This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa File: 3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa (raw, json) Hash identifier: KXsDa8kvx4hKzz35wecJanePmnAiTVSc4zd6XTHNI7I= Subject key identifier: 92:E8:A0:C1:BB:10:56:A9:E5:4C:DC:E6:3A:36:CB:6E:06:0D:96:71 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C5EC6F68C0E821E672C1EA400 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 397198 IP address blocks: 209.112.127.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:f6:8c:0e:82:1e:67:2c:1e:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=cd538cda-6674-42ee-9f20-3e3ff88325ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dd:9b:c5:fa:1b:b0:d8:4d:16:b2:6b:e1:97: 53:88:51:45:91:22:15:44:51:b0:cf:82:cb:d6:56: 9e:f1:d9:ab:92:28:6e:74:4a:f9:c7:c4:63:1f:2a: 77:07:c0:66:8f:f8:0f:a8:07:de:8e:9b:db:ab:bd: fc:88:e6:ec:cf:a4:fe:36:fb:f2:3c:90:93:b5:93: bd:dd:ba:a2:01:0d:6c:43:14:8f:1f:ee:40:c4:ba: 11:ed:26:6f:a5:6e:86:fd:fb:43:57:85:c3:63:d8: 42:fd:4a:15:ca:21:92:7a:a2:65:2c:71:c0:fb:1f: 30:2e:e0:36:44:8c:a2:f9:98:5a:8c:04:55:64:c0: c7:52:13:6e:8e:89:be:58:b5:8f:63:c5:d4:59:f1: 35:60:6d:22:f1:7b:8e:74:07:e0:83:b0:2e:eb:3b: 17:3d:c6:ce:05:39:c3:c9:e2:1e:35:dd:9e:e8:78: d1:a6:e5:8d:e8:a0:c6:6f:c6:54:63:73:7c:18:5c: b3:1a:13:69:4c:cb:d2:18:b3:8f:67:fe:5b:9c:3a: 52:ed:8d:34:19:14:74:f1:91:02:e5:39:61:99:1c: 4a:27:47:a4:8c:3b:5c:25:e3:21:1c:a9:36:6c:d9: 1d:84:4f:7c:df:2e:7f:fc:a3:82:0d:94:46:f7:78: 3e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E8:A0:C1:BB:10:56:A9:E5:4C:DC:E6:3A:36:CB:6E:06:0D:96:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3f4a9125-8f6d-3a3e-ac3f-42ecf44f6087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ce:97:ca:db:b5:b1:13:f3:c7:7c:5c:34:25:81:e0:65:d0: 12:94:d6:df:db:4b:c8:db:53:d1:00:e0:8f:6a:6e:a0:3c:2d: fe:19:ce:84:07:d2:58:b0:0e:25:05:d4:02:da:23:b6:fa:1e: 75:1a:75:4f:e6:2d:35:07:da:6c:02:53:37:92:95:a4:d2:d8: cf:c9:2c:e7:7f:2d:0c:6c:52:5c:3e:69:d4:43:4d:1c:d0:f0: c5:20:fa:6a:46:fd:18:bb:30:f3:9a:bf:dc:ba:b0:68:d8:ac: 71:bc:a0:8e:07:af:43:ba:2e:51:b2:23:7f:df:89:f3:25:e2: fc:dd:fc:15:bf:d3:0b:ca:47:db:9b:50:69:6a:f4:b6:16:c1: 98:e9:92:3b:9a:fc:31:9e:44:42:8f:27:d0:32:58:63:9e:9f: 0e:f7:fc:4b:cf:29:ef:01:3d:2e:ce:5d:09:87:7e:79:78:66: 01:1a:49:4f:16:ed:2c:93:ed:33:88:a8:80:59:8a:02:32:b4: 06:69:85:18:b0:0d:fe:be:15:1b:1e:de:67:68:32:8f:1b:58: f0:c9:02:ba:74:8a:a5:b9:bb:b0:da:1d:0a:5d:4e:c2:4c:f1: 90:2d:8d:ff:86:db:61:3d:38:b2:b1:af:0b:3d:cd:75:b6:fb: 78:f3:7c:4c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExexvaMDoIeZywepAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk Y2Q1MzhjZGEtNjY3NC00MmVlLTlmMjAtM2UzZmY4ODMyNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt2bxfobsNhNFrJr4ZdTiFFFkSIVRFGwz4LL 1lae8dmrkihudEr5x8RjHyp3B8Bmj/gPqAfejpvbq738iObsz6T+NvvyPJCTtZO9 3bqiAQ1sQxSPH+5AxLoR7SZvpW6G/ftDV4XDY9hC/UoVyiGSeqJlLHHA+x8wLuA2 RIyi+ZhajARVZMDHUhNujom+WLWPY8XUWfE1YG0i8XuOdAfgg7Au6zsXPcbOBTnD yeIeNd2e6HjRpuWN6KDGb8ZUY3N8GFyzGhNpTMvSGLOPZ/5bnDpS7Y00GRR08ZEC 5TlhmRxKJ0ekjDtcJeMhHKk2bNkdhE983y5//KOCDZRG93g+2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJLooMG7EFap5Uzc5jo2y24GDZZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2Y0YTkxMjUtOGY2ZC0z YTNlLWFjM2YtNDJlY2Y0NGY2MDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAbzpfK27WxE/PHfFw0JYHgZdASlNbf20vI21PRAOCPam6gPC3+Gc6E B9JYsA4lBdQC2iO2+h51GnVP5i01B9psAlM3kpWk0tjPySznfy0MbFJcPmnUQ00c 0PDFIPpqRv0YuzDzmr/curBo2KxxvKCOB69Dui5RsiN/34nzJeL83fwVv9MLykfb m1BpavS2FsGY6ZI7mvwxnkRCjyfQMlhjnp8O9/xLzynvAT0uzl0Jh355eGYBGklP Fu0sk+0ziKiAWYoCMrQGaYUYsA3+vhUbHt5naDKPG1jwyQK6dIqlubuw2h0KXU7C TPGQLY3/htthPTiysa8LPc11tvt483xM -----END CERTIFICATE-----Generated at Sun Jan 25 20:10:56 2026 by rpki-client