This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa File: 4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa (raw, json) Hash identifier: 3tLZFkw+b5PZKFGKBdNrygmP9TgVrALXo3zd+8TH7P0= Subject key identifier: 58:8B:21:D5:D3:D5:7F:DC:C5:EA:83:CE:30:FD:5D:4B:F8:2D:07:51 Certificate issuer: /CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Certificate serial: 010D0C9F4328584C969C66CE7C5894E049258800 Authority key identifier: 15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 396982 IP address blocks: 199.88.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:66:ce:7c:58:94:e0:49:25:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=1d83243b-e20e-48dd-8ec2-a586a1592a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:d0:b5:93:e6:98:39:d5:56:44:2f:a9:c7: 0e:7a:a4:53:50:37:1c:09:87:e1:63:a9:f6:cb:e2: 09:34:40:70:7d:ae:cd:9e:ee:6e:e7:49:c0:d1:4f: 94:3d:41:0b:c9:c8:52:6b:e3:b2:36:26:78:9a:d8: 92:5d:cb:ca:3d:ac:17:aa:98:d7:63:25:c9:66:9d: fb:d5:ad:0d:6a:4c:29:5a:7f:21:9d:16:fe:0f:04: 43:68:6c:f3:f5:24:94:ed:a5:09:47:9f:a6:e7:4e: b1:52:98:fc:96:8e:46:5b:08:f8:42:82:07:f9:45: 33:62:1a:d0:2b:72:83:a0:37:62:cb:d0:77:d0:45: 34:77:ef:28:6f:86:4f:c2:53:2e:c6:5a:8b:60:4d: f1:0a:3e:52:eb:1a:f1:30:07:7b:87:4d:9e:43:b2: 7c:1a:3e:2c:c2:6b:2b:c5:ea:b3:d3:ff:8d:20:40: 35:ce:1e:e0:60:fc:ae:a7:da:27:bd:f2:c3:80:73: 90:19:8b:23:dc:a2:fe:5e:eb:4d:24:34:3e:87:18: c9:21:4d:26:19:5c:60:cf:20:9f:b6:49:10:68:1d: 18:41:68:bb:fc:0a:bd:69:e5:46:87:37:b8:6c:8a: 61:6c:56:b3:f0:c3:ad:f4:41:d7:36:60:c1:5c:91: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:21:D5:D3:D5:7F:DC:C5:EA:83:CE:30:FD:5D:4B:F8:2D:07:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/4cafbfd2-35b0-3d07-8d13-11f6bdba266a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.crl X509v3 Authority Key Identifier: keyid:15:B2:2C:F6:31:D3:B7:CC:32:8D:89:F6:E1:EB:14:5C:B0:3D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/204b6e35-c2b5-4084-9c70-dd5e7c7d8cf8.cer sbgp-ipAddrBlock: critical IPv4: 199.88.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:20:6a:5b:1c:68:0b:41:ed:d1:41:2d:4a:98:02:b7:08:e9: c4:0e:c7:6f:ee:ed:bf:60:cb:9a:37:3f:a4:e6:35:34:59:e3: 81:2f:cc:25:b3:28:2f:ee:41:7e:7b:6d:14:70:01:11:85:09: 41:cc:4e:bd:9c:91:02:10:7f:9b:e8:3c:ef:73:8b:c6:4c:2e: 9b:a0:60:71:03:d5:1a:44:93:38:d5:ed:c8:42:ae:6e:ca:67: b3:b8:33:f7:ee:f9:33:dd:9b:fd:d9:af:db:6d:84:3e:b1:ed: 96:a2:bf:3e:2e:2b:c0:c8:99:73:dc:6b:f2:77:f3:6a:a9:34: 0d:d7:99:04:31:24:e5:b5:49:0b:70:97:be:50:07:72:51:3e: e0:73:d5:e5:09:82:76:09:4b:3c:bd:a2:0b:d4:ac:da:dc:89: 09:0f:11:f8:0b:cf:65:59:2a:61:54:ec:d7:82:47:0e:c0:3d: e4:d3:75:07:88:67:7d:e7:68:11:74:13:f0:7a:ff:20:59:4e: b0:92:8b:81:a9:a8:92:f3:42:34:dc:03:bf:c7:64:cc:b0:f8: be:c8:ca:5d:7b:ac:cf:53:b8:13:ea:a6:c6:1f:9c:70:10:75: 85:1e:a5:c2:ee:bb:2e:00:91:80:bc:eb:40:e3:0e:8e:c8:b5: 35:10:5c:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnGbOfFiU4EkliAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA0YjZlMzUtYzJiNS00MDg0LTljNzAtZGQ1ZTdjN2Q4 Y2Y4MB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk MWQ4MzI0M2ItZTIwZS00OGRkLThlYzItYTU4NmExNTkyYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU7QtZPmmDnVVkQvqccOeqRTUDccCYfhY6n2 y+IJNEBwfa7Nnu5u50nA0U+UPUELychSa+OyNiZ4mtiSXcvKPawXqpjXYyXJZp37 1a0NakwpWn8hnRb+DwRDaGzz9SSU7aUJR5+m506xUpj8lo5GWwj4QoIH+UUzYhrQ K3KDoDdiy9B30EU0d+8ob4ZPwlMuxlqLYE3xCj5S6xrxMAd7h02eQ7J8Gj4swmsr xeqz0/+NIEA1zh7gYPyup9onvfLDgHOQGYsj3KL+XutNJDQ+hxjJIU0mGVxgzyCf tkkQaB0YQWi7/Aq9aeVGhze4bIphbFaz8MOt9EHXNmDBXJHaiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiLIdXT1X/cxeqDzjD9XUv4LQdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRi NmUzNS1jMmI1LTQwODQtOWM3MC1kZDVlN2M3ZDhjZjgvNGNhZmJmZDItMzViMC0z ZDA3LThkMTMtMTFmNmJkYmEyNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjA0YjZlMzUtYzJiNS00MDg0LTlj NzAtZGQ1ZTdjN2Q4Y2Y4LzIwNGI2ZTM1LWMyYjUtNDA4NC05YzcwLWRkNWU3Yzdk OGNmOC5jcmwwHwYDVR0jBBgwFoAUFbIs9jHTt8wyjYn24esUXLA9Iv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMDRiNmUzNS1jMmI1LTQwODQtOWM3MC1kZDVl N2M3ZDhjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1j8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0galscaAtB7dFBLUqYArcI6cQOx2/u7b9gy5o3P6TmNTRZ44EvzCWz KC/uQX57bRRwARGFCUHMTr2ckQIQf5voPO9zi8ZMLpugYHED1RpEkzjV7chCrm7K Z7O4M/fu+TPdm/3Zr9tthD6x7Zaivz4uK8DImXPca/J382qpNA3XmQQxJOW1SQtw l75QB3JRPuBz1eUJgnYJSzy9ogvUrNrciQkPEfgLz2VZKmFU7NeCRw7APeTTdQeI Z33naBF0E/B6/yBZTrCSi4GpqJLzQjTcA7/HZMyw+L7Iyl17rM9TuBPqpsYfnHAQ dYUepcLuuy4AkYC860DjDo7ItTUQXM0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:47:17 2026 by rpki-client