This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa File: 43b56133-f5e5-3e4f-9019-2f81eabec217.roa (raw, json) Hash identifier: RqgHkdF7WGXKhOK75L56hrDjjupFE+LYOTUa7m4M1Vk= Subject key identifier: 2A:07:D2:A8:76:6D:43:C6:F0:0C:0F:CB:4E:01:10:23:10:38:4E:C8 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584C93D1CF9A8E3C9A17D1BC3E00 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa Signing time: Mon 19 Jan 2026 14:00:38 +0000 ROA not before: Mon 19 Jan 2026 14:00:38 +0000 ROA not after: Sun 19 Apr 2026 13:00:38 +0000 asID: 397223 IP address blocks: 156.154.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:93:d1:cf:9a:8e:3c:9a:17:d1:bc:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Jan 19 14:00:38 2026 GMT Not After : Apr 19 13:00:38 2026 GMT Subject: CN=fab4a40c-1e95-4156-bc9b-1e442f9e8ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:c8:68:5a:3c:3e:9c:a6:86:9c:4b:22:d9: fc:9a:72:ed:be:25:3c:48:92:49:df:e9:97:9e:fd: 85:aa:dc:4c:8e:0a:8f:15:70:0a:63:c0:80:e0:5b: d0:62:52:ac:21:c7:86:93:6c:50:1b:14:37:80:01: 31:be:70:ef:71:f0:11:c5:0b:e8:e1:94:38:20:12: a2:2e:5c:2b:ff:43:6e:3c:1f:0e:ee:7e:32:59:48: 12:ac:97:7b:af:0e:1d:c7:5b:03:d8:12:71:03:75: 49:4b:2e:56:e4:2e:ac:d7:8a:0b:53:12:d4:06:29: 2a:12:75:03:1b:b8:e4:ee:51:66:25:d3:85:b3:6f: 66:7a:e6:f3:a7:4a:43:4f:20:19:f7:e7:6b:e5:50: 71:ae:7d:31:aa:aa:c4:0b:2e:32:78:c5:1d:76:c6: 82:98:f8:21:71:5a:7d:4a:35:bb:df:66:73:99:31: fa:cf:1a:43:ce:ab:9a:a9:3d:c3:ef:3d:5f:ba:d1: fc:71:44:41:23:8f:45:da:b1:e9:11:7a:c2:7b:74: 75:40:ac:09:5d:3d:e9:e2:af:27:79:6d:10:27:51: 13:de:dc:2c:0e:c3:c3:b0:3d:2a:ad:36:f7:a6:08: b7:fb:f4:9e:3f:8c:9d:41:0f:ed:cc:10:95:65:cb: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:07:D2:A8:76:6D:43:C6:F0:0C:0F:CB:4E:01:10:23:10:38:4E:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/43b56133-f5e5-3e4f-9019-2f81eabec217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:96:35:5a:14:0f:11:ff:23:e9:d3:d4:53:3d:61:19:13:bd: 6f:d1:95:b8:85:7f:ba:99:6f:c4:d3:6d:46:4c:7c:73:18:55: 60:bb:08:4b:c6:6a:38:e8:86:4f:a4:6c:a3:13:ef:5d:c8:c4: 7d:7a:e3:e1:8b:cd:fe:7c:9b:7d:62:91:98:50:38:ed:f3:b4: 3f:af:05:46:b9:04:48:ec:cd:f9:ec:7f:ca:e8:6a:9a:ed:b0: 2c:4b:8f:9e:a8:39:2d:fd:37:fb:e8:0d:05:68:d6:3b:14:9d: 20:fc:b8:0e:9c:9c:05:d8:04:03:2e:e8:6b:22:54:9f:08:3b: f3:9a:76:34:b3:c6:40:0e:ca:86:a7:85:0b:b0:3b:a1:46:a4: d6:27:6b:77:5a:3b:6a:c1:df:ce:2e:84:ee:4e:2d:fa:f3:ab: 53:9e:d5:28:0f:f9:e2:6c:28:60:1a:d8:66:5c:65:2b:87:71: d1:b2:b6:db:d9:52:6e:bc:cd:11:b1:f6:c1:4b:7c:3d:c4:8f: f7:bb:67:46:3d:c1:3c:43:dc:c8:50:31:87:67:1d:f1:8e:e4: 30:46:92:8a:f3:f8:31:1e:c1:54:85:ad:36:3d:4f:1d:ed:d1: e8:d8:c3:31:f5:05:1d:e8:7d:89:75:58:25:a2:61:1a:21:8f: e6:76:4e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyT0c+ajjyaF9G8PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI2MDExOTE0MDAzOFoXDTI2MDQxOTEzMDAzOFowLzEtMCsGA1UEAxMk ZmFiNGE0MGMtMWU5NS00MTU2LWJjOWItMWU0NDJmOWU4YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3IaFo8PpymhpxLItn8mnLtviU8SJJJ3+mX nv2FqtxMjgqPFXAKY8CA4FvQYlKsIceGk2xQGxQ3gAExvnDvcfARxQvo4ZQ4IBKi Llwr/0NuPB8O7n4yWUgSrJd7rw4dx1sD2BJxA3VJSy5W5C6s14oLUxLUBikqEnUD G7jk7lFmJdOFs29meubzp0pDTyAZ9+dr5VBxrn0xqqrECy4yeMUddsaCmPghcVp9 SjW732ZzmTH6zxpDzquaqT3D7z1futH8cURBI49F2rHpEXrCe3R1QKwJXT3p4q8n eW0QJ1ET3twsDsPDsD0qrTb3pgi3+/SeP4ydQQ/tzBCVZcvMMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoH0qh2bUPG8AwPy04BECMQOE7IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvNDNiNTYxMzMtZjVlNS0z ZTRmLTkwMTktMmY4MWVhYmVjMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJp9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeWNVoUDxH/I+nT1FM9YRkTvW/RlbiFf7qZb8TTbUZMfHMYVWC7CEvG ajjohk+kbKMT713IxH164+GLzf58m31ikZhQOO3ztD+vBUa5BEjszfnsf8roaprt sCxLj56oOS39N/voDQVo1jsUnSD8uA6cnAXYBAMu6GsiVJ8IO/OadjSzxkAOyoan hQuwO6FGpNYna3daO2rB384uhO5OLfrzq1Oe1SgP+eJsKGAa2GZcZSuHcdGyttvZ Um68zRGx9sFLfD3Ej/e7Z0Y9wTxD3MhQMYdnHfGO5DBGkorz+DEewVSFrTY9Tx3t 0ejYwzH1BR3ofYl1WCWiYRohj+Z2TqU= -----END CERTIFICATE-----Generated at Sun Jan 25 12:41:35 2026 by rpki-client