This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa File: d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa (raw, json) Hash identifier: ablaWWDJXptCHMHpvfpjujLPbDN2yQ99HmKEPfGMq+0= Subject key identifier: 51:8E:A5:4A:75:6F:CA:81:81:75:F7:B2:6F:50:E4:19:83:62:B7:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC724414EF0C5C026D63E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 36629 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c7:24:41:4e:f0:c5:c0:26:d6:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=bc085ec2-464a-4c91-88b2-391730126cdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d7:c7:9b:3d:0d:41:56:77:2e:65:bd:56:c8: 6b:b6:36:9a:c2:82:8f:d0:91:c3:83:a4:31:63:9d: 5d:3b:a6:c0:10:d8:0a:cf:de:49:aa:cd:8c:9b:90: 90:12:f9:59:f3:aa:46:a4:cc:66:79:c6:e4:72:4e: 70:99:1b:5e:22:eb:3d:63:54:e7:a1:99:97:df:73: f5:d6:b5:77:6a:9d:17:be:de:25:69:f9:d3:66:35: c4:44:a9:f2:9d:28:8c:f7:e9:91:1f:16:9d:93:9c: ee:0e:80:47:c7:7c:dc:9f:90:e9:cd:6c:54:15:a8: 99:24:a8:57:88:43:59:19:bf:e9:62:60:63:af:93: c3:5f:92:03:9a:73:3d:06:7e:b3:29:fd:cb:22:a9: eb:1c:cc:14:11:f6:e3:b8:e6:02:07:67:c4:05:3d: f0:8f:2f:5b:8d:29:49:eb:da:fe:ca:83:c5:5a:86: e2:ac:33:2b:26:0b:d4:74:83:24:a3:2a:a5:8e:3a: 42:60:f9:d4:33:d8:61:d1:48:13:71:c1:7d:f3:6f: 5c:df:fb:bf:86:40:d1:5f:67:b5:e3:47:da:5b:70: 3d:94:ed:db:4d:cd:79:4b:a3:5f:1e:81:76:a9:c3: 87:a4:ff:24:ca:2a:ea:80:28:07:e8:cc:18:7c:3b: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:A5:4A:75:6F:CA:81:81:75:F7:B2:6F:50:E4:19:83:62:B7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d17b58c1-858e-3e01-bd77-d39f6ffb10c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9f:2a:25:57:3e:0f:fd:f7:17:cb:e4:2d:26:12:f6:3d:e6: a5:b8:52:93:9c:62:4d:05:4e:92:f5:23:41:ed:41:c1:13:06: 61:2c:bb:0c:86:8d:3f:b1:ce:ed:12:71:2c:8c:98:6a:f1:fa: ec:7a:be:31:e5:38:1f:ed:af:45:7f:76:08:be:8a:b2:16:08: 00:8f:f0:88:09:ff:65:8a:45:9a:fb:a0:08:41:39:a0:49:2d: 6f:b2:83:58:81:ab:7d:0e:28:9d:a4:05:2a:4d:20:ce:18:44: aa:cf:42:0b:5b:d6:7d:7b:5e:a8:4d:c1:92:c8:77:c3:e4:57: f2:ea:c0:c9:be:fe:bb:2c:65:ad:cb:43:69:54:a9:47:bd:a4: 92:51:5e:ff:bb:39:50:13:e6:0d:f0:6c:93:91:00:e0:12:ba: fd:ae:5b:98:15:1e:e9:c2:eb:c6:c6:50:98:31:1f:2a:73:85: 47:3a:83:61:d2:38:1b:15:41:67:0a:d3:1f:52:a9:f8:35:6d: 81:66:0b:27:0b:9d:06:da:e7:0d:3a:a1:a0:f1:5d:74:ba:61: 24:64:35:ca:61:28:14:90:cc:f5:18:ab:f5:2a:ee:48:fb:d9: 84:48:9b:bb:1a:2c:f4:6a:86:54:36:32:3b:bd:2d:05:7d:20: 8e:28:83:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexyRBTvDFwCbWPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YmMwODVlYzItNDY0YS00YzkxLTg4YjItMzkxNzMwMTI2Y2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdfHmz0NQVZ3LmW9VshrtjaawoKP0JHDg6Qx Y51dO6bAENgKz95Jqs2Mm5CQEvlZ86pGpMxmecbkck5wmRteIus9Y1TnoZmX33P1 1rV3ap0Xvt4lafnTZjXERKnynSiM9+mRHxadk5zuDoBHx3zcn5DpzWxUFaiZJKhX iENZGb/pYmBjr5PDX5IDmnM9Bn6zKf3LIqnrHMwUEfbjuOYCB2fEBT3wjy9bjSlJ 69r+yoPFWobirDMrJgvUdIMkoyqljjpCYPnUM9hh0UgTccF9829c3/u/hkDRX2e1 40faW3A9lO3bTc15S6NfHoF2qcOHpP8kyirqgCgH6MwYfDvSZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGOpUp1b8qBgXX3sm9Q5BmDYrdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDE3YjU4YzEtODU4ZS0z ZTAxLWJkNzctZDM5ZjZmZmIxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWfKiVXPg/99xfL5C0mEvY95qW4UpOcYk0FTpL1I0HtQcETBmEsuwyG jT+xzu0ScSyMmGrx+ux6vjHlOB/tr0V/dgi+irIWCACP8IgJ/2WKRZr7oAhBOaBJ LW+yg1iBq30OKJ2kBSpNIM4YRKrPQgtb1n17XqhNwZLId8PkV/LqwMm+/rssZa3L Q2lUqUe9pJJRXv+7OVAT5g3wbJORAOASuv2uW5gVHunC68bGUJgxHypzhUc6g2HS OBsVQWcK0x9Sqfg1bYFmCycLnQba5w06oaDxXXS6YSRkNcphKBSQzPUYq/Uq7kj7 2YRIm7saLPRqhlQ2Mju9LQV9II4ogwI= -----END CERTIFICATE-----Generated at Sun Jan 25 21:48:54 2026 by rpki-client