This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/844106ae-bc90-3331-abe5-31a9d02c84d1.roa File: 844106ae-bc90-3331-abe5-31a9d02c84d1.roa (raw, json) Hash identifier: pkX2khTvFeOR9hDD0psMqkVd8jfbm4vwCsixqakXK5I= Subject key identifier: C5:A7:0E:04:F4:8A:43:FF:A7:EE:39:CD:DD:A0:97:D6:62:7A:C6:B1 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584C242692F1429128A5206A3BC0 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/844106ae-bc90-3331-abe5-31a9d02c84d1.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 10794 IP address blocks: 171.162.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:92:f1:42:91:28:a5:20:6a:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=85cee965-29a6-471e-bab8-a3727ae17cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:92:e1:ec:9d:ba:2f:88:b3:51:7d:d1:55: 66:13:48:0f:be:81:d3:b4:e1:35:a5:cb:f6:70:87: 6e:d6:eb:49:46:d2:39:19:d4:77:3e:63:08:1c:9c: 57:4f:3e:20:0b:19:15:6a:cc:2a:59:10:c1:02:7a: 5d:72:c0:2c:f8:75:35:08:94:a1:b5:45:f2:1b:f6: d8:79:70:ba:16:f6:ef:94:63:b4:33:d7:e7:ef:d0: 15:f9:6c:4e:81:97:e2:b2:30:f8:77:49:43:18:28: b0:3a:1e:1a:60:29:cf:bb:24:e3:dd:b5:f6:fa:bc: cd:d4:97:c2:f8:96:59:83:18:63:12:3e:f4:44:33: 79:ba:59:16:28:bd:8c:30:fc:ab:d4:2a:6d:e6:16: e8:c7:d9:52:e3:76:69:22:46:9f:d3:6f:a1:90:3d: 99:62:ca:d6:b7:f1:d9:0b:76:f3:37:09:22:9a:05: 2e:56:84:ca:3d:fd:88:4b:ee:76:0e:63:27:95:ec: c8:87:be:52:1b:c2:e9:b1:c1:c8:ca:a3:3d:80:8d: 2d:8d:0e:fc:9e:36:45:be:b1:d3:2a:22:d4:28:2a: 1d:74:0b:f9:b1:45:79:64:c1:a8:a2:26:9c:e2:00: be:30:32:2e:22:17:d5:20:ae:8e:30:80:80:51:65: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A7:0E:04:F4:8A:43:FF:A7:EE:39:CD:DD:A0:97:D6:62:7A:C6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/844106ae-bc90-3331-abe5-31a9d02c84d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.162.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:31:d9:e7:a8:d2:25:83:8c:7a:57:b1:01:f4:20:33:39:34: f4:d8:83:57:2c:67:d6:67:67:dc:e4:d9:ed:f3:2d:ed:b0:23: 71:46:39:f4:06:e6:ba:cb:7b:72:4a:61:fb:6f:2b:b1:04:53: e8:39:c2:e7:c4:ee:cc:b9:a1:f3:79:20:d5:b6:1c:de:c8:2c: e7:1f:82:6a:92:47:72:cd:ba:cf:ab:5f:da:8a:3a:b6:98:7a: e4:e5:f3:08:c5:16:b1:a4:60:05:fc:44:a8:63:40:a6:cf:a1: 35:68:31:07:8b:d9:c9:95:aa:a6:98:ff:0f:4d:bb:66:fa:f8: 94:2a:0a:1a:58:2f:5a:80:b0:30:5a:aa:9b:f3:f6:7f:3d:c2: 7e:22:e4:bc:19:a5:c6:43:47:fd:90:da:24:4f:d5:f1:16:7e: 39:7b:c7:2b:71:a2:0b:f6:21:a5:26:54:ad:e9:8c:ca:ef:cc: 3d:d2:7a:8c:a3:31:2f:4e:58:ff:a7:0b:20:4a:7d:93:f9:48: 6b:5d:3f:5e:7d:80:91:c7:2d:08:73:82:e9:d0:d2:69:8e:3d: 4a:11:d3:8d:f9:89:42:7b:b3:5a:b5:0e:da:8c:68:17:8e:5c: 01:2d:2b:8e:7c:1c:37:c9:4a:8d:3d:dc:1e:a2:a4:eb:17:d0: bd:d8:79:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJpLxQpEopSBqO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk ODVjZWU5NjUtMjlhNi00NzFlLWJhYjgtYTM3MjdhZTE3Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAqS4eydui+Is1F90VVmE0gPvoHTtOE1pcv2 cIdu1utJRtI5GdR3PmMIHJxXTz4gCxkVaswqWRDBAnpdcsAs+HU1CJShtUXyG/bY eXC6FvbvlGO0M9fn79AV+WxOgZfisjD4d0lDGCiwOh4aYCnPuyTj3bX2+rzN1JfC +JZZgxhjEj70RDN5ulkWKL2MMPyr1Cpt5hbox9lS43ZpIkaf02+hkD2ZYsrWt/HZ C3bzNwkimgUuVoTKPf2IS+52DmMnlezIh75SG8LpscHIyqM9gI0tjQ78njZFvrHT KiLUKCoddAv5sUV5ZMGooiac4gC+MDIuIhfVIK6OMICAUWV7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWnDgT0ikP/p+45zd2gl9ZiesaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvODQ0MTA2YWUtYmM5MC0z MzMxLWFiZTUtMzFhOWQwMmM4NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAq6KoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgx2eeo0iWDjHpXsQH0IDM5NPTYg1csZ9ZnZ9zk2e3zLe2wI3FGOfQG 5rrLe3JKYftvK7EEU+g5wufE7sy5ofN5INW2HN7ILOcfgmqSR3LNus+rX9qKOraY euTl8wjFFrGkYAX8RKhjQKbPoTVoMQeL2cmVqqaY/w9Nu2b6+JQqChpYL1qAsDBa qpvz9n89wn4i5LwZpcZDR/2Q2iRP1fEWfjl7xytxogv2IaUmVK3pjMrvzD3Seoyj MS9OWP+nCyBKfZP5SGtdP159gJHHLQhzgunQ0mmOPUoR0435iUJ7s1q1DtqMaBeO XAEtK458HDfJSo093B6ipOsX0L3YeSQ= -----END CERTIFICATE-----Generated at Tue Dec 16 13:29:48 2025 by rpki-client