This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: v6t8ZboKoJW/PZe6NJlHu+2IgOv/oHr0yclYJZHMYUI= Subject key identifier: EB:50:22:B1:2F:63:22:24:9D:AD:25:B3:2B:24:E4:6E:D8:66:09:C7 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584C4E06ADCBDC2133D5686D4E00 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:ad:cb:dc:21:33:d5:68:6d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=8a1af577-3dc3-4198-b076-f00b29eb3a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:69:76:6b:e8:0e:75:c5:eb:d1:be:a9:44:c6: e5:77:c1:98:75:76:7a:59:29:1d:9d:8f:62:ee:5c: 07:2a:7a:db:10:67:b2:84:8d:fd:c4:26:08:0b:6a: e9:75:20:12:28:c7:25:75:31:a1:30:42:c5:5b:7b: 48:6d:41:c8:9c:09:43:51:ac:2f:bd:7b:d0:c8:6d: 04:42:b5:1a:27:8b:91:85:0b:df:93:0b:13:f2:73: 4b:3a:2b:79:8f:a3:35:af:bb:6b:b4:60:59:4a:e6: ec:7a:96:af:da:b4:f3:97:1b:78:58:24:34:17:0d: 9f:da:d0:8a:b8:85:e0:39:b0:0d:18:95:6a:69:e3: cc:d1:d0:1f:b6:fb:84:d8:23:5d:91:30:ea:94:a0: 78:1f:96:4b:f6:e4:91:4e:c9:ff:4f:21:7e:78:58: fb:32:27:7b:ec:0f:c3:60:62:68:67:e2:25:e7:ac: 5c:73:7f:07:06:4c:f4:ff:48:04:72:c1:6d:b1:0d: 38:05:65:4f:b7:ff:3a:76:43:db:8a:11:10:f6:7c: 5a:f9:71:0e:d1:0d:d9:6f:8f:59:da:e7:8d:9b:14: 6d:b2:cb:0c:fb:9f:c7:7d:57:04:35:72:b5:f6:c9: e3:7f:b3:f4:ee:ff:da:e3:6f:a8:77:79:20:fa:6c: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:50:22:B1:2F:63:22:24:9D:AD:25:B3:2B:24:E4:6E:D8:66:09:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:58:13:07:3d:cd:a0:0b:73:e1:93:f7:36:8a:3d:7f:62:d7: bf:2a:4b:0f:b4:7b:fb:8a:4f:49:2e:72:46:b2:c0:26:15:b9: 7b:8e:cc:f1:74:95:eb:01:19:21:2d:63:62:5f:0f:92:ab:4d: 0e:54:4f:21:da:36:ce:5a:0f:b7:2a:60:7a:a7:44:1d:5e:c0: 7e:50:e2:aa:a4:6f:25:7f:c8:23:da:71:14:c5:b0:d4:e5:f7: 56:9a:a9:46:ec:6e:28:cc:5a:8a:00:56:48:5f:23:6d:af:a6: a9:dc:a3:0e:df:b3:53:59:5d:42:52:a1:aa:9f:01:cc:8f:1e: df:3d:c8:4e:24:d7:8c:1a:9f:d5:21:4b:e1:23:bc:b6:d3:60: 6d:15:1c:c9:d8:f7:1f:98:6d:27:b0:77:15:13:5c:25:cc:cd: dd:70:81:9c:4c:46:85:11:0a:12:7e:ac:0a:ab:1c:6c:1e:b4: 46:2f:14:a5:d9:3c:a7:db:d7:2c:62:6b:33:76:f4:e5:46:bb: a6:78:4d:0e:4b:86:86:c9:f2:b4:e9:54:cc:c4:23:9f:d7:27: d4:ff:13:17:17:88:bd:c4:c9:50:3f:b9:a6:43:82:70:cf:ae: 28:78:1c:f7:04:30:3f:f6:eb:58:95:30:81:49:c9:25:08:2e: 2f:c9:1b:b5 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWExOBq3L3CEz1WhtTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk OGExYWY1NzctM2RjMy00MTk4LWIwNzYtZjAwYjI5ZWIzYTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGl2a+gOdcXr0b6pRMbld8GYdXZ6WSkdnY9i 7lwHKnrbEGeyhI39xCYIC2rpdSASKMcldTGhMELFW3tIbUHInAlDUawvvXvQyG0E QrUaJ4uRhQvfkwsT8nNLOit5j6M1r7trtGBZSubsepav2rTzlxt4WCQ0Fw2f2tCK uIXgObANGJVqaePM0dAftvuE2CNdkTDqlKB4H5ZL9uSRTsn/TyF+eFj7Mid77A/D YGJoZ+Il56xcc38HBkz0/0gEcsFtsQ04BWVPt/86dkPbihEQ9nxa+XEO0Q3Zb49Z 2ueNmxRtsssM+5/HfVcENXK19snjf7P07v/a42+od3kg+myd+QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFOtQIrEvYyIkna0lsysk5G7YZgnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACpYEwc9zaALc+GT9zaKPX9i178qSw+0e/uKT0ku ckaywCYVuXuOzPF0lesBGSEtY2JfD5KrTQ5UTyHaNs5aD7cqYHqnRB1ewH5Q4qqk byV/yCPacRTFsNTl91aaqUbsbijMWooAVkhfI22vpqncow7fs1NZXUJSoaqfAcyP Ht89yE4k14wan9UhS+EjvLbTYG0VHMnY9x+YbSewdxUTXCXMzd1wgZxMRoURChJ+ rAqrHGwetEYvFKXZPKfb1yxiazN29OVGu6Z4TQ5LhobJ8rTpVMzEI5/XJ9T/ExcX iL3EyVA/uaZDgnDPrih4HPcEMD/261iVMIFJySUILi/JG7U= -----END CERTIFICATE-----Generated at Sun Jan 25 14:27:16 2026 by rpki-client