This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa File: dfc98d87-51b3-3316-896f-e0a483a854c6.roa (raw, json) Hash identifier: 09R5BnhZXmFgeKdAVNV6l34gilaDq9y9m0LW3diijsk= Subject key identifier: 1E:5D:86:BF:33:51:77:52:39:A8:D9:75:A4:CE:7A:5A:4F:39:50:CA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C5EC6F65B44B26DCCF63E3A80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 397198 IP address blocks: 209.112.127.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:f6:5b:44:b2:6d:cc:f6:3e:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=a6a0a68e-d4b2-4f80-bec4-42ebfea1cdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:aa:ae:37:24:b4:45:38:b5:81:3b:b7:ad:00: d1:e6:8f:7c:5e:6d:a4:9e:02:07:18:cc:f6:2f:07: 5b:78:ac:07:c9:a3:c8:f1:d2:c4:16:56:6b:59:95: bb:94:e3:6b:55:a4:47:58:46:be:1d:39:f5:3a:68: 84:3f:e9:95:69:87:80:01:e9:f7:f1:b1:d8:2a:b4: 4e:8d:78:33:f3:a3:e6:57:2a:90:1d:18:d8:9f:f2: a6:8e:5c:75:ba:b8:ce:fe:7d:c6:df:3d:5d:49:75: c4:8b:ec:b6:85:e2:95:03:5e:ee:df:66:da:ee:cb: 59:2d:7c:ad:cb:e8:2c:10:f1:d3:51:a1:f8:0a:7d: e5:69:2d:3f:51:22:fe:12:64:ea:af:48:fb:25:19: cb:07:de:ab:f6:c4:93:36:5a:75:08:9d:af:8e:43: 98:3f:17:86:78:1f:dc:aa:73:3d:5e:08:db:aa:35: 13:be:f0:76:6f:eb:67:20:84:76:11:b5:2e:31:e5: 86:79:17:18:5e:84:c6:0b:d6:4d:ab:0d:98:3e:19: b5:61:64:5f:a9:59:b0:ec:5f:16:71:77:71:2d:19: 0f:a0:10:92:1b:f2:1d:8a:55:cf:34:6b:ed:36:81: 12:70:06:32:0f:a9:0a:46:d1:00:fd:1d:ec:e1:a8: ef:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:86:BF:33:51:77:52:39:A8:D9:75:A4:CE:7A:5A:4F:39:50:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/dfc98d87-51b3-3316-896f-e0a483a854c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 209.112.127.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:50:85:5e:c3:32:ea:a0:9f:ff:e0:65:10:42:84:38:d4:81: 9d:7a:a0:db:0f:d1:5f:cc:77:3c:7c:29:a7:2a:4e:b5:ab:94: d9:44:1f:cc:27:a1:c8:b5:28:97:46:13:65:60:a1:c5:af:1f: dc:cc:78:02:01:fb:5c:d2:4f:5f:05:3f:e7:81:27:9c:38:1b: f2:6d:09:1b:fd:ba:9a:df:81:f8:76:10:f1:53:a6:9e:56:bb: 11:ab:63:38:88:cd:83:86:c8:f8:a1:a5:19:c8:70:5f:43:e7: 35:8e:21:9b:d2:f0:f1:cb:56:64:44:e0:41:45:ab:15:9b:18: ff:71:21:01:f4:96:be:70:f9:87:fc:33:a9:b3:4f:76:02:b6: ba:9c:55:4a:1d:29:54:3d:23:25:4a:bf:ea:49:b2:d2:df:8a: f0:ac:ff:3b:bd:1f:fa:3d:89:3f:3f:8a:ee:48:82:84:14:2d: 03:6c:cc:b0:3f:80:c7:b7:f4:d4:4d:f4:29:90:8f:44:73:08: 15:bb:8f:e0:a0:59:f2:bb:11:5b:3b:61:e8:c7:87:c8:33:7c: a7:83:7f:ee:3c:74:8a:ce:75:c6:27:db:59:0b:9d:62:38:41: 98:49:58:17:af:f0:13:ef:03:be:f2:17:08:a0:5c:d6:13:e7: ce:97:ed:35 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExexvZbRLJtzPY+OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YTZhMGE2OGUtZDRiMi00ZjgwLWJlYzQtNDJlYmZlYTFjZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6quNyS0RTi1gTu3rQDR5o98Xm2kngIHGMz2 LwdbeKwHyaPI8dLEFlZrWZW7lONrVaRHWEa+HTn1OmiEP+mVaYeAAen38bHYKrRO jXgz86PmVyqQHRjYn/Kmjlx1urjO/n3G3z1dSXXEi+y2heKVA17u32ba7stZLXyt y+gsEPHTUaH4Cn3laS0/USL+EmTqr0j7JRnLB96r9sSTNlp1CJ2vjkOYPxeGeB/c qnM9XgjbqjUTvvB2b+tnIIR2EbUuMeWGeRcYXoTGC9ZNqw2YPhm1YWRfqVmw7F8W cXdxLRkPoBCSG/IdilXPNGvtNoEScAYyD6kKRtEA/R3s4ajvhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB5dhr8zUXdSOajZdaTOelpPOVDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGZjOThkODctNTFiMy0z MzE2LTg5NmYtZTBhNDgzYTg1NGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0XB/HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2UIVewzLqoJ//4GUQQoQ41IGdeqDbD9FfzHc8fCmnKk61q5TZRB/M J6HItSiXRhNlYKHFrx/czHgCAftc0k9fBT/ngSecOBvybQkb/bqa34H4dhDxU6ae VrsRq2M4iM2Dhsj4oaUZyHBfQ+c1jiGb0vDxy1ZkROBBRasVmxj/cSEB9Ja+cPmH /DOps092Ara6nFVKHSlUPSMlSr/qSbLS34rwrP87vR/6PYk/P4ruSIKEFC0DbMyw P4DHt/TUTfQpkI9EcwgVu4/goFnyuxFbO2Hox4fIM3yng3/uPHSKznXGJ9tZC51i OEGYSVgXr/AT7wO+8hcIoFzWE+fOl+01 -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:26 2026 by rpki-client