This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa File: ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa (raw, json) Hash identifier: GDm16FXHy3pd6lJMjxSNVQbBTpFGIsgAqS6iqIdIjXs= Subject key identifier: B6:F7:C4:E6:41:23:49:C1:AA:92:03:4B:8E:9E:30:B7:2D:67:1F:D6 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C4176565C458AB5DB09721620 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 128.254.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:56:5c:45:8a:b5:db:09:72:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=71c89640-b333-417a-b8d9-bb922f59edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:87:e4:b3:e2:f0:36:ad:81:20:db:d3:1e:0e: 58:59:b0:83:01:27:88:c1:74:28:83:ad:f0:11:34: d2:6c:ad:50:c0:de:8d:b1:3d:4e:f0:f4:80:31:5d: cd:08:7a:58:5d:10:4d:1a:96:52:50:ba:fc:29:19: 67:be:02:44:0c:a7:32:77:db:8e:de:e1:6d:ab:3b: 03:00:42:96:a1:eb:86:a7:e0:f6:b6:c2:65:7e:b8: 0c:6c:69:02:b2:8d:6f:70:a4:4e:c9:d8:d9:1d:d1: 0e:93:19:f9:8a:20:ff:16:a5:70:58:04:36:d2:02: 53:ab:36:db:61:68:00:bd:9f:e3:ed:d2:11:dd:01: 5d:ac:ed:ce:27:1f:ec:f2:9c:3c:83:07:06:3f:b9: 43:bd:0e:63:20:d7:ef:a9:8e:fd:89:26:91:e7:7d: 74:b6:e6:dc:ef:20:03:0d:b4:a5:5c:13:78:96:2a: 65:85:09:80:34:4a:fb:37:24:01:68:71:b3:b0:b5: 89:3f:5d:23:35:b5:87:ab:dd:37:b5:d2:c2:06:c0: 38:e7:ea:84:17:00:2d:8d:5b:a4:fb:b9:78:34:51: af:a9:98:b6:5f:3b:c6:95:ce:ea:5c:2b:ed:7e:41: d7:80:5d:b7:b9:23:fd:22:9d:17:53:22:33:a8:4f: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F7:C4:E6:41:23:49:C1:AA:92:03:4B:8E:9E:30:B7:2D:67:1F:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/ac44b651-6e22-3ddf-9e0c-9adc285e0e18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4c:04:95:70:ed:bb:94:ca:e9:59:58:ae:14:3d:4f:95:39: 08:e1:43:09:6f:f0:cb:0a:cc:5b:9e:6c:7b:5e:e3:64:c1:30: 72:7d:45:c9:89:d2:e6:88:d2:31:cd:3e:51:93:b0:cb:be:a1: df:f4:ed:25:66:7b:42:4f:8c:f0:22:a3:4e:91:12:7b:26:ab: 63:f5:a0:5f:84:dd:eb:9e:3c:21:e5:06:7f:b5:8b:70:58:dd: ae:1a:3e:f7:86:01:45:16:24:b6:fc:74:0e:1c:41:3f:df:d3: 47:59:d1:0b:92:6f:d2:4c:98:f3:8f:f5:3e:b8:91:63:0e:e7: 4a:2c:9d:ab:4b:60:6c:40:8e:23:0e:66:5a:fc:e4:96:5e:cd: fd:39:a6:52:69:22:b8:ae:b1:ee:f4:20:92:57:60:c8:45:64: f3:50:cb:be:53:d7:8f:94:3c:94:99:e8:e3:a4:b8:ae:a7:bb: 8f:00:c3:af:f3:74:06:eb:2d:e9:69:89:1a:ba:f5:58:a2:bc: 39:94:78:1b:2d:99:8a:0f:3e:ac:d0:36:83:81:c6:00:c4:d9: 36:ba:37:fa:e1:92:12:d9:d0:ba:85:3c:f3:38:0b:e3:cd:56: 91:2a:d0:5b:f4:9c:82:e6:55:33:88:2a:c8:88:fa:e5:13:20: 76:76:b5:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlZcRYq12wlyFiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk NzFjODk2NDAtYjMzMy00MTdhLWI4ZDktYmI5MjJmNTllZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjofks+LwNq2BINvTHg5YWbCDASeIwXQog63w ETTSbK1QwN6NsT1O8PSAMV3NCHpYXRBNGpZSULr8KRlnvgJEDKcyd9uO3uFtqzsD AEKWoeuGp+D2tsJlfrgMbGkCso1vcKROydjZHdEOkxn5iiD/FqVwWAQ20gJTqzbb YWgAvZ/j7dIR3QFdrO3OJx/s8pw8gwcGP7lDvQ5jINfvqY79iSaR5310tubc7yAD DbSlXBN4liplhQmANEr7NyQBaHGzsLWJP10jNbWHq903tdLCBsA45+qEFwAtjVuk +7l4NFGvqZi2XzvGlc7qXCvtfkHXgF23uSP9Ip0XUyIzqE9QpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb3xOZBI0nBqpIDS46eMLctZx/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYWM0NGI2NTEtNmUyMi0z ZGRmLTllMGMtOWFkYzI4NWUwZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9MBJVw7buUyulZWK4UPU+VOQjhQwlv8MsKzFuebHte42TBMHJ9RcmJ 0uaI0jHNPlGTsMu+od/07SVme0JPjPAio06REnsmq2P1oF+E3euePCHlBn+1i3BY 3a4aPveGAUUWJLb8dA4cQT/f00dZ0QuSb9JMmPOP9T64kWMO50osnatLYGxAjiMO Zlr85JZezf05plJpIriuse70IJJXYMhFZPNQy75T14+UPJSZ6OOkuK6nu48Aw6/z dAbrLelpiRq69ViivDmUeBstmYoPPqzQNoOBxgDE2Ta6N/rhkhLZ0LqFPPM4C+PN VpEq0Fv0nILmVTOIKsiI+uUTIHZ2tbU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:38:34 2026 by rpki-client