This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa File: 8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa (raw, json) Hash identifier: ZCCMGy9es1Ervv46bYofRP1eeZ7kCSEvhQJIUnrU4LU= Subject key identifier: A1:5F:A9:0B:82:5E:EE:B3:78:EA:56:4B:D7:D7:26:66:D2:B6:CA:78 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DC191E88521F570FB4FC40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 199.254.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:19:1e:88:52:1f:57:0f:b4:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=54c0535d-d18c-4963-8c70-d12bb313c89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:23:94:be:ea:6f:57:35:69:e1:c9:98:d9: 22:35:35:d7:6c:61:6b:af:78:91:dd:d5:10:f0:31: 4a:66:3d:60:80:57:87:dc:97:4a:4a:e7:4a:01:0c: d7:27:81:51:0e:7c:34:0c:f2:64:b5:c0:61:3e:31: c3:5c:d3:90:ea:78:ca:a3:60:d1:29:39:fd:11:78: 89:8f:ca:98:80:5f:1a:3b:09:ec:a3:a9:01:96:58: 47:87:0a:11:ec:af:27:45:c1:c7:f6:04:1e:9a:61: 01:1c:68:37:0e:6b:45:4f:29:c9:53:8e:5a:79:97: c6:85:e8:95:b1:bd:d1:82:40:89:58:9c:3a:21:8b: f0:39:29:9b:a2:81:c3:03:ff:40:1f:59:7e:ae:e1: 54:02:01:02:42:3b:8e:c4:37:24:1a:c1:c8:12:eb: e2:f2:a2:ee:93:ae:9e:f2:f2:b5:8c:aa:ec:70:d6: 7a:22:8a:31:f6:8a:d0:4d:d0:d8:f8:89:3a:59:16: a1:6c:a4:80:92:da:1c:5f:f6:4f:03:23:9d:e6:8e: 86:a9:db:c5:c0:d0:11:82:77:99:b1:73:60:9c:ca: 7e:4d:aa:8f:eb:e1:32:37:5c:2f:44:03:ef:0c:88: a6:e1:57:6f:8d:cd:c1:46:14:fb:5a:4b:dd:24:e4: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:5F:A9:0B:82:5E:EE:B3:78:EA:56:4B:D7:D7:26:66:D2:B6:CA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8d7c5d4b-3758-3776-a3ca-68b52cc5491b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:31:13:7b:f5:00:9d:aa:72:15:4a:b1:cc:c3:07:44:d2:cc: 72:d8:98:a6:fe:56:81:a2:ca:eb:8d:4d:47:78:cb:f3:a8:f8: 20:32:a5:1d:f9:45:c1:c7:27:86:9c:19:d2:aa:13:95:d9:78: 52:13:92:6b:50:8d:d2:a8:ee:5d:38:9c:e1:5f:d7:f8:0b:7e: 95:11:97:8a:2d:0e:a1:29:ed:02:94:1a:1b:b3:8c:e2:ec:24: 84:cf:b6:7d:8a:46:71:7c:62:13:e1:3c:62:fa:ca:ea:7c:1e: cc:db:b4:64:e2:0c:c4:6d:59:01:42:c4:79:22:0e:25:cb:50: e0:3d:51:ba:29:87:d8:66:63:f5:be:c2:19:6a:35:60:73:88: 7e:59:91:57:61:49:29:2e:83:72:e1:55:a7:2c:8c:a5:6c:05: 91:7f:87:e9:d8:8b:bb:0c:62:97:09:26:1f:28:c0:e5:17:7b: 4c:e1:68:e7:f6:48:4a:2e:7d:15:b6:05:24:4f:d5:16:59:9e: 59:36:bb:39:6c:7c:7a:60:48:fb:30:0c:45:99:b1:d4:84:e0: 6b:4d:2b:98:42:f2:29:10:08:4a:8f:ab:d9:65:bb:6e:89:ff: 75:ff:fc:34:9a:6f:23:64:b9:38:31:4a:69:96:57:27:9b:3f: 45:2d:b4:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BkeiFIfVw+0/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NTRjMDUzNWQtZDE4Yy00OTYzLThjNzAtZDEyYmIzMTNjODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYwjlL7qb1c1aeHJmNkiNTXXbGFrr3iR3dUQ 8DFKZj1ggFeH3JdKSudKAQzXJ4FRDnw0DPJktcBhPjHDXNOQ6njKo2DRKTn9EXiJ j8qYgF8aOwnso6kBllhHhwoR7K8nRcHH9gQemmEBHGg3DmtFTynJU45aeZfGheiV sb3RgkCJWJw6IYvwOSmbooHDA/9AH1l+ruFUAgECQjuOxDckGsHIEuvi8qLuk66e 8vK1jKrscNZ6Ioox9orQTdDY+Ik6WRahbKSAktocX/ZPAyOd5o6GqdvFwNARgneZ sXNgnMp+TaqP6+EyN1wvRAPvDIim4Vdvjc3BRhT7WkvdJOS/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFfqQuCXu6zeOpWS9fXJmbStsp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvOGQ3YzVkNGItMzc1OC0z Nzc2LWEzY2EtNjhiNTJjYzU0OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/46MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcxE3v1AJ2qchVKsczDB0TSzHLYmKb+VoGiyuuNTUd4y/Oo+CAypR35 RcHHJ4acGdKqE5XZeFITkmtQjdKo7l04nOFf1/gLfpURl4otDqEp7QKUGhuzjOLs JITPtn2KRnF8YhPhPGL6yup8HszbtGTiDMRtWQFCxHkiDiXLUOA9Uboph9hmY/W+ whlqNWBziH5ZkVdhSSkug3LhVacsjKVsBZF/h+nYi7sMYpcJJh8owOUXe0zhaOf2 SEoufRW2BSRP1RZZnlk2uzlsfHpgSPswDEWZsdSE4GtNK5hC8ikQCEqPq9llu26J /3X//DSabyNkuTgxSmmWVyebP0UttOo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:34:38 2026 by rpki-client