This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa File: 86ffd968-02c6-388c-b8db-e56815461be6.roa (raw, json) Hash identifier: 5ozeFi8IYnjmGX7cQUmGAc5GKx1DT9YqYLM9F0sVCLg= Subject key identifier: 85:6C:39:71:A4:B6:3F:93:05:D7:09:90:D9:4D:98:B8:CD:E1:DC:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC721E4DE8174B6795AA100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396745 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:21:e4:de:81:74:b6:79:5a:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=3ceeb86f-6592-43ea-a5ea-11613b581e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:84:95:9b:e4:17:bd:fa:86:ab:cb:9a:ec:25: 72:da:c0:42:9a:e4:5a:27:35:20:f4:25:8e:ea:b9: d8:0b:5f:a1:21:f2:44:91:d0:fd:0c:20:4e:ef:80: 36:9e:8f:db:b3:60:dc:81:6a:91:6e:1a:89:2d:ba: d4:1c:19:00:e0:27:e4:14:bc:d1:62:92:15:b9:5e: 52:a5:26:7f:be:1b:d0:09:81:fb:83:be:be:b4:fa: d8:f4:bd:8d:20:59:ba:a9:7f:10:af:b5:78:cb:5a: 92:c9:f4:9a:97:73:2b:54:8d:bd:ce:71:f0:09:d3: 67:e5:5d:40:bc:96:db:ac:37:73:fe:07:e3:b7:43: 33:70:fd:f4:a8:7d:b0:15:a2:f5:c1:8b:5e:73:91: 46:76:78:c8:16:fb:e5:21:68:95:cb:0a:b2:51:e8: ab:e5:b0:aa:13:1a:c2:45:62:ae:60:90:ca:90:01: 8e:53:16:65:0a:b9:35:02:3c:ad:3f:5f:d6:ac:26: 70:23:5a:15:7e:55:b7:a4:ed:b2:8a:20:f8:ee:4d: c3:df:20:cc:c8:78:03:ac:39:d6:81:e9:5f:7d:65: 1e:13:aa:cd:ea:ef:97:42:d7:be:e5:5d:7c:ea:41: 28:a8:d4:7e:77:9e:e3:17:bb:89:73:42:d4:51:e7: 34:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6C:39:71:A4:B6:3F:93:05:D7:09:90:D9:4D:98:B8:CD:E1:DC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86ffd968-02c6-388c-b8db-e56815461be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3f:fb:15:2f:3b:51:c7:ed:9a:04:4c:30:bb:4c:26:9c:1c: 3e:70:ad:ac:dc:82:7b:d0:0e:8e:2d:e5:57:0b:5f:ea:a3:ce: 13:52:17:f3:81:bc:69:d0:a6:15:e9:73:bb:de:bf:82:a3:2c: e7:50:90:4d:90:f4:d2:70:81:7b:83:fc:c7:f9:bc:7f:78:59: fb:fb:9f:27:63:69:1f:3c:a7:e0:36:8d:82:19:0e:a8:d5:be: c7:a0:eb:dd:3f:bc:37:5b:53:63:cf:91:ab:79:ff:6d:0e:e0: 2c:7c:81:07:89:29:da:d5:3f:31:90:cd:d5:cb:c0:3b:f8:7d: 11:8b:78:b5:ab:4b:ea:60:a2:9b:5b:f3:58:10:ec:20:11:2c: ed:ff:5b:83:1e:d6:6d:76:26:0d:6f:d3:be:dd:91:c7:76:74: 45:c4:7a:11:c8:76:eb:43:67:cc:e4:fd:60:95:67:b9:66:39: f8:22:93:50:25:9c:b0:5c:8e:e9:4a:d9:c8:8c:0c:cd:d2:92: 2a:11:89:ae:05:4f:a6:5b:f0:61:d0:85:52:df:27:c4:7e:de: 0f:f8:d4:1b:94:da:6e:84:00:f5:84:f5:6d:fa:c0:a3:78:d5: 0f:24:ba:2d:1a:59:f4:ee:35:73:b5:6c:35:28:04:57:50:3e: 9d:ae:e4:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexyHk3oF0tnlaoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk M2NlZWI4NmYtNjU5Mi00M2VhLWE1ZWEtMTE2MTNiNTgxZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4SVm+QXvfqGq8ua7CVy2sBCmuRaJzUg9CWO 6rnYC1+hIfJEkdD9DCBO74A2no/bs2DcgWqRbhqJLbrUHBkA4CfkFLzRYpIVuV5S pSZ/vhvQCYH7g76+tPrY9L2NIFm6qX8Qr7V4y1qSyfSal3MrVI29znHwCdNn5V1A vJbbrDdz/gfjt0MzcP30qH2wFaL1wYtec5FGdnjIFvvlIWiVywqyUeir5bCqExrC RWKuYJDKkAGOUxZlCrk1AjytP1/WrCZwI1oVflW3pO2yiiD47k3D3yDMyHgDrDnW gelffWUeE6rN6u+XQte+5V186kEoqNR+d57jF7uJc0LUUec0GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVsOXGktj+TBdcJkNlNmLjN4dx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZmZmQ5NjgtMDJjNi0z ODhjLWI4ZGItZTU2ODE1NDYxYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU/+xUvO1HH7ZoETDC7TCacHD5wrazcgnvQDo4t5VcLX+qjzhNSF/OB vGnQphXpc7vev4KjLOdQkE2Q9NJwgXuD/Mf5vH94Wfv7nydjaR88p+A2jYIZDqjV vseg690/vDdbU2PPkat5/20O4Cx8gQeJKdrVPzGQzdXLwDv4fRGLeLWrS+pgoptb 81gQ7CARLO3/W4Me1m12Jg1v077dkcd2dEXEehHIdutDZ8zk/WCVZ7lmOfgik1Al nLBcjulK2ciMDM3SkioRia4FT6Zb8GHQhVLfJ8R+3g/41BuU2m6EAPWE9W36wKN4 1Q8kui0aWfTuNXO1bDUoBFdQPp2u5J8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:18:47 2026 by rpki-client