This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa File: f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa (raw, json) Hash identifier: okIifbTlkUHEcfHPjgvqIjHyATkV3FUX0ZgYdZZhyxs= Subject key identifier: 2A:1C:EC:3D:A7:1F:49:59:45:DD:AB:DB:EA:3F:04:6E:C6:64:98:65 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584C4E067C82FAAAE6E05E1B0D28 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 46188 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:7c:82:fa:aa:e6:e0:5e:1b:0d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=65e4d7a9-02e1-4be5-a1f7-85e954788289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cb:0c:8e:3c:0a:9d:7c:36:44:b5:b0:c4:7d: b6:04:d5:af:43:58:25:25:72:d3:75:b9:14:e8:55: 31:81:9a:a7:3d:4c:e7:db:8f:2c:19:d2:4b:20:4f: d2:5a:36:ab:82:33:48:16:ce:12:2b:05:0a:cb:09: 92:b1:c3:b9:c8:19:fe:a6:ab:3c:f4:89:94:d5:b7: 0e:d6:e4:b6:9a:02:b9:b3:4f:18:01:c1:eb:55:e0: 7a:2c:69:3f:dc:bf:79:fc:1e:c8:4e:12:7b:f5:a4: 20:5f:a0:19:ad:33:ab:33:11:73:5e:ad:55:61:38: a2:fe:c6:d7:2a:d4:4d:52:93:dc:12:de:a5:4e:62: 48:85:5f:4b:99:01:37:0a:1b:24:5b:24:30:1f:94: 7d:6e:24:b5:39:f1:13:4e:d5:3c:0c:fc:5c:9a:37: 9b:22:15:3c:1e:83:88:91:78:56:e7:26:e4:5f:9c: 67:c9:f7:98:d7:b1:d9:e6:f9:43:28:da:44:d6:2a: 59:ce:75:d5:0d:2b:2c:8f:58:84:07:75:77:b7:bd: b6:79:f3:7e:9c:29:6c:b4:b9:bd:19:96:c9:41:ef: 8b:9f:ab:e6:7e:49:33:82:4d:4f:33:6a:f3:45:1f: d7:9f:b3:9b:62:e4:7b:0a:1f:d0:26:07:76:5c:31: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1C:EC:3D:A7:1F:49:59:45:DD:AB:DB:EA:3F:04:6E:C6:64:98:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1f:dd:8d:ca:ad:17:4c:c9:d1:78:a9:86:58:e8:d5:e6:dc: 58:e2:4d:af:4f:99:a8:0a:34:03:75:42:99:ea:1b:89:c0:f9: 47:79:2f:a0:0b:69:43:4c:d3:65:b1:a7:15:a4:08:96:dd:f7: d2:5e:0b:f9:75:6b:ba:f6:0f:95:cc:43:36:3c:6a:e6:79:bb: 7d:8f:31:ac:96:ac:9e:9c:5b:3c:67:96:74:e5:17:62:8d:19: c2:70:77:f4:4b:64:7c:90:c8:30:d9:f2:36:a7:57:28:e9:1f: fc:70:70:bf:d8:e8:db:c8:19:5f:60:f9:a5:e5:41:fa:7f:04: 08:2e:a5:00:47:a7:58:0b:25:eb:90:18:44:c9:2b:90:5f:c2: a0:74:35:71:40:3f:22:7c:77:31:d8:7c:90:5d:dc:5f:6e:ad: 24:9b:2b:d3:86:9d:8b:29:bf:c6:21:04:46:49:83:20:5b:5a: c9:bc:72:20:6c:5d:64:c3:35:17:ec:a9:ef:46:25:c4:a0:f9: f2:45:1a:25:57:9a:51:9d:50:a7:ff:90:d2:6d:98:41:f7:c8: c7:39:d2:94:79:86:6c:0c:83:2d:be:77:14:20:25:d3:11:5a: 2f:65:85:04:57:5d:cd:3b:6f:db:bb:c3:80:98:b0:2d:22:2c: fa:d4:b4:ff -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWExOBnyC+qrm4F4bDSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk NjVlNGQ3YTktMDJlMS00YmU1LWExZjctODVlOTU0Nzg4Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8sMjjwKnXw2RLWwxH22BNWvQ1glJXLTdbkU 6FUxgZqnPUzn248sGdJLIE/SWjargjNIFs4SKwUKywmSscO5yBn+pqs89ImU1bcO 1uS2mgK5s08YAcHrVeB6LGk/3L95/B7IThJ79aQgX6AZrTOrMxFzXq1VYTii/sbX KtRNUpPcEt6lTmJIhV9LmQE3ChskWyQwH5R9biS1OfETTtU8DPxcmjebIhU8HoOI kXhW5ybkX5xnyfeY17HZ5vlDKNpE1ipZznXVDSssj1iEB3V3t722efN+nClstLm9 GZbJQe+Ln6vmfkkzgk1PM2rzRR/Xn7ObYuR7Ch/QJgd2XDGWTwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCoc7D2nH0lZRd2r2+o/BG7GZJhlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvZjJhOGUyYmQtYmE0ZS0z MjA5LWIzMTUtMTgyM2ViYjQwM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAsf3Y3KrRdMydF4qYZY6NXm3FjiTa9PmagKNAN1 QpnqG4nA+Ud5L6ALaUNM02WxpxWkCJbd99JeC/l1a7r2D5XMQzY8auZ5u32PMayW rJ6cWzxnlnTlF2KNGcJwd/RLZHyQyDDZ8janVyjpH/xwcL/Y6NvIGV9g+aXlQfp/ BAgupQBHp1gLJeuQGETJK5BfwqB0NXFAPyJ8dzHYfJBd3F9urSSbK9OGnYspv8Yh BEZJgyBbWsm8ciBsXWTDNRfsqe9GJcSg+fJFGiVXmlGdUKf/kNJtmEH3yMc50pR5 hmwMgy2+dxQgJdMRWi9lhQRXXc07b9u7w4CYsC0iLPrUtP8= -----END CERTIFICATE-----Generated at Sun Jan 25 14:22:56 2026 by rpki-client