This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa File: a22d0a82-e1ee-3794-9394-20c3ba786983.roa (raw, json) Hash identifier: fQUE5roHAUR6vjhGvl6oSYRYWxPle6LbPt5pnyXxNik= Subject key identifier: D7:E2:EB:9A:0E:51:E5:67:E1:B7:4B:19:4B:87:08:8C:D0:8C:D3:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C9EFC89D94709BA0B9BB01958 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 31898 IP address blocks: 169.224.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:89:d9:47:09:ba:0b:9b:b0:19:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=e4ac3107-149f-4061-86a4-f160c76c9d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:19:b3:ae:03:51:ed:d2:f8:76:6c:47:57: 32:30:4e:71:d4:7f:3e:0c:33:26:7d:5f:6c:88:19: 46:99:be:ea:c9:d2:eb:95:35:13:0e:2b:25:da:ce: c9:86:a6:5f:86:7b:79:59:bf:cb:3c:ee:21:c3:c9: f5:b6:9b:56:0d:ae:7f:e5:1d:cd:2d:55:7b:8e:20: c8:5b:4c:01:52:d0:8e:75:f3:72:ec:ea:63:8c:58: ff:f7:71:7f:0b:b4:e0:9e:12:fe:d9:90:11:5f:53: 06:9a:00:99:4d:92:d4:e9:ca:33:de:67:56:b6:90: 06:e4:c6:fa:11:e1:d9:ab:0b:50:d4:99:9a:ab:c0: 6e:f6:c2:6d:b6:55:30:b0:0b:a8:8c:5f:1e:27:57: a5:69:ae:b2:9d:cb:05:83:e6:55:aa:f8:3b:b9:27: 16:a9:53:17:c5:9d:c2:32:0d:22:48:e5:49:06:e7: c5:dc:0b:db:c0:af:38:4d:8a:ae:76:55:95:fe:15: 95:bc:9a:49:01:59:4a:a7:0f:d0:d4:19:a1:af:61: 84:85:7f:dd:8b:2b:a1:b4:eb:cd:48:d2:b9:74:81: b9:b6:be:75:f5:9b:93:71:ab:69:26:fd:27:34:a3: aa:50:60:7e:25:9c:5b:b2:1c:13:97:11:2d:81:e4: e6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E2:EB:9A:0E:51:E5:67:E1:B7:4B:19:4B:87:08:8C:D0:8C:D3:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a22d0a82-e1ee-3794-9394-20c3ba786983.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 169.224.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1d:13:17:62:31:1a:22:63:91:da:f4:80:00:ca:18:a9:8d: 5c:70:03:57:5c:32:e8:16:20:23:41:d3:14:b1:36:fa:3d:01: 45:8f:60:c6:5b:dd:bf:5a:27:e1:06:c9:a1:7f:b3:21:3d:d1: 79:6f:70:34:ed:34:af:88:95:3e:5f:ca:93:35:56:c5:3c:7b: 20:35:42:35:f7:71:cc:fc:60:31:94:ea:25:22:50:17:4c:fa: c1:aa:eb:f7:39:45:86:d7:e5:b7:38:cd:b4:1a:b1:fd:11:da: e1:5a:83:65:bf:ca:3f:bf:55:b1:ce:6b:f6:d1:5e:f0:73:fe: 78:6f:a1:03:8a:77:03:17:7b:00:21:40:23:db:ce:34:5b:16: 9d:0d:27:59:a9:df:74:ed:0c:e6:55:01:c1:c5:da:c6:18:ed: 5e:30:33:7b:83:93:2a:0b:2a:bf:a8:bf:ca:b2:4f:cd:df:bc: ea:8e:aa:ee:79:1e:8a:99:9a:c8:3b:f1:b7:ab:96:10:43:3b: d6:b1:4a:0f:d6:a8:be:5a:ea:97:01:e6:ce:2f:da:f6:6f:f3: 41:ad:11:a2:c5:f6:ca:5e:8a:b7:db:49:64:a8:46:ed:42:3f: f9:4b:6b:7d:6a:dc:a9:d8:31:97:1d:01:c6:4b:ca:76:66:62: fd:ee:56:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/InZRwm6C5uwGVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk ZTRhYzMxMDctMTQ5Zi00MDYxLTg2YTQtZjE2MGM3NmM5ZDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCsZs64DUe3S+HZsR1cyME5x1H8+DDMmfV9s iBlGmb7qydLrlTUTDisl2s7JhqZfhnt5Wb/LPO4hw8n1tptWDa5/5R3NLVV7jiDI W0wBUtCOdfNy7OpjjFj/93F/C7TgnhL+2ZARX1MGmgCZTZLU6coz3mdWtpAG5Mb6 EeHZqwtQ1Jmaq8Bu9sJttlUwsAuojF8eJ1elaa6yncsFg+ZVqvg7uScWqVMXxZ3C Mg0iSOVJBufF3AvbwK84TYqudlWV/hWVvJpJAVlKpw/Q1Bmhr2GEhX/diyuhtOvN SNK5dIG5tr519ZuTcatpJv0nNKOqUGB+JZxbshwTlxEtgeTm8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfi65oOUeVn4bdLGUuHCIzQjNPBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTIyZDBhODItZTFlZS0z Nzk0LTkzOTQtMjBjM2JhNzg2OTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqeDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAdExdiMRoiY5Ha9IAAyhipjVxwA1dcMugWICNB0xSxNvo9AUWPYMZb 3b9aJ+EGyaF/syE90XlvcDTtNK+IlT5fypM1VsU8eyA1QjX3ccz8YDGU6iUiUBdM +sGq6/c5RYbX5bc4zbQasf0R2uFag2W/yj+/VbHOa/bRXvBz/nhvoQOKdwMXewAh QCPbzjRbFp0NJ1mp33TtDOZVAcHF2sYY7V4wM3uDkyoLKr+ov8qyT83fvOqOqu55 HoqZmsg78berlhBDO9axSg/WqL5a6pcB5s4v2vZv80GtEaLF9speirfbSWSoRu1C P/lLa31q3KnYMZcdAcZLynZmYv3uVn0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:57:00 2026 by rpki-client