This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa File: 355c1c9b-46f4-31e0-b202-8d6513181f02.roa (raw, json) Hash identifier: Tx2hu0ch2Z7czh8uIY5WXonVsIeMlBGU9BdYqibQNnI= Subject key identifier: 32:B3:48:5C:8A:00:70:3B:0C:70:36:B8:F3:69:2A:11:88:0E:48:3C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C39167133C96AE61A107DB738 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 36630 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:71:33:c9:6a:e6:1a:10:7d:b7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=3411b410-a911-4845-8a4d-8e94a5b024bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:69:1b:0d:ba:a5:14:94:ae:0a:c1:1a:0d: 1b:d1:3f:99:bb:4a:1c:3d:94:34:e8:26:50:35:c0: 08:df:9a:39:ad:07:e9:89:a9:1f:bf:0c:3a:cd:04: 06:06:c1:98:69:f3:d7:b9:25:f1:1f:26:d3:a1:fe: 49:60:2c:5c:31:7f:dc:f0:dc:0e:4f:f3:2f:00:9c: 29:be:4a:b6:49:13:b3:e9:43:2a:7f:a1:f3:aa:12: 99:9f:6e:ae:bb:66:98:c0:2a:28:0b:54:46:51:02: ce:fb:d3:1e:44:6e:58:9a:c6:b4:2e:cf:58:7d:b6: c6:7a:3a:8a:cf:93:42:5b:68:d5:20:24:e5:67:55: 91:80:08:dd:01:4e:1f:c8:96:da:e5:21:f3:4e:4e: d1:39:f8:5e:6b:d4:16:e7:43:ec:f4:0b:10:97:57: 56:20:59:f7:b7:23:2d:36:71:3b:02:14:96:5c:2a: e7:e3:d7:a1:8f:73:d8:56:84:9f:1d:90:c9:0a:43: 31:59:e0:e2:b4:e1:fc:1b:9e:e5:64:62:05:c6:43: 8f:2a:42:fb:c7:c4:c0:95:98:72:04:13:65:3b:05: 4d:01:ad:38:08:e3:95:27:08:89:37:84:92:7d:54: af:24:7c:dd:83:32:65:e8:b9:0a:77:0a:6b:5c:9c: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:48:5C:8A:00:70:3B:0C:70:36:B8:F3:69:2A:11:88:0E:48:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/355c1c9b-46f4-31e0-b202-8d6513181f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:56:92:c5:50:b4:a7:63:2e:73:f9:b2:f2:03:b0:06:b2:fa: 9d:df:ad:fa:7d:9a:36:b1:4c:8f:8f:76:7e:20:a3:41:83:b4: bd:8d:41:b6:d7:5c:12:ca:5b:54:32:2e:b9:1a:57:5e:15:ee: 3b:23:96:3e:5e:9a:1c:e8:fa:37:3e:23:15:23:56:12:b1:c4: ae:3e:66:c2:04:fb:d5:df:ba:86:6a:f5:05:3c:ff:21:a3:b0: 14:52:64:94:26:af:cd:9c:61:b8:8d:63:b8:86:5b:e3:b0:7c: d3:83:28:f2:a9:41:bb:b6:c1:d2:cd:81:58:2f:51:1e:19:e8: 40:22:60:81:2c:e7:c5:f5:71:eb:7a:ea:37:cb:b9:30:00:5a: 3b:32:5d:c8:a0:70:6d:dd:eb:0e:8d:62:ed:4f:31:da:e2:96: 88:cf:be:28:79:24:1c:0d:84:2f:c3:ca:a0:32:2f:96:26:8b: 10:26:25:ea:11:69:cb:c5:f4:0c:f5:19:53:14:89:81:06:41: 93:a0:33:67:73:32:fd:47:fa:2c:a6:27:6b:18:00:a2:a9:cf: d7:e1:cc:97:3f:4e:e0:dc:a1:10:2f:9e:66:22:41:f4:de:1d: 70:8f:2e:62:85:d3:45:b1:ff:7d:13:61:ea:81:65:06:11:c9: 4f:7a:de:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FnEzyWrmGhB9tzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MzQxMWI0MTAtYTkxMS00ODQ1LThhNGQtOGU5NGE1YjAyNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP1pGw26pRSUrgrBGg0b0T+Zu0ocPZQ06CZQ NcAI35o5rQfpiakfvww6zQQGBsGYafPXuSXxHybTof5JYCxcMX/c8NwOT/MvAJwp vkq2SROz6UMqf6HzqhKZn26uu2aYwCooC1RGUQLO+9MeRG5Ymsa0Ls9YfbbGejqK z5NCW2jVICTlZ1WRgAjdAU4fyJba5SHzTk7ROfhea9QW50Ps9AsQl1dWIFn3tyMt NnE7AhSWXCrn49ehj3PYVoSfHZDJCkMxWeDitOH8G57lZGIFxkOPKkL7x8TAlZhy BBNlOwVNAa04COOVJwiJN4SSfVSvJHzdgzJl6LkKdwprXJw76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKzSFyKAHA7DHA2uPNpKhGIDkg8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzU1YzFjOWItNDZmNC0z MWUwLWIyMDItOGQ2NTEzMTgxZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNWksVQtKdjLnP5svIDsAay+p3frfp9mjaxTI+Pdn4go0GDtL2NQbbX XBLKW1QyLrkaV14V7jsjlj5emhzo+jc+IxUjVhKxxK4+ZsIE+9XfuoZq9QU8/yGj sBRSZJQmr82cYbiNY7iGW+OwfNODKPKpQbu2wdLNgVgvUR4Z6EAiYIEs58X1cet6 6jfLuTAAWjsyXcigcG3d6w6NYu1PMdrilojPvih5JBwNhC/DyqAyL5YmixAmJeoR acvF9Az1GVMUiYEGQZOgM2dzMv1H+iymJ2sYAKKpz9fhzJc/TuDcoRAvnmYiQfTe HXCPLmKF00Wx/30TYeqBZQYRyU963tI= -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:15 2026 by rpki-client