This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa File: 05198722-f522-345f-a506-ef6cca90a62d.roa (raw, json) Hash identifier: e9SIcC9m6hYZpQa8w46MyTCvhv5F334ubUfGVavdKQs= Subject key identifier: 8D:1F:B0:28:31:5B:97:06:4F:22:15:7A:41:EF:3A:2A:8D:3F:4D:15 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584C4F6BC5DD89C63D87E45CAA80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 8987 IP address blocks: 170.85.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:c5:dd:89:c6:3d:87:e4:5c:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=3d29df16-1c2d-420b-9bce-5752ebf6ff2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:d8:47:41:58:57:0f:c8:91:f9:24:c4:a1: 72:ef:94:71:48:f1:79:66:13:15:4b:c4:ab:05:2d: ac:ff:b7:b1:11:f8:f9:1c:fd:ca:61:12:61:6b:f5: 64:eb:fb:5a:69:ee:1c:4c:a9:08:49:90:c1:23:9b: 36:0f:75:96:7a:6a:d8:1f:70:90:89:46:12:b3:a0: 7a:d7:a6:be:f5:88:c2:5d:69:9f:ac:cd:df:c7:5d: fc:a8:48:15:0f:b1:f5:49:24:49:b3:31:f0:7a:94: e6:c8:fe:77:d4:3a:1f:c1:d5:de:1f:00:fb:ee:41: f0:21:ba:a3:a0:4a:11:82:9d:3e:cb:4b:78:74:eb: 22:91:2c:74:27:7e:63:da:89:61:88:91:f0:d1:b7: 56:8b:e5:23:07:ce:f5:3e:20:53:35:64:45:e5:c8: 3c:ee:1c:39:d0:f6:ed:71:1d:19:da:74:ed:fa:61: a5:f2:2d:30:ce:92:a2:5d:71:2a:f1:d0:39:7e:06: 67:4f:63:6a:92:92:0c:3b:78:45:39:93:74:cf:26: a1:87:a0:23:7f:bc:d7:35:0e:e9:89:62:99:61:ce: 5b:16:0b:06:24:40:53:28:df:bd:1e:96:16:f0:f6: 44:27:86:4d:82:d3:4a:d6:7f:ac:3d:5a:59:aa:d9: e8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1F:B0:28:31:5B:97:06:4F:22:15:7A:41:EF:3A:2A:8D:3F:4D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/05198722-f522-345f-a506-ef6cca90a62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 170.85.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:c8:d2:da:72:2e:2b:4c:e7:d5:e0:b0:29:ac:d4:7f:18:17: 13:88:9f:18:88:00:55:e6:a3:c5:64:58:cd:b2:5d:9e:2d:78: e8:7b:f4:3e:71:76:05:1c:25:8f:7c:c4:31:76:c9:e3:77:d1: a6:b0:33:44:f7:dd:99:65:c0:ec:5e:25:24:f7:82:e6:90:dd: 59:13:f4:3d:92:89:14:ab:49:c3:04:6a:dc:a8:d1:45:15:be: bd:ae:28:1e:ef:38:06:fe:15:de:16:4a:bf:31:0f:c5:c2:bf: 12:42:59:31:95:5b:89:92:22:d7:d2:34:eb:93:bb:f1:00:67: 84:c5:80:ad:3e:d5:ca:b6:d1:fd:42:00:f8:40:91:c3:a5:57: 71:0e:85:5f:95:e9:22:74:15:c2:51:40:cd:44:3b:f4:ef:17: c2:5b:de:18:e8:40:e3:b9:54:ca:17:67:f8:6b:a9:58:80:09: de:84:01:82:2b:cb:d7:da:86:9f:00:66:99:ea:8c:16:34:2e: 39:fa:ca:c1:e8:d5:8a:f2:7a:38:7d:9e:f5:74:00:5f:26:24: 90:03:7f:df:4c:61:fd:02:28:b3:78:fb:d3:4c:6b:c7:4d:84: ed:d0:65:37:0e:29:1b:5f:79:4c:d3:41:a9:35:c4:35:f7:07: a2:33:6d:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa8XdicY9h+RcqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2QyOWRmMTYtMWMyZC00MjBiLTliY2UtNTc1MmViZjZmZjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVLYR0FYVw/IkfkkxKFy75RxSPF5ZhMVS8Sr BS2s/7exEfj5HP3KYRJha/Vk6/taae4cTKkISZDBI5s2D3WWemrYH3CQiUYSs6B6 16a+9YjCXWmfrM3fx138qEgVD7H1SSRJszHwepTmyP531DofwdXeHwD77kHwIbqj oEoRgp0+y0t4dOsikSx0J35j2olhiJHw0bdWi+UjB871PiBTNWRF5cg87hw50Pbt cR0Z2nTt+mGl8i0wzpKiXXEq8dA5fgZnT2NqkpIMO3hFOZN0zyahh6Ajf7zXNQ7p iWKZYc5bFgsGJEBTKN+9HpYW8PZEJ4ZNgtNK1n+sPVpZqtnoBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0fsCgxW5cGTyIVekHvOiqNP00VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDUxOTg3MjItZjUyMi0z NDVmLWE1MDYtZWY2Y2NhOTBhNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7I0tpyLitM59XgsCms1H8YFxOInxiIAFXmo8VkWM2yXZ4teOh79D5x dgUcJY98xDF2yeN30aawM0T33ZllwOxeJST3guaQ3VkT9D2SiRSrScMEatyo0UUV vr2uKB7vOAb+Fd4WSr8xD8XCvxJCWTGVW4mSItfSNOuTu/EAZ4TFgK0+1cq20f1C APhAkcOlV3EOhV+V6SJ0FcJRQM1EO/TvF8Jb3hjoQOO5VMoXZ/hrqViACd6EAYIr y9fahp8AZpnqjBY0Ljn6ysHo1Yryejh9nvV0AF8mJJADf99MYf0CKLN4+9NMa8dN hO3QZTcOKRtfeUzTQak1xDX3B6Izbao= -----END CERTIFICATE-----Generated at Sun Jan 25 08:24:12 2026 by rpki-client