This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa File: 66ba2098-88fc-32cf-97d4-feff4704a1a9.roa (raw, json) Hash identifier: BKX1/Az3ubbiIlGj4i9a4+kPKKjWVFvESkFs9tIWkyE= Subject key identifier: 23:57:2B:BB:73:A8:FA:CE:41:CD:C4:31:08:0A:C5:7E:6B:B8:48:CE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C41767F1007DE3E2F03889D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 61290 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7f:10:07:de:3e:2f:03:88:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=a2eb4821-bd71-4ee3-b619-67a47679ec77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7c:a8:1b:3d:e4:d6:7e:75:c1:9e:14:b7:1f: 7e:d8:58:a7:55:92:20:d0:61:17:44:f2:39:fb:41: 79:b4:65:6b:9a:88:dd:e4:f7:f8:ac:47:07:df:ea: 50:ed:df:07:4a:34:d6:e6:22:38:0e:95:4f:ac:3d: 5b:92:98:a9:fe:76:2b:34:de:23:cb:6e:b6:39:da: 36:ed:1a:a3:52:9f:fe:53:7b:36:68:eb:69:76:c4: 06:ef:46:e1:6e:04:78:16:fd:0c:81:2f:aa:51:c9: 9d:a8:24:7f:77:e9:11:70:7c:50:76:6e:a6:7d:48: 77:c9:cc:de:bb:6c:5f:60:04:0c:e2:12:ed:c4:ca: f1:88:5a:db:b0:1a:69:91:39:63:14:ff:bf:ed:97: 59:b7:c1:41:8a:fd:53:63:8a:29:fc:2d:87:0d:a1: 7b:40:6d:83:f0:9a:55:c1:eb:fe:9b:66:29:fa:a4: a0:d8:e2:79:e7:4a:1c:a7:3f:16:f4:ef:86:fa:be: 18:b5:c4:a2:8c:02:28:05:8d:be:ea:0a:43:fa:00: 18:d1:26:a7:5c:88:eb:b7:c9:f2:f1:76:85:ac:85: 67:85:76:b8:1f:41:87:ff:3e:ed:36:f2:bf:37:e0: 15:84:08:97:0e:da:6d:f0:5b:70:5e:3b:d7:9a:02: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:57:2B:BB:73:A8:FA:CE:41:CD:C4:31:08:0A:C5:7E:6B:B8:48:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/66ba2098-88fc-32cf-97d4-feff4704a1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:3d:77:a4:02:b1:00:16:0e:73:9e:91:87:5c:ae:23:52:12: 53:26:c5:70:f8:69:a2:96:ac:ec:96:7a:81:dc:bd:16:1c:d7: 37:9f:50:ab:b4:c7:3b:75:cb:e5:94:c4:85:ea:38:a3:c6:1d: ff:21:6e:6a:eb:0e:89:01:4e:e2:b3:ea:32:56:9c:e9:03:b9: 5a:68:ac:b9:5a:15:8c:5a:ac:80:b2:77:a6:13:9e:24:13:3d: d2:40:fb:87:8b:a3:65:6a:14:e1:47:99:4c:ee:9a:1f:71:20: 20:eb:40:19:43:03:fa:c4:da:40:ff:10:db:f4:de:70:75:25: 07:5f:83:e0:e2:7a:0e:e8:72:a1:ce:c5:72:5e:12:57:12:11: b1:d0:5f:7b:b1:83:6a:1b:c1:85:e1:75:22:c5:14:b0:82:82: 1d:6e:78:b1:9d:ee:b3:e2:6e:0b:c0:45:26:c5:68:58:59:39: b9:d6:aa:c9:82:ac:ae:e1:83:36:7c:f5:0b:dc:54:70:c1:cf: bf:9d:cf:25:6c:fa:71:d9:dd:35:8d:72:bc:d3:4b:0f:6d:a9: e4:56:d6:23:3a:1c:3d:79:1b:64:6a:1d:14:61:15:0b:80:76: 18:82:5f:6f:36:bb:4e:ea:fe:43:0a:fe:1d:87:bd:e7:d1:a1: 93:07:f5:9f -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWExBdn8QB94+LwOInQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YTJlYjQ4MjEtYmQ3MS00ZWUzLWI2MTktNjdhNDc2NzllYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3yoGz3k1n51wZ4Utx9+2FinVZIg0GEXRPI5 +0F5tGVrmojd5Pf4rEcH3+pQ7d8HSjTW5iI4DpVPrD1bkpip/nYrNN4jy262Odo2 7RqjUp/+U3s2aOtpdsQG70bhbgR4Fv0MgS+qUcmdqCR/d+kRcHxQdm6mfUh3ycze u2xfYAQM4hLtxMrxiFrbsBppkTljFP+/7ZdZt8FBiv1TY4op/C2HDaF7QG2D8JpV wev+m2Yp+qSg2OJ550ocpz8W9O+G+r4YtcSijAIoBY2+6gpD+gAY0SanXIjrt8ny 8XaFrIVnhXa4H0GH/z7tNvK/N+AVhAiXDtpt8FtwXjvXmgLCLQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFCNXK7tzqPrOQc3EMQgKxX5ruEjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNjZiYTIwOTgtODhmYy0z MmNmLTk3ZDQtZmVmZjQ3MDRhMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBALo9d6QCsQAWDnOekYdcriNSElMmxXD4aaKWrOyW eoHcvRYc1zefUKu0xzt1y+WUxIXqOKPGHf8hbmrrDokBTuKz6jJWnOkDuVporLla FYxarICyd6YTniQTPdJA+4eLo2VqFOFHmUzumh9xICDrQBlDA/rE2kD/ENv03nB1 JQdfg+Dieg7ocqHOxXJeElcSEbHQX3uxg2obwYXhdSLFFLCCgh1ueLGd7rPibgvA RSbFaFhZObnWqsmCrK7hgzZ89QvcVHDBz7+dzyVs+nHZ3TWNcrzTSw9tqeRW1iM6 HD15G2RqHRRhFQuAdhiCX282u07q/kMK/h2HvefRoZMH9Z8= -----END CERTIFICATE-----Generated at Sun Jan 25 01:20:38 2026 by rpki-client