This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa File: aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa (raw, json) Hash identifier: hAH0QRy4VeLMmeMKnyLzcUlTszgqS/G6IMzXjZfN4TA= Subject key identifier: 92:CF:ED:68:F3:A8:1E:AC:18:85:E2:B6:D9:4D:33:6D:7B:BE:63:F6 Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584C4BF87B04DE97A12C8D9FACE0 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa Signing time: Wed 24 Dec 2025 20:20:55 +0000 ROA not before: Wed 24 Dec 2025 20:20:55 +0000 ROA not after: Tue 24 Mar 2026 19:20:55 +0000 asID: 22418 IP address blocks: 192.157.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:f8:7b:04:de:97:a1:2c:8d:9f:ac:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Dec 24 20:20:55 2025 GMT Not After : Mar 24 19:20:55 2026 GMT Subject: CN=8f81cd97-6abb-4bdc-80e5-2c070d97cdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:6f:ea:1b:df:38:44:b7:88:1a:87:c2:5d: 93:7d:a1:ef:1c:56:75:82:a0:3c:7e:79:4e:c9:cb: 21:d3:68:16:c6:4e:7b:b8:16:31:c7:e3:4f:97:7b: 21:df:da:bc:8c:85:cb:a6:83:60:5a:b2:1e:a9:2b: 66:ae:b7:d4:26:80:49:a0:f6:df:88:a4:e0:17:8b: 92:4c:18:c4:de:92:3c:5a:c2:14:46:12:72:5f:42: 1f:0a:1a:b7:4a:a4:8d:ab:9d:91:72:5f:a0:99:4f: b0:9a:52:b9:fa:d0:7c:d7:a8:f1:3c:a7:7c:ef:1f: 07:c7:09:88:d2:58:24:66:46:8c:5e:47:d0:1d:53: b2:b2:13:f0:8f:39:8e:41:6e:9c:21:86:47:35:88: 4f:f2:68:17:be:b3:03:bc:51:bf:c8:f9:b7:99:c8: f1:43:95:69:1c:b7:76:89:c9:c6:5d:ee:3b:bb:d0: 76:82:d8:75:bd:2f:2b:25:7f:99:6b:05:18:61:34: bb:bd:a8:fd:05:a3:65:08:c6:76:77:ea:8b:db:4d: 70:4c:b3:ad:96:9d:8e:8e:18:66:fc:c3:2d:1a:ba: 04:fa:3c:92:10:92:57:82:5a:88:61:92:6e:04:0b: 8c:c3:20:70:0b:4b:20:62:b8:83:3f:e9:2a:03:0e: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CF:ED:68:F3:A8:1E:AC:18:85:E2:B6:D9:4D:33:6D:7B:BE:63:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/aa1aec27-6c58-39dc-b8b3-d331a322c1d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6e:c1:d8:c7:8f:9a:76:5c:09:12:e7:e9:9d:dd:bb:e3:09: 59:53:a7:47:06:2a:fe:7b:d2:1b:9a:6f:fe:90:9c:8e:d2:55: 5b:27:43:58:ff:72:a8:bc:68:81:93:58:65:8c:3f:f9:e2:91: f2:52:32:88:e9:da:4b:bc:3f:f3:24:e4:28:a2:3b:ff:1e:b3: e6:2e:95:4d:27:09:59:7b:97:d1:95:83:97:5e:b6:e6:77:4c: 40:01:da:0c:b4:4f:bd:4b:eb:b8:64:47:71:36:8e:11:b9:23: 87:7d:ba:99:47:67:7b:10:93:7f:6c:fd:d3:fa:80:ac:f9:60: 96:37:0d:9d:0b:92:93:c2:52:50:dc:aa:94:78:94:44:bf:e3: 80:06:a3:1a:05:d9:52:3e:09:83:1f:95:91:3b:a6:00:83:f0: 7e:be:47:a7:bf:09:ac:46:23:b8:5f:a2:b6:8b:88:36:2b:9c: 1c:98:7e:15:ee:0e:b0:2f:09:86:b9:8e:bd:28:6f:b3:3b:fc: f4:a1:ae:6b:d4:ee:de:a4:28:9a:e1:b3:e4:9c:03:e6:67:4d: 35:87:cb:df:73:61:74:73:b3:98:bd:27:f5:3b:54:b5:cd:d1: 24:cd:b6:13:32:ca:fb:ab:63:82:b5:25:52:47:38:5e:8b:e7: 68:a1:7a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExL+HsE3pehLI2frOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI1MTIyNDIwMjA1NVoXDTI2MDMyNDE5MjA1NVowLzEtMCsGA1UEAxMk OGY4MWNkOTctNmFiYi00YmRjLTgwZTUtMmMwNzBkOTdjZGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kxv6hvfOES3iBqHwl2TfaHvHFZ1gqA8fnlO ycsh02gWxk57uBYxx+NPl3sh39q8jIXLpoNgWrIeqStmrrfUJoBJoPbfiKTgF4uS TBjE3pI8WsIURhJyX0IfChq3SqSNq52Rcl+gmU+wmlK5+tB816jxPKd87x8HxwmI 0lgkZkaMXkfQHVOyshPwjzmOQW6cIYZHNYhP8mgXvrMDvFG/yPm3mcjxQ5VpHLd2 icnGXe47u9B2gth1vS8rJX+ZawUYYTS7vaj9BaNlCMZ2d+qL201wTLOtlp2Ojhhm /MMtGroE+jySEJJXglqIYZJuBAuMwyBwC0sgYriDP+kqAw6U6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLP7WjzqB6sGIXittlNM217vmP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYWExYWVjMjctNmM1OC0z OWRjLWI4YjMtZDMzMWEzMjJjMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhuwdjHj5p2XAkS5+md3bvjCVlTp0cGKv570huab/6QnI7SVVsnQ1j/ cqi8aIGTWGWMP/nikfJSMojp2ku8P/Mk5CiiO/8es+YulU0nCVl7l9GVg5detuZ3 TEAB2gy0T71L67hkR3E2jhG5I4d9uplHZ3sQk39s/dP6gKz5YJY3DZ0LkpPCUlDc qpR4lES/44AGoxoF2VI+CYMflZE7pgCD8H6+R6e/CaxGI7hforaLiDYrnByYfhXu DrAvCYa5jr0ob7M7/PShrmvU7t6kKJrhs+ScA+ZnTTWHy99zYXRzs5i9J/U7VLXN 0STNthMyyvurY4K1JVJHOF6L52ihelQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:20 2026 by rpki-client