This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa File: ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa (raw, json) Hash identifier: vRf6520ZaW5ecXNEeG9zHRe1C/2OCQ8b7AdPZkb+9Ms= Subject key identifier: 93:5A:45:9F:25:51:8E:BD:A9:AD:87:DD:51:75:15:D9:4F:25:D2:11 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C9966F13FA90042463C996200 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 22691 IP address blocks: 199.224.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:66:f1:3f:a9:00:42:46:3c:99:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=b5e5d13c-0a5f-4505-9eee-ce134ade3a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f9:23:35:f9:00:67:aa:59:af:55:a6:16:ee: c9:a1:4d:29:35:17:5b:b2:bc:23:43:72:aa:ae:b3: 9e:04:65:4c:f0:44:43:f2:d8:6a:3d:54:0b:51:49: 4e:56:f7:c8:17:fe:7d:b2:ba:cd:1c:3e:36:f2:5a: 88:07:ce:63:4d:c5:1c:60:0b:2c:e8:d9:80:c1:1e: 08:b3:aa:0f:87:82:e1:8a:2d:a1:16:cf:34:48:90: 51:da:a9:70:b2:dc:47:d3:4d:90:1c:29:6d:58:10: 8f:a0:21:f9:9a:8a:85:c1:09:85:f4:0e:97:ce:32: 33:1a:5b:0d:58:41:21:29:73:6d:4c:6e:90:f8:45: 61:ca:2b:7a:a3:2c:5e:7f:af:32:30:71:cc:16:26: a0:03:44:5d:e4:b0:4c:11:89:a2:20:a8:c0:c7:bb: 9a:79:97:64:f6:6d:3e:92:62:b0:d5:ef:62:f6:a0: 64:72:c7:85:2b:3d:7e:1f:59:2f:f0:45:91:d4:1c: a5:c8:50:6d:7a:5d:ec:4f:31:bd:0c:0c:be:73:9f: 70:a8:2a:8c:79:6e:6e:6c:ab:49:27:76:e7:c2:d0: af:4e:c6:c8:84:ed:ab:98:17:e6:e9:91:75:9c:bc: 96:d5:75:75:11:07:68:7b:8e:93:6b:69:f0:9d:5e: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5A:45:9F:25:51:8E:BD:A9:AD:87:DD:51:75:15:D9:4F:25:D2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffa85ff0-819b-3090-b52a-e9f5a719d7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 199.224.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5a:24:13:13:82:4c:a7:87:bf:0b:7e:17:78:ce:dc:a3:81: 6b:c9:70:1a:56:73:9d:48:80:ec:e1:21:c2:36:a1:ea:36:57: 93:46:c1:5e:dc:4a:9d:9c:00:a0:a6:8c:fa:86:bd:01:1f:67: 77:3b:35:b2:67:fc:19:c2:59:14:68:00:4b:c9:f7:57:d3:b5: 9b:bc:18:7f:53:70:79:90:2f:a0:1c:58:51:d2:3b:dd:67:b0: 8f:1b:e9:f0:16:55:dd:80:75:3e:9d:1f:1b:02:ac:38:1a:0d: 54:7c:72:f2:3c:bf:4e:0f:c2:be:84:1b:8f:cb:11:d8:06:7c: a9:90:f3:ed:75:3b:c2:61:ad:1b:f3:c4:f2:9f:ad:ab:26:c2: 4c:ca:11:ba:50:fa:d4:93:de:25:03:0f:0c:bc:15:6f:7f:4c: c2:00:40:75:ad:34:4a:67:5e:d8:27:37:cc:f3:90:88:b2:36: 67:47:36:55:80:32:8d:53:c2:6b:e1:49:24:98:bc:7a:a5:fe: f5:7f:f1:2e:60:03:47:6c:ec:07:a7:da:cc:ab:18:2a:20:4d: a5:8a:da:90:28:08:8d:a9:ff:ad:08:7e:23:c2:33:e3:1e:80: f2:e7:d6:a0:d3:dd:b0:91:0e:1e:9e:3f:0e:99:29:5c:b2:9d: e2:78:5b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZvE/qQBCRjyZYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk YjVlNWQxM2MtMGE1Zi00NTA1LTllZWUtY2UxMzRhZGUzYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPkjNfkAZ6pZr1WmFu7JoU0pNRdbsrwjQ3Kq rrOeBGVM8ERD8thqPVQLUUlOVvfIF/59srrNHD428lqIB85jTcUcYAss6NmAwR4I s6oPh4Lhii2hFs80SJBR2qlwstxH002QHCltWBCPoCH5moqFwQmF9A6XzjIzGlsN WEEhKXNtTG6Q+EVhyit6oyxef68yMHHMFiagA0Rd5LBMEYmiIKjAx7uaeZdk9m0+ kmKw1e9i9qBkcseFKz1+H1kv8EWR1BylyFBtel3sTzG9DAy+c59wqCqMeW5ubKtJ J3bnwtCvTsbIhO2rmBfm6ZF1nLyW1XV1EQdoe46Ta2nwnV5x6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNaRZ8lUY69qa2H3VF1FdlPJdIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmZhODVmZjAtODE5Yi0z MDkwLWI1MmEtZTlmNWE3MTlkN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+AJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABaJBMTgkynh78Lfhd4ztyjgWvJcBpWc51IgOzhIcI2oeo2V5NGwV7c Sp2cAKCmjPqGvQEfZ3c7NbJn/BnCWRRoAEvJ91fTtZu8GH9TcHmQL6AcWFHSO91n sI8b6fAWVd2AdT6dHxsCrDgaDVR8cvI8v04Pwr6EG4/LEdgGfKmQ8+11O8JhrRvz xPKfrasmwkzKEbpQ+tST3iUDDwy8FW9/TMIAQHWtNEpnXtgnN8zzkIiyNmdHNlWA Mo1TwmvhSSSYvHql/vV/8S5gA0ds7Aen2syrGCogTaWK2pAoCI2p/60IfiPCM+Me gPLn1qDT3bCRDh6ePw6ZKVyyneJ4W0c= -----END CERTIFICATE-----Generated at Sun Jan 25 02:53:15 2026 by rpki-client