This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa File: 3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa (raw, json) Hash identifier: SSUXw3xmZWBImCuGB1DUFXzgWjm4cNvMJfKRQGryjDI= Subject key identifier: DB:C5:A6:08:42:EE:45:41:5B:D5:AB:15:6C:89:E3:F8:F7:AD:DE:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC6C4FCB059FB0727D3F560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396587 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:c4:fc:b0:59:fb:07:27:d3:f5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=7976e4cb-083c-445d-90fd-8b013e6c904a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:21:22:fe:99:6e:c6:2e:5c:62:2f:81:65:eb: 42:d0:06:e4:04:06:b5:63:9e:19:48:c9:7d:c9:db: c6:b0:ea:69:96:de:07:13:4a:5a:92:5f:3f:98:27: d6:3e:c0:ca:2f:56:78:80:ac:dd:16:97:6d:39:c4: 85:0d:9c:df:18:83:ac:71:7c:00:cb:d9:65:44:d3: 12:47:66:32:8e:26:42:f9:8a:8f:4a:bc:bd:6a:12: 1c:1e:2c:bf:ab:49:e7:ff:9e:1a:4b:da:c9:51:f8: fd:59:a4:87:15:1b:de:a2:f2:0b:d6:6e:ab:f7:79: 5b:54:73:e8:db:d1:9f:79:bb:b3:d8:61:a6:dd:13: e4:c6:c8:a2:23:0a:5d:8e:ce:ce:eb:96:41:79:e8: c0:0c:4d:b0:28:fe:fd:e3:07:02:1d:d4:2c:b3:4b: 44:24:76:65:50:71:42:05:31:df:a3:65:ed:23:8e: d1:b5:55:9a:41:b8:64:21:02:df:4f:80:c2:b7:c9: c8:85:d4:95:57:88:84:aa:7e:58:38:64:c2:ca:c8: a6:82:f4:4e:74:08:e3:45:77:81:d8:13:ef:89:d3: 2d:91:97:2c:76:d8:07:6d:4e:b6:13:ac:83:2b:20: 0b:ff:5f:91:f2:ac:3e:9c:80:52:00:71:52:1f:a0: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C5:A6:08:42:EE:45:41:5B:D5:AB:15:6C:89:E3:F8:F7:AD:DE:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b2c7db1-99ac-31a9-8a99-14dae6b4ad09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:eb:47:71:87:92:d4:28:dd:04:6d:a4:27:2b:9b:84:5a:fe: 97:c2:3e:f8:73:bb:d2:96:f1:1a:16:87:10:4a:89:83:9a:30: 7c:13:16:d2:0b:21:85:6a:75:13:65:65:a7:35:56:ef:56:10: 2e:f8:22:ae:b7:d1:86:0a:ad:59:5b:1d:dc:04:55:61:eb:fc: 80:cd:8b:ae:fe:0d:d2:a6:4a:04:1a:22:77:92:52:51:9d:6e: 9f:57:45:79:24:3d:6b:37:e6:cf:4a:a2:22:5d:56:5e:a1:43: 5d:b6:08:05:a1:8d:eb:60:a9:60:d9:4f:d1:56:ce:5b:b6:af: 63:bc:c1:d0:1d:11:97:c0:d9:cf:ec:85:94:a9:e5:96:03:de: da:73:e3:a4:94:13:13:1e:76:c4:0f:3a:3f:8a:5e:6d:58:0b: 01:f4:9a:d2:c9:7a:68:47:ae:75:c2:05:52:ed:85:c7:a7:cf: bd:18:3b:a5:d2:40:cb:8a:dc:d6:bb:1c:85:ca:29:8f:cf:96: 53:1b:30:f3:b1:91:1e:a3:d5:27:0f:f0:e2:9a:a6:07:05:cb: a7:00:98:28:78:ec:0e:d3:5a:24:b0:3b:d2:9c:63:76:a4:d1: 7a:f4:a3:90:9a:a7:06:44:27:74:8d:c1:86:f7:e1:3a:00:6c: 7f:2d:e2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexsT8sFn7ByfT9WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk Nzk3NmU0Y2ItMDgzYy00NDVkLTkwZmQtOGIwMTNlNmM5MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCEi/pluxi5cYi+BZetC0AbkBAa1Y54ZSMl9 ydvGsOpplt4HE0pakl8/mCfWPsDKL1Z4gKzdFpdtOcSFDZzfGIOscXwAy9llRNMS R2YyjiZC+YqPSry9ahIcHiy/q0nn/54aS9rJUfj9WaSHFRveovIL1m6r93lbVHPo 29Gfebuz2GGm3RPkxsiiIwpdjs7O65ZBeejADE2wKP794wcCHdQss0tEJHZlUHFC BTHfo2XtI47RtVWaQbhkIQLfT4DCt8nIhdSVV4iEqn5YOGTCysimgvROdAjjRXeB 2BPvidMtkZcsdtgHbU62E6yDKyAL/1+R8qw+nIBSAHFSH6DUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvFpghC7kVBW9WrFWyJ4/j3rd7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IyYzdkYjEtOTlhYy0z MWE5LThhOTktMTRkYWU2YjRhZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHrR3GHktQo3QRtpCcrm4Ra/pfCPvhzu9KW8RoWhxBKiYOaMHwTFtIL IYVqdRNlZac1Vu9WEC74Iq630YYKrVlbHdwEVWHr/IDNi67+DdKmSgQaIneSUlGd bp9XRXkkPWs35s9KoiJdVl6hQ122CAWhjetgqWDZT9FWzlu2r2O8wdAdEZfA2c/s hZSp5ZYD3tpz46SUExMedsQPOj+KXm1YCwH0mtLJemhHrnXCBVLthcenz70YO6XS QMuK3Na7HIXKKY/PllMbMPOxkR6j1ScP8OKapgcFy6cAmCh47A7TWiSwO9KcY3ak 0Xr0o5CapwZEJ3SNwYb34ToAbH8t4iw= -----END CERTIFICATE-----Generated at Mon Jan 26 00:46:28 2026 by rpki-client