This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa File: 3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa (raw, json) Hash identifier: qYts567axuvHEcr22vy1zcXkvhDAVbPFFu3g02yy6vo= Subject key identifier: 33:70:97:BD:A8:F2:68:82:4F:F8:6C:EA:1E:AC:84:B5:92:EE:1E:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C85ED7336EFBCA29CB17FA780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa Signing time: Wed 14 Jan 2026 14:35:35 +0000 ROA not before: Wed 14 Jan 2026 14:35:35 +0000 ROA not after: Tue 14 Apr 2026 13:35:35 +0000 asID: 213120 IP address blocks: 72.52.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:85:ed:73:36:ef:bc:a2:9c:b1:7f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 14 14:35:35 2026 GMT Not After : Apr 14 13:35:35 2026 GMT Subject: CN=98c6728e-e270-4bc7-a46c-315e498ad6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:27:6d:2c:5f:39:fa:24:5e:61:19:25:fb:7b: 45:78:c1:f9:3c:fe:54:62:22:90:64:81:a4:02:b6: f7:47:dc:73:39:82:7c:51:b7:cc:be:6b:bb:85:67: dd:e0:f8:19:59:3a:b9:c1:98:a5:ac:3e:c0:05:cf: f5:59:7d:6f:20:f3:38:a3:1b:d4:f4:78:54:1b:68: d7:44:84:4c:76:64:28:c7:0e:a4:8f:0b:a3:3a:1f: 4c:71:78:2e:85:f8:e3:27:e8:b6:58:52:6a:fe:ec: 24:00:ed:cc:89:c4:6f:8b:ce:30:c8:ff:db:c2:aa: c8:eb:20:49:a4:fb:98:e1:60:3b:d2:09:26:2c:4c: 03:77:31:90:18:25:16:b4:55:9d:be:c2:53:82:ae: 52:24:fb:bb:cf:6d:cd:fd:5b:20:fd:44:2c:25:6d: bb:6b:f6:44:2a:cc:85:91:69:fc:62:ad:be:41:6b: 14:3b:e4:57:13:59:b4:d6:09:53:e9:d8:d9:ad:cb: 5a:99:c4:2b:b7:d0:61:88:96:27:d8:e9:de:ec:ef: 24:ae:87:b6:5e:e1:9b:81:76:61:13:84:af:4b:93: dd:64:c1:1b:1b:89:27:a9:b5:00:39:14:77:18:de: 7d:e4:67:de:32:83:1a:ae:ba:c8:48:a1:0e:64:6f: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:70:97:BD:A8:F2:68:82:4F:F8:6C:EA:1E:AC:84:B5:92:EE:1E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3affdd5c-a489-3795-8cd4-7c39f4f302a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.52.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:29:d7:57:8d:26:d6:b4:ee:97:d1:2e:bc:ac:5e:a6:c4:ae: 60:72:02:3a:2f:cc:5e:d9:ac:74:a9:29:75:95:d7:f1:9b:f4: 4c:b6:45:cb:04:9d:9f:5c:d1:4b:0b:3b:12:10:b8:1f:4b:00: 9d:a2:4b:ae:a4:07:f0:c1:e5:7c:66:97:2c:06:b3:21:6d:dd: 39:66:7c:aa:06:fc:af:d7:d6:54:d0:20:d7:09:84:04:05:d2: d3:4e:2b:19:9e:d9:c2:b6:49:9b:fd:c0:a4:db:cb:1e:c1:a4: 7c:84:26:21:27:ea:9f:c5:0a:fa:b9:e3:e6:41:f8:2e:f1:17: 89:81:60:35:72:ba:6d:52:db:ca:ea:12:ad:e5:d4:db:5f:40: 24:0c:38:f9:20:2b:a9:68:52:35:a2:ac:d2:f7:0f:5a:4e:17: 81:47:a3:28:7a:61:b8:b2:dc:a4:99:65:d8:0c:79:52:1a:c6: 5c:d6:29:24:7a:b2:98:6d:5d:ad:b8:e1:73:6d:cf:f1:47:51: e7:2b:d6:06:25:47:f8:79:b6:e0:bf:b1:a8:e4:99:69:b3:f1: 28:44:0b:1a:4b:b3:19:78:ac:71:e3:7d:0e:ab:f2:be:12:89: 3e:0f:79:8f:23:46:8c:91:02:0d:f4:9a:ee:9b:af:50:44:ad: 9d:e7:d7:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyF7XM277yinLF/p4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDExNDE0MzUzNVoXDTI2MDQxNDEzMzUzNVowLzEtMCsGA1UEAxMk OThjNjcyOGUtZTI3MC00YmM3LWE0NmMtMzE1ZTQ5OGFkNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoidtLF85+iReYRkl+3tFeMH5PP5UYiKQZIGk Arb3R9xzOYJ8UbfMvmu7hWfd4PgZWTq5wZilrD7ABc/1WX1vIPM4oxvU9HhUG2jX RIRMdmQoxw6kjwujOh9McXguhfjjJ+i2WFJq/uwkAO3MicRvi84wyP/bwqrI6yBJ pPuY4WA70gkmLEwDdzGQGCUWtFWdvsJTgq5SJPu7z23N/Vsg/UQsJW27a/ZEKsyF kWn8Yq2+QWsUO+RXE1m01glT6djZrctamcQrt9BhiJYn2One7O8kroe2XuGbgXZh E4SvS5PdZMEbG4knqbUAORR3GN595GfeMoMarrrISKEOZG+ZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNwl72o8miCT/hs6h6shLWS7h7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FmZmRkNWMtYTQ4OS0z Nzk1LThjZDQtN2MzOWY0ZjMwMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASDQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEp11eNJta07pfRLrysXqbErmByAjovzF7ZrHSpKXWV1/Gb9Ey2RcsE nZ9c0UsLOxIQuB9LAJ2iS66kB/DB5XxmlywGsyFt3TlmfKoG/K/X1lTQINcJhAQF 0tNOKxme2cK2SZv9wKTbyx7BpHyEJiEn6p/FCvq54+ZB+C7xF4mBYDVyum1S28rq Eq3l1NtfQCQMOPkgK6loUjWirNL3D1pOF4FHoyh6Ybiy3KSZZdgMeVIaxlzWKSR6 sphtXa244XNtz/FHUecr1gYlR/h5tuC/sajkmWmz8ShECxpLsxl4rHHjfQ6r8r4S iT4PeY8jRoyRAg30mu6br1BErZ3n16I= -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:02 2026 by rpki-client