This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa File: 32c53d16-72c4-33dc-9880-0c5e25f17660.roa (raw, json) Hash identifier: Hh1S5y5/jap1ehOETZO7V3+Ba1otHhjYBqQIdaoMxYY= Subject key identifier: E4:F5:CD:D2:67:89:12:CF:BE:AF:CA:00:04:3E:5C:25:99:02:7D:32 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C39165049F3F150CAF7D06180 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 397212 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:50:49:f3:f1:50:ca:f7:d0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=61f8301d-968b-48e3-8687-529b11f6cfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f2:34:23:aa:0a:41:5d:f9:2c:9a:94:ae:96: 1c:a7:b0:be:d5:10:bb:f5:53:ba:21:67:72:27:a8: b8:ff:d6:e7:24:c7:74:89:e6:4c:b2:34:9b:6f:b4: b5:d7:de:f8:28:7e:5f:b5:f4:16:79:f6:83:5c:7f: bd:00:fb:57:1b:85:f9:3e:d9:93:44:c3:68:7a:3c: ba:c1:16:07:ce:85:3e:32:b8:aa:88:d5:82:7a:e9: fd:88:cc:4f:94:53:ec:c0:96:fa:53:2b:d6:cd:1c: e1:6f:a1:71:f8:43:ef:74:53:31:29:ef:84:c0:3d: b0:f7:fb:67:16:73:19:95:44:70:07:73:f3:06:fa: a3:57:54:20:de:c6:ee:ee:02:b1:d9:5c:29:b8:b9: db:5c:d7:05:fd:9c:b1:ec:7e:11:2d:bd:5d:e6:bf: 30:c8:2f:d7:26:fd:af:07:46:3a:12:1c:9f:c9:b1: 35:0f:18:f8:3d:6d:bd:d8:df:c1:59:62:3a:a0:66: 8f:7d:f2:1a:2d:11:1a:5a:85:64:86:fd:de:3d:7b: 79:33:b5:17:37:23:79:23:1b:e8:92:95:88:19:a2: 32:9d:38:1e:1e:15:f2:b3:0a:cf:6b:6d:7c:50:fc: cc:27:e9:71:e8:4a:79:8f:21:0b:c5:5a:ab:28:81: ac:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F5:CD:D2:67:89:12:CF:BE:AF:CA:00:04:3E:5C:25:99:02:7D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/32c53d16-72c4-33dc-9880-0c5e25f17660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:9e:22:a7:ed:55:0a:40:06:be:31:f6:21:b0:57:11:e2:49: 46:07:1f:0d:53:d8:16:6d:09:20:19:00:50:29:36:2b:69:59: 67:f7:33:24:6f:61:92:5e:f7:a5:42:7b:2b:ed:14:6f:9d:69: 47:89:07:ae:a9:7c:1a:f1:33:3c:d1:8c:ad:be:cc:85:1b:77: 75:ba:4b:e9:27:24:01:63:bc:62:10:6f:72:8e:17:67:39:a9: d1:8b:c2:2b:bb:c3:52:3c:6f:e3:47:17:c5:ec:12:be:bf:47: 0b:23:b8:32:99:90:2d:fb:cc:00:4a:cd:5d:7c:00:6f:b9:6f: 7f:a8:fe:4c:bf:50:c4:c6:ae:3d:65:0e:80:7a:d7:83:d3:d6: 98:29:38:56:ae:f6:3b:ba:1f:1a:4f:39:da:e7:00:66:48:29: a0:03:70:06:c2:c6:38:9e:66:38:61:ae:dd:89:e2:0a:89:24: 2d:aa:15:9a:90:f1:09:ff:e9:d5:a2:4e:77:0b:2b:b2:c2:6f: 41:f9:52:60:d6:b9:07:2e:7a:c4:b3:f6:dc:cf:9a:f2:5a:87: 80:61:f3:1e:bb:7c:43:14:c4:34:28:9b:74:2f:3f:37:14:de: 8e:f5:ee:9b:69:70:c1:16:23:21:cc:91:fd:5a:46:47:05:e5: 3b:a0:a5:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FlBJ8/FQyvfQYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk NjFmODMwMWQtOTY4Yi00OGUzLTg2ODctNTI5YjExZjZjZmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/I0I6oKQV35LJqUrpYcp7C+1RC79VO6IWdy J6i4/9bnJMd0ieZMsjSbb7S11974KH5ftfQWefaDXH+9APtXG4X5PtmTRMNoejy6 wRYHzoU+MriqiNWCeun9iMxPlFPswJb6UyvWzRzhb6Fx+EPvdFMxKe+EwD2w9/tn FnMZlURwB3PzBvqjV1Qg3sbu7gKx2VwpuLnbXNcF/Zyx7H4RLb1d5r8wyC/XJv2v B0Y6EhyfybE1Dxj4PW292N/BWWI6oGaPffIaLREaWoVkhv3ePXt5M7UXNyN5Ixvo kpWIGaIynTgeHhXyswrPa218UPzMJ+lx6Ep5jyELxVqrKIGs0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOT1zdJniRLPvq/KAAQ+XCWZAn0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzJjNTNkMTYtNzJjNC0z M2RjLTk4ODAtMGM1ZTI1ZjE3NjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeeIqftVQpABr4x9iGwVxHiSUYHHw1T2BZtCSAZAFApNitpWWf3MyRv YZJe96VCeyvtFG+daUeJB66pfBrxMzzRjK2+zIUbd3W6S+knJAFjvGIQb3KOF2c5 qdGLwiu7w1I8b+NHF8XsEr6/RwsjuDKZkC37zABKzV18AG+5b3+o/ky/UMTGrj1l DoB614PT1pgpOFau9ju6HxpPOdrnAGZIKaADcAbCxjieZjhhrt2J4gqJJC2qFZqQ 8Qn/6dWiTncLK7LCb0H5UmDWuQcuesSz9tzPmvJah4Bh8x67fEMUxDQom3QvPzcU 3o717ptpcMEWIyHMkf1aRkcF5TugpXc= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:11 2026 by rpki-client