This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa File: fdbf5dec-8f42-307e-8858-c6991bcb6706.roa (raw, json) Hash identifier: KwGsbIG/x+rzhSWWuzfloQt5kfaif3AVvJVARtdMdQ0= Subject key identifier: C5:DF:62:60:AD:B9:E6:CA:C1:4D:E3:6D:14:0F:01:D2:79:D0:CC:94 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C41767EFBEE009AAB79D10070 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 50028 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7e:fb:ee:00:9a:ab:79:d1:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=af64ad00-7ca2-4dc3-b8d5-7ef8e6639afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:51:27:02:bb:ae:60:e1:c1:be:5b:d3:83:dd: 67:02:d5:2c:6a:a2:60:d8:01:ee:a3:04:ec:44:85: 90:0e:a5:84:30:46:41:11:ce:d7:0c:8f:30:d8:34: 4b:74:ff:fc:19:85:13:dd:ad:e6:56:ab:55:05:47: af:41:c5:0b:45:ba:a1:f9:d3:ca:01:11:06:48:a5: fc:61:b2:94:0b:6c:66:02:53:60:ac:2e:4c:e7:98: f9:b9:41:71:7f:0d:e7:0a:d6:08:0e:b0:9a:b7:1f: 84:78:4d:32:90:f0:3d:d0:de:a4:d0:23:05:0b:4f: c5:97:12:33:91:51:84:d8:34:77:a2:9d:b5:ce:87: a6:e1:cb:69:9d:43:48:0f:da:a9:19:ef:9f:0e:76: 07:34:fc:dd:43:26:82:5e:f4:48:f7:5f:41:03:8a: ab:bb:bd:fc:d2:97:da:71:47:e8:be:b7:b2:5c:91: 32:16:79:ff:76:cc:d3:2b:b1:63:a5:e2:c2:fd:a7: 02:e8:6b:d6:d1:60:2e:23:1d:33:a4:48:ae:40:e6: ac:b3:20:8a:ed:96:56:c6:e1:53:01:da:0a:22:40: 1f:f4:66:44:02:9f:de:82:74:77:a6:39:a4:9d:af: 97:6e:50:4d:a2:79:e4:16:f7:7a:1d:9b:a8:18:0d: db:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:62:60:AD:B9:E6:CA:C1:4D:E3:6D:14:0F:01:D2:79:D0:CC:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/fdbf5dec-8f42-307e-8858-c6991bcb6706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:d4:72:55:7a:db:47:0c:ff:21:c0:30:3f:b4:61:f8:c7:99: 11:6d:a1:40:a3:51:e3:03:ef:35:be:3b:fe:88:5c:42:f5:aa: b1:06:5e:c0:f2:58:e8:d6:65:47:0d:14:c5:4e:3f:06:a0:06: 34:f6:c1:d6:28:46:32:4a:98:43:f8:61:9e:5c:46:03:23:b5: 3b:6a:a3:57:00:ac:e9:bd:04:f1:01:d0:14:2f:48:aa:f0:e5: 56:55:20:c2:37:f4:f3:0d:34:ae:1b:0f:42:b6:ee:f7:92:27: 1b:b1:76:0b:57:cf:f4:f2:be:2e:83:24:9b:7b:b0:16:1d:d8: bf:02:22:a4:7c:24:bc:c4:94:e9:f2:65:30:74:a5:f8:fe:36: 78:10:99:1f:8b:87:c6:13:6f:e1:9a:5e:00:e1:74:a4:1e:87: 4c:2e:c6:e3:71:9c:b3:41:e3:e5:db:24:b0:78:0d:53:78:ab: a7:17:50:f0:be:dd:14:b3:48:7c:5b:ad:86:8c:b2:84:17:f6: ef:d6:88:13:93:5e:54:49:1a:2e:1b:da:ed:8f:f9:74:73:0d: db:52:ea:2c:73:6c:6f:7e:c7:6f:73:fe:f3:e0:02:ba:8c:b7: b4:25:e9:08:13:ba:96:e7:01:7d:62:6a:b3:99:e0:1d:0a:c6: 61:2a:8b:30 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWExBdn777gCaq3nRAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YWY2NGFkMDAtN2NhMi00ZGMzLWI4ZDUtN2VmOGU2NjM5YWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilEnAruuYOHBvlvTg91nAtUsaqJg2AHuowTs RIWQDqWEMEZBEc7XDI8w2DRLdP/8GYUT3a3mVqtVBUevQcULRbqh+dPKAREGSKX8 YbKUC2xmAlNgrC5M55j5uUFxfw3nCtYIDrCatx+EeE0ykPA90N6k0CMFC0/FlxIz kVGE2DR3op21zoem4ctpnUNID9qpGe+fDnYHNPzdQyaCXvRI919BA4qru7380pfa cUfovreyXJEyFnn/dszTK7FjpeLC/acC6GvW0WAuIx0zpEiuQOassyCK7ZZWxuFT AdoKIkAf9GZEAp/egnR3pjmkna+XblBNonnkFvd6HZuoGA3bFQIDAQABo4IDkTCC A40wHQYDVR0OBBYEFMXfYmCtuebKwU3jbRQPAdJ50MyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmRiZjVkZWMtOGY0Mi0z MDdlLTg4NTgtYzY5OTFiY2I2NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEPUclV620cM/yHAMD+0YfjHmRFtoUCjUeMD7zW+ O/6IXEL1qrEGXsDyWOjWZUcNFMVOPwagBjT2wdYoRjJKmEP4YZ5cRgMjtTtqo1cA rOm9BPEB0BQvSKrw5VZVIMI39PMNNK4bD0K27veSJxuxdgtXz/Tyvi6DJJt7sBYd 2L8CIqR8JLzElOnyZTB0pfj+NngQmR+Lh8YTb+GaXgDhdKQeh0wuxuNxnLNB4+Xb JLB4DVN4q6cXUPC+3RSzSHxbrYaMsoQX9u/WiBOTXlRJGi4b2u2P+XRzDdtS6ixz bG9+x29z/vPgArqMt7Ql6QgTupbnAX1iarOZ4B0KxmEqizA= -----END CERTIFICATE-----Generated at Sun Jan 25 02:54:40 2026 by rpki-client