This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa File: 8da6384b-e652-36de-b69d-ac9de12cdc66.roa (raw, json) Hash identifier: 2m31pV7GEGdSs2UFEc0zO/ZSX5GR7rqHmUkjAKn/FNM= Subject key identifier: 15:89:72:2D:BC:A1:D3:6A:C4:CB:F5:7A:52:A1:86:2B:FC:ED:AE:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C41767F2389CF7757D1F82180 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 141193 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7f:23:89:cf:77:57:d1:f8:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=e0ef450b-e69f-4e50-b637-152eb03fd58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:31:e5:72:6d:60:c7:a6:d5:b2:11:d5:f3:e4: ba:a3:c7:bd:da:42:99:16:a8:4b:bc:06:05:b7:c5: b5:f3:16:11:cf:66:05:3e:d8:81:34:1b:38:8b:c0: be:1a:09:1f:8b:79:7c:11:8f:6f:b1:6e:eb:8c:5a: 22:14:8d:6f:fb:3e:42:b6:92:9f:46:3d:20:fc:fa: 37:46:7f:9b:6c:b8:01:7e:cb:e4:96:72:94:da:38: f4:ba:69:c2:ec:61:68:1f:8c:17:f5:03:ec:e9:66: e7:3f:e1:a3:1d:78:e9:15:9c:1e:5f:45:8a:b8:3a: 7c:ef:91:b1:1f:6e:af:57:88:a6:a7:2d:1b:11:30: 51:64:b2:c7:f3:be:36:3f:e6:46:d2:a6:95:55:59: 55:31:5e:d5:a2:9e:2b:9e:19:f8:a7:27:99:e5:e9: 0b:a3:0f:dd:e7:b7:18:8d:6e:d8:22:36:00:db:96: 0d:75:ed:91:5a:14:4b:c1:80:17:99:93:e8:a4:d1: ef:90:d6:bb:7c:96:76:5d:5a:c7:a0:cf:cb:66:2f: 15:4e:05:6a:55:d7:13:8a:e6:a1:be:bd:70:8f:87: 5d:c8:d0:52:8a:ff:df:f5:16:db:1d:6f:ab:e5:29: c9:ad:df:09:5f:ac:39:4d:7c:8f:41:13:90:b4:3e: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:89:72:2D:BC:A1:D3:6A:C4:CB:F5:7A:52:A1:86:2B:FC:ED:AE:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8da6384b-e652-36de-b69d-ac9de12cdc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b6:21:32:46:b7:3d:ad:6a:65:dd:53:d3:e5:32:49:d4:a1: ac:07:97:e9:b3:04:cb:27:47:fd:6e:92:ea:1d:ed:d9:04:d0: 51:15:60:27:8e:70:9e:90:d1:f7:57:04:03:fe:f4:d3:b7:7e: c7:f6:52:1a:17:6b:6c:1a:0a:a9:1d:6e:a4:7d:e8:4f:2b:1e: b1:01:c1:c4:01:ba:80:89:61:85:51:ff:d7:04:df:38:c8:50: 9d:d9:cf:f8:83:81:a0:90:13:ad:e9:8c:39:be:e2:17:75:93: e4:07:0b:b7:7d:fd:b6:5e:1b:b2:63:eb:28:7c:7f:46:86:d0: f0:d4:c3:8b:3b:4f:fc:74:1d:d4:e5:f9:2d:23:04:7e:9c:43: 4e:2f:26:c3:97:6e:11:0d:df:4c:37:2e:24:d4:63:94:41:ba: 15:fa:6f:a4:87:7c:d0:a7:96:52:69:b1:8a:bb:b5:dd:12:39: 51:94:d7:c3:94:17:e4:1c:9c:40:d3:0c:f1:b9:89:c3:06:6e: 30:d5:15:6d:ba:86:08:7c:d2:f0:15:83:37:a7:b2:c7:cd:da: 76:59:24:85:11:a5:52:83:d5:01:dc:06:ad:93:d4:a3:a4:04: c9:dc:2a:32:df:24:d4:94:55:d7:ad:fa:45:35:f0:20:f4:8d: 1c:41:66:8e -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWExBdn8jic93V9H4IYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk ZTBlZjQ1MGItZTY5Zi00ZTUwLWI2MzctMTUyZWIwM2ZkNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzHlcm1gx6bVshHV8+S6o8e92kKZFqhLvAYF t8W18xYRz2YFPtiBNBs4i8C+Ggkfi3l8EY9vsW7rjFoiFI1v+z5CtpKfRj0g/Po3 Rn+bbLgBfsvklnKU2jj0umnC7GFoH4wX9QPs6WbnP+GjHXjpFZweX0WKuDp875Gx H26vV4impy0bETBRZLLH8742P+ZG0qaVVVlVMV7Vop4rnhn4pyeZ5ekLow/d57cY jW7YIjYA25YNde2RWhRLwYAXmZPopNHvkNa7fJZ2XVrHoM/LZi8VTgVqVdcTiuah vr1wj4ddyNBSiv/f9RbbHW+r5SnJrd8JX6w5TXyPQROQtD7dIQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFBWJci28odNqxMv1elKhhiv87a4rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGRhNjM4NGItZTY1Mi0z NmRlLWI2OWQtYWM5ZGUxMmNkYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC+2ITJGtz2tamXdU9PlMknUoawHl+mzBMsnR/1u kuod7dkE0FEVYCeOcJ6Q0fdXBAP+9NO3fsf2UhoXa2waCqkdbqR96E8rHrEBwcQB uoCJYYVR/9cE3zjIUJ3Zz/iDgaCQE63pjDm+4hd1k+QHC7d9/bZeG7Jj6yh8f0aG 0PDUw4s7T/x0HdTl+S0jBH6cQ04vJsOXbhEN30w3LiTUY5RBuhX6b6SHfNCnllJp sYq7td0SOVGU18OUF+QcnEDTDPG5icMGbjDVFW26hgh80vAVgzenssfN2nZZJIUR pVKD1QHcBq2T1KOkBMncKjLfJNSUVdet+kU18CD0jRxBZo4= -----END CERTIFICATE-----Generated at Sun Jan 25 02:52:35 2026 by rpki-client