This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa File: 35ac0cb4-1492-3672-87c8-e934c1ffc305.roa (raw, json) Hash identifier: sQXgdjnPowzPz9jeR6Bsz7oEh+2miaxCl36RXleMHWs= Subject key identifier: E9:90:B1:94:0C:D4:83:A9:8C:00:6F:EA:80:63:9B:22:99:21:1A:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C4CA12AF71850B7812AACCD00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 1299 IP address blocks: 198.66.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:2a:f7:18:50:b7:81:2a:ac:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=57cc8476-8f99-4f7d-80d8-bcdf0fffa8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:00:dc:11:24:63:81:24:bd:86:0e:92:c9: 45:49:45:cb:70:72:f9:88:cc:b4:ad:74:17:d1:54: 6b:b7:bb:d9:72:70:39:f8:df:3f:2e:57:45:a2:cb: 86:99:b9:f9:c4:14:16:02:77:7d:9f:0e:ee:52:51: 89:5a:f0:22:6c:95:87:a4:3b:36:c3:23:b1:29:18: c8:76:fb:0d:7a:8a:4a:e0:be:77:37:b9:45:00:25: d1:36:3e:39:8a:c5:9c:39:a0:39:15:23:23:78:d6: bc:18:69:6a:b3:4e:6e:06:90:2f:b2:f8:23:b0:4e: f4:06:74:2d:ab:b6:74:47:62:1e:20:34:84:57:0b: e2:68:a7:89:85:2a:6b:51:17:71:cc:5e:1a:ae:b2: 7d:e6:4d:f0:9d:05:bf:54:94:9e:40:ea:57:94:52: 6d:53:e9:55:9a:25:e6:22:b4:80:b0:61:24:c1:a3: d1:f1:74:18:f6:f0:57:92:dd:37:2b:c9:a1:77:b4: 46:fe:de:81:6b:f5:79:2e:52:64:6f:28:ed:f1:f8: ac:29:f7:c9:00:0e:5a:94:9d:c7:e9:8f:ca:c3:e0: 8c:61:b9:b8:4b:69:d2:9d:7b:8a:26:0e:e5:67:e2: 52:57:90:7f:e4:0f:25:ae:d3:a5:bb:83:03:4b:55: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:B1:94:0C:D4:83:A9:8C:00:6F:EA:80:63:9B:22:99:21:1A:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/35ac0cb4-1492-3672-87c8-e934c1ffc305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 198.66.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:a1:5b:60:ea:af:16:7b:0c:21:98:6b:65:ac:c0:a9:f6:98: 6e:61:b2:67:ec:78:83:54:cc:98:f1:14:ba:83:6e:e2:81:d9: 01:36:05:e2:d1:63:a7:fe:ab:4a:7c:46:c2:26:e0:31:4e:33: 91:c6:ae:b2:7f:7a:0d:4c:e4:95:5f:e9:56:67:96:69:dc:d3: ee:d1:cb:a0:82:56:ce:cd:84:fa:ae:8f:27:25:c8:b0:13:03: fc:6f:03:9a:c0:e3:50:57:f7:5a:28:73:4c:47:08:f9:50:d1: bc:e9:15:78:47:93:8b:06:80:2b:03:0c:12:5c:d7:c8:e7:df: 26:9b:a1:65:b1:48:1c:0c:46:27:d9:88:73:f8:91:59:cf:0a: 7b:02:d7:72:6a:85:f8:49:6d:7a:50:b6:52:c8:a0:23:fc:9f: e1:f9:2a:48:f8:8f:89:ab:1a:77:4b:d1:8e:fa:04:bd:33:d2: a5:a2:42:ba:ce:60:18:5a:9f:49:9d:8a:d6:c0:c7:4e:82:7e: ac:ab:bb:3a:9e:43:a9:2c:ea:67:30:61:fc:43:fe:2d:d4:6e: 06:58:78:28:c9:75:03:95:65:5d:a9:24:cc:cd:3f:1b:15:17: 91:0f:5b:e9:91:06:17:3e:e5:dd:ff:e6:17:77:ec:cd:1a:c8: b1:35:3b:60 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExMoSr3GFC3gSqszQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NTdjYzg0NzYtOGY5OS00ZjdkLTgwZDgtYmNkZjBmZmZhOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOIA3BEkY4EkvYYOkslFSUXLcHL5iMy0rXQX 0VRrt7vZcnA5+N8/LldFosuGmbn5xBQWAnd9nw7uUlGJWvAibJWHpDs2wyOxKRjI dvsNeopK4L53N7lFACXRNj45isWcOaA5FSMjeNa8GGlqs05uBpAvsvgjsE70BnQt q7Z0R2IeIDSEVwviaKeJhSprURdxzF4arrJ95k3wnQW/VJSeQOpXlFJtU+lVmiXm IrSAsGEkwaPR8XQY9vBXkt03K8mhd7RG/t6Ba/V5LlJkbyjt8fisKffJAA5alJ3H 6Y/Kw+CMYbm4S2nSnXuKJg7lZ+JSV5B/5A8lrtOlu4MDS1VfUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOmQsZQM1IOpjABv6oBjmyKZIRpbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzVhYzBjYjQtMTQ5Mi0z NjcyLTg3YzgtZTkzNGMxZmZjMzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxkIwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGqFbYOqvFnsMIZhrZazAqfaYbmGyZ+x4g1TMmPEUuoNu4oHZATYF4tFj p/6rSnxGwibgMU4zkcausn96DUzklV/pVmeWadzT7tHLoIJWzs2E+q6PJyXIsBMD /G8DmsDjUFf3WihzTEcI+VDRvOkVeEeTiwaAKwMMElzXyOffJpuhZbFIHAxGJ9mI c/iRWc8KewLXcmqF+EltelC2UsigI/yf4fkqSPiPiasad0vRjvoEvTPSpaJCus5g GFqfSZ2K1sDHToJ+rKu7Op5DqSzqZzBh/EP+LdRuBlh4KMl1A5VlXakkzM0/GxUX kQ9b6ZEGFz7l3f/mF3fszRrIsTU7YA== -----END CERTIFICATE-----Generated at Sun Jan 25 04:33:48 2026 by rpki-client