This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa File: abe939e6-015c-3bda-92fa-f8264ac59be6.roa (raw, json) Hash identifier: B7Y9LvC1jRGul7oLLmIf0QzsKlO51Cw4mU6QPAObNBE= Subject key identifier: 7F:75:FB:CC:57:A3:C0:2A:06:11:68:DA:97:70:EE:46:DE:3E:7D:E6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C417658830C1AF3449EB3E980 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 213122 IP address blocks: 128.254.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:58:83:0c:1a:f3:44:9e:b3:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=65c6abae-98e2-485e-9d7f-79151f129aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2d:90:60:19:f2:40:ca:5e:05:ba:fd:a5:bd: f9:55:ed:a8:ed:81:58:a9:80:b5:1a:ae:82:b5:58: b7:77:cc:94:a2:c6:df:83:1d:51:37:55:55:f3:a9: 0e:37:d3:2e:fc:f1:53:8c:91:ba:72:92:28:a4:d1: 01:10:54:dd:45:a6:7b:43:9d:4f:a2:db:73:17:9c: 6c:6a:02:f4:2c:1a:89:31:08:46:2d:77:43:0b:eb: 1b:1d:45:34:af:0d:09:1c:11:10:d4:68:d2:22:95: 2e:db:b4:5f:14:34:5c:5b:f3:e1:b3:ce:5f:b7:bb: 45:58:01:2f:f1:e7:a1:e5:48:01:0c:9b:4a:a9:c0: 9e:79:9f:6a:b7:d4:5e:6f:bd:16:33:53:88:6e:55: 72:f0:8c:4e:25:e9:5a:23:3c:21:82:a0:bf:a5:d4: 1f:ad:57:3e:5a:7d:49:d4:02:7a:4a:92:2a:d8:d2: 73:f1:d9:fb:b2:e8:58:e2:55:89:b1:1e:44:0c:c0: 38:4e:67:08:57:51:01:69:87:37:32:0e:d3:29:39: 62:2a:f2:73:3d:a1:1b:92:23:df:27:dc:5e:fd:b5: b3:a2:cb:f6:c3:c3:a1:63:37:54:12:a3:ff:7f:06: af:df:3f:50:ba:16:3d:cb:2e:51:f1:ef:59:bf:95: 10:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:75:FB:CC:57:A3:C0:2A:06:11:68:DA:97:70:EE:46:DE:3E:7D:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/abe939e6-015c-3bda-92fa-f8264ac59be6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:96:be:e3:aa:7b:8a:08:3b:43:21:85:00:e8:ab:b3:32:cb: 1d:8c:7d:02:5c:b1:55:c7:ac:e0:6f:15:76:a5:8a:b8:de:20: aa:8c:9b:52:7b:5a:e3:79:c6:f4:2e:b9:2b:14:28:04:a4:35: c7:5d:fa:5c:07:c4:62:a7:41:60:40:d4:98:49:ba:b6:68:d0: d6:ee:30:84:77:1f:4b:ae:ce:cd:7a:9c:a5:0e:27:5d:df:91: 4c:5d:eb:29:bf:e7:0f:31:30:c8:51:07:d7:b0:8e:d3:8a:b5: 0b:2e:77:ab:e9:a8:c9:f3:9f:da:8d:d5:0b:bc:5c:b7:4b:1a: e8:a0:e5:a9:2f:25:38:3f:12:30:69:57:6c:8b:a1:15:07:2e: 1f:36:54:76:7e:3d:0b:6e:de:ff:ae:5a:3c:c2:82:53:6b:a5: 87:d3:35:11:cc:42:1b:ae:65:40:a3:71:d8:fc:86:0f:c7:d5: 16:6a:61:b3:f3:98:d2:38:4d:d1:14:d1:97:a8:63:a5:18:94: 0a:c8:c8:38:f6:b7:a1:5b:69:c9:28:35:cb:37:99:b7:c0:c8: bc:3c:92:30:ce:89:11:10:6c:80:11:18:53:7a:5a:b1:8f:fa: 4f:29:85:f4:9f:1f:b3:30:65:88:28:ce:39:db:a7:7c:26:00: 95:1e:20:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdliDDBrzRJ6z6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NjVjNmFiYWUtOThlMi00ODVlLTlkN2YtNzkxNTFmMTI5YWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii2QYBnyQMpeBbr9pb35Ve2o7YFYqYC1Gq6C tVi3d8yUosbfgx1RN1VV86kON9Mu/PFTjJG6cpIopNEBEFTdRaZ7Q51PottzF5xs agL0LBqJMQhGLXdDC+sbHUU0rw0JHBEQ1GjSIpUu27RfFDRcW/Phs85ft7tFWAEv 8eeh5UgBDJtKqcCeeZ9qt9Reb70WM1OIblVy8IxOJelaIzwhgqC/pdQfrVc+Wn1J 1AJ6SpIq2NJz8dn7suhY4lWJsR5EDMA4TmcIV1EBaYc3Mg7TKTliKvJzPaEbkiPf J9xe/bWzosv2w8OhYzdUEqP/fwav3z9QuhY9yy5R8e9Zv5UQZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH91+8xXo8AqBhFo2pdw7kbePn3mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWJlOTM5ZTYtMDE1Yy0z YmRhLTkyZmEtZjgyNjRhYzU5YmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWWvuOqe4oIO0MhhQDoq7Myyx2MfQJcsVXHrOBvFXalirjeIKqMm1J7 WuN5xvQuuSsUKASkNcdd+lwHxGKnQWBA1JhJurZo0NbuMIR3H0uuzs16nKUOJ13f kUxd6ym/5w8xMMhRB9ewjtOKtQsud6vpqMnzn9qN1Qu8XLdLGuig5akvJTg/EjBp V2yLoRUHLh82VHZ+PQtu3v+uWjzCglNrpYfTNRHMQhuuZUCjcdj8hg/H1RZqYbPz mNI4TdEU0ZeoY6UYlArIyDj2t6FbackoNcs3mbfAyLw8kjDOiREQbIARGFN6WrGP +k8phfSfH7MwZYgozjnbp3wmAJUeIFM= -----END CERTIFICATE-----Generated at Sun Jan 25 21:52:40 2026 by rpki-client