This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa File: ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa (raw, json) Hash identifier: 0R8yDVJS6NOI+RIgEAm/8jVdmmdYk2sLhxqhsXjoAT0= Subject key identifier: 51:A9:40:49:7F:A5:88:C2:99:CE:FB:B1:A2:87:60:9A:0E:6A:C0:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C5EC6C63EB3F0FC1C94EA5100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396661 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:c6:3e:b3:f0:fc:1c:94:ea:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=978beace-3545-4b07-a75c-1bfd1bd7c6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:02:a5:71:dc:7f:23:54:75:33:99:91:b8:0c: 10:c1:6c:ab:aa:57:df:93:69:99:66:ac:06:52:34: 0f:d1:d2:a7:14:a7:3a:54:02:0c:11:8e:a6:66:ba: 8b:8d:b3:04:00:c0:f8:01:da:fc:5b:5c:90:82:09: a4:fd:d0:1b:81:6a:53:de:fe:14:2f:4b:f2:c2:2d: 16:09:75:70:06:3a:b9:67:a3:0f:f0:c3:41:95:6a: a1:8c:03:2b:07:ef:bf:20:26:8b:c1:51:c2:0c:d7: 90:13:96:b7:2c:35:ec:49:3f:cf:c1:36:4f:d9:a2: f0:ef:d2:5e:2e:49:b3:54:f5:93:cf:d5:db:92:ab: 17:50:c7:23:f5:8e:49:5d:b7:fe:44:8c:76:d3:f5: 4b:c3:e7:9c:94:24:c9:06:3d:60:72:bc:ac:fb:2d: 35:21:f0:09:01:57:2e:99:33:d9:da:25:03:bc:a0: 45:40:7d:80:87:b8:57:46:fb:ed:4e:a4:bb:2b:7e: c3:0e:64:1a:7c:ed:d1:ab:3e:ce:be:4e:23:60:66: 60:0a:24:7e:de:14:fc:2d:a9:83:5c:41:86:0d:64: eb:15:e8:46:bf:53:3a:80:dd:a0:ca:c6:aa:78:f9: 6b:3d:85:ed:d9:7e:b3:02:71:06:9e:6f:08:83:dc: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A9:40:49:7F:A5:88:C2:99:CE:FB:B1:A2:87:60:9A:0E:6A:C0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddf62a4b-13dc-3cee-a786-b4aeee8ebb17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:35:77:fe:a2:e0:0c:bf:9b:b9:fe:33:88:f8:e4:71:c1:5a: eb:30:f3:75:00:7c:de:55:8b:3f:f1:98:70:ce:86:bb:3b:cc: 6c:cf:55:5f:32:9e:f9:88:29:80:aa:e0:ed:0e:c8:93:a5:6e: 30:08:32:7c:5d:48:ec:fe:46:d2:3b:8b:51:c1:af:32:d2:1a: dd:b3:11:6f:27:72:b9:ca:d4:b1:22:94:18:98:73:9e:cc:10: fe:ce:a8:c8:54:8e:78:27:3f:d5:b1:36:e9:0e:4a:b8:90:72: b1:3d:f6:d8:75:f9:ef:4b:3e:cc:4f:51:b6:1c:d7:a3:04:95: 5c:aa:c9:2b:68:55:1f:1e:1f:85:34:5e:5b:02:4b:ef:04:63: 45:75:b3:27:a6:99:e4:55:67:bd:55:a3:91:5e:bc:c1:99:b5: 76:05:74:41:f2:80:19:f8:d7:1a:f5:33:f0:1c:06:ec:90:03: 10:23:0a:88:8e:e4:49:a6:d5:3b:41:79:09:7b:71:a5:4e:09: ff:b8:04:ef:04:11:6e:74:28:10:91:3e:2f:9c:f3:3f:37:a9: 2d:1a:28:2c:02:bc:48:bc:f8:35:ca:c6:c7:49:72:24:68:d1: b4:4f:0a:ab:9c:5e:9a:48:08:53:a6:ca:d9:ae:38:a6:54:c0: 7f:bd:f1:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexsY+s/D8HJTqUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk OTc4YmVhY2UtMzU0NS00YjA3LWE3NWMtMWJmZDFiZDdjNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAKlcdx/I1R1M5mRuAwQwWyrqlffk2mZZqwG UjQP0dKnFKc6VAIMEY6mZrqLjbMEAMD4Adr8W1yQggmk/dAbgWpT3v4UL0vywi0W CXVwBjq5Z6MP8MNBlWqhjAMrB++/ICaLwVHCDNeQE5a3LDXsST/PwTZP2aLw79Je LkmzVPWTz9XbkqsXUMcj9Y5JXbf+RIx20/VLw+eclCTJBj1gcrys+y01IfAJAVcu mTPZ2iUDvKBFQH2Ah7hXRvvtTqS7K37DDmQafO3Rqz7Ovk4jYGZgCiR+3hT8LamD XEGGDWTrFehGv1M6gN2gysaqePlrPYXt2X6zAnEGnm8Ig9xEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGpQEl/pYjCmc77saKHYJoOasB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGRmNjJhNGItMTNkYy0z Y2VlLWE3ODYtYjRhZWVlOGViYjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA1d/6i4Ay/m7n+M4j45HHBWusw83UAfN5Viz/xmHDOhrs7zGzPVV8y nvmIKYCq4O0OyJOlbjAIMnxdSOz+RtI7i1HBrzLSGt2zEW8ncrnK1LEilBiYc57M EP7OqMhUjngnP9WxNukOSriQcrE99th1+e9LPsxPUbYc16MElVyqyStoVR8eH4U0 XlsCS+8EY0V1syemmeRVZ71Vo5FevMGZtXYFdEHygBn41xr1M/AcBuyQAxAjCoiO 5Emm1TtBeQl7caVOCf+4BO8EEW50KBCRPi+c8z83qS0aKCwCvEi8+DXKxsdJciRo 0bRPCqucXppICFOmytmuOKZUwH+98b8= -----END CERTIFICATE-----Generated at Sun Jan 25 20:17:34 2026 by rpki-client