This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa File: 4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa (raw, json) Hash identifier: raFBcsjvz9l7rfnSyRm2zu+jVUDzriyFuDE0ZjHPxus= Subject key identifier: C2:DE:B9:86:DC:2F:C0:87:95:76:90:79:A1:74:04:24:30:7C:B4:96 Certificate issuer: /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Certificate serial: 010D0C9F4328584C794C24674BE8E48EC2844E00 Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa Signing time: Sat 10 Jan 2026 02:00:31 +0000 ROA not before: Sat 10 Jan 2026 02:00:31 +0000 ROA not after: Fri 10 Apr 2026 01:00:31 +0000 asID: 26658 IP address blocks: 172.87.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4c:24:67:4b:e8:e4:8e:c2:84:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d Validity Not Before: Jan 10 02:00:31 2026 GMT Not After : Apr 10 01:00:31 2026 GMT Subject: CN=bf9700cb-45bf-46ac-83cb-1b00fd85ebbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:b0:fa:85:f1:2e:8d:cc:73:fa:aa:ec:40: 06:2a:99:89:51:4a:d7:a7:28:c1:9f:5f:5c:fb:c6: 13:0a:88:cc:af:6c:ae:52:a5:35:96:df:f0:90:6c: e3:74:f0:d7:25:f3:01:92:e0:62:56:6f:74:34:9b: 40:2d:ab:16:e6:34:a7:1f:90:c8:ee:17:d1:d9:f6: d9:5b:24:fc:48:15:06:d2:a2:37:95:5d:90:1c:06: 7d:81:34:d1:60:db:5c:4f:85:90:a3:e4:bc:5d:e4: 8c:cb:4c:3f:5c:fc:1e:8b:64:b9:ce:fd:7e:5c:ef: cf:69:df:9c:83:b3:8b:65:44:6f:e6:9d:7f:f1:b5: 1a:c3:8d:3f:4e:93:72:7a:5f:ef:71:50:89:12:5f: 77:5e:15:60:1e:f6:a9:ea:21:2c:e2:2c:95:35:df: 72:47:1d:bf:18:04:8f:f2:2a:b2:d6:15:80:86:e8: 31:e9:29:57:ba:3a:02:d8:1d:9f:c8:74:61:4e:4f: 70:d6:b8:42:23:70:47:46:4a:2b:55:3e:65:ab:93: 07:84:d4:11:11:54:16:e1:2d:5c:a5:aa:4c:e0:21: 22:d7:f9:5c:b0:5c:bf:33:3b:3a:41:fd:a0:b7:06: 05:26:de:fe:f9:19:59:3e:bb:aa:d7:dd:8e:7b:cb: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:B9:86:DC:2F:C0:87:95:76:90:79:A1:74:04:24:30:7C:B4:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4dbea0e5-c2bf-3fcc-bc4e-1870af7f2970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl X509v3 Authority Key Identifier: keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer sbgp-ipAddrBlock: critical IPv4: 172.87.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:87:08:66:29:1b:d5:a0:c5:a3:42:e9:0a:94:bc:de:f3:fa: 16:7b:d5:34:8f:38:7f:8b:2e:4f:f7:d8:d3:53:eb:22:8f:ad: 6f:2f:cd:a6:e5:87:4f:b6:97:d9:93:f4:41:67:17:d3:0d:f4: bc:08:83:43:ed:65:b7:e1:70:71:0f:0f:59:76:2f:84:30:5b: a8:56:0f:83:40:4b:fc:71:9a:00:99:e4:e6:3d:53:7a:10:9a: 86:70:3c:e1:93:45:91:64:c1:79:c0:4e:76:b3:b0:62:24:3b: 83:4b:a8:e8:76:4c:89:75:f9:31:06:f6:74:a8:62:ae:4e:5e: 19:52:5c:36:59:46:49:7a:8f:3b:ba:0b:30:dd:de:e3:5e:78: 2a:db:71:96:d2:61:8e:78:7a:89:02:27:bb:eb:d1:24:c2:6c: 12:cf:55:74:aa:26:33:a9:0d:e2:8f:c7:bc:9f:35:73:4e:e2: 8e:02:f9:b4:9a:30:03:06:14:10:47:d4:9f:10:59:ce:06:26: f2:ce:1a:40:2a:ae:d8:a5:7a:30:63:ac:14:00:c6:53:4a:0a: 49:3b:ab:c2:cf:e8:e9:92:be:68:18:d1:ff:41:08:66:27:9e: ba:7b:81:be:11:21:04:c4:ff:62:1a:f0:0e:9b:0d:63:11:1e: 9d:b5:0d:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx5TCRnS+jkjsKETgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0 YTZkMB4XDTI2MDExMDAyMDAzMVoXDTI2MDQxMDAxMDAzMVowLzEtMCsGA1UEAxMk YmY5NzAwY2ItNDViZi00NmFjLTgzY2ItMWIwMGZkODVlYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Ww+oXxLo3Mc/qq7EAGKpmJUUrXpyjBn19c +8YTCojMr2yuUqU1lt/wkGzjdPDXJfMBkuBiVm90NJtALasW5jSnH5DI7hfR2fbZ WyT8SBUG0qI3lV2QHAZ9gTTRYNtcT4WQo+S8XeSMy0w/XPwei2S5zv1+XO/Pad+c g7OLZURv5p1/8bUaw40/TpNyel/vcVCJEl93XhVgHvap6iEs4iyVNd9yRx2/GASP 8iqy1hWAhugx6SlXujoC2B2fyHRhTk9w1rhCI3BHRkorVT5lq5MHhNQREVQW4S1c papM4CEi1/lcsFy/Mzs6Qf2gtwYFJt7++RlZPruq192Oe8tRDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLeuYbcL8CHlXaQeaF0BCQwfLSWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5 YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvNGRiZWEwZTUtYzJiZi0z ZmNjLWJjNGUtMTg3MGFmN2YyOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2 NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3 MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrFfEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqHCGYpG9WgxaNC6QqUvN7z+hZ71TSPOH+LLk/32NNT6yKPrW8vzabl h0+2l9mT9EFnF9MN9LwIg0PtZbfhcHEPD1l2L4QwW6hWD4NAS/xxmgCZ5OY9U3oQ moZwPOGTRZFkwXnATnazsGIkO4NLqOh2TIl1+TEG9nSoYq5OXhlSXDZZRkl6jzu6 CzDd3uNeeCrbcZbSYY54eokCJ7vr0STCbBLPVXSqJjOpDeKPx7yfNXNO4o4C+bSa MAMGFBBH1J8QWc4GJvLOGkAqrtilejBjrBQAxlNKCkk7q8LP6OmSvmgY0f9BCGYn nrp7gb4RIQTE/2Ia8A6bDWMRHp21DTQ= -----END CERTIFICATE-----Generated at Sun Jan 25 18:28:38 2026 by rpki-client