This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d217a096-afce-3900-be20-54a6d626b7ae.roa File: d217a096-afce-3900-be20-54a6d626b7ae.roa (raw, json) Hash identifier: /ayjAg7SvcLWVL4D2nAW4cExuwxmimem7xbVpyAduVM= Subject key identifier: 60:44:7F:99:31:44:D2:21:9D:E5:74:D7:8C:9C:9D:1E:54:C5:72:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC6C6DD08920D0C43EA2F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d217a096-afce-3900-be20-54a6d626b7ae.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396715 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:c6:dd:08:92:0d:0c:43:ea:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=e3978fc3-7445-49ac-b40c-d73ad0269e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:8f:a5:67:6c:29:53:1c:26:da:85:b6:be: da:a5:6b:95:99:f8:8b:68:e3:f8:88:04:d0:4f:17: 8f:04:22:e0:0a:fe:60:80:bf:5c:96:fa:9a:a5:5f: 6b:f6:d1:7b:ee:2b:0a:ae:cc:6f:dd:08:4e:4d:2b: b3:19:a7:c5:9f:f9:da:53:e0:64:9b:40:97:24:48: 14:70:2f:06:6a:4a:75:02:d6:fd:c9:6e:c1:cd:07: c1:6e:cc:c5:3f:8e:a8:f8:51:79:10:cb:38:fd:a3: c4:57:2d:2a:22:29:3f:4b:81:81:da:63:e7:9f:60: 4e:6c:b6:a5:f6:de:60:9d:42:3d:29:d4:39:89:a4: 44:1b:4e:b1:4c:9e:67:67:bc:ee:80:c5:f9:cd:91: c8:98:4b:25:25:4a:f9:96:9a:82:ed:6c:28:2d:56: 86:51:ba:bc:5e:d7:e7:46:ba:c6:e0:3d:4e:02:fd: 54:e5:7a:12:99:ae:ee:32:26:0a:d9:83:24:17:a1: 8a:34:15:fd:b2:55:0f:46:b8:aa:6a:0b:c6:a6:4e: ea:aa:70:d5:a8:6a:ca:87:81:37:6d:fb:fd:70:a0: 4a:ee:dc:70:8e:88:92:fd:21:c9:93:12:c4:8e:c6: fa:62:9a:64:07:ab:6b:0e:0f:7e:8f:4f:ed:a4:b9: 7b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:44:7F:99:31:44:D2:21:9D:E5:74:D7:8C:9C:9D:1E:54:C5:72:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d217a096-afce-3900-be20-54a6d626b7ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:d3:c4:af:14:1c:01:96:3a:a0:de:a0:6a:a6:fe:50:66:92: d2:6c:5e:5d:7f:a1:f6:ea:c0:b0:5e:2b:3a:6f:14:43:9a:e5: 14:bc:df:7e:d8:cd:24:d5:17:80:78:a3:41:00:80:a0:9b:cb: 87:92:8f:fc:b8:50:dd:ee:90:3b:19:c6:1d:ca:c2:73:73:ca: 9a:d2:19:f1:ea:ff:03:93:83:ce:62:01:09:66:18:86:a9:0b: 1d:53:a7:70:ff:4e:02:79:0a:7c:b0:76:1d:a4:69:53:e3:a8: c4:99:6c:80:bd:4c:85:1c:35:d8:e1:94:fc:78:08:15:c7:72: d4:e4:8d:c2:4e:22:47:b1:13:6d:41:de:78:17:b8:00:4d:be: b2:2f:99:4f:e8:a3:2a:3b:c5:8e:20:f9:b1:31:96:a5:ca:eb: 1c:03:07:21:25:56:85:98:4f:79:95:e2:28:94:de:e4:87:73: fe:cd:34:96:58:c7:ad:02:8b:81:9a:0f:fc:b3:80:83:57:bb: a4:e8:74:52:51:8c:8a:57:ef:bd:4b:d7:ae:33:b6:96:6b:ea: ea:27:17:80:c5:32:5a:36:60:aa:1f:fb:88:61:3d:fe:f2:46: 58:d4:b3:2e:10:2d:c5:c4:cb:73:ad:a4:cd:14:7b:a7:80:51: 63:b4:7a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexsbdCJINDEPqLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ZTM5NzhmYzMtNzQ0NS00OWFjLWI0MGMtZDczYWQwMjY5ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApamPpWdsKVMcJtqFtr7apWuVmfiLaOP4iATQ TxePBCLgCv5ggL9clvqapV9r9tF77isKrsxv3QhOTSuzGafFn/naU+Bkm0CXJEgU cC8Gakp1Atb9yW7BzQfBbszFP46o+FF5EMs4/aPEVy0qIik/S4GB2mPnn2BObLal 9t5gnUI9KdQ5iaREG06xTJ5nZ7zugMX5zZHImEslJUr5lpqC7WwoLVaGUbq8Xtfn RrrG4D1OAv1U5XoSma7uMiYK2YMkF6GKNBX9slUPRriqagvGpk7qqnDVqGrKh4E3 bfv9cKBK7txwjoiS/SHJkxLEjsb6YppkB6trDg9+j0/tpLl7owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBEf5kxRNIhneV014ycnR5UxXKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIxN2EwOTYtYWZjZS0z OTAwLWJlMjAtNTRhNmQ2MjZiN2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/TxK8UHAGWOqDeoGqm/lBmktJsXl1/ofbqwLBeKzpvFEOa5RS8337Y zSTVF4B4o0EAgKCby4eSj/y4UN3ukDsZxh3KwnNzyprSGfHq/wOTg85iAQlmGIap Cx1Tp3D/TgJ5Cnywdh2kaVPjqMSZbIC9TIUcNdjhlPx4CBXHctTkjcJOIkexE21B 3ngXuABNvrIvmU/ooyo7xY4g+bExlqXK6xwDByElVoWYT3mV4iiU3uSHc/7NNJZY x60Ci4GaD/yzgINXu6TodFJRjIpX771L164ztpZr6uonF4DFMlo2YKof+4hhPf7y RljUsy4QLcXEy3OtpM0Ue6eAUWO0emQ= -----END CERTIFICATE-----Generated at Sun Jan 25 20:19:29 2026 by rpki-client