This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa File: 2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa (raw, json) Hash identifier: rpEa8fBpf/+yfQVMCeUQ8oPPHO71Rn3xTHpUfoUn7ks= Subject key identifier: 6A:A1:2B:85:B6:33:B7:6D:C5:01:64:32:71:84:FD:2D:4E:1A:F2:97 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C4440FE17D2A5B6E105C0A240 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:40:fe:17:d2:a5:b6:e1:05:c0:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=1a579354-f850-4f26-ab84-056eb4483a7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bf:18:a2:5c:6b:04:3d:cf:3a:ea:22:42:13: 2c:54:39:60:2a:3f:1b:21:79:a7:32:4d:dd:3c:0f: 4a:4e:ac:2a:fd:66:a4:3e:4f:54:76:68:86:26:ae: d8:0c:51:c8:54:2f:2c:cf:d2:64:1b:38:46:94:81: c7:69:f9:d2:63:47:3c:8b:71:bf:b8:a8:cc:d6:46: 2b:d2:1f:95:e5:57:48:45:3a:41:f5:ec:89:50:ca: ab:bb:2c:ab:12:3c:92:e2:f0:3d:8e:93:c8:a7:23: 3c:f2:02:02:73:ed:85:4f:93:f8:31:5b:50:50:da: 58:7e:52:f3:48:a2:6b:ce:1e:4a:e3:4b:91:85:af: 16:05:8a:a9:27:90:44:5f:fd:89:ad:e0:f0:ca:f9: c8:a6:5f:3a:ef:e5:c6:ef:7f:80:8f:56:3c:1b:c3: b0:2d:68:1d:52:30:d0:52:04:3a:02:94:b5:7f:1e: 22:cf:a3:8a:3d:80:a4:c1:af:06:29:cb:d2:22:f6: 09:fb:93:e7:79:56:10:ec:9c:7b:50:97:72:e5:ab: 38:1d:90:0c:92:46:dc:4a:12:60:91:f7:a4:7b:94: 41:0e:73:8a:1e:42:56:71:e2:fe:68:57:51:e0:cf: 0b:fd:5c:f1:5f:2c:ee:61:37:dc:e9:45:ba:b1:c0: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A1:2B:85:B6:33:B7:6D:C5:01:64:32:71:84:FD:2D:4E:1A:F2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/2231b8ec-9c4c-3fb0-886e-f3e8c1f9e4ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.249.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:cf:f2:19:be:01:9e:dd:e5:80:4d:1b:b7:61:10:43:f1:7b: 72:ad:d9:30:cf:78:c6:29:a7:5d:94:8b:c0:44:b4:f3:13:55: 36:e1:6b:64:13:62:41:b1:2b:ce:46:82:3a:3f:eb:25:01:3d: 0c:4d:10:27:43:10:eb:dd:f0:1e:49:30:f7:69:a6:c8:52:52: 32:c0:7a:b0:08:8d:82:bb:03:b5:44:2b:d7:c5:dc:0d:a8:c1: 59:ae:69:55:27:2e:93:71:d3:53:ac:a6:4e:2f:a6:6e:ad:8e: e5:5d:93:00:7c:ec:ad:55:66:a9:4b:6e:f5:92:00:fa:72:a7: 99:5c:e3:33:57:7c:1d:1b:f7:53:5c:44:03:65:33:53:39:90: e7:31:15:3e:01:65:ab:0d:6d:ae:58:4e:48:5e:ca:b8:0e:49: d3:16:bd:c9:90:47:5e:74:d4:91:3e:9d:01:11:5b:02:cd:09: 30:7f:da:63:53:72:4c:92:a6:39:9e:7d:04:39:73:be:d5:81: 2f:c7:b6:d9:c9:5e:47:f1:bb:e8:9f:26:7a:77:42:b6:05:af: 53:00:a7:12:bd:e6:fc:8a:b1:c4:27:f7:bb:43:6d:8c:e5:67: 18:88:6c:6f:5a:c4:47:a4:16:e9:85:45:a8:2e:96:9e:ea:21: 69:dc:38:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQP4X0qW24QXAokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk MWE1NzkzNTQtZjg1MC00ZjI2LWFiODQtMDU2ZWI0NDgzYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78YolxrBD3POuoiQhMsVDlgKj8bIXmnMk3d PA9KTqwq/WakPk9UdmiGJq7YDFHIVC8sz9JkGzhGlIHHafnSY0c8i3G/uKjM1kYr 0h+V5VdIRTpB9eyJUMqruyyrEjyS4vA9jpPIpyM88gICc+2FT5P4MVtQUNpYflLz SKJrzh5K40uRha8WBYqpJ5BEX/2JreDwyvnIpl867+XG73+Aj1Y8G8OwLWgdUjDQ UgQ6ApS1fx4iz6OKPYCkwa8GKcvSIvYJ+5PneVYQ7Jx7UJdy5as4HZAMkkbcShJg kfeke5RBDnOKHkJWceL+aFdR4M8L/VzxXyzuYTfc6UW6scAY1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqhK4W2M7dtxQFkMnGE/S1OGvKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvMjIzMWI4ZWMtOWM0Yy0z ZmIwLTg4NmUtZjNlOGMxZjllNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/l9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLP8hm+AZ7d5YBNG7dhEEPxe3Kt2TDPeMYpp12Ui8BEtPMTVTbha2QT YkGxK85Ggjo/6yUBPQxNECdDEOvd8B5JMPdppshSUjLAerAIjYK7A7VEK9fF3A2o wVmuaVUnLpNx01Ospk4vpm6tjuVdkwB87K1VZqlLbvWSAPpyp5lc4zNXfB0b91Nc RANlM1M5kOcxFT4BZasNba5YTkheyrgOSdMWvcmQR1501JE+nQERWwLNCTB/2mNT ckySpjmefQQ5c77VgS/HttnJXkfxu+ifJnp3QrYFr1MApxK95vyKscQn97tDbYzl ZxiIbG9axEekFumFRagulp7qIWncOBE= -----END CERTIFICATE-----Generated at Sun Jan 25 12:35:33 2026 by rpki-client