This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa File: cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa (raw, json) Hash identifier: VLl0dGbPyHiiRCUO8ZhWaY/3SOcUHoswmgv2P3/KlHU= Subject key identifier: B2:F8:5E:0D:DE:6C:4F:BA:EB:94:6B:06:70:83:11:6D:1A:25:D0:AD Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584C6D4B75A6CD58E6879F0BD5C0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa Signing time: Mon 05 Jan 2026 18:49:47 +0000 ROA not before: Mon 05 Jan 2026 18:49:47 +0000 ROA not after: Sun 05 Apr 2026 17:49:47 +0000 asID: 54203 IP address blocks: 209.107.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6d:4b:75:a6:cd:58:e6:87:9f:0b:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jan 5 18:49:47 2026 GMT Not After : Apr 5 17:49:47 2026 GMT Subject: CN=4c8686e3-2f4d-411b-9225-8631a6700da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:4f:79:5d:78:10:6f:d2:96:12:ae:d9:0d: 78:19:b2:b5:14:15:c5:f2:60:cf:54:88:3a:9b:eb: 36:a7:64:2a:c5:1a:31:a3:f5:da:8c:f9:14:7a:e2: 07:45:91:23:f9:3e:fa:13:f0:80:d3:a7:38:12:a5: 0d:52:8b:a2:9e:e7:46:b2:24:15:b0:c1:50:bd:80: 80:f5:6b:4a:ef:b9:17:62:9c:09:05:f4:2b:92:1f: 21:4d:5e:4d:69:35:c7:2b:28:01:e5:5b:f7:5d:4e: e3:14:fb:ac:c5:5b:10:1d:27:36:81:a4:33:a6:f8: 1b:fc:85:92:b2:dd:0e:6c:a7:8e:20:8a:2a:87:17: 93:da:33:f7:0b:eb:7b:4c:6c:3f:45:7d:89:2f:e8: a6:11:7a:87:a8:d5:79:e1:09:fe:09:a8:bf:04:22: 3d:b0:fe:39:f0:a1:44:20:bb:04:ec:32:52:1e:37: 0f:b2:ea:f4:6b:bd:8e:12:39:77:cc:ae:b7:94:47: 2d:58:80:39:e9:36:e4:09:51:1f:cb:7d:15:03:c1: 09:fa:81:ac:c7:46:f0:bd:23:e6:c8:84:35:fd:6e: de:3f:91:49:20:44:c3:29:3f:83:5e:60:54:8b:d5: 43:5a:9b:af:73:47:04:d6:9b:c3:e6:55:df:ab:86: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F8:5E:0D:DE:6C:4F:BA:EB:94:6B:06:70:83:11:6D:1A:25:D0:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:82:49:ec:73:92:11:a1:f4:9c:64:8f:b2:54:c8:35:61:e1: a3:a2:c1:26:03:fa:f7:68:31:9c:b5:6d:68:b1:d4:a6:f6:81: 54:bb:f4:fb:d7:bc:21:28:2e:82:fd:98:65:f3:f7:92:e6:26: ea:02:27:3d:a6:f4:80:9b:6a:23:28:c8:8a:a3:df:1d:1d:1f: 92:52:79:03:9e:7b:51:78:e2:da:84:c7:ae:e1:02:f0:88:ec: 5f:3f:d4:57:5c:f3:24:aa:cd:87:49:50:ca:38:49:29:17:0b: b1:63:4a:44:8d:68:4a:14:b2:95:4d:ea:60:36:43:5c:ce:e9: 5a:cf:c4:17:27:5f:91:be:cd:16:18:9d:98:e0:7f:3c:91:6f: a1:d8:4d:5c:8e:de:46:99:0a:44:a5:08:80:e8:c9:02:fa:6d: 38:e7:ad:10:b3:bc:3f:8c:2a:53:50:65:40:ae:2f:ad:fe:c4: 10:d4:25:9a:90:60:34:1b:7b:ac:77:95:f7:93:28:66:f1:a4: b8:f0:ae:a7:c8:b7:f9:e3:a9:82:88:03:f6:46:aa:82:df:b5: 44:9a:9a:e9:43:e7:47:09:d2:f2:bd:7b:c3:ab:b9:08:64:73: e2:90:cd:10:c1:c9:d1:08:ad:31:61:1b:5c:4b:b1:9c:8d:6a: b9:f3:a3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExtS3WmzVjmh58L1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDEwNTE4NDk0N1oXDTI2MDQwNTE3NDk0N1owLzEtMCsGA1UEAxMk NGM4Njg2ZTMtMmY0ZC00MTFiLTkyMjUtODYzMWE2NzAwZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB1PeV14EG/SlhKu2Q14GbK1FBXF8mDPVIg6 m+s2p2QqxRoxo/XajPkUeuIHRZEj+T76E/CA06c4EqUNUouinudGsiQVsMFQvYCA 9WtK77kXYpwJBfQrkh8hTV5NaTXHKygB5Vv3XU7jFPusxVsQHSc2gaQzpvgb/IWS st0ObKeOIIoqhxeT2jP3C+t7TGw/RX2JL+imEXqHqNV54Qn+Cai/BCI9sP458KFE ILsE7DJSHjcPsur0a72OEjl3zK63lEctWIA56TbkCVEfy30VA8EJ+oGsx0bwvSPm yIQ1/W7eP5FJIETDKT+DXmBUi9VDWpuvc0cE1pvD5lXfq4aqwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLL4Xg3ebE+665RrBnCDEW0aJdCtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvY2ZlYjhkMzQtZTJlNS0z NGYzLTliNDMtYWYxYmVlYjM0NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCCSexzkhGh9Jxkj7JUyDVh4aOiwSYD+vdoMZy1bWix1Kb2gVS79PvX vCEoLoL9mGXz95LmJuoCJz2m9ICbaiMoyIqj3x0dH5JSeQOee1F44tqEx67hAvCI 7F8/1Fdc8ySqzYdJUMo4SSkXC7FjSkSNaEoUspVN6mA2Q1zO6VrPxBcnX5G+zRYY nZjgfzyRb6HYTVyO3kaZCkSlCIDoyQL6bTjnrRCzvD+MKlNQZUCuL63+xBDUJZqQ YDQbe6x3lfeTKGbxpLjwrqfIt/njqYKIA/ZGqoLftUSamulD50cJ0vK9e8OruQhk c+KQzRDBydEIrTFhG1xLsZyNarnzo1w= -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:13 2026 by rpki-client