This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa File: 1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa (raw, json) Hash identifier: kgRIWbIYI5/zSTHlYZ6u1Bl7V/Dc5RyMyjwJqfMyo5Y= Subject key identifier: 32:84:0E:BA:C3:BF:C8:7D:8B:37:85:79:FB:D4:15:65:90:D5:B3:7A Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F4328584C5A968611BC228A574C792C00 Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 35860 IP address blocks: 142.248.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:86:11:bc:22:8a:57:4c:79:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=9eaf8cec-b202-4919-9d3c-0de396d47c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:2f:70:a7:56:ab:6f:ef:4b:7f:ce:d7:82: ef:0b:2a:15:05:b8:12:b6:00:23:aa:4d:20:56:7d: da:36:58:b0:3b:53:d9:70:cf:65:99:2a:72:2b:b2: eb:fd:c7:37:bc:c3:84:21:16:ba:40:3a:82:04:16: 0b:4e:9a:76:3d:29:e6:b5:e9:c3:cb:5e:b5:57:3d: 9b:56:9b:93:99:c6:5d:13:26:e4:ec:97:db:d6:2a: ee:1a:46:9c:fe:44:ac:6e:67:32:bf:b7:ac:af:c4: 34:3b:5f:c4:1e:61:02:13:65:81:ba:98:21:4f:f5: c4:ec:5a:c3:ce:b1:6a:9b:7a:b3:b6:6b:ea:6c:1a: 77:05:1c:17:e5:d1:77:61:4e:94:2b:3a:86:2b:18: 5f:68:71:b4:4f:f0:8c:09:3b:e6:08:db:c1:e9:90: 53:ca:6e:c7:cf:23:fa:23:70:f3:13:99:97:8c:af: 97:02:58:90:7e:d5:a6:e2:c7:e3:2d:03:25:a4:06: 9a:13:2a:79:c0:40:40:c8:90:7b:14:73:32:b5:03: a4:2e:8e:9f:09:36:69:ea:eb:f6:ed:7a:e9:1b:c3: 92:b8:c3:73:5c:6b:7b:ba:44:16:8a:74:3b:7d:29: 65:ca:ad:48:90:2b:ef:d0:6f:37:0e:fc:a1:12:42: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:84:0E:BA:C3:BF:C8:7D:8B:37:85:79:FB:D4:15:65:90:D5:B3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: 142.248.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:68:fe:ec:db:34:e2:c6:d1:93:60:22:74:60:e0:fc:ec:10: 98:bc:c2:5a:c1:03:53:64:67:b7:9f:ce:cf:32:b0:10:ce:5c: b5:0d:e8:14:86:22:48:9f:70:40:96:03:bd:e0:3e:e4:56:3b: 60:3c:74:06:6b:a7:7e:ea:a8:b4:be:86:e4:0d:0a:b7:3c:02: f5:f2:0f:0a:62:d1:f6:65:e6:31:7a:15:c2:a0:b6:a3:6b:f1: 4d:55:76:d0:37:61:3c:ff:d3:33:02:02:2d:04:6a:e6:f9:38: 09:04:bb:2d:ba:16:02:15:fc:b3:d9:2f:ea:aa:3e:47:9c:4c: 4f:81:15:7a:fd:d0:9b:b4:6b:ba:9a:6b:d2:62:29:10:cc:ef: ca:d1:83:0e:63:d2:59:80:e3:09:cd:a7:0d:87:da:7e:96:89: a0:7a:07:af:f7:a1:11:d3:84:57:47:bd:7a:70:a5:5e:db:51: f1:6b:e9:8d:a5:ce:15:15:a1:3d:98:7a:7a:33:70:9a:7b:ba: 64:83:21:5e:51:13:9b:f5:f1:af:45:65:31:18:4a:e0:92:85: 92:d5:44:05:7c:5c:70:29:51:2c:81:f7:5f:1a:f7:32:91:e2: 67:af:ab:74:1e:0a:67:10:fa:39:28:7d:0d:d2:dd:9e:dd:d9: fd:88:6e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExaloYRvCKKV0x5LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk OWVhZjhjZWMtYjIwMi00OTE5LTlkM2MtMGRlMzk2ZDQ3YzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEovcKdWq2/vS3/O14LvCyoVBbgStgAjqk0g Vn3aNliwO1PZcM9lmSpyK7Lr/cc3vMOEIRa6QDqCBBYLTpp2PSnmtenDy161Vz2b VpuTmcZdEybk7Jfb1iruGkac/kSsbmcyv7esr8Q0O1/EHmECE2WBupghT/XE7FrD zrFqm3qztmvqbBp3BRwX5dF3YU6UKzqGKxhfaHG0T/CMCTvmCNvB6ZBTym7HzyP6 I3DzE5mXjK+XAliQftWm4sfjLQMlpAaaEyp5wEBAyJB7FHMytQOkLo6fCTZp6uv2 7XrpG8OSuMNzXGt7ukQWinQ7fSllyq1IkCvv0G83DvyhEkK4QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKEDrrDv8h9izeFefvUFWWQ1bN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvMWE0NTkxMGItNWY0NC0z MGNlLTlkZmEtOWZkYzFmZTg2Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZo/uzbNOLG0ZNgInRg4PzsEJi8wlrBA1NkZ7efzs8ysBDOXLUN6BSG IkifcECWA73gPuRWO2A8dAZrp37qqLS+huQNCrc8AvXyDwpi0fZl5jF6FcKgtqNr 8U1VdtA3YTz/0zMCAi0Eaub5OAkEuy26FgIV/LPZL+qqPkecTE+BFXr90Ju0a7qa a9JiKRDM78rRgw5j0lmA4wnNpw2H2n6WiaB6B6/3oRHThFdHvXpwpV7bUfFr6Y2l zhUVoT2YenozcJp7umSDIV5RE5v18a9FZTEYSuCShZLVRAV8XHApUSyB918a9zKR 4mevq3QeCmcQ+jkofQ3S3Z7d2f2IbkQ= -----END CERTIFICATE-----Generated at Sat Jan 10 22:53:29 2026 by rpki-client