This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa File: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (raw, json) Hash identifier: lI8zjno1TQr+S0Llqlzp32HisYQMlLQyMyWjTObSOKg= Subject key identifier: ED:A4:9D:8A:C4:A0:7C:39:3C:86:FF:2B:E3:36:FE:9C:DB:75:BE:F0 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584C61915DD434C5D5232A66AE80 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 46687 IP address blocks: 199.122.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:5d:d4:34:c5:d5:23:2a:66:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=2fb8d66e-bc11-4fd8-96f7-1045d4c5b37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:76:de:b5:45:d8:29:30:ae:13:dd:54:25: 37:55:3e:e5:c3:35:01:5f:a8:a2:6e:5e:74:03:8f: 6b:c2:25:f3:96:93:d1:b2:8a:1e:90:2b:d8:3d:cc: 7a:4a:69:0c:eb:2b:2e:67:14:c6:e1:d1:2f:84:88: f1:ab:c0:eb:ab:4b:ae:54:32:61:b8:a6:9d:1a:e3: 11:58:ae:54:d6:ad:92:79:19:05:22:43:cc:e3:c1: 6a:63:8d:69:a2:ec:81:86:16:0c:ae:05:a4:ac:3f: f8:b7:69:bc:f5:cc:4b:d8:a5:9f:b1:8f:3b:12:38: 1f:a6:0a:39:ba:19:34:84:7b:3a:19:af:cf:ef:a2: ae:13:2a:c4:74:48:d2:56:21:7e:ff:c4:11:f1:32: 25:9b:a6:10:d8:26:f4:7f:1b:c3:f6:00:f5:aa:84: 47:1f:ce:aa:d1:20:c9:f2:a5:9c:1f:e7:5f:f4:4b: 04:2e:86:1a:40:2d:7b:61:1e:ef:65:fc:f2:6b:62: 15:a9:2d:08:35:74:82:48:a0:ea:99:d1:86:0b:6f: a8:d8:17:44:1b:7a:30:48:c6:9c:87:d8:fd:3c:06: 10:60:8d:86:95:00:d5:df:0c:bc:e0:61:00:fd:7a: 53:77:e3:ce:50:e1:65:ae:8f:5d:ec:3e:bd:04:b0: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A4:9D:8A:C4:A0:7C:39:3C:86:FF:2B:E3:36:FE:9C:DB:75:BE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 199.122.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:41:bd:59:5f:eb:a9:fd:95:b0:89:51:d1:47:e2:02:fa:e0: ef:40:d0:1d:f1:cc:4c:ae:55:f8:1d:3d:82:db:69:35:20:bc: 47:01:24:97:20:04:ed:ce:14:df:ba:53:09:d4:11:11:8f:5f: 93:12:76:1e:19:ab:b0:c8:19:16:ec:05:17:2a:3e:1d:d5:33: d4:a4:61:a2:bb:a2:e8:2e:29:42:5d:ae:43:7e:54:4b:ab:d0: f3:2f:cc:d1:a0:b1:4c:8e:0f:dc:d7:a6:6e:6f:a7:a2:cf:b4: f2:97:b2:12:e4:3d:5d:28:9d:6a:fe:7c:51:bc:c8:2d:45:b5: 27:d7:27:40:f5:67:47:58:f9:ab:b8:61:c9:72:03:a9:d1:92: 8a:a3:7b:2e:64:4b:0b:24:f2:ea:11:eb:b3:b9:36:03:8b:f5: ff:e8:70:fa:f9:a1:21:95:f4:70:b2:c9:6d:f9:0c:61:25:64: 90:29:4b:5e:25:26:51:ed:e6:21:12:a7:fb:64:34:66:86:1b: a8:9b:49:10:73:04:d8:2c:b3:60:e7:f7:ca:44:11:6b:a4:f9: eb:bf:16:f5:0e:3e:f7:b5:02:ea:3d:8d:2f:30:fe:16:5a:da: bc:7c:96:4b:78:64:b5:d5:27:66:cd:49:02:af:6d:ac:44:1a: 1a:12:ae:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkV3UNMXVIypmroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk MmZiOGQ2NmUtYmMxMS00ZmQ4LTk2ZjctMTA0NWQ0YzViMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI923rVF2CkwrhPdVCU3VT7lwzUBX6iibl50 A49rwiXzlpPRsooekCvYPcx6SmkM6ysuZxTG4dEvhIjxq8Drq0uuVDJhuKadGuMR WK5U1q2SeRkFIkPM48FqY41pouyBhhYMrgWkrD/4t2m89cxL2KWfsY87Ejgfpgo5 uhk0hHs6Ga/P76KuEyrEdEjSViF+/8QR8TIlm6YQ2Cb0fxvD9gD1qoRHH86q0SDJ 8qWcH+df9EsELoYaQC17YR7vZfzya2IVqS0INXSCSKDqmdGGC2+o2BdEG3owSMac h9j9PAYQYI2GlQDV3wy84GEA/XpTd+POUOFlro9d7D69BLDP/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2knYrEoHw5PIb/K+M2/pzbdb7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDc2Y2YwODQtYTJiMS0z NDEzLThiMzEtYjc4NGRjOGZhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1BvVlf66n9lbCJUdFH4gL64O9A0B3xzEyuVfgdPYLbaTUgvEcBJJcg BO3OFN+6UwnUERGPX5MSdh4Zq7DIGRbsBRcqPh3VM9SkYaK7ouguKUJdrkN+VEur 0PMvzNGgsUyOD9zXpm5vp6LPtPKXshLkPV0onWr+fFG8yC1FtSfXJ0D1Z0dY+au4 YclyA6nRkoqjey5kSwsk8uoR67O5NgOL9f/ocPr5oSGV9HCyyW35DGElZJApS14l JlHt5iESp/tkNGaGG6ibSRBzBNgss2Dn98pEEWuk+eu/FvUOPve1Auo9jS8w/hZa 2rx8lkt4ZLXVJ2bNSQKvbaxEGhoSru8= -----END CERTIFICATE-----Generated at Sun Jan 11 08:16:54 2026 by rpki-client