This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa File: 90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa (raw, json) Hash identifier: UYew1VwaSQ96o2IpI9ntVOLGjp6JafaT9tBmWM05imM= Subject key identifier: B9:59:61:E9:FA:B7:CE:47:F6:05:2A:F8:B2:C6:D9:A4:2A:D4:A3:2B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C41767EAAA838A1A11090E480 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 6424 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7e:aa:a8:38:a1:a1:10:90:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=a0a33e3d-abf5-46d0-98f5-d827abf38c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:85:cb:6b:f5:1d:8c:94:21:09:c3:c2:e6:f0: 92:c2:43:14:16:6e:22:7e:e4:83:1f:c2:1b:af:a9: fd:9b:6d:d1:27:11:e0:a9:32:c9:cc:cc:78:51:a3: 6b:18:f5:cc:61:9d:01:94:a1:62:8e:3c:4c:e7:57: 75:95:e6:9e:d2:2c:da:5b:fe:85:6a:38:44:9d:bf: db:ee:f0:fe:e9:0d:c9:68:67:7b:71:cf:ba:a3:c0: cc:cb:ea:81:c3:e6:bd:32:49:e8:cd:93:11:27:ba: 0e:13:d5:00:85:2e:20:bc:24:b4:32:90:27:b7:ef: e3:5e:10:4c:a6:38:9c:8e:bf:78:ee:89:5b:36:99: c6:ca:04:72:f7:e1:29:d2:9d:df:dc:5d:3c:0b:9f: 09:16:3f:ef:bf:6a:31:fe:43:6d:86:8b:43:82:89: 65:ae:97:5e:fb:84:c3:1e:d1:4b:1d:41:8c:0e:4e: 2d:64:e6:7d:7f:7c:a1:6b:44:e3:58:b3:90:1e:d0: 5a:61:87:e6:7d:22:e5:77:fc:16:b5:c1:74:10:77: c7:3f:8d:f9:bb:3c:3e:0e:5e:06:b7:e3:5b:27:84: 5d:ba:ab:b6:ef:8e:b8:eb:52:fa:ef:7d:98:c2:bf: 31:4d:82:b1:86:70:43:28:60:d3:aa:e2:59:fd:a2: 50:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:59:61:E9:FA:B7:CE:47:F6:05:2A:F8:B2:C6:D9:A4:2A:D4:A3:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90c82b9d-8ae1-3f0f-9368-e65772e7e062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1a:53:66:7c:ea:da:a5:ca:36:6b:ce:b1:70:cb:00:26:64: 4c:a7:b3:71:e9:a5:e7:ac:35:80:95:8b:96:8a:07:a5:09:cc: f4:75:a5:b1:0f:10:5b:46:9b:95:8a:25:3f:e6:a2:ca:a6:c8: da:69:94:d5:22:06:f7:1a:0a:d1:dd:39:9b:6d:d5:b2:4f:36: d2:d2:2b:97:9b:9d:d1:c7:3d:44:4f:56:57:3d:ad:60:c0:4c: ec:af:fc:a5:d1:f1:2f:75:89:0a:86:dd:39:cb:3a:f7:fc:07: 00:a8:01:a8:19:4c:ba:90:11:4f:e5:a9:b6:a0:e1:06:8a:95: 92:70:70:ba:a3:95:56:3e:66:c2:ee:19:4d:f7:a2:d0:e3:c5: d0:8b:c7:ad:1e:de:ac:92:cf:34:d8:54:a4:65:78:2b:12:60: bf:15:dc:95:6a:f4:53:d2:b0:4e:d6:65:af:b7:44:5c:17:f7: b6:fa:cf:02:17:6f:9f:e7:3d:80:94:72:08:86:de:3f:da:89: 47:36:a9:e8:44:de:3e:7d:0a:fe:24:0f:21:5f:49:30:d1:8d: c7:a6:93:92:fb:83:cb:c1:6e:d3:8c:22:ad:ec:6a:07:21:23: b3:35:74:f8:01:11:30:86:be:ec:c3:fb:50:c1:f2:70:bb:8e: cf:a3:59:5b -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWExBdn6qqDihoRCQ5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YTBhMzNlM2QtYWJmNS00NmQwLTk4ZjUtZDgyN2FiZjM4YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYXLa/UdjJQhCcPC5vCSwkMUFm4ifuSDH8Ib r6n9m23RJxHgqTLJzMx4UaNrGPXMYZ0BlKFijjxM51d1leae0izaW/6FajhEnb/b 7vD+6Q3JaGd7cc+6o8DMy+qBw+a9MknozZMRJ7oOE9UAhS4gvCS0MpAnt+/jXhBM pjicjr947olbNpnGygRy9+Ep0p3f3F08C58JFj/vv2ox/kNthotDgollrpde+4TD HtFLHUGMDk4tZOZ9f3yha0TjWLOQHtBaYYfmfSLld/wWtcF0EHfHP435uzw+Dl4G t+NbJ4Rduqu2746461L6732Ywr8xTYKxhnBDKGDTquJZ/aJQOwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFLlZYen6t85H9gUq+LLG2aQq1KMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOTBjODJiOWQtOGFlMS0z ZjBmLTkzNjgtZTY1NzcyZTdlMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAG0aU2Z86tqlyjZrzrFwywAmZEyns3HppeesNYCV i5aKB6UJzPR1pbEPEFtGm5WKJT/mosqmyNpplNUiBvcaCtHdOZtt1bJPNtLSK5eb ndHHPURPVlc9rWDATOyv/KXR8S91iQqG3TnLOvf8BwCoAagZTLqQEU/lqbag4QaK lZJwcLqjlVY+ZsLuGU33otDjxdCLx60e3qySzzTYVKRleCsSYL8V3JVq9FPSsE7W Za+3RFwX97b6zwIXb5/nPYCUcgiG3j/aiUc2qehE3j59Cv4kDyFfSTDRjcemk5L7 g8vBbtOMIq3sagchI7M1dPgBETCGvuzD+1DB8nC7js+jWVs= -----END CERTIFICATE-----Generated at Sun Jan 25 06:13:19 2026 by rpki-client