This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa File: a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa (raw, json) Hash identifier: +oihXKpXNP+J+IMGHrwUtCZUGa8YEd2+ha91LdMrE3o= Subject key identifier: D9:A9:E1:82:0C:C2:D2:9D:96:46:A1:5D:4C:BA:A7:76:8B:64:8B:BD Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C44411223E966C79BDA0A2200 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 207266 IP address blocks: 199.115.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:12:23:e9:66:c7:9b:da:0a:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=bd4a60e6-524e-4074-a8ce-ba521cb5bf4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:75:2d:2c:d2:db:ab:83:b8:c9:43:1b:5f: a8:17:b8:22:d3:05:06:93:12:e9:c3:2f:e4:90:f4: 64:e8:4f:61:49:4e:1c:69:89:74:84:f1:3a:46:d3: c6:8f:c9:64:d5:df:fe:99:dd:d1:1b:fc:3f:94:fd: 94:50:00:93:50:83:c3:84:d8:be:54:28:a4:2c:a6: e8:b6:81:9c:6a:73:03:03:a1:4a:86:ac:13:d1:5e: e2:e4:9e:d5:b9:65:ee:72:61:76:8a:f9:f9:ef:ad: 89:5c:c7:96:61:00:4d:b9:6e:ce:c3:72:fb:fa:61: a2:a7:71:85:63:4b:3a:b9:c9:9e:23:2e:5e:db:71: 41:ff:eb:10:fc:72:1d:a0:67:3c:a1:9c:d5:20:4f: 41:d2:14:0c:a5:f8:27:cc:96:9f:98:f8:c4:f9:1e: 60:dc:de:19:32:b6:83:27:3b:9f:cd:e2:2c:f2:bf: 69:5e:0d:8c:21:c9:fe:01:d6:80:a6:01:36:b9:ee: d9:bb:44:ed:3f:9b:9c:21:af:a5:7c:ec:b6:e9:54: df:7e:52:c8:b6:f6:fa:23:6b:82:06:26:1d:64:b5: 38:f2:bf:54:e7:46:89:f6:94:a2:b8:8c:08:25:f1: ae:1e:80:1f:e9:de:bd:78:9f:83:76:2d:65:c5:df: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A9:E1:82:0C:C2:D2:9D:96:46:A1:5D:4C:BA:A7:76:8B:64:8B:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a565a19c-a06d-3e70-b1f5-14a0b9e8d5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.115.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c1:a1:9f:e9:79:40:77:de:89:58:96:bc:bc:e7:cc:4e:ca: 64:06:69:77:64:af:c3:86:f1:0e:39:e1:be:e4:ac:c9:ea:87: 60:42:4a:d8:1b:05:f6:02:59:77:cd:42:32:14:e7:18:d8:e3: 47:76:e7:42:67:75:c3:aa:1f:fc:c5:60:21:f3:4d:30:3e:1d: 86:18:0c:5c:d7:94:f9:56:de:ae:f6:1d:43:2d:8d:6f:f7:e7: 5d:12:c8:e4:c5:27:29:62:67:c3:19:aa:f9:c2:7d:31:5c:00: e5:bf:8f:18:39:eb:5d:0b:61:44:20:22:fa:9c:f7:c3:04:fd: eb:5e:2d:23:3f:92:36:21:d7:2c:74:cd:3f:a7:98:36:3a:ba: b7:f8:2a:83:13:37:c7:3c:d2:87:2b:80:85:90:18:47:c0:25: 0b:d2:c4:cc:9a:d8:20:1c:f2:ac:91:e0:88:1e:65:d2:98:4b: 42:80:38:1e:9f:c3:0f:d9:2d:18:2b:10:df:e1:34:47:ef:ce: 0d:03:b9:3f:87:00:2a:26:b9:0d:0f:87:b0:f6:07:56:f8:f8: 05:10:4f:1c:e3:89:36:a9:1c:49:f3:65:4d:e0:fe:eb:86:81: fe:1d:c2:c8:a6:d8:f6:a7:c1:ea:ed:db:b0:65:d2:fd:2a:3d: a5:aa:4f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRIj6WbHm9oKIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk YmQ0YTYwZTYtNTI0ZS00MDc0LWE4Y2UtYmE1MjFjYjViZjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5B1LSzS26uDuMlDG1+oF7gi0wUGkxLpwy/k kPRk6E9hSU4caYl0hPE6RtPGj8lk1d/+md3RG/w/lP2UUACTUIPDhNi+VCikLKbo toGcanMDA6FKhqwT0V7i5J7VuWXucmF2ivn5762JXMeWYQBNuW7Ow3L7+mGip3GF Y0s6ucmeIy5e23FB/+sQ/HIdoGc8oZzVIE9B0hQMpfgnzJafmPjE+R5g3N4ZMraD JzufzeIs8r9pXg2MIcn+AdaApgE2ue7Zu0TtP5ucIa+lfOy26VTfflLItvb6I2uC BiYdZLU48r9U50aJ9pSiuIwIJfGuHoAf6d69eJ+Ddi1lxd8pFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmp4YIMwtKdlkahXUy6p3aLZIu9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTU2NWExOWMtYTA2ZC0z ZTcwLWIxZjUtMTRhMGI5ZThkNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3OdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDBoZ/peUB33olYlry858xOymQGaXdkr8OG8Q454b7krMnqh2BCStgb BfYCWXfNQjIU5xjY40d250JndcOqH/zFYCHzTTA+HYYYDFzXlPlW3q72HUMtjW/3 510SyOTFJyliZ8MZqvnCfTFcAOW/jxg5610LYUQgIvqc98ME/eteLSM/kjYh1yx0 zT+nmDY6urf4KoMTN8c80ocrgIWQGEfAJQvSxMya2CAc8qyR4IgeZdKYS0KAOB6f ww/ZLRgrEN/hNEfvzg0DuT+HAComuQ0Ph7D2B1b4+AUQTxzjiTapHEnzZU3g/uuG gf4dwsim2Panwert27Bl0v0qPaWqT0k= -----END CERTIFICATE-----Generated at Sun Jan 25 10:35:01 2026 by rpki-client