This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa File: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (raw, json) Hash identifier: 4Lyz88zF+tCJzPa2TC1wn+anUTiyQmfd+wqXV2mgZ2s= Subject key identifier: 59:4C:7C:C7:CB:53:0C:D5:E5:1A:BB:D9:4C:44:EC:C0:24:4F:09:C1 Certificate issuer: /CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Certificate serial: 010D0C9F4328584C751C0E11A380C40AF2705C28 Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 3359 IP address blocks: 199.185.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:0e:11:a3:80:c4:0a:f2:70:5c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=9a6af56b-bbd1-4935-a035-207c49e8d55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:a7:b9:0c:20:f2:4f:0d:f6:3d:4e:5f:06: 19:ac:f2:e3:f0:32:39:55:04:ae:e4:2f:9a:bf:24: d9:49:58:1b:92:df:b5:5c:e6:10:56:08:f8:f2:15: 9b:f7:f9:cb:2c:10:42:d0:42:03:99:cf:48:8c:28: 26:b4:d4:1b:42:35:8d:3e:88:3a:b1:db:a7:dc:44: 40:9b:35:62:47:fb:7e:65:67:bd:de:0c:71:ab:6c: c0:fe:a9:18:63:a1:ec:47:b6:ad:38:d5:0f:97:01: d9:1b:77:93:d5:fd:7f:e1:41:9c:94:16:b5:8e:cf: 8e:61:d3:cf:52:31:a7:0f:51:a4:4b:19:ea:95:25: 66:1d:22:a1:67:9a:97:2d:52:6e:00:a2:56:83:3c: ed:67:77:8a:7a:68:ee:01:dd:9b:60:62:db:5e:02: 8a:d6:e5:53:a7:91:8d:9f:52:ec:8a:cf:6c:24:34: 5e:0c:fc:ec:22:18:36:e0:db:4f:43:9f:4b:d5:cd: 1d:d1:f2:fc:39:0d:d5:4b:e6:73:5f:14:ee:96:0e: ac:9e:15:6d:f7:12:53:29:09:04:6a:eb:45:f1:09: e3:76:cd:9a:e6:a5:62:13:66:36:ec:c7:1d:d4:26: 45:56:81:85:ae:9c:b4:54:da:88:ba:5d:a5:23:92: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4C:7C:C7:CB:53:0C:D5:E5:1A:BB:D9:4C:44:EC:C0:24:4F:09:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl X509v3 Authority Key Identifier: keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer sbgp-ipAddrBlock: critical IPv4: 199.185.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:0c:1c:52:2a:4e:80:27:94:49:db:ac:d8:87:49:61:ba:91: e7:82:e9:ea:9d:9d:e4:9a:d5:9d:8d:24:f9:bd:45:9a:5a:72: 08:58:46:13:1e:8b:41:90:94:63:67:88:6d:ca:50:38:3f:db: 9e:05:4b:dc:56:31:5f:2d:c5:76:45:3f:c4:0a:b5:dc:f9:c5: 47:9e:0b:96:47:ca:aa:de:5e:d6:45:90:18:f7:b4:30:af:49: 2b:3a:ea:fa:12:b7:c0:45:25:d4:81:eb:5b:12:2a:9b:10:b5: 7d:57:5d:5c:36:31:67:5e:5b:b1:5c:08:16:05:22:14:86:30: 00:d3:25:b2:1c:d0:f2:f7:7a:a9:ae:ae:67:29:2d:d5:a6:f2: 0d:11:31:b4:7c:6f:91:b5:e2:31:0b:a4:ea:d5:ed:c5:77:ea: f4:f9:62:5d:05:ad:89:11:16:9a:03:b0:d8:1a:d6:55:f7:7e: 5d:b1:90:bc:d4:23:fa:31:2b:40:a6:bd:f9:2b:88:fb:ed:55: e3:e7:0e:25:5f:b5:9b:80:1e:c6:d0:f1:7c:27:12:1f:cb:a3: 5e:5f:15:84:a2:76:bb:72:95:bd:48:af:4e:47:b5:2e:bb:de: cb:2e:07:dc:08:24:c6:98:5e:11:4b:b4:a4:57:d2:90:59:1a: 53:5b:ca:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HA4Ro4DECvJwXCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg5YWZiODktMDIxZi00ODZhLTkzODYtZWE1YWQyYTg1 ZWIzMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk OWE2YWY1NmItYmJkMS00OTM1LWEwMzUtMjA3YzQ5ZThkNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnWnuQwg8k8N9j1OXwYZrPLj8DI5VQSu5C+a vyTZSVgbkt+1XOYQVgj48hWb9/nLLBBC0EIDmc9IjCgmtNQbQjWNPog6sdun3ERA mzViR/t+ZWe93gxxq2zA/qkYY6HsR7atONUPlwHZG3eT1f1/4UGclBa1js+OYdPP UjGnD1GkSxnqlSVmHSKhZ5qXLVJuAKJWgzztZ3eKemjuAd2bYGLbXgKK1uVTp5GN n1Lsis9sJDReDPzsIhg24NtPQ59L1c0d0fL8OQ3VS+ZzXxTulg6snhVt9xJTKQkE autF8Qnjds2a5qViE2Y27Mcd1CZFVoGFrpy0VNqIul2lI5KI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlMfMfLUwzV5Rq72UxE7MAkTwnBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85ODlh ZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVhZDJhODVlYjMvZmMyZDI1Y2EtMGRmYS0z MDkyLWFlZjMtYTFlOGMzY2MxMWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTg5YWZiODktMDIxZi00ODZhLTkz ODYtZWE1YWQyYTg1ZWIzLzk4OWFmYjg5LTAyMWYtNDg2YS05Mzg2LWVhNWFkMmE4 NWViMy5jcmwwHwYDVR0jBBgwFoAUyLOtrnU5gy0QTgFrZ/8fi91WZlIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85ODlhZmI4OS0wMjFmLTQ4NmEtOTM4Ni1lYTVh ZDJhODVlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7kCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwMHFIqToAnlEnbrNiHSWG6keeC6eqdneSa1Z2NJPm9RZpacghYRhMe i0GQlGNniG3KUDg/254FS9xWMV8txXZFP8QKtdz5xUeeC5ZHyqreXtZFkBj3tDCv SSs66voSt8BFJdSB61sSKpsQtX1XXVw2MWdeW7FcCBYFIhSGMADTJbIc0PL3eqmu rmcpLdWm8g0RMbR8b5G14jELpOrV7cV36vT5Yl0FrYkRFpoDsNga1lX3fl2xkLzU I/oxK0CmvfkriPvtVePnDiVftZuAHsbQ8XwnEh/Lo15fFYSidrtylb1Ir05HtS67 3ssuB9wIJMaYXhFLtKRX0pBZGlNbyoA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:19 2026 by rpki-client