This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa File: a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa (raw, json) Hash identifier: YUJMkwOvEC5ea61OLD5hfFzgBdhzF6MBjQkiEu5JMzA= Subject key identifier: D8:DE:C7:7E:41:9C:97:17:A5:8F:F6:DA:0D:1C:4C:FC:18:D3:81:52 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBC3E0D05C7E86D5DEE480 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 199.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c3:e0:d0:5c:7e:86:d5:de:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=ad73f544-873d-454f-80d8-2de7e576e63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:49:57:81:2f:77:75:f4:9e:8b:78:c1:b6: b5:a9:b7:a4:7c:39:f6:bb:60:e6:9b:98:45:eb:bd: e6:50:99:b6:16:22:2a:c4:f6:2c:06:64:cb:6d:4e: 33:bc:6e:61:99:6c:87:25:43:23:7a:c2:72:b9:a7: 00:6f:ff:b8:e2:67:2b:f8:5a:f7:f3:d7:d7:73:51: 2d:4a:98:a9:6e:90:ff:7d:ea:c9:3c:66:ff:2b:71: a5:72:46:30:6b:7d:4a:1d:aa:e9:c1:47:e2:af:23: 49:71:7e:40:1b:16:11:1f:fb:b1:41:e0:a8:a3:4e: 50:23:76:ea:a6:53:0f:2a:ab:ca:83:49:2e:b4:bc: 8a:1c:b4:e3:c1:7d:03:02:16:be:c4:05:de:7c:98: 37:8e:11:08:a2:9c:8c:08:9a:44:80:6a:96:41:27: c3:95:03:9b:bf:6a:65:e5:46:b1:5b:cc:ae:a7:cd: b0:49:0f:df:90:50:c9:55:f3:d8:e2:c5:f7:5c:14: c4:6f:16:c4:95:f8:f4:b6:6b:bc:a2:9e:58:e9:8f: bc:f8:67:d2:5d:bb:9c:07:05:72:6d:9b:16:87:88: 8f:5e:ca:cc:65:b9:44:0f:9e:bb:5a:8b:97:9d:0c: b2:20:8a:63:23:c4:54:60:b1:94:80:25:aa:f6:57: 9d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DE:C7:7E:41:9C:97:17:A5:8F:F6:DA:0D:1C:4C:FC:18:D3:81:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a8b70d23-71b3-3989-b6f1-7ca133ec397f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:bf:d8:2f:e5:95:a0:b2:34:b3:5b:79:7f:57:50:6e:8b:e6: b4:85:0e:29:55:7a:eb:85:0c:a2:21:22:96:64:84:98:b0:c5: 81:da:52:f6:1e:a7:55:2b:5f:3c:53:04:f4:85:09:a5:45:9d: 51:11:7d:94:0e:e3:8e:cb:02:30:3a:65:ef:c1:1b:22:f8:4c: 78:43:e8:9e:3c:37:ec:2b:46:0c:20:1b:28:38:f0:ca:96:f7: 77:98:6b:8e:07:5a:68:39:2a:37:21:1a:20:9e:26:87:0e:30: 04:c5:02:b7:cb:3d:6a:f4:d0:95:e3:e0:af:7b:14:28:1a:f0: 6e:11:71:70:b7:32:9f:7f:e9:d4:c6:b8:5a:0a:54:c4:fe:eb: c4:a0:7c:38:e8:f6:50:82:4f:fa:e2:39:3b:91:22:0e:e2:7a: d5:b8:3f:82:a5:44:8b:97:0b:61:3c:d1:27:5d:85:a7:d8:a1: 90:31:b2:e8:95:29:b5:c1:ff:d4:ed:1c:6b:c1:d5:c3:1e:fa: 9f:99:8b:30:7c:8a:d0:e0:4c:a1:24:a2:b1:8a:b3:37:4a:65: 01:cf:b8:0f:fe:1c:ef:2a:f1:af:51:0e:2a:90:d8:1a:58:3a: 82:3e:9f:59:e9:8c:77:d2:a6:c6:ef:2b:02:6b:2c:28:68:0b: 62:57:22:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28Pg0Fx+htXe5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YWQ3M2Y1NDQtODczZC00NTRmLTgwZDgtMmRlN2U1NzZlNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3tJV4Evd3X0not4wba1qbekfDn2u2Dmm5hF 673mUJm2FiIqxPYsBmTLbU4zvG5hmWyHJUMjesJyuacAb/+44mcr+Fr389fXc1Et SpipbpD/ferJPGb/K3GlckYwa31KHarpwUfiryNJcX5AGxYRH/uxQeCoo05QI3bq plMPKqvKg0kutLyKHLTjwX0DAha+xAXefJg3jhEIopyMCJpEgGqWQSfDlQObv2pl 5UaxW8yup82wSQ/fkFDJVfPY4sX3XBTEbxbElfj0tmu8op5Y6Y+8+GfSXbucBwVy bZsWh4iPXsrMZblED567WouXnQyyIIpjI8RUYLGUgCWq9ledBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjex35BnJcXpY/22g0cTPwY04FSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYThiNzBkMjMtNzFiMy0z OTg5LWI2ZjEtN2NhMTMzZWMzOTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMK/2C/llaCyNLNbeX9XUG6L5rSFDilVeuuFDKIhIpZkhJiwxYHaUvYe p1UrXzxTBPSFCaVFnVERfZQO447LAjA6Ze/BGyL4THhD6J48N+wrRgwgGyg48MqW 93eYa44HWmg5KjchGiCeJocOMATFArfLPWr00JXj4K97FCga8G4RcXC3Mp9/6dTG uFoKVMT+68SgfDjo9lCCT/riOTuRIg7ietW4P4KlRIuXC2E80SddhafYoZAxsuiV KbXB/9TtHGvB1cMe+p+ZizB8itDgTKEkorGKszdKZQHPuA/+HO8q8a9RDiqQ2BpY OoI+n1npjHfSpsbvKwJrLChoC2JXItw= -----END CERTIFICATE-----Generated at Sun Jan 25 12:12:43 2026 by rpki-client