This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa File: 525cb902-d047-345f-b98a-33a46136085b.roa (raw, json) Hash identifier: w6thAu9GIBNXWVbEPJ824335zAX+6hENiYQo50/j9Vg= Subject key identifier: 15:AB:A0:B2:5C:31:5F:FE:D1:31:72:C2:39:93:7A:63:D0:A7:67:9A Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C5EC6F8AD6C24FE9AB1FD5C80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 396578 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:f8:ad:6c:24:fe:9a:b1:fd:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=bb9966a5-3f7d-4028-9f16-9626a6d556e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:69:fe:9c:a6:9a:08:a7:0f:5e:f4:2d:78:e1: 5f:cb:8b:b9:fb:a6:37:80:f2:50:32:d6:ac:da:a5: 3a:14:98:d5:73:bb:21:57:b2:db:ca:fe:3d:93:5c: 91:9f:2e:a7:38:13:a4:e3:4c:0b:82:95:44:b6:20: c7:0e:81:89:c4:e8:13:c9:1b:54:9c:aa:ee:ba:f8: d4:a2:03:b1:70:ac:1d:fc:4f:3b:59:45:4d:7f:86: 4a:3f:98:87:01:7a:55:ef:44:06:67:9b:e0:b9:6e: 52:ef:40:eb:6e:e4:67:9f:1a:40:5b:48:af:2a:93: 91:75:7c:dd:1b:ef:03:ac:2a:5d:1c:68:fb:5a:bd: 18:09:92:83:99:1f:55:8a:52:ff:ad:2f:68:82:f7: 96:a4:ff:ed:21:45:97:f8:5b:02:3c:bd:9d:cc:45: 9b:b6:c5:ad:9e:fc:03:59:e4:bf:d7:19:81:0e:63: e7:88:f1:ef:72:c3:a9:50:d6:8e:3b:0f:c0:6f:aa: 4b:81:d9:f4:b0:20:7d:1a:fc:3c:88:d0:1b:1d:16: d5:28:75:94:6c:f4:75:90:0f:ac:4e:2c:b9:cc:55: 40:77:f2:86:47:52:51:a5:2b:76:a0:3e:cf:10:ea: f1:ff:1a:70:21:4d:ec:30:dc:40:d6:65:86:82:68: 3e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AB:A0:B2:5C:31:5F:FE:D1:31:72:C2:39:93:7A:63:D0:A7:67:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/525cb902-d047-345f-b98a-33a46136085b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:20:4b:31:5d:2f:f1:2f:8c:dd:44:03:bc:d3:92:d8:20:ed: 0a:1f:7c:f4:4b:43:e4:4a:48:01:fe:58:01:59:77:9c:da:7d: 64:0f:63:43:fe:58:83:ff:25:cd:95:f5:84:b4:41:34:1d:5d: 34:95:d7:98:5e:43:b2:92:bb:6e:80:71:13:b0:25:ca:d3:a3: 5c:99:f1:9b:90:56:2e:bd:44:fa:14:e5:06:42:4a:c5:b8:1b: b2:6e:d1:94:88:44:aa:88:2f:6d:ea:26:43:20:74:6d:1f:9a: e0:cd:a0:12:a1:3f:0f:6b:10:2c:f2:f0:af:5c:50:d1:55:bb: 1f:99:9e:16:14:76:ae:ca:93:3e:ce:92:48:d2:08:82:6e:1c: ae:27:34:ca:70:b1:61:9c:79:52:4c:e4:15:a7:4d:23:29:dc: 78:dd:6f:9d:8a:d0:84:fe:c3:e1:81:b9:59:b7:3e:7f:f7:95: 00:e6:e6:7d:87:70:9c:1c:e7:f0:20:d2:8d:8a:97:3f:d0:69: 6a:36:84:ce:6d:d1:1c:49:2f:24:2f:d4:41:67:8f:5d:57:7f: a3:37:8e:0e:1b:e0:6e:3a:84:99:4d:a5:4e:20:f5:98:21:f2: dd:5f:a4:2c:97:3c:6b:61:52:30:6b:09:d6:7a:e1:28:ae:ab: 2b:c0:08:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExexvitbCT+mrH9XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YmI5OTY2YTUtM2Y3ZC00MDI4LTlmMTYtOTYyNmE2ZDU1NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2n+nKaaCKcPXvQteOFfy4u5+6Y3gPJQMtas 2qU6FJjVc7shV7Lbyv49k1yRny6nOBOk40wLgpVEtiDHDoGJxOgTyRtUnKruuvjU ogOxcKwd/E87WUVNf4ZKP5iHAXpV70QGZ5vguW5S70DrbuRnnxpAW0ivKpORdXzd G+8DrCpdHGj7Wr0YCZKDmR9VilL/rS9ogveWpP/tIUWX+FsCPL2dzEWbtsWtnvwD WeS/1xmBDmPniPHvcsOpUNaOOw/Ab6pLgdn0sCB9Gvw8iNAbHRbVKHWUbPR1kA+s Tiy5zFVAd/KGR1JRpSt2oD7PEOrx/xpwIU3sMNxA1mWGgmg+hwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBWroLJcMV/+0TFywjmTemPQp2eaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNTI1Y2I5MDItZDA0Ny0z NDVmLWI5OGEtMzNhNDYxMzYwODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+IEsxXS/xL4zdRAO805LYIO0KH3z0S0PkSkgB/lgBWXec2n1kD2ND /liD/yXNlfWEtEE0HV00ldeYXkOykrtugHETsCXK06NcmfGbkFYuvUT6FOUGQkrF uBuybtGUiESqiC9t6iZDIHRtH5rgzaASoT8PaxAs8vCvXFDRVbsfmZ4WFHauypM+ zpJI0giCbhyuJzTKcLFhnHlSTOQVp00jKdx43W+ditCE/sPhgblZtz5/95UA5uZ9 h3CcHOfwINKNipc/0GlqNoTObdEcSS8kL9RBZ49dV3+jN44OG+BuOoSZTaVOIPWY IfLdX6QslzxrYVIwawnWeuEorqsrwAhe -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:17 2026 by rpki-client