This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa File: dcc4d504-58f3-3a51-8697-8c9325672738.roa (raw, json) Hash identifier: y6Xq+l3RbyiTBOs9/qpGCJedogbdhvtyi2ePCAM9fkE= Subject key identifier: DC:51:70:87:65:41:D4:3F:30:A5:E4:5E:E2:D6:AE:18:5B:9C:46:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584C8A0C7DE17D819AB74C83AB7C Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa Signing time: Fri 16 Jan 2026 02:00:31 +0000 ROA not before: Fri 16 Jan 2026 02:00:31 +0000 ROA not after: Thu 16 Apr 2026 01:00:31 +0000 asID: 31898 IP address blocks: 40.233.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8a:0c:7d:e1:7d:81:9a:b7:4c:83:ab:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 16 02:00:31 2026 GMT Not After : Apr 16 01:00:31 2026 GMT Subject: CN=4d0ffec1-bdc1-4b99-8151-290074f18a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:b2:ac:e1:51:d1:35:f2:98:a9:64:8d:7c: 0f:3c:cf:52:05:c2:91:e4:3a:2a:b8:4b:cd:4d:b8: 0a:3c:40:dc:6f:99:43:82:f9:01:eb:58:c8:72:ce: 2e:f0:39:e9:d3:2d:a5:5e:ca:89:d2:e4:9d:a4:b1: f1:2e:be:35:11:c4:e3:e9:e1:6f:ec:6c:ba:1e:73: 58:e1:f4:fb:d2:2a:5f:d9:ab:9f:b8:7f:21:86:dd: 5c:60:4c:fe:7c:84:ee:1c:65:10:05:25:df:b1:54: b3:72:7d:ed:2f:32:93:de:23:f8:26:df:78:fd:ad: 0e:15:99:3d:4d:72:f0:86:fb:ba:8f:f9:e9:ec:33: 66:07:12:d8:cc:ab:2e:c1:61:c9:ec:62:ba:1e:f5: 32:71:04:64:1d:7d:77:45:b7:aa:8d:d4:b4:3b:1e: 24:f9:f9:5b:11:2d:19:77:b1:f3:17:3b:d5:dd:1c: 2c:0f:5b:ad:87:88:81:fb:07:91:bd:c5:06:18:78: 76:be:90:5b:0d:c4:0d:6e:77:7b:81:cd:75:93:2d: 83:ea:21:44:d5:f1:7f:ee:29:37:87:a2:46:18:fe: a3:11:7a:13:aa:c3:3b:08:9f:55:cc:af:ea:7c:5a: 5d:fa:c2:51:33:9f:bf:c5:46:15:0f:69:9b:fb:b6: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:70:87:65:41:D4:3F:30:A5:E4:5E:E2:D6:AE:18:5B:9C:46:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/dcc4d504-58f3-3a51-8697-8c9325672738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 40.233.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5a:a2:34:f9:7c:6e:43:a7:45:1d:07:94:a1:99:a9:52:24: 56:e8:c1:0e:3b:82:eb:42:91:96:82:73:3b:8f:75:12:a8:d3: 07:b2:ad:cf:8b:b5:9d:93:22:99:d5:eb:ee:ff:dd:65:19:04: ce:c4:73:f9:05:be:ff:da:6f:9e:2e:d0:6d:f5:52:a7:ac:57: 5f:ed:d2:b3:2b:e2:88:8e:00:9d:80:e9:6c:0e:2f:f5:0d:7d: c1:01:c0:1b:3f:73:e7:c2:ea:63:8d:1a:de:6c:d5:c0:cc:c6: 77:52:3f:e0:8f:b9:be:bf:45:60:09:a1:ee:b1:47:66:0b:b9: 82:ff:69:f2:d8:0d:02:96:41:b3:3e:0b:99:22:4d:fa:c9:d3: 0c:92:b4:42:59:ed:f8:54:c6:d7:be:79:0c:50:cd:ad:04:36: 66:05:fd:30:60:37:37:bd:e8:68:5c:72:84:0a:7b:d2:b2:68: 0c:f7:58:4d:78:e5:d3:17:e0:e0:68:9e:76:c6:8f:4c:d0:0e: e5:d9:d8:32:1d:17:28:27:dd:6a:46:b3:2b:d3:46:7d:b8:ee: 60:00:5e:84:b4:fe:8c:07:48:b8:e2:8a:da:76:e0:13:18:c9: 0e:5a:03:4b:cf:4f:a1:e9:47:47:0c:f7:c5:8b:cf:cb:fd:4e: 3e:23:0d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyKDH3hfYGat0yDq3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDExNjAyMDAzMVoXDTI2MDQxNjAxMDAzMVowLzEtMCsGA1UEAxMk NGQwZmZlYzEtYmRjMS00Yjk5LTgxNTEtMjkwMDc0ZjE4YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0qyrOFR0TXymKlkjXwPPM9SBcKR5DoquEvN TbgKPEDcb5lDgvkB61jIcs4u8Dnp0y2lXsqJ0uSdpLHxLr41EcTj6eFv7Gy6HnNY 4fT70ipf2aufuH8hht1cYEz+fITuHGUQBSXfsVSzcn3tLzKT3iP4Jt94/a0OFZk9 TXLwhvu6j/np7DNmBxLYzKsuwWHJ7GK6HvUycQRkHX13RbeqjdS0Ox4k+flbES0Z d7HzFzvV3RwsD1uth4iB+weRvcUGGHh2vpBbDcQNbnd7gc11ky2D6iFE1fF/7ik3 h6JGGP6jEXoTqsM7CJ9VzK/qfFpd+sJRM5+/xUYVD2mb+7bGlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxRcIdlQdQ/MKXkXuLWrhhbnEZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGNjNGQ1MDQtNThmMy0z YTUxLTg2OTctOGM5MzI1NjcyNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGKOlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxaojT5fG5Dp0UdB5ShmalSJFbowQ47gutCkZaCczuPdRKo0weyrc+L tZ2TIpnV6+7/3WUZBM7Ec/kFvv/ab54u0G31UqesV1/t0rMr4oiOAJ2A6WwOL/UN fcEBwBs/c+fC6mONGt5s1cDMxndSP+CPub6/RWAJoe6xR2YLuYL/afLYDQKWQbM+ C5kiTfrJ0wyStEJZ7fhUxte+eQxQza0ENmYF/TBgNze96GhccoQKe9KyaAz3WE14 5dMX4OBonnbGj0zQDuXZ2DIdFygn3WpGsyvTRn247mAAXoS0/owHSLjiitp24BMY yQ5aA0vPT6HpR0cM98WLz8v9Tj4jDZg= -----END CERTIFICATE-----Generated at Sun Jan 25 22:10:13 2026 by rpki-client