This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa File: b1e66ddd-f5af-39e8-93f9-c38eff664429.roa (raw, json) Hash identifier: 1ZSzFBblyiRLtcdIJjHOB14Va5fGQGqiLqlyS8F2bxA= Subject key identifier: 20:73:5C:11:48:BA:4C:26:5C:50:70:1D:44:85:DB:48:89:AE:C7:9B Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C4176585C082AEEF31B757C40 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 213122 IP address blocks: 128.254.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:58:5c:08:2a:ee:f3:1b:75:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=e6c590c8-062e-427d-90cf-40ffc1c88981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:af:86:de:b1:82:36:09:4e:41:6a:18:06:e3: 3a:18:a9:7d:23:83:bf:5b:e8:b2:44:5d:84:14:c6: 94:78:af:8b:a8:75:56:2e:34:25:83:26:53:b7:16: 5b:76:87:5b:58:85:62:43:28:24:16:f0:2e:35:4c: 70:6b:22:9e:48:8d:dc:81:74:13:4b:bb:43:62:e1: 32:6c:ef:cc:56:93:9c:51:79:cd:f8:ef:78:41:c2: 12:6d:2a:ef:e2:61:27:ad:dd:25:cd:bf:f7:4a:fd: 4f:e3:70:f5:d3:87:e3:8b:79:13:cc:d7:1e:71:54: 95:37:48:6f:ce:f8:78:74:e1:8a:ea:15:3c:dd:c8: ff:f7:40:f4:33:d2:53:27:47:2e:16:c5:b8:7a:2b: 7e:1d:70:c5:98:d4:cb:12:8f:16:9d:a2:21:03:49: 45:90:c9:63:f7:73:44:bd:31:38:50:ec:10:22:b7: 76:d9:18:50:55:14:57:07:92:42:07:f3:93:37:0f: ec:3a:f3:09:b6:43:8d:80:20:93:65:90:7c:29:ed: 27:e1:a7:a4:24:01:6b:f5:49:ff:56:3c:da:61:70: df:25:48:75:59:60:79:9d:aa:66:1c:89:2a:ee:03: b1:cb:bd:25:67:12:d5:f4:83:f6:fd:dc:2f:eb:28: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:73:5C:11:48:BA:4C:26:5C:50:70:1D:44:85:DB:48:89:AE:C7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/b1e66ddd-f5af-39e8-93f9-c38eff664429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 128.254.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fc:aa:bf:aa:67:6c:47:51:ba:5e:92:99:d3:59:3b:71:2d: 38:37:97:5e:16:86:71:84:8e:63:26:37:7c:55:73:63:c1:86: 05:5f:b3:06:86:59:94:34:cf:44:a1:0d:18:67:6f:60:f1:a5: 93:1a:21:33:7b:b1:62:c9:53:ac:f5:ed:7b:2d:7a:39:97:40: db:39:5f:5e:b2:3c:81:f7:f5:b2:d2:55:73:f3:95:3d:4a:c5: 3a:c0:af:21:99:76:e5:02:aa:4a:2b:5d:4a:6c:a5:a8:e3:93: c6:82:4d:08:d7:36:e2:18:94:10:01:b9:26:46:dd:8e:56:3c: 47:51:1d:cf:8a:e3:d2:2e:fa:11:3f:71:8b:93:31:e0:f0:39: 68:ea:2e:7f:0a:42:46:34:89:e5:3d:01:3f:4c:65:57:f1:7e: ae:1e:33:67:0f:2c:0e:60:43:8f:a6:92:a8:9d:ae:a4:86:61: bb:db:22:13:0d:49:b9:30:7e:89:20:4c:04:4a:41:4f:e0:00: ca:56:9f:05:21:0a:5d:b7:c3:65:25:e0:35:de:b2:03:c7:6c: 89:4f:a9:8e:3f:6e:d0:e3:81:a9:55:f8:77:dc:59:9b:09:1f: 07:5b:5a:17:c5:5e:e2:f8:5e:4d:72:da:0f:40:f0:2d:52:4c: 06:a3:9a:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlhcCCru8xt1fEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk ZTZjNTkwYzgtMDYyZS00MjdkLTkwY2YtNDBmZmMxYzg4OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja+G3rGCNglOQWoYBuM6GKl9I4O/W+iyRF2E FMaUeK+LqHVWLjQlgyZTtxZbdodbWIViQygkFvAuNUxwayKeSI3cgXQTS7tDYuEy bO/MVpOcUXnN+O94QcISbSrv4mEnrd0lzb/3Sv1P43D104fji3kTzNcecVSVN0hv zvh4dOGK6hU83cj/90D0M9JTJ0cuFsW4eit+HXDFmNTLEo8WnaIhA0lFkMlj93NE vTE4UOwQIrd22RhQVRRXB5JCB/OTNw/sOvMJtkONgCCTZZB8Ke0n4aekJAFr9Un/ VjzaYXDfJUh1WWB5napmHIkq7gOxy70lZxLV9IP2/dwv6yjz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBzXBFIukwmXFBwHUSF20iJrsebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvYjFlNjZkZGQtZjVhZi0z OWU4LTkzZjktYzM4ZWZmNjY0NDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz8qr+qZ2xHUbpekpnTWTtxLTg3l14WhnGEjmMmN3xVc2PBhgVfswaG WZQ0z0ShDRhnb2DxpZMaITN7sWLJU6z17XstejmXQNs5X16yPIH39bLSVXPzlT1K xTrAryGZduUCqkorXUpspajjk8aCTQjXNuIYlBABuSZG3Y5WPEdRHc+K49Iu+hE/ cYuTMeDwOWjqLn8KQkY0ieU9AT9MZVfxfq4eM2cPLA5gQ4+mkqidrqSGYbvbIhMN SbkwfokgTARKQU/gAMpWnwUhCl23w2Ul4DXesgPHbIlPqY4/btDjgalV+HfcWZsJ HwdbWhfFXuL4Xk1y2g9A8C1STAajmio= -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:36 2026 by rpki-client