This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa File: a9f0f3ea-1208-3121-b941-02893030e71a.roa (raw, json) Hash identifier: Zh5WH9l0GcJUknZFf6QghP8pSQSR2KfOd3qIt2XAfBo= Subject key identifier: 7F:72:58:BF:24:71:4F:CD:D6:30:68:3F:14:8B:B7:DA:BD:0B:A8:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC71CA721E37C3DD0E92170 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 397207 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:1c:a7:21:e3:7c:3d:d0:e9:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=a5b460f2-d52f-4c25-98e4-b77902cbe96a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:47:d8:ed:72:ee:ca:1d:c0:51:1d:bc:7e: 25:ee:e0:c1:fc:16:df:3f:e2:3d:bf:0d:3f:c2:b8: aa:04:5b:f0:d4:8c:78:b8:84:3e:88:81:b9:ef:cd: 8d:0e:6a:ab:2b:88:8b:c3:71:8b:18:1f:43:4a:97: 7f:cd:3b:d5:c0:db:fa:2b:0d:82:74:60:9b:4b:9b: b4:c6:38:09:34:95:0f:cf:69:16:40:54:2d:a9:d5: e5:dc:c7:1e:4a:fb:a0:97:16:01:ac:8f:e3:62:88: 69:3f:78:1a:f2:f0:e9:68:b9:c9:fb:fa:16:4a:28: a4:88:e6:e7:ad:56:95:3c:69:f4:65:84:8d:d5:11: 8e:55:87:08:68:4f:61:12:a0:e3:92:0d:8c:09:30: 7a:1b:8c:20:96:3d:12:67:08:be:a2:1f:4d:3b:a2: 59:96:95:10:f3:04:a5:07:dd:df:0a:0e:29:06:89: f7:00:d7:74:6c:b4:b0:0d:0b:37:87:9d:19:c0:48: 9d:ca:34:67:78:00:2f:cf:ce:49:5a:3f:dd:6c:8a: 65:26:13:cd:52:28:6d:66:0e:c2:52:e7:61:18:12: 55:4d:1c:40:19:b3:49:64:e9:3e:5b:66:0d:33:bb: ab:33:e8:b9:49:02:53:62:91:2b:d9:e6:dd:01:a7: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:72:58:BF:24:71:4F:CD:D6:30:68:3F:14:8B:B7:DA:BD:0B:A8:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fc:94:21:aa:d2:d7:b0:65:ad:2f:a6:a6:83:71:a8:97:db: a0:53:22:cf:a8:ea:94:5b:a8:49:a6:50:23:96:d0:27:5a:1d: dd:6d:cc:a9:6a:71:f0:2e:b2:bc:d9:c5:83:c1:c5:55:53:80: 91:20:64:5c:01:09:c6:2d:2a:51:1f:b2:fb:5c:a4:54:e2:57: f9:af:19:74:a7:4e:1b:98:e7:bc:c9:b7:e5:ed:b8:d7:e5:e2: 04:2f:9a:18:10:ae:e8:6a:2e:04:b7:7f:75:80:61:6f:47:b1: 20:ef:b2:8a:90:30:12:e7:02:80:74:fb:9e:4d:a1:29:d7:f0: 0d:0d:94:14:7c:d5:1d:fe:e7:46:af:20:23:25:9c:94:9c:61: 42:83:d7:2e:f8:d8:93:fd:37:49:a7:49:18:79:49:1e:c2:3d: 23:6e:73:16:fb:20:97:ad:0a:a0:f7:48:49:e0:c0:1f:6d:be: 32:c1:ff:f5:66:2e:ad:73:f6:42:b7:ea:9d:9c:cb:da:6b:3d: 6f:b3:25:2f:63:58:70:29:85:26:e6:6e:f4:cc:c0:69:05:2f: 9d:c3:1f:b6:ff:a2:0e:f1:fe:ec:3b:55:e4:b2:a0:4a:59:dd: 02:16:26:49:21:14:bb:f1:dc:92:a6:82:66:24:06:bc:c9:d8: 5e:a5:10:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexxynIeN8PdDpIXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YTViNDYwZjItZDUyZi00YzI1LTk4ZTQtYjc3OTAyY2JlOTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1pH2O1y7sodwFEdvH4l7uDB/BbfP+I9vw0/ wriqBFvw1Ix4uIQ+iIG5782NDmqrK4iLw3GLGB9DSpd/zTvVwNv6Kw2CdGCbS5u0 xjgJNJUPz2kWQFQtqdXl3MceSvuglxYBrI/jYohpP3ga8vDpaLnJ+/oWSiikiObn rVaVPGn0ZYSN1RGOVYcIaE9hEqDjkg2MCTB6G4wglj0SZwi+oh9NO6JZlpUQ8wSl B93fCg4pBon3ANd0bLSwDQs3h50ZwEidyjRneAAvz85JWj/dbIplJhPNUihtZg7C UudhGBJVTRxAGbNJZOk+W2YNM7urM+i5SQJTYpEr2ebdAacQ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9yWL8kcU/N1jBoPxSLt9q9C6hXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlmMGYzZWEtMTIwOC0z MTIxLWI5NDEtMDI4OTMwMzBlNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf8lCGq0tewZa0vpqaDcaiX26BTIs+o6pRbqEmmUCOW0CdaHd1tzKlq cfAusrzZxYPBxVVTgJEgZFwBCcYtKlEfsvtcpFTiV/mvGXSnThuY57zJt+XtuNfl 4gQvmhgQruhqLgS3f3WAYW9HsSDvsoqQMBLnAoB0+55NoSnX8A0NlBR81R3+50av ICMlnJScYUKD1y742JP9N0mnSRh5SR7CPSNucxb7IJetCqD3SEngwB9tvjLB//Vm Lq1z9kK36p2cy9prPW+zJS9jWHAphSbmbvTMwGkFL53DH7b/og7x/uw7VeSyoEpZ 3QIWJkkhFLvx3JKmgmYkBrzJ2F6lEMk= -----END CERTIFICATE-----Generated at Sun Jan 25 21:49:35 2026 by rpki-client