This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa File: 2a365bf7-1aad-3494-8eef-085a30eed65b.roa (raw, json) Hash identifier: Nf/k7pSRUCKprlNSjJTAqLaxYqJOoPgFWqWXtwK7grw= Subject key identifier: AA:40:E6:96:85:0D:6E:29:17:69:83:47:07:F3:3B:50:3F:2B:42:AD Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584C8B719745F55783EBDADABDF0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa Signing time: Fri 16 Jan 2026 14:00:40 +0000 ROA not before: Fri 16 Jan 2026 14:00:40 +0000 ROA not after: Thu 16 Apr 2026 13:00:40 +0000 asID: 701 IP address blocks: 96.240.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8b:71:97:45:f5:57:83:eb:da:da:bd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jan 16 14:00:40 2026 GMT Not After : Apr 16 13:00:40 2026 GMT Subject: CN=bab67018-75da-483f-9730-21ee221632c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:eb:45:f4:89:41:aa:bc:10:66:d3:07:96: 25:f5:df:df:2a:35:e7:89:5f:6a:40:f3:60:c7:52: 51:65:f8:19:d3:94:b5:c2:16:13:72:6c:f0:71:a9: b4:73:8b:31:24:6c:2d:ce:5f:85:b7:a2:da:0e:2d: a2:72:c5:36:e7:f6:61:21:45:55:5c:fe:ed:32:85: 61:a2:64:9e:7d:b5:4d:8c:b0:9b:78:87:82:aa:7c: 4c:91:b6:19:ba:b0:a5:9a:a6:df:7b:b3:b6:a0:8e: b3:32:be:a5:5d:53:d9:86:ab:72:eb:28:35:89:cd: 23:ed:80:77:b4:92:9a:33:21:f1:31:4e:c9:e0:a2: 14:a8:09:58:2d:83:05:17:f6:27:e9:4c:dd:e4:77: 98:b2:c0:34:2b:15:00:f2:a9:aa:76:90:5c:46:d8: ce:b8:43:91:66:45:70:fa:ce:c8:86:09:39:05:05: ff:2e:2c:df:89:2d:c3:64:d3:44:c9:5a:a4:1f:06: fa:82:a7:44:57:50:7a:34:81:32:18:ed:4e:6d:a1: ae:01:1e:1b:73:00:6f:c1:3b:3f:a0:c1:fa:45:9d: 49:27:ca:a4:19:98:9d:80:03:fa:29:02:4d:75:1e: 90:97:e1:8d:87:d4:c7:d8:4c:c6:67:b0:b6:ca:4f: 5d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:40:E6:96:85:0D:6E:29:17:69:83:47:07:F3:3B:50:3F:2B:42:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a365bf7-1aad-3494-8eef-085a30eed65b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 96.240.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f6:eb:09:f0:44:3f:ab:b6:f5:b3:fb:0a:9e:be:d1:a0:ac: 0c:74:be:1b:7e:83:a4:c8:b6:7b:50:da:03:08:c7:56:f2:50: 69:f6:9e:2b:c1:d0:32:ed:e2:70:c4:c1:94:8c:fb:ca:9b:c3: e5:ac:15:cc:a6:8c:1f:c5:c3:4c:1d:b8:77:52:4a:75:b2:c8: 82:f8:37:64:8d:f8:fa:03:1f:a6:06:42:a3:d1:50:26:2d:69: 77:d9:0d:5c:a2:c1:61:68:3b:ec:1a:6e:81:c1:d3:71:40:49: a1:06:21:6c:6c:66:31:64:1c:0d:33:77:1c:ba:a3:60:ee:6a: 67:45:c8:33:52:9f:26:5a:a2:8e:74:82:fa:e8:de:85:24:1d: 10:6f:b7:de:78:e6:b9:9d:38:96:be:af:08:d2:98:61:f2:19: e4:f2:6b:3e:4b:c3:b0:84:7e:e8:2e:5b:3c:44:02:98:c1:5f: 4a:5a:ed:8e:5b:27:fd:b9:19:82:68:a4:bc:2f:c0:55:29:7f: 52:67:c8:84:8f:8a:c3:86:39:b4:c7:13:a0:7f:a8:fe:b6:f5: eb:50:25:84:35:8e:64:e2:e1:01:50:91:e0:45:1c:6a:e5:de: d5:94:6b:c0:3e:f4:8b:b9:33:6e:6b:c5:a4:7f:27:2a:7f:76: 46:8f:1a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyLcZdF9VeD69ravfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDExNjE0MDA0MFoXDTI2MDQxNjEzMDA0MFowLzEtMCsGA1UEAxMk YmFiNjcwMTgtNzVkYS00ODNmLTk3MzAtMjFlZTIyMTYzMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3LrRfSJQaq8EGbTB5Yl9d/fKjXniV9qQPNg x1JRZfgZ05S1whYTcmzwcam0c4sxJGwtzl+Ft6LaDi2icsU25/ZhIUVVXP7tMoVh omSefbVNjLCbeIeCqnxMkbYZurClmqbfe7O2oI6zMr6lXVPZhqty6yg1ic0j7YB3 tJKaMyHxMU7J4KIUqAlYLYMFF/Yn6Uzd5HeYssA0KxUA8qmqdpBcRtjOuEORZkVw +s7Ihgk5BQX/LizfiS3DZNNEyVqkHwb6gqdEV1B6NIEyGO1ObaGuAR4bcwBvwTs/ oMH6RZ1JJ8qkGZidgAP6KQJNdR6Ql+GNh9TH2EzGZ7C2yk9dYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpA5paFDW4pF2mDRwfzO1A/K0KtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmEzNjViZjctMWFhZC0z NDk0LThlZWYtMDg1YTMwZWVkNjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYPCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/26wnwRD+rtvWz+wqevtGgrAx0vht+g6TItntQ2gMIx1byUGn2nivB 0DLt4nDEwZSM+8qbw+WsFcymjB/Fw0wduHdSSnWyyIL4N2SN+PoDH6YGQqPRUCYt aXfZDVyiwWFoO+waboHB03FASaEGIWxsZjFkHA0zdxy6o2DuamdFyDNSnyZaoo50 gvro3oUkHRBvt9545rmdOJa+rwjSmGHyGeTyaz5Lw7CEfuguWzxEApjBX0pa7Y5b J/25GYJopLwvwFUpf1JnyISPisOGObTHE6B/qP629etQJYQ1jmTi4QFQkeBFHGrl 3tWUa8A+9Iu5M25rxaR/Jyp/dkaPGvE= -----END CERTIFICATE-----Generated at Thu Jan 22 13:48:42 2026 by rpki-client