This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa File: f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa (raw, json) Hash identifier: 6wpjygi6LCPhPqsXh/A9hq9E1qtWnV5En1R6CmXI7LM= Subject key identifier: 7C:DA:7F:EA:28:FD:4F:0C:04:02:03:51:D3:DD:6E:A2:35:C8:3C:91 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584C9C31AF8D7C67BF5ACF2C8B00 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 14618 IP address blocks: 170.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:af:8d:7c:67:bf:5a:cf:2c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=3f4e21d6-e786-4367-9fd2-487ea10e0f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d0:85:b3:d6:45:25:e9:85:91:8a:47:72:c0: 4c:f5:44:eb:dc:31:db:fd:79:79:6b:03:5a:68:7d: 36:58:2b:00:13:03:69:a4:aa:5e:f5:01:d9:58:95: e2:f3:a9:a3:fe:1a:e5:27:90:34:bb:60:5a:fe:b2: de:01:dc:eb:68:f5:e0:a7:3b:ad:7c:77:83:0d:99: 8c:34:f3:56:9c:a9:78:5c:93:84:8c:8c:6f:9c:de: 0c:80:ef:38:0d:25:8a:be:0c:b2:05:d1:a2:5d:2c: 0e:c9:48:56:13:66:80:cf:c1:3c:5d:58:4c:63:5d: af:6c:8b:9e:67:45:57:e6:a2:ec:74:e2:3c:12:30: a8:74:00:7f:33:7c:9b:5d:f0:14:5a:e8:88:65:e3: 21:79:f2:47:9b:34:8c:c3:5b:23:94:25:1b:18:74: c5:ed:ba:b2:55:41:22:e1:43:c2:79:ca:78:53:03: 68:c4:65:04:9f:30:67:15:27:e0:6d:e6:0f:4a:e8: 52:86:32:5b:d8:56:95:82:e9:e9:15:13:b8:37:e3: e6:cd:ea:6f:d1:0a:7a:0a:0f:49:8e:f3:dc:cc:44: 6e:8c:97:85:3b:e7:96:05:32:86:42:f9:d3:71:34: 32:03:f3:32:19:8f:c5:0b:32:37:60:25:f3:90:7d: c6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DA:7F:EA:28:FD:4F:0C:04:02:03:51:D3:DD:6E:A2:35:C8:3C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/f591c3f8-fe62-3cea-8b4e-46e2eca322b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 170.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e6:99:67:aa:6b:91:f3:7d:fd:69:63:ec:33:27:ae:3d:ee: 83:a8:2a:e9:cc:bb:22:99:e0:f5:d2:fd:d6:d7:51:37:c8:93: 94:1e:83:6d:c4:ce:13:df:ff:ea:f4:0f:cb:71:e8:de:ad:80: 01:90:9e:98:5f:f4:80:e1:58:42:e4:f9:a3:ce:43:ed:80:1d: 0f:bb:b8:32:c6:46:15:87:7d:bb:84:37:b2:92:5f:85:69:a9: aa:b1:c6:44:4b:5c:9f:76:d1:8c:9d:b1:45:00:c3:86:66:36: 27:0c:bf:7f:91:f9:89:ac:2b:72:e0:9e:8a:60:c4:36:e6:54: 40:ae:98:48:aa:83:e2:95:db:9e:e9:24:a5:75:0a:31:28:04: 66:96:02:42:60:0e:18:a7:50:5c:ab:da:6e:a2:8e:82:64:e2: 76:d3:77:cc:c0:29:13:fb:82:8b:13:11:46:90:95:30:43:73: 2c:07:aa:ce:70:11:53:61:aa:fb:97:9e:31:d4:e9:5a:aa:27: b6:6b:54:f3:4b:87:ac:d2:36:6f:61:4b:08:dc:6b:b9:bd:3e: e2:2f:bf:a8:d6:c0:b5:ab:00:90:96:49:3f:ba:2e:6c:41:f0: 6e:ee:07:17:63:58:3b:43:84:39:0e:e7:6e:37:97:3c:f7:67: 4b:49:53:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMa+NfGe/Ws8siwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk M2Y0ZTIxZDYtZTc4Ni00MzY3LTlmZDItNDg3ZWExMGUwZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNCFs9ZFJemFkYpHcsBM9UTr3DHb/Xl5awNa aH02WCsAEwNppKpe9QHZWJXi86mj/hrlJ5A0u2Ba/rLeAdzraPXgpzutfHeDDZmM NPNWnKl4XJOEjIxvnN4MgO84DSWKvgyyBdGiXSwOyUhWE2aAz8E8XVhMY12vbIue Z0VX5qLsdOI8EjCodAB/M3ybXfAUWuiIZeMhefJHmzSMw1sjlCUbGHTF7bqyVUEi 4UPCecp4UwNoxGUEnzBnFSfgbeYPSuhShjJb2FaVgunpFRO4N+Pmzepv0Qp6Cg9J jvPczERujJeFO+eWBTKGQvnTcTQyA/MyGY/FCzI3YCXzkH3G4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzaf+oo/U8MBAIDUdPdbqI1yDyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvZjU5MWMzZjgtZmU2Mi0z Y2VhLThiNGUtNDZlMmVjYTMyMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAquHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3mmWeqa5Hzff1pY+wzJ6497oOoKunMuyKZ4PXS/dbXUTfIk5Qeg23E zhPf/+r0D8tx6N6tgAGQnphf9IDhWELk+aPOQ+2AHQ+7uDLGRhWHfbuEN7KSX4Vp qaqxxkRLXJ920YydsUUAw4ZmNicMv3+R+YmsK3LgnopgxDbmVECumEiqg+KV257p JKV1CjEoBGaWAkJgDhinUFyr2m6ijoJk4nbTd8zAKRP7gosTEUaQlTBDcywHqs5w EVNhqvuXnjHU6VqqJ7ZrVPNLh6zSNm9hSwjca7m9PuIvv6jWwLWrAJCWST+6LmxB 8G7uBxdjWDtDhDkO5243lzz3Z0tJU04= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:09 2026 by rpki-client