This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa File: b965c3d1-66ff-3eee-9301-c4150abc9620.roa (raw, json) Hash identifier: 7m5WzONKQDcG+7HAznPDiHxooUBXq6i+gpMnqoDuIYU= Subject key identifier: 67:4A:C8:82:D1:AF:02:D8:6C:8B:25:D6:B9:69:DB:C8:09:19:1B:CB Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584C87419B4700E5AD4D8B2A8AE0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:9b:47:00:e5:ad:4d:8b:2a:8a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=0291c55d-0df9-4764-adf6-e9329f109f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:e5:32:26:4e:8c:81:de:ef:6e:9e:75:d9: 62:14:bd:05:87:8e:40:54:54:9d:83:7e:95:6a:f5: 68:9a:5a:2e:20:ba:bd:8e:6d:89:b6:2f:f3:c3:e1: 8e:a8:0c:e2:56:db:64:91:59:6b:f4:71:e9:67:66: 9a:19:e7:33:64:79:0f:12:4d:7c:d4:8e:af:73:6b: 56:c4:8c:30:84:1d:fe:b7:ec:70:70:52:6a:07:07: 7b:40:2c:46:be:86:f4:eb:26:56:3c:5b:c0:2d:4a: 68:f5:af:b5:dd:55:e7:f2:4c:05:e3:69:78:f6:b4: 2a:d6:a6:cf:80:c0:9f:10:dc:84:fe:5c:a3:d1:fe: db:a2:3c:c4:0d:3e:0c:d2:f3:3c:66:56:dc:9a:15: 16:92:7f:cc:c2:86:9c:b2:89:aa:44:84:6d:79:4b: af:f6:2d:2d:41:fa:71:f1:b6:2a:7f:e5:2c:fa:41: 0a:a8:6e:9c:23:a7:7e:5d:a4:71:c1:23:df:9b:d7: e4:86:d3:c1:b2:3c:60:2b:ef:50:26:53:3c:69:39: 4f:b0:cf:fe:8c:df:be:4b:d7:07:18:50:ad:41:5e: 7d:bb:2f:cf:da:2f:69:a3:b6:e7:f1:9e:a7:8e:55: d3:d4:89:af:d0:72:39:7f:3c:2d:57:00:ae:25:89: 5a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4A:C8:82:D1:AF:02:D8:6C:8B:25:D6:B9:69:DB:C8:09:19:1B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:73:f5:e6:64:dc:08:8e:58:65:e3:99:de:53:dc:68:c9:6f: 7d:a6:8d:ad:4d:b8:3a:3f:fd:42:20:63:12:54:97:7c:4e:69: b9:83:60:9c:74:1a:0d:0b:1e:71:c8:ff:d2:94:aa:25:70:96: 92:19:c3:9d:d5:ef:d5:7d:5d:52:36:8e:d7:95:1d:e0:9c:2e: 9b:13:06:82:11:1f:85:e4:f0:57:fb:5d:4c:32:00:c2:e6:48: 86:3d:0b:a3:45:19:28:3b:c4:76:5b:31:18:20:90:cf:32:55: 50:97:aa:58:c1:bf:86:cf:17:77:c3:7b:65:0d:2c:84:51:a6: 74:06:f9:e1:33:50:c8:c6:96:c1:3b:9c:49:65:ac:d0:37:c9: fb:24:52:b8:92:19:46:25:f0:fb:cd:26:42:e3:b1:ee:34:01: 7d:be:18:2f:0f:68:01:a5:7d:6a:07:5d:18:23:2e:9b:2b:89: 5b:ad:78:2b:f8:88:04:90:40:ac:32:94:88:f9:fc:22:60:df: 15:42:c6:b3:60:70:8c:5e:7a:60:bf:f5:95:fe:79:0d:fe:aa: 42:35:77:a9:c7:f4:ff:c5:0f:cc:39:d0:77:d5:a9:a1:53:b1: ce:ab:43:e5:38:b6:7f:3a:a0:1e:62:d5:17:63:64:5e:eb:f4: ff:14:4b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQZtHAOWtTYsqiuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk MDI5MWM1NWQtMGRmOS00NzY0LWFkZjYtZTkzMjlmMTA5ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vTlMiZOjIHe726eddliFL0Fh45AVFSdg36V avVomlouILq9jm2Jti/zw+GOqAziVttkkVlr9HHpZ2aaGeczZHkPEk181I6vc2tW xIwwhB3+t+xwcFJqBwd7QCxGvob06yZWPFvALUpo9a+13VXn8kwF42l49rQq1qbP gMCfENyE/lyj0f7bojzEDT4M0vM8ZlbcmhUWkn/MwoacsomqRIRteUuv9i0tQfpx 8bYqf+Us+kEKqG6cI6d+XaRxwSPfm9fkhtPBsjxgK+9QJlM8aTlPsM/+jN++S9cH GFCtQV59uy/P2i9po7bn8Z6njlXT1Imv0HI5fzwtVwCuJYlaYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdKyILRrwLYbIsl1rlp28gJGRvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvYjk2NWMzZDEtNjZmZi0z ZWVlLTkzMDEtYzQxNTBhYmM5NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtz9eZk3AiOWGXjmd5T3GjJb32mja1NuDo//UIgYxJUl3xOabmDYJx0 Gg0LHnHI/9KUqiVwlpIZw53V79V9XVI2jteVHeCcLpsTBoIRH4Xk8Ff7XUwyAMLm SIY9C6NFGSg7xHZbMRggkM8yVVCXqljBv4bPF3fDe2UNLIRRpnQG+eEzUMjGlsE7 nEllrNA3yfskUriSGUYl8PvNJkLjse40AX2+GC8PaAGlfWoHXRgjLpsriVuteCv4 iASQQKwylIj5/CJg3xVCxrNgcIxeemC/9ZX+eQ3+qkI1d6nH9P/FD8w50HfVqaFT sc6rQ+U4tn86oB5i1RdjZF7r9P8US7Y= -----END CERTIFICATE-----Generated at Sun Jan 25 04:34:30 2026 by rpki-client