This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: otlicELGXm9VWotaZIu+MdYuQBJV3JDyvTdpGmGLJ6c= Subject key identifier: C8:C9:30:9F:2D:EC:16:47:DE:40:17:BF:9D:C7:CD:EB:A9:55:CE:59 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584C5A968ADEB13D8B0770301000 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:8a:de:b1:3d:8b:07:70:30:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=f3a08847-4fbd-467e-90e3-f1624b1fa788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:34:3c:20:1c:1c:5c:2b:a9:8f:9b:1a:32: 34:69:c5:a8:99:26:60:31:60:3a:5a:9a:fc:c9:3d: c0:57:dc:e7:0c:3d:78:7f:4e:6c:e7:3a:3b:c7:fc: bb:74:e7:64:b0:15:8d:14:64:6d:ad:cb:a8:66:9e: 17:a4:b5:cd:85:a5:48:21:f9:90:ef:a8:06:e3:6e: 4d:2d:ab:d1:ee:8d:3f:b7:67:93:3c:d9:46:15:de: d8:dc:de:f6:a1:61:94:5a:57:15:e2:74:9e:b2:be: d7:f2:ea:d9:95:0f:c2:98:2d:62:e2:86:4e:2f:14: 91:95:06:3c:bb:4f:98:2f:6b:39:87:af:63:34:6f: 51:27:21:87:b7:e4:7b:4b:14:d8:79:3c:19:16:15: 95:f1:d7:70:72:85:c4:4c:f9:8a:11:e4:a9:40:6f: cb:f5:81:bf:82:41:bd:d2:33:68:50:1f:cd:35:58: cb:d2:e4:18:0e:3c:33:9d:cb:8c:01:23:92:0f:d9: 29:24:c5:aa:ba:14:be:e1:c8:ae:06:4a:46:ba:85: dc:48:92:0d:df:88:d0:26:5a:51:e0:ef:63:0c:d9: 2a:5c:52:7b:d1:9c:94:b0:8a:db:a8:96:7a:ea:72: 92:ab:05:ae:99:3c:7d:52:cf:b0:dd:9d:2d:5d:14: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:30:9F:2D:EC:16:47:DE:40:17:BF:9D:C7:CD:EB:A9:55:CE:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ce:32:aa:4c:0f:8a:4c:6f:99:29:19:28:4e:94:97:d0:2a: 19:4e:39:31:fb:df:0b:50:a5:b8:f9:73:b6:f3:45:54:1c:a3: d4:8e:06:6c:62:f2:70:39:a7:d3:79:43:3e:e4:b7:38:5f:f2: ed:0d:2a:56:4c:95:e1:90:ca:f3:52:fb:a3:5d:a4:9d:51:af: 7d:69:e1:a0:cb:24:2d:4f:5e:9b:78:15:d5:9c:5c:55:b1:76: cc:ba:12:98:a4:b4:29:6b:ea:0c:3a:9f:83:42:c9:b4:26:97: 31:f9:c9:29:8f:83:ba:fd:44:21:af:a9:33:5b:a0:10:dc:fc: 43:09:42:77:2e:58:37:08:42:f0:ed:4d:fa:90:aa:fb:a8:8d: e4:d7:54:ec:f1:f4:c6:be:c9:d4:52:c0:9f:09:cb:2d:2f:fa: bd:29:ff:49:0f:ba:e9:9a:08:73:ed:56:67:f5:18:bd:0f:e4: 42:ac:3a:05:17:8a:e8:b3:50:ca:e4:9d:04:8b:47:7c:6f:55: 45:63:86:ba:60:af:c2:47:93:4c:e4:78:96:50:94:09:5b:f5: 00:0e:a1:ee:c3:5b:b8:54:bd:c6:b6:f3:6b:ef:9c:80:f9:ea: 70:36:31:ba:15:5b:b4:ed:f4:74:8c:80:82:2e:b1:a7:92:a9: c3:4e:e0:28 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWExaloresT2LB3AwEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk ZjNhMDg4NDctNGZiZC00NjdlLTkwZTMtZjE2MjRiMWZhNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisU0PCAcHFwrqY+bGjI0acWomSZgMWA6Wpr8 yT3AV9znDD14f05s5zo7x/y7dOdksBWNFGRtrcuoZp4XpLXNhaVIIfmQ76gG425N LavR7o0/t2eTPNlGFd7Y3N72oWGUWlcV4nSesr7X8urZlQ/CmC1i4oZOLxSRlQY8 u0+YL2s5h69jNG9RJyGHt+R7SxTYeTwZFhWV8ddwcoXETPmKEeSpQG/L9YG/gkG9 0jNoUB/NNVjL0uQYDjwzncuMASOSD9kpJMWquhS+4ciuBkpGuoXcSJIN34jQJlpR 4O9jDNkqXFJ70ZyUsIrbqJZ66nKSqwWumTx9Us+w3Z0tXRR90wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFMjJMJ8t7BZH3kAXv53HzeupVc5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf84yqkwPikxvmSkZKE6Ul9AqGU45Mfvf C1CluPlztvNFVByj1I4GbGLycDmn03lDPuS3OF/y7Q0qVkyV4ZDK81L7o12knVGv fWnhoMskLU9em3gV1ZxcVbF2zLoSmKS0KWvqDDqfg0LJtCaXMfnJKY+Duv1EIa+p M1ugENz8QwlCdy5YNwhC8O1N+pCq+6iN5NdU7PH0xr7J1FLAnwnLLS/6vSn/SQ+6 6ZoIc+1WZ/UYvQ/kQqw6BReK6LNQyuSdBItHfG9VRWOGumCvwkeTTOR4llCUCVv1 AA6h7sNbuFS9xrbza++cgPnqcDYxuhVbtO30dIyAgi6xp5Kpw07gKA== -----END CERTIFICATE-----Generated at Sun Jan 25 08:18:24 2026 by rpki-client