This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa File: 1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa (raw, json) Hash identifier: E5R6iyj1+Oxy6D47jwapl8AASP5aRYBxCmf53V9D3w8= Subject key identifier: D8:19:3B:7B:A2:53:13:59:B0:F7:D3:26:16:58:40:79:77:0B:F5:FC Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBC10B76875584991383C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 65.22.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c1:0b:76:87:55:84:99:13:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=e78240e8-c86a-4fe2-aa04-e46c70650524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7e:fd:8d:ce:83:10:23:3d:43:06:cf:60:82: ce:59:f0:7b:b4:f8:d0:18:df:37:15:c5:1f:17:ab: 95:cb:95:e8:26:f2:fe:19:1e:57:76:ba:12:88:f2: 39:74:ce:c4:54:2d:ee:47:57:8a:0a:c7:f3:60:3f: 56:67:6c:81:81:80:34:ac:a3:1b:ee:02:c1:fb:f5: e4:a8:f8:a5:89:fe:24:32:a2:59:33:5d:26:c6:e4: 47:ff:6f:4e:99:39:66:fc:25:db:f8:24:a0:b4:e6: 5f:f3:b8:fb:9d:4e:11:79:63:2b:f7:08:2b:ef:b0: 6f:67:9b:17:67:35:38:4a:2e:ea:ef:ae:50:94:d8: 13:34:58:e4:97:a3:c5:61:c3:e4:99:e1:5e:0c:72: 58:9f:98:4e:0e:83:3f:41:64:0e:b3:00:71:21:e7: 29:5b:ce:58:b5:67:dd:7d:e7:84:55:87:b9:56:32: 22:e8:e4:9e:08:e8:19:26:e5:80:f2:d2:58:3f:e5: 9d:6d:f9:9e:d5:07:e6:0c:fa:e2:c8:29:da:3b:06: 74:f9:56:46:f0:0e:e8:98:77:c3:dc:3f:a7:db:67: e2:3b:cb:9f:0e:b8:8e:68:a1:19:6b:16:6f:86:38: 3e:c1:f7:45:f4:e9:d2:3c:20:e0:1a:ba:9d:4d:d1: 57:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:3B:7B:A2:53:13:59:B0:F7:D3:26:16:58:40:79:77:0B:F5:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/1cf0620d-f2f1-3c5a-897f-7aa113f48fc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fa:cd:75:67:e3:8d:7e:5c:7f:fa:e7:d0:75:ae:0a:be:8f: a0:53:8d:04:a0:42:17:6e:33:9c:39:08:26:a8:27:09:80:c7: 7f:b1:86:80:01:07:9d:a5:01:44:6a:5b:ac:93:b4:21:eb:b8: f8:ab:c1:07:34:38:6d:84:42:1f:db:2f:1d:99:83:e4:cf:8d: 99:78:6b:7e:39:a0:a2:7a:62:23:2f:85:4f:95:1f:50:05:88: 30:56:68:d5:67:d3:87:0e:32:11:3b:43:ff:2d:12:6d:0f:aa: 1e:97:78:71:b0:0b:81:64:36:8f:58:4c:09:3f:cb:c4:4a:44: 2f:5f:33:a1:4b:9d:c3:29:80:30:d7:80:79:92:cb:41:24:8c: 0a:72:6f:20:43:dc:84:a5:8b:60:fb:ee:c4:63:75:4a:cb:20: 04:f2:46:9b:c3:d4:7d:9a:f9:57:c6:04:10:18:ca:c7:8d:f8: 56:16:75:57:fd:22:10:71:5c:64:86:27:70:4e:cc:f4:67:ae: 93:ab:1c:fd:5b:98:c3:78:44:bf:8d:6e:00:67:6b:61:6d:ef: ce:79:4b:08:d1:a5:3f:82:35:2c:ba:ee:ee:98:da:c0:96:52: 5b:dd:73:70:39:69:02:07:d7:c4:16:86:10:d1:e3:b1:84:ee: e8:d4:1b:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28ELdodVhJkTg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTc4MjQwZTgtYzg2YS00ZmUyLWFhMDQtZTQ2YzcwNjUwNTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs379jc6DECM9QwbPYILOWfB7tPjQGN83FcUf F6uVy5XoJvL+GR5XdroSiPI5dM7EVC3uR1eKCsfzYD9WZ2yBgYA0rKMb7gLB+/Xk qPilif4kMqJZM10mxuRH/29OmTlm/CXb+CSgtOZf87j7nU4ReWMr9wgr77BvZ5sX ZzU4Si7q765QlNgTNFjkl6PFYcPkmeFeDHJYn5hODoM/QWQOswBxIecpW85YtWfd feeEVYe5VjIi6OSeCOgZJuWA8tJYP+Wdbfme1QfmDPriyCnaOwZ0+VZG8A7omHfD 3D+n22fiO8ufDriOaKEZaxZvhjg+wfdF9OnSPCDgGrqdTdFXOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgZO3uiUxNZsPfTJhZYQHl3C/X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMWNmMDYyMGQtZjJmMS0z YzVhLTg5N2YtN2FhMTEzZjQ4ZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr6zXVn441+XH/659B1rgq+j6BTjQSgQhduM5w5CCaoJwmAx3+xhoAB B52lAURqW6yTtCHruPirwQc0OG2EQh/bLx2Zg+TPjZl4a345oKJ6YiMvhU+VH1AF iDBWaNVn04cOMhE7Q/8tEm0Pqh6XeHGwC4FkNo9YTAk/y8RKRC9fM6FLncMpgDDX gHmSy0EkjApybyBD3ISli2D77sRjdUrLIATyRpvD1H2a+VfGBBAYyseN+FYWdVf9 IhBxXGSGJ3BOzPRnrpOrHP1bmMN4RL+NbgBna2Ft7855SwjRpT+CNSy67u6Y2sCW Ulvdc3A5aQIH18QWhhDR47GE7ujUG+g= -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:30 2026 by rpki-client