This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa File: 00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json) Hash identifier: /b56+KwO0D9/3oNrc8xhSBd12WUTpSU3s5/Jv1XjAzQ= Subject key identifier: 29:5C:DA:F9:D1:70:96:E1:DD:AA:E2:22:E2:80:1B:76:E1:D3:C9:15 Certificate issuer: /CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Certificate serial: 010D0C9F4328584C5666DF21570F44189A1106C0 Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 46595 IP address blocks: 209.169.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:df:21:57:0f:44:18:9a:11:06:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=cfd08d04-b8a0-4088-9ccb-3cb796605d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:2f:af:50:1f:71:d3:fe:03:06:02:85:18: 94:85:64:88:6d:e6:e6:aa:06:1d:5a:a1:69:3d:92: 2b:e1:ec:d8:4f:f6:d8:38:dc:7b:4b:ba:25:9a:a0: 66:41:c4:d0:28:95:23:35:85:72:6c:38:87:c8:14: 20:9d:62:5f:f2:f3:10:6c:72:d7:d8:c2:41:37:d7: 46:b8:36:2d:d2:69:f8:b2:dc:e7:80:63:4e:f7:fe: dc:13:01:ae:3a:bc:01:83:07:00:01:64:8b:2f:56: b5:11:63:54:54:2b:de:dc:70:25:4b:5c:eb:f2:fb: 1d:ad:a5:04:88:f0:c4:cb:26:55:8b:e7:e6:40:62: 81:9e:35:6b:ba:73:60:52:e7:51:ab:5b:c9:81:26: c8:02:5f:23:d2:88:8d:93:df:96:0c:bb:eb:8f:63: 57:a9:49:c5:1a:c7:33:dc:15:dd:12:a7:bb:b1:47: d3:a2:c3:c9:f1:53:22:1d:c1:96:c1:5a:72:15:8e: ff:f1:8a:e1:46:b3:e2:67:bc:11:94:d8:4d:3c:03: 01:75:3b:6c:23:01:db:12:f0:99:3b:b3:d8:7c:ba: a6:e6:f7:21:c8:0f:de:d6:10:8c:3c:d8:30:16:ce: 3f:ba:7b:6c:0f:fc:e0:82:d8:06:ad:aa:d9:8a:bb: b4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:DA:F9:D1:70:96:E1:DD:AA:E2:22:E2:80:1B:76:E1:D3:C9:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl X509v3 Authority Key Identifier: keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer sbgp-ipAddrBlock: critical IPv4: 209.169.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:40:14:7a:48:a3:21:62:b4:a5:79:5c:3d:37:ca:80:16:a7: 2f:60:b9:d7:a5:69:0d:bc:ad:6b:a9:1e:3c:97:8e:f7:44:1a: 69:9c:06:2e:0c:a3:82:21:de:13:70:3a:38:ba:83:a3:27:83: cf:20:2e:e1:9d:8e:e6:26:53:49:c2:df:e9:56:12:d6:c7:58: dd:f1:59:32:37:bb:9f:8f:87:ba:10:c7:ea:4c:06:27:ae:f8: 5f:71:b9:14:62:d8:99:57:83:d9:33:97:9d:ce:e5:50:4a:78: 46:dc:f9:08:a8:d1:33:64:c3:5e:4b:63:8e:89:3f:ae:2c:7b: 2f:50:dd:bf:65:43:da:90:fd:0c:9c:8b:fb:24:d4:e8:b0:a9: 74:b3:88:c5:38:2f:ef:75:d2:20:69:fa:64:55:8b:8b:6b:41: 6f:f5:78:27:f6:11:8e:d2:1c:32:70:25:62:ec:13:60:98:60: 97:dd:a2:8c:f7:e8:66:2f:78:d4:37:f3:14:de:3d:20:c3:1c: 10:9e:84:5a:d7:34:b9:9e:39:d0:98:bc:9e:cb:d4:44:16:3c: f6:d3:c4:e7:ed:1b:1e:e7:1a:46:7d:ae:89:ce:ed:a4:3c:3c: e8:cb:ef:9f:af:e2:fb:c8:aa:c2:4b:43:4b:19:3f:75:28:cf: 2e:36:41:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZt8hVw9EGJoRBsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTkxZmZmMTItZjc0ZC00YTgwLTlhNWQtZjIyNTUzNGJj NTI3MB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk Y2ZkMDhkMDQtYjhhMC00MDg4LTljY2ItM2NiNzk2NjA1ZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjovr1AfcdP+AwYChRiUhWSIbebmqgYdWqFp PZIr4ezYT/bYONx7S7olmqBmQcTQKJUjNYVybDiHyBQgnWJf8vMQbHLX2MJBN9dG uDYt0mn4stzngGNO9/7cEwGuOrwBgwcAAWSLL1a1EWNUVCve3HAlS1zr8vsdraUE iPDEyyZVi+fmQGKBnjVrunNgUudRq1vJgSbIAl8j0oiNk9+WDLvrj2NXqUnFGscz 3BXdEqe7sUfTosPJ8VMiHcGWwVpyFY7/8YrhRrPiZ7wRlNhNPAMBdTtsIwHbEvCZ O7PYfLqm5vchyA/e1hCMPNgwFs4/untsD/zggtgGrarZiru0mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClc2vnRcJbh3ariIuKAG3bh08kVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFm ZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1NTM0YmM1MjcvMDBkNDhhMjUtMDI5Mi0z OTBiLTg3NzEtYjY0YWQ5YmVjY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTkxZmZmMTItZjc0ZC00YTgwLTlh NWQtZjIyNTUzNGJjNTI3L2E5MWZmZjEyLWY3NGQtNGE4MC05YTVkLWYyMjU1MzRi YzUyNy5jcmwwHwYDVR0jBBgwFoAUArhCAeKkLoXp5IhjfTqSng/BxOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hOTFmZmYxMi1mNzRkLTRhODAtOWE1ZC1mMjI1 NTM0YmM1MjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0akAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZAFHpIoyFitKV5XD03yoAWpy9gudelaQ28rWupHjyXjvdEGmmcBi4M o4Ih3hNwOji6g6Mng88gLuGdjuYmU0nC3+lWEtbHWN3xWTI3u5+Ph7oQx+pMBieu +F9xuRRi2JlXg9kzl53O5VBKeEbc+Qio0TNkw15LY46JP64sey9Q3b9lQ9qQ/Qyc i/sk1OiwqXSziMU4L+910iBp+mRVi4trQW/1eCf2EY7SHDJwJWLsE2CYYJfdooz3 6GYveNQ38xTePSDDHBCehFrXNLmeOdCYvJ7L1EQWPPbTxOftGx7nGkZ9ronO7aQ8 POjL75+v4vvIqsJLQ0sZP3Uozy42Qck= -----END CERTIFICATE-----Generated at Sun Jan 25 08:27:22 2026 by rpki-client