This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa File: 714ca7b2-f876-35db-9239-9283a111da5a.roa (raw, json) Hash identifier: s0gQNw2xIs5TzrX0uFdl2Kzdc2wUGPMnaweyyhvm56s= Subject key identifier: 18:A0:12:D9:06:55:A0:73:89:A9:79:6B:0F:3B:20:E1:9C:69:8E:28 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584C8741979969BD82B1D5A6A300 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:97:99:69:bd:82:b1:d5:a6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=6643c7a4-6285-4e8d-b06f-3be3f5ea51c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:52:ce:51:a5:27:37:e9:93:1e:ab:6c:a6:84: cd:4d:1f:ec:b6:0a:76:5d:f5:be:62:23:24:f0:64: 79:4b:5b:ae:12:5e:2a:c0:64:b6:56:00:5c:a1:ce: da:f7:7e:a4:df:c1:01:58:3c:7b:38:e2:46:02:a4: dc:8f:6b:86:ab:d0:83:a0:bb:c9:74:f7:20:32:04: b6:01:84:76:9f:48:d1:71:af:54:82:c7:8b:44:a5: 0c:5a:51:2d:72:94:58:c1:3e:3a:69:2d:9b:4e:78: 51:4a:a3:93:2e:0b:ee:3d:a5:60:9b:46:1b:92:fc: 8a:c5:76:39:a2:7a:26:8e:b3:41:6a:cb:84:63:37: 83:5f:47:1c:20:ae:ba:d5:d9:83:44:92:61:03:d9: 0f:16:ce:b6:50:c0:66:9c:45:79:06:0c:f9:bd:de: 21:34:18:9c:27:43:d3:f9:14:82:93:4d:f8:16:d6: 93:f9:9a:c7:44:a8:25:84:be:4d:5b:40:b6:80:d6: e1:64:ab:89:92:95:1e:0e:db:2c:ea:2a:77:32:c7: 92:d1:0b:fb:45:50:4f:80:a3:94:ca:44:1d:ce:2d: 9c:1d:44:06:ea:1c:b3:be:9c:80:d7:ed:6c:65:98: 71:5b:23:30:b1:e7:aa:06:1d:b0:37:0b:a4:a0:6f: d4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A0:12:D9:06:55:A0:73:89:A9:79:6B:0F:3B:20:E1:9C:69:8E:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f6:b4:95:c9:57:23:19:47:0e:ef:46:f1:d1:87:9f:37:30: 64:21:38:c9:6a:ff:44:7e:c9:bc:ab:08:6d:9d:08:99:13:45: bd:83:67:20:89:ed:7b:4c:18:88:52:e8:4d:f4:5f:12:25:3d: a2:3f:df:34:ec:a6:51:ca:0c:d1:46:ca:ba:5b:71:f6:44:ce: ae:d1:36:40:8e:b6:0e:9d:03:71:42:db:9b:47:f1:c0:06:fe: ab:18:40:e0:65:c5:fd:32:f2:f4:3b:44:02:2d:f2:01:49:7e: 62:71:94:9a:ea:ea:ed:2a:1c:02:c3:11:ed:0b:9e:0d:9d:45: 39:f8:e5:27:68:07:57:52:00:4c:4c:2f:3a:3f:84:0e:0f:5b: 0c:df:00:db:57:2b:7c:b9:7f:64:66:87:08:17:7b:3a:c9:35: 27:fd:2e:16:a0:00:8d:3f:97:cd:46:4d:fd:db:e5:4f:0e:15: da:f0:fe:c4:56:85:9b:31:d1:99:80:fe:6c:aa:4b:d5:96:66: 8a:06:07:8c:0c:05:7a:1d:14:d8:90:51:dc:72:03:8e:ca:b1: a7:b3:f8:2d:c8:c4:b7:2d:c7:68:7b:e6:49:3f:b4:e7:b8:60: 0e:98:4f:2e:4b:20:a5:4c:6e:a7:10:13:d9:75:36:26:f5:9c: 8d:49:61:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQZeZab2CsdWmowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk NjY0M2M3YTQtNjI4NS00ZThkLWIwNmYtM2JlM2Y1ZWE1MWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFLOUaUnN+mTHqtspoTNTR/stgp2XfW+YiMk 8GR5S1uuEl4qwGS2VgBcoc7a936k38EBWDx7OOJGAqTcj2uGq9CDoLvJdPcgMgS2 AYR2n0jRca9UgseLRKUMWlEtcpRYwT46aS2bTnhRSqOTLgvuPaVgm0YbkvyKxXY5 onomjrNBasuEYzeDX0ccIK661dmDRJJhA9kPFs62UMBmnEV5Bgz5vd4hNBicJ0PT +RSCk034FtaT+ZrHRKglhL5NW0C2gNbhZKuJkpUeDtss6ip3MseS0Qv7RVBPgKOU ykQdzi2cHUQG6hyzvpyA1+1sZZhxWyMwseeqBh2wNwukoG/UAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBigEtkGVaBzial5aw87IOGcaY4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzE0Y2E3YjItZjg3Ni0z NWRiLTkyMzktOTI4M2ExMTFkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD2tJXJVyMZRw7vRvHRh583MGQhOMlq/0R+ybyrCG2dCJkTRb2DZyCJ 7XtMGIhS6E30XxIlPaI/3zTsplHKDNFGyrpbcfZEzq7RNkCOtg6dA3FC25tH8cAG /qsYQOBlxf0y8vQ7RAIt8gFJfmJxlJrq6u0qHALDEe0Lng2dRTn45SdoB1dSAExM Lzo/hA4PWwzfANtXK3y5f2RmhwgXezrJNSf9LhagAI0/l81GTf3b5U8OFdrw/sRW hZsx0ZmA/myqS9WWZooGB4wMBXodFNiQUdxyA47Ksaez+C3IxLctx2h75kk/tOe4 YA6YTy5LIKVMbqcQE9l1Nib1nI1JYSQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:11:56 2026 by rpki-client