This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa File: 19d4427b-9bf1-3955-a929-dbe9c540fd14.roa (raw, json) Hash identifier: 0gWi9mpUZ9d0cbsKpqvlYh5TQTvNubb/uo1q9OF//+s= Subject key identifier: 9E:71:AA:F1:5F:CF:3A:15:AE:FE:F6:5F:18:3F:2F:4F:46:0B:B1:6B Certificate issuer: /CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Certificate serial: 010D0C9F4328584C34E64BCB8918BEED0A922D80 Authority key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 7018 IP address blocks: 198.17.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:4b:cb:89:18:be:ed:0a:92:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=bc6ece00-8df8-48db-bee3-b4616157f011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:5a:de:bd:da:02:54:d8:c5:8a:04:6d:0f: 5a:7a:71:16:f6:30:75:7d:28:98:85:e9:af:a5:4a: ac:79:39:e9:88:59:6c:2f:e8:29:9d:cf:73:f1:ce: 33:3f:46:b1:01:3d:38:16:51:f3:f3:e0:e6:76:bc: 18:d7:35:96:cc:5f:d1:1a:98:2d:a5:42:42:7a:71: 2a:60:3d:c9:5d:96:ac:e0:fd:a8:82:2d:43:e9:89: fa:50:d6:77:b2:3d:c4:f0:2e:55:2a:6d:22:c2:a6: aa:b8:5d:71:b3:30:35:63:0d:0b:bf:2f:17:b4:48: 2b:2d:66:12:28:6b:64:d3:a2:d1:de:6d:2e:81:4f: 0c:89:28:bf:f2:9f:fd:e6:6b:ec:74:9e:7a:ae:1e: eb:a0:63:e4:72:cd:85:0b:1a:74:9b:b2:9c:cc:5e: 65:19:e8:70:63:81:08:0f:04:f4:b0:2c:2d:1f:4b: dd:3c:a3:05:79:71:9e:f6:72:cb:ac:b2:45:38:e4: b0:e5:1b:ce:7b:a7:0c:e4:cf:bb:cf:bf:3e:f8:38: 22:77:a1:5e:c9:10:77:04:4a:49:ea:c1:28:af:2b: 46:67:93:26:cc:3e:96:52:77:6f:97:56:53:cb:4f: fc:f8:af:4a:0f:1d:a8:36:4f:e6:22:53:3f:17:b5: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:71:AA:F1:5F:CF:3A:15:AE:FE:F6:5F:18:3F:2F:4F:46:0B:B1:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/19d4427b-9bf1-3955-a929-dbe9c540fd14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.crl X509v3 Authority Key Identifier: keyid:B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:71:fd:79:09:a4:f7:06:ac:5e:a6:cc:13:a4:fc:9f:31:85: 2f:21:a1:93:9a:aa:a3:f6:85:57:be:63:b2:8f:5f:b0:27:32: ef:5b:33:89:ba:90:f6:b6:7a:f2:09:3c:2e:cb:a4:b4:20:8d: 60:fc:ab:c7:77:b2:bb:e5:58:e1:51:58:e4:f1:d6:8e:17:cd: da:1e:bc:08:fd:c7:8e:36:0d:78:30:e1:24:47:cf:7e:83:03: 7b:b8:d7:1b:08:f4:dd:4d:aa:f4:22:72:3e:34:c1:aa:bd:33: c0:62:23:8c:fb:04:1f:8b:f5:37:02:22:83:86:37:38:9b:71: 9d:98:6d:a1:89:76:5d:6f:96:34:bc:c6:c3:b4:8b:1d:63:33: 8b:0c:70:82:0e:ec:01:c0:be:8e:97:c6:b7:1d:7c:dd:c9:26: c4:e7:0b:70:80:d7:3c:9e:3a:a7:16:5c:0a:8d:5b:d5:4a:ba: f8:8d:01:a3:3d:51:50:f4:f9:ba:71:87:1c:5f:92:ce:ac:e3: 31:c3:bb:29:32:aa:7c:60:46:ff:fd:ff:2a:e5:50:f6:64:29: 71:be:b6:a0:fd:d5:b1:7c:cb:ae:86:11:f0:75:53:15:fa:08: 7f:01:d9:12:3f:54:0d:b3:e0:00:2f:4f:ce:0a:fb:e9:54:5f: 55:13:ff:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05kvLiRi+7QqSLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFj MDk3MB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk YmM2ZWNlMDAtOGRmOC00OGRiLWJlZTMtYjQ2MTYxNTdmMDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCNa3r3aAlTYxYoEbQ9aenEW9jB1fSiYhemv pUqseTnpiFlsL+gpnc9z8c4zP0axAT04FlHz8+DmdrwY1zWWzF/RGpgtpUJCenEq YD3JXZas4P2ogi1D6Yn6UNZ3sj3E8C5VKm0iwqaquF1xszA1Yw0Lvy8XtEgrLWYS KGtk06LR3m0ugU8MiSi/8p/95mvsdJ56rh7roGPkcs2FCxp0m7KczF5lGehwY4EI DwT0sCwtH0vdPKMFeXGe9nLLrLJFOOSw5RvOe6cM5M+7z78++Dgid6FeyRB3BEpJ 6sEorytGZ5MmzD6WUndvl1ZTy0/8+K9KDx2oNk/mIlM/F7UUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5xqvFfzzoVrv72Xxg/L09GC7FrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0 NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMTlkNDQyN2ItOWJmMS0z OTU1LWE5MjktZGJlOWM1NDBmZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTc5NDU0OGQtOTZhMy00ZjVjLTk0 NTEtMjU3MWVkNGFjMDk3LzE3OTQ1NDhkLTk2YTMtNGY1Yy05NDUxLTI1NzFlZDRh YzA5Ny5jcmwwHwYDVR0jBBgwFoAUtAkdRy8mJuguRRg0dr4eeMtK0EUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcx ZWQ0YWMwOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxhEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNx/XkJpPcGrF6mzBOk/J8xhS8hoZOaqqP2hVe+Y7KPX7AnMu9bM4m6 kPa2evIJPC7LpLQgjWD8q8d3srvlWOFRWOTx1o4XzdoevAj9x442DXgw4SRHz36D A3u41xsI9N1NqvQicj40waq9M8BiI4z7BB+L9TcCIoOGNzibcZ2YbaGJdl1vljS8 xsO0ix1jM4sMcIIO7AHAvo6XxrcdfN3JJsTnC3CA1zyeOqcWXAqNW9VKuviNAaM9 UVD0+bpxhxxfks6s4zHDuykyqnxgRv/9/yrlUPZkKXG+tqD91bF8y66GEfB1UxX6 CH8B2RI/VA2z4AAvT84K++lUX1UT/+0= -----END CERTIFICATE-----Generated at Wed Dec 17 17:06:20 2025 by rpki-client