This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa File: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (raw, json) Hash identifier: /6jPEZyyB7cK+iNCq0RtamMF0uNWihUCqUQSOjJOd8Y= Subject key identifier: 4E:D7:B4:CF:EF:D0:C8:A9:F8:C8:40:FB:F9:4A:98:71:6A:BE:25:F6 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915E09DD88E3C9DBFE3880 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 216.119.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5e:09:dd:88:e3:c9:db:fe:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=8d6e9ebd-ad1f-4882-ad32-a16085bf3a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:0a:fa:3e:55:15:83:9f:0b:03:ea:d5:50: 39:36:06:98:27:a5:ef:17:02:30:d7:90:70:5d:c5: 90:50:07:cf:9f:db:51:65:3e:5d:c4:43:53:7f:0c: 71:90:c9:3b:08:ec:71:0a:eb:f9:48:9e:b8:53:ff: 08:d2:ba:df:b3:86:cc:5b:ae:4a:61:86:d5:f2:cf: 5f:bb:e3:82:41:51:90:d5:3d:d6:2f:46:88:33:59: 70:90:72:cc:85:af:ba:1f:15:bf:3a:21:0a:10:25: 66:1a:30:b9:86:34:b4:ed:35:e9:28:44:a9:df:19: 9c:0d:57:fe:50:2c:b2:e5:4a:28:e1:8a:da:a2:e1: 22:2c:8e:a5:48:b9:bc:90:0e:31:79:6e:b4:51:fc: 8d:06:73:e3:be:7f:20:b0:0e:de:2b:2e:3b:4c:d0: 9a:79:90:25:69:c4:e5:d6:a8:86:09:81:c2:58:3c: b7:20:86:0d:c9:6f:4a:21:6e:a1:82:52:d2:ce:7c: 26:02:64:c4:29:c4:4b:4d:45:4a:16:ed:43:a1:37: 3a:5d:80:e1:27:76:ab:65:ca:21:19:c4:ef:94:51: f2:6a:f1:5c:f1:3f:c3:b0:ec:7f:3b:cb:8b:d0:78: 47:b9:aa:95:13:73:ba:15:4e:1e:21:d1:8b:32:0f: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:B4:CF:EF:D0:C8:A9:F8:C8:40:FB:F9:4A:98:71:6A:BE:25:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/08ad9252-a414-3b87-84d9-259b7e5e27cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 216.119.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:59:71:06:a2:ac:38:c9:07:de:86:35:67:ca:4f:09:67:67: 2f:4e:6f:6f:23:22:6d:87:fd:c5:4a:b0:17:bf:c7:b8:d8:01: 3e:ab:4d:b1:07:d5:03:33:7d:42:87:dc:eb:37:b4:c8:7d:29: 55:8e:66:cd:a3:8f:81:93:f8:5e:da:92:4d:02:44:8a:54:c3: 4f:b8:1a:41:71:a9:76:8c:25:6e:c5:9a:2b:d7:79:99:05:50: fa:80:b8:2b:40:db:12:65:f1:fe:6a:42:27:80:64:41:10:d1: af:09:81:b0:68:71:64:f7:e1:b3:e9:33:4b:7f:c7:d9:f5:df: 2c:59:8a:4b:33:67:37:2b:77:70:80:31:71:75:12:89:9c:b8: ea:f0:d1:90:50:d0:d4:db:e6:dd:43:99:75:63:ad:eb:84:e5: 36:8c:ed:95:9c:c1:22:28:7b:9d:79:75:94:3a:65:1a:0b:98: 9d:22:50:56:bd:34:8d:5e:e6:b7:ad:f2:bc:51:e8:44:6b:ab: 05:79:d8:17:74:2b:b1:42:71:cd:df:49:96:ea:6a:ec:09:0f: 4c:1b:41:21:fa:67:43:77:76:f0:04:58:b3:dc:e7:ff:55:0a: a3:b9:36:c2:c0:1d:8d:1b:3d:aa:9c:5d:db:09:56:d0:9d:7d: 2f:fc:80:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkV4J3Yjjydv+OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk OGQ2ZTllYmQtYWQxZi00ODgyLWFkMzItYTE2MDg1YmYzYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1IK+j5VFYOfCwPq1VA5NgaYJ6XvFwIw15Bw XcWQUAfPn9tRZT5dxENTfwxxkMk7COxxCuv5SJ64U/8I0rrfs4bMW65KYYbV8s9f u+OCQVGQ1T3WL0aIM1lwkHLMha+6HxW/OiEKECVmGjC5hjS07TXpKESp3xmcDVf+ UCyy5Uoo4YraouEiLI6lSLm8kA4xeW60UfyNBnPjvn8gsA7eKy47TNCaeZAlacTl 1qiGCYHCWDy3IIYNyW9KIW6hglLSznwmAmTEKcRLTUVKFu1DoTc6XYDhJ3arZcoh GcTvlFHyavFc8T/DsOx/O8uL0HhHuaqVE3O6FU4eIdGLMg+BAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7XtM/v0Mip+MhA+/lKmHFqviX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvMDhhZDkyNTItYTQxNC0z Yjg3LTg0ZDktMjU5YjdlNWUyN2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRZcQairDjJB96GNWfKTwlnZy9Ob28jIm2H/cVKsBe/x7jYAT6rTbEH 1QMzfUKH3Os3tMh9KVWOZs2jj4GT+F7akk0CRIpUw0+4GkFxqXaMJW7FmivXeZkF UPqAuCtA2xJl8f5qQieAZEEQ0a8JgbBocWT34bPpM0t/x9n13yxZikszZzcrd3CA MXF1EomcuOrw0ZBQ0NTb5t1DmXVjreuE5TaM7ZWcwSIoe515dZQ6ZRoLmJ0iUFa9 NI1e5ret8rxR6ERrqwV52Bd0K7FCcc3fSZbqauwJD0wbQSH6Z0N3dvAEWLPc5/9V CqO5NsLAHY0bPaqcXdsJVtCdfS/8gMk= -----END CERTIFICATE-----Generated at Sun Jan 11 08:17:56 2026 by rpki-client