This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa File: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (raw, json) Hash identifier: t8nP2ckoioMiDxDZ3pvv4b6A2Jg0MgKJSiVZAqgqE+4= Subject key identifier: 07:D6:0E:CF:82:51:C2:AE:80:E8:CF:42:DE:08:E8:02:00:50:A6:51 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915DAFE12A2AF4714C4C00 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 170.253.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5d:af:e1:2a:2a:f4:71:4c:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=fd44402b-82fd-43ad-9cd5-741fbc1deee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:d9:12:01:8f:12:d5:a6:e7:f9:55:7d:47: a1:30:a2:5c:20:d5:3f:7d:c9:80:47:39:66:f2:67: 83:9d:f5:90:2c:de:00:55:68:cc:36:4f:65:db:49: f0:e9:aa:47:c5:32:0c:94:9c:2e:4a:e4:55:ba:1f: 94:a7:cb:49:09:6f:d3:68:e7:ca:a8:49:9c:2a:86: 02:48:14:89:ec:f9:2c:37:39:bd:90:a4:c4:26:a5: f1:94:9a:ca:f5:9b:ac:62:41:14:47:af:fd:af:06: d6:4c:89:7d:ca:a4:90:ca:d0:cd:a4:13:d5:e7:ac: 97:d1:c0:61:bd:02:b7:58:dc:3e:a9:5e:a5:fd:f2: 3e:52:57:f7:cc:a0:06:99:72:d2:82:87:ce:ef:3d: 6c:f7:45:1d:3c:c9:11:be:b2:58:ae:54:62:f2:aa: 9f:90:f4:e0:cd:e8:6f:eb:8b:98:74:e7:6f:e8:c6: 47:9d:44:12:bc:2a:49:0d:76:04:3c:a5:a1:dc:73: c7:33:48:88:28:bc:2c:3a:ad:ce:91:58:af:6e:73: 72:0a:27:4a:2a:fb:7f:5a:71:f6:0c:dc:63:7d:c8: f9:ca:19:29:ff:bc:b9:08:11:80:cb:5f:cc:87:a2: 91:51:87:be:b1:18:51:a3:dc:c1:a3:83:3e:f0:90: f3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:0E:CF:82:51:C2:AE:80:E8:CF:42:DE:08:E8:02:00:50:A6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/5c4f117d-45b9-3f38-be81-53b231ffe933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 170.253.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e3:b4:26:dd:dd:f8:86:78:ca:0f:ea:f4:17:7e:88:3f:84: 07:ff:59:a2:9e:f8:e5:b2:2f:ae:93:97:01:ad:9e:46:19:b7: 81:e1:30:79:91:01:18:cb:c8:38:b9:74:d9:85:63:9a:b2:99: ea:27:d1:4f:a7:23:b5:fa:1e:14:8b:c3:d4:7e:51:4d:1b:ad: bf:66:db:b0:68:d9:78:17:94:e0:dc:23:22:c4:fa:65:5d:45: 89:f8:fb:ef:aa:f9:b2:b2:97:36:4a:59:6e:6b:17:17:b0:5a: dc:a0:74:94:6e:4a:d8:09:8b:05:cc:6d:03:79:44:1f:9f:b9: cb:9d:2a:14:db:1d:f7:5c:40:1f:ad:c4:ce:03:52:ae:3e:5d: 92:8c:7e:b7:42:7c:1c:55:9a:ba:12:ea:a0:13:01:48:f8:4a: 7c:ab:29:c9:7b:cb:5b:d5:77:ae:00:ab:38:d6:3d:85:41:e8: 3b:f2:0e:22:d6:71:86:d1:e8:8e:4d:31:bf:0b:9a:4c:17:be: 25:00:3a:e2:e9:1b:d3:8a:a3:75:a6:e8:54:6b:73:6a:18:f6: 54:30:00:34:44:49:72:74:50:1e:46:ac:4c:87:7d:d8:5d:34: 04:f3:05:47:d2:06:b4:9f:83:20:2f:4e:00:87:db:6c:dd:2e: 61:84:b9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkV2v4Soq9HFMTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk ZmQ0NDQwMmItODJmZC00M2FkLTljZDUtNzQxZmJjMWRlZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiynZEgGPEtWm5/lVfUehMKJcINU/fcmARzlm 8meDnfWQLN4AVWjMNk9l20nw6apHxTIMlJwuSuRVuh+Up8tJCW/TaOfKqEmcKoYC SBSJ7PksNzm9kKTEJqXxlJrK9ZusYkEUR6/9rwbWTIl9yqSQytDNpBPV56yX0cBh vQK3WNw+qV6l/fI+Ulf3zKAGmXLSgofO7z1s90UdPMkRvrJYrlRi8qqfkPTgzehv 64uYdOdv6MZHnUQSvCpJDXYEPKWh3HPHM0iIKLwsOq3OkVivbnNyCidKKvt/WnH2 DNxjfcj5yhkp/7y5CBGAy1/Mh6KRUYe+sRhRo9zBo4M+8JDzcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfWDs+CUcKugOjPQt4I6AIAUKZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvNWM0ZjExN2QtNDViOS0z ZjM4LWJlODEtNTNiMjMxZmZlOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHqv2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/jtCbd3fiGeMoP6vQXfog/hAf/WaKe+OWyL66TlwGtnkYZt4HhMHmR ARjLyDi5dNmFY5qymeon0U+nI7X6HhSLw9R+UU0brb9m27Bo2XgXlODcIyLE+mVd RYn4+++q+bKylzZKWW5rFxewWtygdJRuStgJiwXMbQN5RB+fucudKhTbHfdcQB+t xM4DUq4+XZKMfrdCfBxVmroS6qATAUj4SnyrKcl7y1vVd64AqzjWPYVB6DvyDiLW cYbR6I5NMb8LmkwXviUAOuLpG9OKo3Wm6FRrc2oY9lQwADRESXJ0UB5GrEyHfdhd NATzBUfSBrSfgyAvTgCH22zdLmGEuYY= -----END CERTIFICATE-----Generated at Sun Jan 11 08:17:55 2026 by rpki-client