This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa File: c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa (raw, json) Hash identifier: cNv8AxvlHKwU9cv7bl60B7UOatLOiXEBlVJkHDkA4JU= Subject key identifier: 31:E3:F7:B8:1E:30:D5:3D:C8:83:AD:60:ED:F8:2C:22:A0:57:3C:D8 Certificate issuer: /CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Certificate serial: 010D0C9F4328584C6B569E874AFF9CE425F55B40 Authority key identifier: 6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 136.228.0.0/19 maxlen: 32 139.60.200.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:9e:87:4a:ff:9c:e4:25:f5:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d02a52e5-2b71-4124-bd29-60e90e59f47d Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=4fed9514-60b3-49aa-b345-41e404370848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:70:db:ce:bd:43:c3:84:18:4c:e8:8a:eb: 70:6b:f3:34:7b:60:76:a6:8c:b3:03:9d:2d:f7:17: 28:7f:03:da:51:c1:21:ec:de:76:72:fa:9b:05:4c: 37:74:8b:9e:44:e0:a9:8d:1d:67:bf:4e:6a:6e:fe: 1f:13:72:ce:0e:e4:6a:4f:dc:d0:59:9a:fa:16:fe: 59:3d:d4:bc:34:54:37:14:2a:94:c5:3c:14:ac:21: 81:20:e9:f0:cc:1e:bb:41:da:62:11:73:25:63:d2: d5:1a:ec:cd:0b:87:2e:bd:ee:74:b0:db:08:e7:ee: 55:28:aa:2c:17:f0:cb:d9:12:c1:24:28:97:7b:6e: 60:a3:9e:52:2b:61:cf:f4:3b:5d:1a:e2:3d:a6:1a: 50:01:c7:c9:f7:9b:3a:1e:99:9c:11:93:da:aa:92: d6:85:4c:6f:ab:62:29:32:1f:de:49:63:d3:3c:7f: 60:86:25:6d:31:75:69:1b:24:cf:b8:f2:59:47:bd: 2e:6e:ec:aa:a3:84:63:ae:26:3a:90:2e:51:57:38: 29:18:10:42:57:be:ce:4b:ab:3a:bc:49:53:f3:0f: 6c:a7:74:62:6f:72:58:9b:b5:b1:fc:5b:51:c4:7e: 29:01:f0:8e:97:55:29:00:72:7f:77:5b:bd:02:d6: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E3:F7:B8:1E:30:D5:3D:C8:83:AD:60:ED:F8:2C:22:A0:57:3C:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/c97d76a7-e9ca-3812-913c-59f3ad8c9db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d/d02a52e5-2b71-4124-bd29-60e90e59f47d.crl X509v3 Authority Key Identifier: keyid:6A:E5:9B:C3:03:E7:53:F0:08:74:CD:E2:23:96:C3:24:7E:39:E7:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d02a52e5-2b71-4124-bd29-60e90e59f47d.cer sbgp-ipAddrBlock: critical IPv4: 136.228.0.0/19 139.60.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e9:ca:5b:f7:9e:fe:12:bf:fc:0b:6b:fd:d1:55:6f:6c:de: 25:6f:b0:10:a8:12:de:b0:d9:ad:73:ee:8a:eb:9f:0d:5b:e9: 8c:9d:e0:a8:74:72:d9:42:e2:fb:80:3a:48:39:e2:d4:75:73: a5:b1:7e:86:4f:90:7b:af:f7:c8:cd:17:59:e4:4c:c2:27:30: e6:91:13:53:e5:f6:7a:29:f7:6f:fd:47:79:0e:f6:2c:e2:cf: 38:38:3a:21:d0:bf:83:98:cf:18:f0:4f:49:d3:72:f7:31:a3: 21:a1:4c:f7:3c:79:a9:a0:05:e2:a0:ce:ba:06:21:6b:f6:64: 46:90:7b:aa:9f:e6:86:da:a0:46:79:40:f0:4b:53:bc:6e:71: 95:94:99:5f:6d:d1:a4:8f:15:be:a5:7f:03:bc:a2:5b:5a:b2: eb:9e:0f:5b:ba:d5:0e:1a:01:4b:0c:08:78:15:f5:e2:59:ee: c2:0c:79:1b:10:4a:f4:48:4f:27:a5:40:84:cc:b4:75:05:a4: 17:76:61:97:51:67:50:b5:13:1b:08:a5:ec:41:10:22:0b:66: cf:8e:22:0f:d5:ad:30:da:27:3f:bb:87:2e:3c:12:b2:2f:1b: 99:8a:dd:8a:74:c0:36:13:41:b6:87:98:b4:dc:4f:f8:a1:c1: d7:4a:02:be -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExrVp6HSv+c5CX1W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyYTUyZTUtMmI3MS00MTI0LWJkMjktNjBlOTBlNTlm NDdkMB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk NGZlZDk1MTQtNjBiMy00OWFhLWIzNDUtNDFlNDA0MzcwODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXtw2869Q8OEGEzoiutwa/M0e2B2poyzA50t 9xcofwPaUcEh7N52cvqbBUw3dIueROCpjR1nv05qbv4fE3LODuRqT9zQWZr6Fv5Z PdS8NFQ3FCqUxTwUrCGBIOnwzB67QdpiEXMlY9LVGuzNC4cuve50sNsI5+5VKKos F/DL2RLBJCiXe25go55SK2HP9DtdGuI9phpQAcfJ95s6HpmcEZPaqpLWhUxvq2Ip Mh/eSWPTPH9ghiVtMXVpGyTPuPJZR70ubuyqo4RjriY6kC5RVzgpGBBCV77OS6s6 vElT8w9sp3Rib3JYm7Wx/FtRxH4pAfCOl1UpAHJ/d1u9AtYTJwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFDHj97geMNU9yIOtYO34LCKgVzzYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJh NTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5MGU1OWY0N2QvYzk3ZDc2YTctZTljYS0z ODEyLTkxM2MtNTlmM2FkOGM5ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDAyYTUyZTUtMmI3MS00MTI0LWJk MjktNjBlOTBlNTlmNDdkL2QwMmE1MmU1LTJiNzEtNDEyNC1iZDI5LTYwZTkwZTU5 ZjQ3ZC5jcmwwHwYDVR0jBBgwFoAUauWbwwPnU/AIdM3iI5bDJH4557EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMDJhNTJlNS0yYjcxLTQxMjQtYmQyOS02MGU5 MGU1OWY0N2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFiOQAAwQD izzIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGbpylv3nv4Sv/wLa/3RVW9s3iVvsBCoEt6w2a1z7orrnw1b 6Yyd4Kh0ctlC4vuAOkg54tR1c6WxfoZPkHuv98jNF1nkTMInMOaRE1Pl9nop92/9 R3kO9izizzg4OiHQv4OYzxjwT0nTcvcxoyGhTPc8eamgBeKgzroGIWv2ZEaQe6qf 5obaoEZ5QPBLU7xucZWUmV9t0aSPFb6lfwO8oltasuueD1u61Q4aAUsMCHgV9eJZ 7sIMeRsQSvRITyelQITMtHUFpBd2YZdRZ1C1ExsIpexBECILZs+OIg/VrTDaJz+7 hy48ErIvG5mK3Yp0wDYTQbaHmLTcT/ihwddKAr4= -----END CERTIFICATE-----Generated at Sun Jan 25 06:11:17 2026 by rpki-client