This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa File: da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa (raw, json) Hash identifier: xaQB+MWWKmDHvxwcrCFb6r1jcCazVoCV11FVSsErebU= Subject key identifier: 9D:DB:27:A6:4A:A9:AA:AB:2B:98:3E:6A:1B:38:10:C6:CE:18:AF:63 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584C4E06AF65AFFD1E9D1DC961C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 16509 IP address blocks: 157.239.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:af:65:af:fd:1e:9d:1d:c9:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=c95ff401-ede5-4e77-beb5-70a1cc046685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:46:bc:71:5c:29:e6:9d:0c:be:8d:e8:9e:f1: 99:8c:01:45:37:48:5c:86:8f:ef:fd:8e:7b:01:35: be:1c:1f:4a:f8:32:9a:29:8c:42:d6:97:6f:b8:dc: cf:a1:9d:8f:dc:75:66:4c:8f:70:ba:4c:8c:3d:d5: 7b:bf:26:60:1f:10:0f:8f:40:97:0c:e5:a6:78:37: bb:ed:b4:83:50:28:1d:90:e2:17:18:05:07:36:b4: 85:96:52:7d:6e:7c:57:e1:29:7a:b9:30:d2:b7:f2: bf:2e:6a:44:ac:99:43:66:9a:8a:a9:c0:53:bf:71: 00:fa:e9:ea:05:84:cb:5f:4d:4e:ed:ae:a6:08:a1: fc:28:f1:df:1d:50:34:85:f0:60:d1:39:8b:7c:d9: e4:5b:f9:a3:e7:a6:b3:a7:56:00:93:20:3d:c6:89: 37:6e:88:0d:4f:20:bf:d0:ce:44:4f:df:e6:83:2c: 3a:6c:5a:6c:99:15:53:ca:9e:84:86:21:c8:80:3c: 6b:a3:12:84:2c:d6:88:d7:0b:23:ff:dc:0f:bd:51: 33:7c:2a:d1:d9:6d:8b:c1:3f:b7:0a:40:a7:cc:d1: d3:a0:dd:04:ce:db:4b:04:4f:5c:16:6f:c3:39:2f: a1:b7:e3:00:72:19:27:67:bd:05:6d:67:5c:05:21: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DB:27:A6:4A:A9:AA:AB:2B:98:3E:6A:1B:38:10:C6:CE:18:AF:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b4:a0:02:60:09:76:08:9c:02:58:f7:2e:53:31:c0:c1:6d: 8f:54:10:2b:81:40:f0:39:c3:19:11:cc:0e:f8:0e:63:56:75: d6:0b:64:c3:33:5f:2b:40:0c:2a:b2:f7:c6:6d:a4:9f:34:94: ec:3d:a7:82:4c:30:67:0a:3a:68:c6:ff:6c:40:43:6a:fa:4d: 65:1a:36:e2:8a:53:3a:4f:11:7f:16:62:eb:15:f2:12:b8:e6: d7:89:57:74:69:fc:75:28:f2:f1:54:e8:1b:64:c4:c1:cd:40: 09:d5:aa:32:d9:6b:6e:9d:ad:fa:85:ac:8f:06:72:f1:f0:9d: 75:ff:db:aa:c0:4c:a1:96:3f:69:c7:a5:18:d8:f2:fb:1d:2e: c4:2d:ba:d4:b9:ee:60:2a:2b:b8:4e:37:5c:b7:19:23:3c:0d: 2b:93:92:31:58:00:73:1c:38:9b:cc:29:08:fe:37:90:8b:b2: 1e:61:24:43:e7:86:1c:39:f7:a5:b7:e2:43:76:90:68:a3:86: 6c:61:9e:eb:6b:21:5b:f2:54:db:dd:f3:d2:a4:b6:ec:88:96: 87:99:23:9f:20:6f:b2:49:8e:26:19:0c:d9:3d:c2:11:02:fe: 9b:f2:39:cb:f6:85:13:33:0b:1b:24:21:e6:85:1f:06:55:41: 7b:a1:01:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExOBq9lr/0enR3JYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk Yzk1ZmY0MDEtZWRlNS00ZTc3LWJlYjUtNzBhMWNjMDQ2Njg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0a8cVwp5p0Mvo3onvGZjAFFN0hcho/v/Y57 ATW+HB9K+DKaKYxC1pdvuNzPoZ2P3HVmTI9wukyMPdV7vyZgHxAPj0CXDOWmeDe7 7bSDUCgdkOIXGAUHNrSFllJ9bnxX4Sl6uTDSt/K/LmpErJlDZpqKqcBTv3EA+unq BYTLX01O7a6mCKH8KPHfHVA0hfBg0TmLfNnkW/mj56azp1YAkyA9xok3bogNTyC/ 0M5ET9/mgyw6bFpsmRVTyp6EhiHIgDxroxKELNaI1wsj/9wPvVEzfCrR2W2LwT+3 CkCnzNHToN0EzttLBE9cFm/DOS+ht+MAchknZ70FbWdcBSFSuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3bJ6ZKqaqrK5g+ahs4EMbOGK9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZGE5NzdiMGMtMTNlOC0z ZTRkLTgyYjUtYzEyZDVkOWUxZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa0oAJgCXYInAJY9y5TMcDBbY9UECuBQPA5wxkRzA74DmNWddYLZMMz XytADCqy98ZtpJ80lOw9p4JMMGcKOmjG/2xAQ2r6TWUaNuKKUzpPEX8WYusV8hK4 5teJV3Rp/HUo8vFU6BtkxMHNQAnVqjLZa26drfqFrI8GcvHwnXX/26rATKGWP2nH pRjY8vsdLsQtutS57mAqK7hON1y3GSM8DSuTkjFYAHMcOJvMKQj+N5CLsh5hJEPn hhw596W34kN2kGijhmxhnutrIVvyVNvd89KktuyIloeZI58gb7JJjiYZDNk9whEC /pvyOcv2hRMzCxskIeaFHwZVQXuhATc= -----END CERTIFICATE-----Generated at Sun Jan 25 06:12:58 2026 by rpki-client