This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa File: 7d2b49f2-50db-3b34-86b9-b831e6782c65.roa (raw, json) Hash identifier: 0B4+H5L8zX1UF18Z5RMpz7OtLWb8l7Uf79QFJHIbKJk= Subject key identifier: 4D:DA:C1:20:0C:8B:B3:83:91:8F:95:89:70:86:F3:5B:B3:7C:96:FC Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584C6E2186F74909AE4A8B140100 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 13638 IP address blocks: 199.38.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:86:f7:49:09:ae:4a:8b:14:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=a0804b49-2f60-4fa0-a632-900018bad642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:e6:75:c7:29:fb:2c:1a:e0:ed:8c:da:4c: 14:24:bd:92:f4:6f:08:7b:b0:7c:08:1c:dd:d9:ef: 58:9a:f4:bd:80:43:72:b8:df:1d:99:61:d7:78:ea: fc:73:4e:82:f3:c3:50:1a:97:6e:09:a4:a2:63:f8: d4:ce:db:87:67:43:b3:d1:16:8d:28:15:29:a0:bf: b7:5b:e7:fa:16:a5:76:c0:45:1d:91:0f:ea:60:17: 80:01:60:41:e4:30:2f:02:85:a8:11:01:99:e9:2b: a1:a3:ed:1e:28:aa:f4:e0:14:14:a3:24:76:ce:96: 32:a8:5a:b9:e9:15:18:ca:96:f2:17:9b:8a:43:56: 37:90:21:96:73:b1:a4:9b:20:f6:68:40:f1:7f:ac: 1a:4b:35:5b:8d:83:12:2e:8b:08:3c:b2:f8:44:27: 76:5a:66:88:e1:00:51:88:c3:75:85:ec:b7:9e:74: f6:f3:29:8c:3a:3c:b5:b4:3a:b5:97:f8:56:e7:63: 39:c3:0b:6a:08:67:6e:5a:46:0f:b8:57:58:c8:a0: 96:2d:89:f9:f5:87:08:bc:5e:39:05:90:c5:3b:93: 6e:ee:6e:3c:94:8d:fd:72:e5:4d:56:bb:57:58:2e: c5:09:17:6b:33:df:ee:fc:64:04:f0:b2:95:c3:6d: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DA:C1:20:0C:8B:B3:83:91:8F:95:89:70:86:F3:5B:B3:7C:96:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/7d2b49f2-50db-3b34-86b9-b831e6782c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 199.38.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:03:ea:26:49:18:f9:bf:79:12:d2:55:c8:3d:53:73:01:d4: 63:aa:15:ae:5f:b1:2b:ba:79:01:ff:43:8a:9d:3c:1d:0f:2a: e6:a3:89:2e:dd:3e:36:d8:58:8b:37:b0:4b:af:5b:37:a5:e7: 49:26:06:bf:74:79:97:c4:e2:79:a3:b5:10:79:e5:10:fa:ac: e6:cb:d7:96:68:0b:27:e8:df:18:fa:2a:d1:73:44:ac:fd:e3: 67:eb:05:53:70:8f:03:38:38:42:07:81:e8:24:09:24:82:09: 4e:ce:c2:3c:23:15:36:a5:11:fa:59:bc:6c:ec:cf:77:92:3e: 73:18:92:48:ee:ad:e7:2c:94:56:73:31:7a:a7:69:61:b3:47: 82:9c:3c:c2:a2:0c:26:3d:58:31:71:a5:c0:e3:db:90:72:6d: 42:3a:d5:1e:db:44:5e:46:fb:ac:71:87:49:34:04:30:f5:3f: e9:b0:f3:65:97:80:84:11:05:bc:5f:f5:a5:14:d3:ee:ef:47: 89:90:c2:15:6c:81:8d:bd:b7:72:8b:6a:4a:52:e8:1f:7d:c6: 52:ed:a3:b2:7d:0a:98:67:5f:d9:ed:e1:87:8a:6e:8c:a1:ac: 9c:26:1f:d4:7b:e8:ac:dc:f9:f3:29:b8:43:6c:e8:51:30:3d: e9:ef:12:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIYb3SQmuSosUAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk YTA4MDRiNDktMmY2MC00ZmEwLWE2MzItOTAwMDE4YmFkNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaLmdccp+ywa4O2M2kwUJL2S9G8Ie7B8CBzd 2e9YmvS9gENyuN8dmWHXeOr8c06C88NQGpduCaSiY/jUztuHZ0Oz0RaNKBUpoL+3 W+f6FqV2wEUdkQ/qYBeAAWBB5DAvAoWoEQGZ6Suho+0eKKr04BQUoyR2zpYyqFq5 6RUYypbyF5uKQ1Y3kCGWc7GkmyD2aEDxf6waSzVbjYMSLosIPLL4RCd2WmaI4QBR iMN1hey3nnT28ymMOjy1tDq1l/hW52M5wwtqCGduWkYPuFdYyKCWLYn59YcIvF45 BZDFO5Nu7m48lI39cuVNVrtXWC7FCRdrM9/u/GQE8LKVw21WUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3awSAMi7ODkY+ViXCG81uzfJb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvN2QyYjQ5ZjItNTBkYi0z YjM0LTg2YjktYjgzMWU2NzgyYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxybMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8D6iZJGPm/eRLSVcg9U3MB1GOqFa5fsSu6eQH/Q4qdPB0PKuajiS7d PjbYWIs3sEuvWzel50kmBr90eZfE4nmjtRB55RD6rObL15ZoCyfo3xj6KtFzRKz9 42frBVNwjwM4OEIHgegkCSSCCU7OwjwjFTalEfpZvGzsz3eSPnMYkkjurecslFZz MXqnaWGzR4KcPMKiDCY9WDFxpcDj25BybUI61R7bRF5G+6xxh0k0BDD1P+mw82WX gIQRBbxf9aUU0+7vR4mQwhVsgY29t3KLakpS6B99xlLto7J9CphnX9nt4YeKboyh rJwmH9R76Kzc+fMpuENs6FEwPenvEuk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:09:29 2026 by rpki-client