This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa File: def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json) Hash identifier: xHemRA0qHksORPgqaDGIxiR6f8Zkc0oSbGaWJ7+80q4= Subject key identifier: 39:6A:EE:2E:6E:54:FA:17:46:BC:DD:38:8F:F2:56:B6:2C:7D:29:05 Certificate issuer: /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Certificate serial: 010D0C9F4328584C8046CC3188D0061C96D16580 Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 16509 IP address blocks: 143.220.144.0/23 maxlen: 23 143.220.146.0/23 maxlen: 23 143.220.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:cc:31:88:d0:06:1c:96:d1:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=b95846e2-93e6-4c45-b10d-93febb62e852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b2:b9:f7:4b:0e:72:4f:96:96:7d:00:36:c2: 42:20:ca:e4:9c:52:82:59:8b:4a:ee:84:0d:bd:06: be:c0:31:1f:50:19:48:97:26:eb:b9:4d:4b:74:7e: 88:2b:67:94:1b:a6:58:99:87:d7:80:b2:22:07:6a: 7c:51:6a:bc:0a:5b:c9:ed:23:11:27:8d:b3:70:96: bc:7a:0f:d2:48:1e:48:78:9d:ca:03:68:cc:ae:fb: eb:1a:1a:ed:04:ea:59:80:ae:a3:4b:60:8c:79:a0: 14:8a:dd:75:ce:cd:58:69:47:21:8b:23:38:c5:7a: 46:9e:52:bd:2f:bc:b7:b9:6a:32:34:fb:0d:b9:68: b0:5f:03:cb:f7:bc:17:b1:4d:dd:cd:56:aa:38:63: ba:a9:9f:0d:08:6e:46:43:dd:37:a9:75:65:da:b2: 88:b3:8b:aa:40:a6:9b:24:47:97:48:ba:5b:76:03: 67:03:0d:c5:44:77:98:e7:f7:01:fb:38:d7:d1:0f: dc:48:9c:45:bf:b6:e6:ae:20:6f:dc:b4:ab:63:90: ab:8b:2e:dd:47:62:f6:dc:21:08:6c:75:09:7b:87: 22:7b:6d:27:3b:16:7a:e1:46:e7:3d:55:9b:17:30: 61:52:1c:4b:7c:3f:f0:67:d4:b8:a1:a3:ef:8c:11: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6A:EE:2E:6E:54:FA:17:46:BC:DD:38:8F:F2:56:B6:2C:7D:29:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl X509v3 Authority Key Identifier: keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer sbgp-ipAddrBlock: critical IPv4: 143.220.144.0-143.220.149.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:08:7f:42:7a:d1:11:b9:5c:17:54:26:e7:98:6a:af:e3:e0: 97:0b:23:09:bb:2f:32:5f:56:7f:30:2f:4a:02:1b:d2:bb:22: c1:b7:3d:4d:3b:b7:cc:dc:3c:5c:d0:72:a1:e9:26:72:83:b1: 3b:4d:57:38:2a:33:c1:67:09:af:82:a2:6a:ea:90:fc:90:67: bc:55:c9:99:72:f6:0d:95:fd:e5:2a:e8:d7:b9:da:fd:31:e2: 4d:30:bb:ff:93:03:6d:d4:c5:15:f4:8d:52:48:ce:24:3d:af: 75:74:d9:96:ad:e5:6c:47:ac:7f:7e:88:35:a7:9b:d2:30:94: 87:5d:47:9e:15:49:bd:c1:41:f5:bd:6b:f9:66:bc:c4:4e:04: 99:8e:e7:7b:00:38:c8:90:77:d7:e7:79:56:36:d6:b4:0d:75: eb:b7:ff:f3:81:f3:20:dc:41:e9:e4:ab:e8:d4:50:cc:cb:4e: 55:25:ed:2e:2c:09:c9:ea:0c:25:e6:f5:5a:ba:6b:b2:71:b3: 07:f4:cb:59:9e:80:b1:cb:e8:d5:58:b1:7d:07:1d:5f:bd:83: c5:0d:92:d5:a1:a9:bc:90:64:61:2f:67:ee:48:8d:61:80:59: be:61:cf:98:5b:ca:74:5d:55:ed:49:6b:ab:ed:97:79:3b:bd: b5:b9:db:cd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEyARswxiNAGHJbRZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ExYzM0YzgtMGU1OS00ZTYxLTgwY2YtMTdhMTg1ZjI3 ODliMB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk Yjk1ODQ2ZTItOTNlNi00YzQ1LWIxMGQtOTNmZWJiNjJlODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLK590sOck+Wln0ANsJCIMrknFKCWYtK7oQN vQa+wDEfUBlIlybruU1LdH6IK2eUG6ZYmYfXgLIiB2p8UWq8ClvJ7SMRJ42zcJa8 eg/SSB5IeJ3KA2jMrvvrGhrtBOpZgK6jS2CMeaAUit11zs1YaUchiyM4xXpGnlK9 L7y3uWoyNPsNuWiwXwPL97wXsU3dzVaqOGO6qZ8NCG5GQ903qXVl2rKIs4uqQKab JEeXSLpbdgNnAw3FRHeY5/cB+zjX0Q/cSJxFv7bmriBv3LSrY5Criy7dR2L23CEI bHUJe4cie20nOxZ64UbnPVWbFzBhUhxLfD/wZ9S4oaPvjBHRUQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDlq7i5uVPoXRrzdOI/yVrYsfSkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFj MzRjOC0wZTU5LTRlNjEtODBjZi0xN2ExODVmMjc4OWIvZGVmMjFkMjktM2M1Ny0z NDA3LWEzZjItOThmMjFkMDI2MDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ExYzM0YzgtMGU1OS00ZTYxLTgw Y2YtMTdhMTg1ZjI3ODliLzNhMWMzNGM4LTBlNTktNGU2MS04MGNmLTE3YTE4NWYy Nzg5Yi5jcmwwHwYDVR0jBBgwFoAUWVQJCmNe+FhlG1jGHsRQFS8LWhwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYTFjMzRjOC0wZTU5LTRlNjEtODBjZi0xN2Ex ODVmMjc4OWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASP3JAD BAGP3JQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAYwh/QnrREblcF1Qm55hqr+PglwsjCbsvMl9WfzAvSgIb 0rsiwbc9TTu3zNw8XNByoekmcoOxO01XOCozwWcJr4KiauqQ/JBnvFXJmXL2DZX9 5Sro17na/THiTTC7/5MDbdTFFfSNUkjOJD2vdXTZlq3lbEesf36INaeb0jCUh11H nhVJvcFB9b1r+Wa8xE4EmY7newA4yJB31+d5VjbWtA1167f/84HzINxB6eSr6NRQ zMtOVSXtLiwJyeoMJeb1WrprsnGzB/TLWZ6Ascvo1VixfQcdX72DxQ2S1aGpvJBk YS9n7kiNYYBZvmHPmFvKdF1V7Ulrq+2XeTu9tbnbzQ== -----END CERTIFICATE-----Generated at Sun Jan 25 09:54:23 2026 by rpki-client