This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa File: a36891e5-8973-313b-a68a-6ede44be3f67.roa (raw, json) Hash identifier: gjXpr7dL7gCMk1D7QQOyHlz+fz+x79/28pb1Uv7ZDF8= Subject key identifier: F0:D4:D6:6B:EB:4A:76:68:6F:07:4F:EC:59:E6:D7:55:4D:A0:B8:EE Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C417656FE63C3935156EFE580 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 170.39.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:56:fe:63:c3:93:51:56:ef:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=fbf32eca-1f04-4c12-9242-a4bf34657f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:81:b0:d4:29:13:a1:07:92:2a:25:9c:63: 7f:25:80:f9:9a:f9:f5:dc:4d:ff:63:8e:44:3d:4c: e3:dd:63:f0:e3:fe:0d:bb:a2:9d:98:a5:6b:cc:d3: 91:ae:54:47:aa:ef:e5:ee:32:96:ca:0f:1c:e2:ac: db:40:8d:8b:43:56:4c:ec:48:0d:31:3e:e5:f9:47: 65:96:d2:09:ae:38:e4:65:7d:ab:8b:60:63:cf:f6: ca:7c:de:fc:f1:26:c5:55:04:54:00:b8:b4:3e:62: a1:69:0b:68:d5:8f:19:b1:5b:31:a2:84:fa:63:de: 01:12:8f:99:a3:90:77:43:4a:0d:00:e6:11:99:f2: e5:4a:fa:a5:d7:9e:d3:b3:55:29:c1:cc:68:c5:b8: 7a:e5:4d:39:d2:92:e8:f4:61:91:86:1d:a7:40:c8: 97:4e:4e:00:03:63:9f:b4:2a:0a:bc:5f:57:d9:9d: f1:a5:0b:de:e5:71:68:91:db:f9:72:c4:7b:a7:f2: cd:60:3e:55:4b:b9:f3:6a:13:9e:04:9b:b1:67:ed: 18:6b:0a:02:86:cc:c8:7c:f2:96:00:aa:6b:2d:92: 2f:d1:dc:97:d9:7a:7d:71:ea:be:6a:3a:4e:59:7a: da:bb:b1:4a:c0:b4:56:80:01:c5:b3:1a:ba:d8:e9: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:D6:6B:EB:4A:76:68:6F:07:4F:EC:59:E6:D7:55:4D:A0:B8:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/a36891e5-8973-313b-a68a-6ede44be3f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 170.39.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c0:4a:8d:67:2c:0e:50:47:72:4e:7a:da:0a:3f:2f:7b:b8: ef:00:6e:de:d1:47:cd:c0:3d:42:c8:88:05:dd:f6:88:f6:ad: f8:e7:f4:11:8a:49:c1:fa:a7:eb:b7:f0:d1:68:12:77:71:9a: 09:11:b3:5c:39:78:26:5e:be:63:ac:ae:be:b1:a5:1b:0d:8d: 9b:46:98:28:62:ad:61:fd:fc:af:c9:a5:ed:87:51:e1:1d:e2: 73:d6:5a:b5:a5:66:80:fd:26:5f:35:6c:aa:3f:68:bb:32:02: e3:36:a6:3b:54:54:fd:bf:9c:b0:f8:b1:43:78:14:b9:03:6b: ad:55:78:ac:15:dd:42:1a:42:60:03:29:dd:0d:ee:f5:4e:94: fb:c0:8a:f5:92:26:8d:c6:39:1b:d0:e1:8e:9a:f7:29:52:b6: 15:75:3b:f8:52:f5:d0:00:f3:fa:ce:eb:86:3a:e4:7d:b1:bb: 86:7c:fe:32:59:e5:3d:61:a0:b8:57:9d:5f:5c:af:d0:0d:57: 51:d2:68:91:fb:1b:b5:96:41:c3:04:0a:4d:a3:b8:31:da:be: 5b:84:8b:35:e7:84:80:84:6c:a8:62:fc:76:31:5e:1f:cd:97: 2f:bf:7d:24:a4:88:ef:9f:cf:5e:03:35:9f:65:be:e4:72:6c: 70:66:34:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlb+Y8OTUVbv5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk ZmJmMzJlY2EtMWYwNC00YzEyLTkyNDItYTRiZjM0NjU3ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVaBsNQpE6EHkiolnGN/JYD5mvn13E3/Y45E PUzj3WPw4/4Nu6KdmKVrzNORrlRHqu/l7jKWyg8c4qzbQI2LQ1ZM7EgNMT7l+Udl ltIJrjjkZX2ri2Bjz/bKfN788SbFVQRUALi0PmKhaQto1Y8ZsVsxooT6Y94BEo+Z o5B3Q0oNAOYRmfLlSvql157Ts1Upwcxoxbh65U050pLo9GGRhh2nQMiXTk4AA2Of tCoKvF9X2Z3xpQve5XFokdv5csR7p/LNYD5VS7nzahOeBJuxZ+0YawoChszIfPKW AKprLZIv0dyX2Xp9ceq+ajpOWXrau7FKwLRWgAHFsxq62OlJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDU1mvrSnZobwdP7Fnm11VNoLjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYTM2ODkxZTUtODk3My0z MTNiLWE2OGEtNmVkZTQ0YmUzZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqie6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjASo1nLA5QR3JOetoKPy97uO8Abt7RR83APULIiAXd9oj2rfjn9BGK ScH6p+u38NFoEndxmgkRs1w5eCZevmOsrr6xpRsNjZtGmChirWH9/K/Jpe2HUeEd 4nPWWrWlZoD9Jl81bKo/aLsyAuM2pjtUVP2/nLD4sUN4FLkDa61VeKwV3UIaQmAD Kd0N7vVOlPvAivWSJo3GORvQ4Y6a9ylSthV1O/hS9dAA8/rO64Y65H2xu4Z8/jJZ 5T1hoLhXnV9cr9ANV1HSaJH7G7WWQcMECk2juDHavluEizXnhICEbKhi/HYxXh/N ly+/fSSkiO+fz14DNZ9lvuRybHBmNKQ= -----END CERTIFICATE-----Generated at Sun Jan 25 22:04:27 2026 by rpki-client