This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa File: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (raw, json) Hash identifier: 3BkmSBpHl0fTUBunCu0ZiyL5+2Osziwqg2ytE9XN8MU= Subject key identifier: D7:58:81:36:C9:BB:29:F8:00:22:51:C9:41:95:FC:98:86:6C:64:D5 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915D7BD4573074BA8BCF40 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 24.233.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5d:7b:d4:57:30:74:ba:8b:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=40e31aa6-7316-489e-89ac-a75ac40b7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:41:db:a0:31:be:0f:b0:b1:eb:ef:62:cc:1c: 27:4e:1c:b3:72:42:6c:46:9e:61:e9:08:93:8c:86: b5:c1:11:3b:3c:4a:c3:83:5a:d3:d8:78:26:47:f9: ea:03:72:cf:b7:c6:54:e9:1a:33:32:37:2e:95:48: e0:89:4d:e9:3a:21:36:18:04:46:f4:cc:ba:1d:ba: 59:44:c6:8e:22:9a:1a:a2:40:76:69:c1:a5:27:37: 82:0d:48:8f:ae:c6:d0:67:75:bd:ad:8e:e0:ab:30: d2:ce:33:b6:f7:3f:f5:af:40:8d:f7:86:7f:b3:10: 00:78:5f:26:ba:03:c7:55:4b:a9:e2:0a:41:46:9e: d8:a4:1a:e2:13:c9:c9:a5:60:8b:3b:49:37:6d:4f: 6a:9e:27:1c:06:97:8e:21:ff:93:56:f7:07:39:4e: 54:87:2d:33:74:10:ac:d1:5d:fc:fc:2e:86:e4:f4: 3a:80:81:c5:6d:88:de:b1:c4:22:8c:1c:38:24:4b: a0:55:42:94:d3:dc:7f:70:82:a8:ba:ed:6a:6b:a1: 44:36:5a:19:3a:18:6d:9c:39:46:3a:6c:e1:cb:a2: 64:b8:b1:54:c4:cb:b5:ac:ac:8c:d9:e8:1c:07:1c: 14:47:72:00:76:bb:ab:db:75:e1:47:86:fd:f3:4d: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:58:81:36:C9:BB:29:F8:00:22:51:C9:41:95:FC:98:86:6C:64:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.233.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:99:26:0f:cb:68:1f:78:74:e1:00:6c:95:1e:f5:2a:1b:8c: 66:c6:04:ee:b8:dd:2b:6a:00:e5:04:fd:36:05:8c:4f:2b:0e: af:d8:3b:4f:8f:04:23:b0:ff:de:98:a9:41:b8:a8:a5:ba:82: 3c:59:2a:47:97:a5:d7:8b:18:95:e1:40:81:6b:a3:86:cf:ca: 30:14:e4:cd:e8:d9:e4:c0:28:64:32:6a:11:9d:f9:a4:b7:ad: 42:ed:fb:ca:99:b2:d3:a1:15:53:b6:72:f2:fa:22:4c:a5:90: ee:03:85:fe:76:70:cb:dc:4e:05:83:82:aa:94:f8:38:94:64: ca:06:85:1a:d7:96:46:7a:20:52:5f:fe:96:ec:b8:71:14:b9: 55:9a:61:f8:78:11:d1:19:fd:f0:b0:af:0c:be:1d:74:5a:b9: d1:74:0f:a9:3c:c3:a6:49:b8:b1:87:22:b9:3a:bc:30:7a:f3: f4:b6:4d:9e:c1:aa:b3:17:03:d3:f8:8d:23:4e:45:61:08:ba: 25:11:75:3b:80:ab:71:5a:01:fe:40:1f:c7:58:6e:44:0a:b8: 90:4d:01:45:0b:05:4c:1c:54:5d:f0:71:6e:5e:14:b8:49:78: f7:66:44:39:7b:69:54:23:0e:83:0e:40:c2:33:0a:8c:5d:7f: 36:82:59:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkV171FcwdLqLz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NDBlMzFhYTYtNzMxNi00ODllLTg5YWMtYTc1YWM0MGI3ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkHboDG+D7Cx6+9izBwnThyzckJsRp5h6QiT jIa1wRE7PErDg1rT2HgmR/nqA3LPt8ZU6RozMjculUjgiU3pOiE2GARG9My6HbpZ RMaOIpoaokB2acGlJzeCDUiPrsbQZ3W9rY7gqzDSzjO29z/1r0CN94Z/sxAAeF8m ugPHVUup4gpBRp7YpBriE8nJpWCLO0k3bU9qniccBpeOIf+TVvcHOU5Uhy0zdBCs 0V38/C6G5PQ6gIHFbYjescQijBw4JEugVUKU09x/cIKouu1qa6FENloZOhhtnDlG Omzhy6JkuLFUxMu1rKyM2egcBxwUR3IAdrur23XhR4b9801XmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNdYgTbJuyn4ACJRyUGV/JiGbGTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWE3NTcyZmYtMGMxYS0z NmUxLWE1NTMtM2JiZDgwZDZlY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGOngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANqZJg/LaB94dOEAbJUe9SobjGbGBO643StqAOUE/TYFjE8rDq/YO0+P BCOw/96YqUG4qKW6gjxZKkeXpdeLGJXhQIFro4bPyjAU5M3o2eTAKGQyahGd+aS3 rULt+8qZstOhFVO2cvL6IkylkO4Dhf52cMvcTgWDgqqU+DiUZMoGhRrXlkZ6IFJf /pbsuHEUuVWaYfh4EdEZ/fCwrwy+HXRaudF0D6k8w6ZJuLGHIrk6vDB68/S2TZ7B qrMXA9P4jSNORWEIuiURdTuAq3FaAf5AH8dYbkQKuJBNAUULBUwcVF3wcW5eFLhJ ePdmRDl7aVQjDoMOQMIzCoxdfzaCWTI= -----END CERTIFICATE-----Generated at Sun Jan 11 08:16:53 2026 by rpki-client