This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa File: 41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa (raw, json) Hash identifier: ocqZUBgIJxDineodPcy9qbv12Jj5EGpnMr0qLMThrKM= Subject key identifier: 11:D8:33:EC:29:89:73:80:18:19:BE:8E:FD:F9:2C:27:83:12:27:2F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C8E3C74C4E8D28F27DE80FF90 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa Signing time: Sat 17 Jan 2026 14:00:38 +0000 ROA not before: Sat 17 Jan 2026 14:00:38 +0000 ROA not after: Fri 17 Apr 2026 13:00:38 +0000 asID: 31898 IP address blocks: 158.101.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8e:3c:74:c4:e8:d2:8f:27:de:80:ff:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 17 14:00:38 2026 GMT Not After : Apr 17 13:00:38 2026 GMT Subject: CN=ea4c804a-d68f-4ab0-89ed-55f78f855c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:64:f1:08:1d:57:0f:1a:fd:73:85:32:b8: 14:a2:77:4f:f0:3d:f8:00:0f:3a:cb:44:8e:93:9a: 3b:7b:f6:8c:f2:50:ff:90:f3:69:fd:d0:80:2a:e6: 77:ba:0c:7b:0c:95:34:b5:f9:31:d3:bc:2b:21:ce: 77:75:1b:9a:f8:9a:43:47:b4:d3:8f:37:55:15:8b: 3c:4c:d2:0f:8e:9f:33:31:3e:19:da:29:d9:ca:b7: 65:be:d5:ca:6e:7c:66:9c:bb:c0:c7:c8:b2:e9:84: dd:7c:dd:25:b6:bf:4c:38:72:c0:f1:0c:61:29:98: 0f:77:3f:c1:e3:21:52:3a:0a:4c:ca:d6:3d:e0:23: b0:91:97:55:6b:68:33:55:6f:65:30:36:b2:5c:61: 55:8a:45:54:d3:80:6d:c5:e3:76:f7:a2:72:60:89: f9:ec:2c:13:c7:41:d0:df:90:06:54:2e:a4:ac:11: 4e:8c:10:b1:f4:27:20:63:56:61:8f:f3:3b:77:2e: 72:6e:c6:bf:90:36:49:a9:72:58:b7:32:3c:30:31: a7:66:cd:3e:1f:15:af:63:8f:17:d9:57:d3:20:41: 51:f1:f0:12:2a:fc:06:6b:0f:b2:a3:8f:43:90:cd: d5:ac:af:24:c6:08:ee:dc:78:36:df:01:43:3b:17: a0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D8:33:EC:29:89:73:80:18:19:BE:8E:FD:F9:2C:27:83:12:27:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41892b78-f084-31ce-a4dc-a9a8d0fc47ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 158.101.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:a8:95:14:8d:8c:16:af:2a:d7:13:46:c1:07:46:78:f3:c4: 91:88:d0:71:f0:06:3d:0e:bd:39:0b:21:af:45:5b:af:70:e2: f8:b5:b4:9e:cc:51:33:e1:f1:7b:12:6e:f9:a1:f0:da:1c:3a: b3:b5:17:fb:79:cd:a5:ed:30:00:d9:41:0a:e6:bb:b4:c8:0d: 94:9c:48:ae:b1:d8:2b:f6:19:7b:b5:a2:a9:38:30:cf:2c:61: 5c:28:fb:c0:3b:48:a0:18:7f:91:84:5f:db:21:95:f8:83:5b: 20:98:af:90:6d:cb:74:bc:f5:1b:d7:74:e8:80:a2:ff:2d:0e: a3:ad:81:42:f5:94:42:b0:88:d9:4b:7c:60:a5:51:0a:2a:ed: 1a:54:4d:a6:66:57:4e:46:78:a0:74:e7:f3:7a:cb:a0:6f:57: 40:c1:af:2f:f3:c5:f8:20:5e:f7:82:46:cc:6f:5f:6d:43:29: bc:7b:bd:29:a9:0a:70:4c:d7:8d:0d:9a:ca:ea:60:6b:0a:41: c4:70:be:67:13:d2:e4:67:76:bc:0a:2d:52:9b:ee:97:74:f0: b7:a5:13:a1:b9:5a:fd:dc:b9:b0:97:31:1b:e3:e8:9f:a2:43: b9:c5:48:70:24:a2:c9:3b:44:26:af:fd:89:68:72:b7:09:cd: 11:00:81:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyOPHTE6NKPJ96A/5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk ZWE0YzgwNGEtZDY4Zi00YWIwLTg5ZWQtNTVmNzhmODU1YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvxk8QgdVw8a/XOFMrgUondP8D34AA86y0SO k5o7e/aM8lD/kPNp/dCAKuZ3ugx7DJU0tfkx07wrIc53dRua+JpDR7TTjzdVFYs8 TNIPjp8zMT4Z2inZyrdlvtXKbnxmnLvAx8iy6YTdfN0ltr9MOHLA8QxhKZgPdz/B 4yFSOgpMytY94COwkZdVa2gzVW9lMDayXGFVikVU04BtxeN296JyYIn57CwTx0HQ 35AGVC6krBFOjBCx9CcgY1Zhj/M7dy5ybsa/kDZJqXJYtzI8MDGnZs0+HxWvY48X 2VfTIEFR8fASKvwGaw+yo49DkM3VrK8kxgju3Hg23wFDOxegLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHYM+wpiXOAGBm+jv35LCeDEicvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDE4OTJiNzgtZjA4NC0z MWNlLWE0ZGMtYTlhOGQwZmM0N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnmVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6olRSNjBavKtcTRsEHRnjzxJGI0HHwBj0OvTkLIa9FW69w4vi1tJ7M UTPh8XsSbvmh8NocOrO1F/t5zaXtMADZQQrmu7TIDZScSK6x2Cv2GXu1oqk4MM8s YVwo+8A7SKAYf5GEX9shlfiDWyCYr5Bty3S89RvXdOiAov8tDqOtgUL1lEKwiNlL fGClUQoq7RpUTaZmV05GeKB05/N6y6BvV0DBry/zxfggXveCRsxvX21DKbx7vSmp CnBM140NmsrqYGsKQcRwvmcT0uRndrwKLVKb7pd08LelE6G5Wv3cubCXMRvj6J+i Q7nFSHAkosk7RCav/YlocrcJzREAgRo= -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:56 2026 by rpki-client