This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa File: 2644b1e5-c37b-3085-9123-bab2612b0d5e.roa (raw, json) Hash identifier: MmGvM+ZJFvEI+F9KGs0I1qjEOgLPM1VqgHiwCcLLa6E= Subject key identifier: CA:29:59:AB:DF:97:6B:C7:0A:E0:EE:FC:84:D2:4C:02:81:95:95:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC6C08E1D98B776ACB22300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396743 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:c0:8e:1d:98:b7:76:ac:b2:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=4d563d2d-602e-4548-ba30-ac5a0a333fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c2:47:45:cb:59:fb:ef:73:b9:b7:51:7e:20: 8f:2e:82:2b:bd:44:de:83:a3:52:45:13:8c:11:4a: e9:59:e8:93:2d:43:5f:e6:fa:b8:c2:71:3e:c2:8a: 09:75:17:ca:a7:82:d9:ab:42:aa:4c:98:3f:b0:6d: ca:6f:68:71:99:18:2b:b3:53:16:1a:43:e1:bb:09: d7:e3:fc:4a:e9:94:32:e5:43:ef:77:6c:d8:ef:95: 2e:59:9e:a9:51:0c:af:28:01:5f:48:77:39:08:13: 38:88:90:bc:0f:8f:6b:a3:99:c2:db:19:7e:19:f1: 16:3b:3a:00:e0:0f:16:b4:8b:14:07:aa:f6:c7:1b: f1:0c:a1:cf:a6:b7:1b:89:e5:ba:c8:13:82:0d:b5: ce:df:78:53:72:73:6a:d7:1e:2c:48:f5:15:c4:db: b8:08:41:48:be:e6:a1:da:ca:e2:26:3f:70:dd:2b: 0b:0f:e4:ca:37:4c:79:f5:f9:13:ff:f6:f7:e8:d5: f9:4c:22:69:b6:26:f8:4d:34:87:00:88:db:32:6e: 04:1a:58:da:b7:99:20:19:86:68:51:78:c2:b9:a9: 72:ff:4a:6f:70:ce:47:a8:48:45:79:ac:c9:c8:56: 1c:67:97:2f:a5:85:b6:74:4d:b6:50:49:39:37:65: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:29:59:AB:DF:97:6B:C7:0A:E0:EE:FC:84:D2:4C:02:81:95:95:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:73:18:19:f9:89:ed:a2:f2:f1:7a:e4:7e:69:1a:d1:7a:47: 47:b6:3a:41:a8:7e:dc:0e:d5:1f:db:02:01:a6:61:e2:45:44: 4d:81:3a:ea:f5:72:92:48:e8:47:59:21:db:27:fe:ec:16:30: 67:2b:8a:24:8b:7f:c1:8b:69:92:b8:07:48:3d:18:bd:15:90: 1d:d1:a2:04:87:3c:4c:fa:0b:50:db:5b:00:e9:98:11:5a:fa: 9e:2b:3c:e8:be:a2:79:d3:9b:4e:9d:b8:e1:bd:b5:ba:59:44: 71:d5:5a:85:02:6d:56:4d:62:e5:8f:09:20:aa:ae:cb:d7:47: 5a:14:18:21:74:c4:11:b4:e9:e7:c6:f9:5b:6f:c6:22:1e:72: 86:f4:6c:60:bb:e2:d5:e0:51:98:f6:b2:bb:be:9b:f7:64:79: 58:5e:8b:81:3a:d7:65:a5:45:9f:56:b9:23:58:ac:fc:4a:23: cc:d5:e6:f3:3a:b2:27:c4:5f:93:9a:d7:ec:01:4b:e6:e4:03: 86:81:53:86:c9:d0:31:ff:33:50:48:64:b5:7e:b1:8d:da:b1: 2d:f5:40:74:ac:57:a0:4c:d4:db:04:19:0f:cd:b1:57:99:db: a4:f8:44:e0:d4:e1:80:5e:04:bf:fd:74:a1:25:b8:54:38:8f: e5:09:58:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexsCOHZi3dqyyIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NGQ1NjNkMmQtNjAyZS00NTQ4LWJhMzAtYWM1YTBhMzMzZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsJHRctZ++9zubdRfiCPLoIrvUTeg6NSRROM EUrpWeiTLUNf5vq4wnE+wooJdRfKp4LZq0KqTJg/sG3Kb2hxmRgrs1MWGkPhuwnX 4/xK6ZQy5UPvd2zY75UuWZ6pUQyvKAFfSHc5CBM4iJC8D49ro5nC2xl+GfEWOzoA 4A8WtIsUB6r2xxvxDKHPprcbieW6yBOCDbXO33hTcnNq1x4sSPUVxNu4CEFIvuah 2sriJj9w3SsLD+TKN0x59fkT//b36NX5TCJptib4TTSHAIjbMm4EGljat5kgGYZo UXjCualy/0pvcM5HqEhFeazJyFYcZ5cvpYW2dE22UEk5N2XiSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMopWavfl2vHCuDu/ITSTAKBlZV/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjY0NGIxZTUtYzM3Yi0z MDg1LTkxMjMtYmFiMjYxMmIwZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtzGBn5ie2i8vF65H5pGtF6R0e2OkGoftwO1R/bAgGmYeJFRE2BOur1 cpJI6EdZIdsn/uwWMGcriiSLf8GLaZK4B0g9GL0VkB3RogSHPEz6C1DbWwDpmBFa +p4rPOi+onnTm06duOG9tbpZRHHVWoUCbVZNYuWPCSCqrsvXR1oUGCF0xBG06efG +VtvxiIecob0bGC74tXgUZj2sru+m/dkeVhei4E612WlRZ9WuSNYrPxKI8zV5vM6 sifEX5Oa1+wBS+bkA4aBU4bJ0DH/M1BIZLV+sY3asS31QHSsV6BM1NsEGQ/NsVeZ 26T4RODU4YBeBL/9dKEluFQ4j+UJWF8= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:57 2026 by rpki-client