This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa File: bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa (raw, json) Hash identifier: up4rzQmA0B3NAH+kex5JCNxSmWFPGdyebmjJYWz97Ik= Subject key identifier: DC:93:7B:79:26:93:9A:25:49:3A:B3:0C:91:B9:14:F5:21:B2:EC:04 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBC5B5BE40B8C4CFF18B00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 199.182.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c5:b5:be:40:b8:c4:cf:f1:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=c3de911c-6d06-402c-a952-c9fc38c44618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:9b:40:92:09:72:44:54:4f:78:96:74:e1: 32:ec:68:a1:56:92:9e:d9:d9:46:74:51:13:c2:51: ec:91:d0:38:fb:d2:39:8a:04:e5:1a:f1:07:1c:08: f6:e9:1a:be:d1:39:76:e9:ec:9c:27:60:60:ee:b0: 04:fb:e9:21:a0:ea:19:74:11:40:ab:bd:d8:e5:0a: e7:73:38:78:5d:00:97:74:94:db:bc:9e:74:94:7a: ff:ae:a4:fd:f4:fb:24:f6:97:14:8e:f9:b4:20:76: 18:66:39:03:b0:52:82:87:4e:8e:b7:63:3e:be:ca: 6f:ba:7a:cc:66:e7:5c:c4:99:ec:03:bb:a4:01:71: 86:2d:34:f3:82:f2:5d:78:92:a4:03:70:bf:32:95: cc:ad:9c:fc:aa:c5:5a:d6:ca:18:64:9e:83:08:84: 59:4e:63:71:7c:0a:f9:29:9a:57:4f:18:9f:d3:a4: d1:ae:56:5b:b1:75:d9:b5:f9:b6:a9:68:cd:dd:61: fc:63:e1:bf:0f:c4:c4:bc:9e:d2:89:64:0e:7c:5f: ae:b8:bc:f2:fa:b0:70:d6:cd:8b:03:67:84:48:42: 53:e3:2e:8d:23:bb:6c:1b:04:b7:96:e4:2c:45:82: d3:9f:5f:92:47:e3:5d:ed:63:10:ac:6e:d3:bb:04: 31:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:93:7B:79:26:93:9A:25:49:3A:B3:0C:91:B9:14:F5:21:B2:EC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf9f3ac7-a986-36f1-8fd9-b262a8b439c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.182.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a4:f0:33:84:8b:d0:da:57:94:39:6f:a8:a3:16:1b:9e:e7: dd:56:a5:35:4a:35:a9:9b:bf:26:da:41:21:4d:5b:5e:e7:90: 66:a9:82:25:ac:ca:12:b9:9e:00:e2:82:04:39:b1:f0:f9:12: 70:b4:6c:84:df:6a:2d:fa:21:74:7d:4a:00:b2:f5:ba:cc:4e: 31:f1:e0:8b:2c:cb:7d:d6:45:8b:7a:92:a6:2a:8d:58:17:e7: ef:2f:ee:74:d9:e8:31:c6:65:d3:f3:7e:ac:24:89:9b:d3:48: b5:eb:9c:d4:5f:cd:ba:d8:a2:da:e7:9c:60:36:54:fc:17:01: a8:1c:01:37:9a:ff:4f:3d:01:c0:75:b7:a1:dc:4d:04:13:1e: 0c:89:69:bf:e0:20:5c:67:87:fa:cc:53:d9:d8:1c:05:39:ce: 49:1d:89:7f:0f:12:ed:f2:c5:b9:b5:75:63:3a:56:38:ac:88: 4d:ce:05:a4:42:13:19:da:b6:33:0c:82:d7:f6:f8:07:77:dd: 0e:2a:95:47:10:9b:f9:64:ad:19:9b:e3:42:8c:d2:fd:fd:76: ca:c0:78:c8:5d:26:8c:80:a4:7f:d7:b7:3c:3d:c1:c9:33:02: ce:8f:09:7e:34:b9:26:c6:c9:ab:8c:14:b9:74:08:d7:64:5a: 02:02:f1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28W1vkC4xM/xiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YzNkZTkxMWMtNmQwNi00MDJjLWE5NTItYzlmYzM4YzQ0NjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssebQJIJckRUT3iWdOEy7GihVpKe2dlGdFET wlHskdA4+9I5igTlGvEHHAj26Rq+0Tl26eycJ2Bg7rAE++khoOoZdBFAq73Y5Qrn czh4XQCXdJTbvJ50lHr/rqT99Psk9pcUjvm0IHYYZjkDsFKCh06Ot2M+vspvunrM ZudcxJnsA7ukAXGGLTTzgvJdeJKkA3C/MpXMrZz8qsVa1soYZJ6DCIRZTmNxfAr5 KZpXTxif06TRrlZbsXXZtfm2qWjN3WH8Y+G/D8TEvJ7SiWQOfF+uuLzy+rBw1s2L A2eESEJT4y6NI7tsGwS3luQsRYLTn1+SR+Nd7WMQrG7TuwQx4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyTe3kmk5olSTqzDJG5FPUhsuwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmY5ZjNhYzctYTk4Ni0z NmYxLThmZDktYjI2MmE4YjQzOWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJak8DOEi9DaV5Q5b6ijFhue591WpTVKNambvybaQSFNW17nkGapgiWs yhK5ngDiggQ5sfD5EnC0bITfai36IXR9SgCy9brMTjHx4Issy33WRYt6kqYqjVgX 5+8v7nTZ6DHGZdPzfqwkiZvTSLXrnNRfzbrYotrnnGA2VPwXAagcATea/089AcB1 t6HcTQQTHgyJab/gIFxnh/rMU9nYHAU5zkkdiX8PEu3yxbm1dWM6VjisiE3OBaRC ExnatjMMgtf2+Ad33Q4qlUcQm/lkrRmb40KM0v39dsrAeMhdJoyApH/Xtzw9wckz As6PCX40uSbGyauMFLl0CNdkWgIC8cI= -----END CERTIFICATE-----Generated at Sun Jan 25 12:12:03 2026 by rpki-client