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEySbCBwYYr09R8bSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI2MDExOTAyMDAyOVoXDTI2MDQxOTAxMDAyOVowLzEtMCsGA1UEAxMk Yzk5NmU1M2QtNTBlMC00ZGE1LTg5Y2ItYTExMWJmNzdjOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncq5usEdF4cLU/LzOksTJ5Xrj/BAeKvB5xFs PdTHfLDgc73N92BIayO1aTvcjc4KZHzZD3fwjic87Umr3LrxW0JJ3BGg2nD4aEgH GlGjvUnlAxmN3/34DJ+6LXCGslgbTcMann6UQOfYrHKjN94D2JluERQmMupRWAI6 Um67WGc+04C743F5kSggsH+qQnDCKs0oCn5V6mC0RHE5jY54/9aNzbKfeodIQWQl 8jA+Cwbuvldot/m4rdjtmLnnzvP68DKY+CtMYW8IJT2KDdBQN3zZmWueNC0CRbQm fpFP0abdqxXkgOzEb1ZYqZbGZl6tV24d4KBAE749itqf4JINEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjAwnlyzh0Fq5PgwI2VIb6tyeW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvOTQwY2I1MDYtYzI4Ny0z MTIzLWI1Y2QtODY0MGVmYzdkZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJHhKiUM+Zr+ErEefJYfHxp7pmTc/vrZ/kM2ofAnFwNL7uKM3kj4B4L GlK+bpQWuI8SON/MFTH/8uOfqBi/N/DkzVx7N293pHZT+wkKjOKSwHDGf7R6KgSN XAZrg3VtrOEZG+mumFTZ5HRaVg4sRLUNDHolGekeXQ4vaWIWzenUhpIk0eUiPFLq F0/BklSHhN6IAxYvJ/qmwCfC8/LPNdmL54lKAyE2dqWuAECjeT5X2bv3g64ITO7H MRPk4CEHVLgSmnTeFa6gkpXXPNWZhI9kixM/yZLxl8uykPLdRO6DtwTytOy13Lu1 Jy888E3Wp9LT+Oz1/0SdrJk1jtW8GAc= -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:17 2026 by rpki-client