This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa File: 99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa (raw, json) Hash identifier: Egz2lGQO8+ICk0Itrnf6KYX1II4JAijVb/QG7GKw5Ms= Subject key identifier: 43:66:30:D8:0F:6F:D9:F0:5C:8C:B5:D0:67:0B:CA:C6:94:96:36:F2 Certificate issuer: /CN=858dcc0e-c668-41bd-874f-1be5c6d712fb Certificate serial: 010D0C9F4328584BE555BEE680838A1A72AAB600 Authority key identifier: 59:0B:34:C3:D0:A8:CD:7D:D6:73:F0:10:6D:72:34:08:E0:1C:D7:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 398927 IP address blocks: 192.77.182.0/23 maxlen: 24 204.87.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:be:e6:80:83:8a:1a:72:aa:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858dcc0e-c668-41bd-874f-1be5c6d712fb Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=fb28b777-b308-42d3-918c-13d8bf679c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:96:b8:3d:67:79:82:2d:5d:ee:c0:f0:3b: 8d:f3:d8:b8:e8:6b:ba:8b:aa:9d:08:99:e5:c0:67: 95:81:d5:bb:8d:b8:5b:29:f4:04:2a:c8:e7:ad:4d: 58:27:37:38:17:01:50:ac:c5:e3:2c:2e:3d:40:20: 74:b3:42:a6:ad:b2:02:21:3d:1c:2b:4e:38:f8:82: 46:3b:f0:35:53:95:67:88:c0:af:c3:20:9d:74:c1: 0e:ac:47:ef:28:47:e2:30:3a:aa:f0:b2:f0:fa:57: b7:24:a6:30:37:63:20:92:ed:e7:71:e2:17:4d:44: 8d:50:45:13:99:84:60:68:f6:ff:14:55:d1:4d:a7: f1:48:50:a8:b0:58:a5:37:dd:c3:14:b5:e1:ca:17: cc:a5:9e:9d:68:48:66:ce:0a:e8:4b:ee:22:37:05: 93:52:db:bf:5b:57:ca:19:aa:8f:e1:5f:85:03:a6: 5a:ee:05:56:87:c8:15:0a:5b:63:cd:a6:98:86:11: 7b:8d:4d:26:db:d4:8d:99:a6:67:2b:19:ec:94:be: 41:ff:a5:69:93:bb:5b:26:e0:d7:e0:f5:8c:d8:76: 90:b3:f2:8c:e9:f3:d5:41:e1:c2:83:d8:e6:ec:78: c2:44:8d:e4:46:ae:54:62:2d:33:89:37:f2:37:a3: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:30:D8:0F:6F:D9:F0:5C:8C:B5:D0:67:0B:CA:C6:94:96:36:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/99a5a58a-f6e7-3a31-9683-a428bf9a4fd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb/858dcc0e-c668-41bd-874f-1be5c6d712fb.crl X509v3 Authority Key Identifier: keyid:59:0B:34:C3:D0:A8:CD:7D:D6:73:F0:10:6D:72:34:08:E0:1C:D7:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/858dcc0e-c668-41bd-874f-1be5c6d712fb.cer sbgp-ipAddrBlock: critical IPv4: 192.77.182.0/23 204.87.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b9:12:57:9d:0e:e3:36:58:7d:07:51:eb:14:a1:97:80:8f: 9f:0e:fb:13:37:bd:c4:a6:2f:b5:62:08:9b:c5:c1:73:9c:1d: 06:53:32:db:db:69:da:7c:07:99:0d:d2:b2:b9:64:90:6b:01: 3c:c5:c2:4f:30:09:76:51:4d:46:46:9e:f4:29:56:3c:15:dc: 7c:4e:a7:2c:fe:c4:6a:18:93:76:1b:cb:a5:f7:87:ac:49:db: 63:1e:db:60:35:96:2e:93:26:db:2b:45:42:61:7f:95:c0:6e: a9:74:7e:24:ef:77:4c:24:67:92:a4:b4:15:ed:52:cd:05:2b: 9b:13:e6:c6:50:8b:8a:07:a0:48:b9:79:69:9a:86:06:1a:41: 1c:c4:f1:12:43:6e:b6:d7:20:6b:56:39:0a:f6:dd:17:dd:e8: e6:37:a4:f2:38:9f:4d:c6:28:e3:b1:a9:01:c1:9a:55:24:3d: c8:0d:00:18:fd:4c:73:ea:19:aa:f2:d2:18:88:1b:de:d8:36: 73:9f:1c:7f:fc:51:9c:68:94:a8:05:8e:48:34:2d:97:c8:73: e5:cd:d7:6b:cc:40:a9:e0:17:23:65:53:0d:5d:93:1e:10:56: 1e:ca:b6:46:ee:8b:bb:46:76:08:d8:48:dd:53:1a:75:48:a8: bb:00:01:10 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvlVb7mgIOKGnKqtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU4ZGNjMGUtYzY2OC00MWJkLTg3NGYtMWJlNWM2ZDcx MmZiMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmIyOGI3NzctYjMwOC00MmQzLTkxOGMtMTNkOGJmNjc5YzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSuWuD1neYItXe7A8DuN89i46Gu6i6qdCJnl wGeVgdW7jbhbKfQEKsjnrU1YJzc4FwFQrMXjLC49QCB0s0KmrbICIT0cK044+IJG O/A1U5VniMCvwyCddMEOrEfvKEfiMDqq8LLw+le3JKYwN2Mgku3nceIXTUSNUEUT mYRgaPb/FFXRTafxSFCosFilN93DFLXhyhfMpZ6daEhmzgroS+4iNwWTUtu/W1fK GaqP4V+FA6Za7gVWh8gVCltjzaaYhhF7jU0m29SNmaZnKxnslL5B/6Vpk7tbJuDX 4PWM2HaQs/KM6fPVQeHCg9jm7HjCRI3kRq5UYi0ziTfyN6OGlwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFENmMNgPb9nwXIy10GcLysaUljbyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NThk Y2MwZS1jNjY4LTQxYmQtODc0Zi0xYmU1YzZkNzEyZmIvOTlhNWE1OGEtZjZlNy0z YTMxLTk2ODMtYTQyOGJmOWE0ZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU4ZGNjMGUtYzY2OC00MWJkLTg3 NGYtMWJlNWM2ZDcxMmZiLzg1OGRjYzBlLWM2NjgtNDFiZC04NzRmLTFiZTVjNmQ3 MTJmYi5jcmwwHwYDVR0jBBgwFoAUWQs0w9CozX3Wc/AQbXI0COAc12owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NThkY2MwZS1jNjY4LTQxYmQtODc0Zi0xYmU1 YzZkNzEyZmIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwE22AwQA zFeqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG25EledDuM2WH0HUesUoZeAj58O+xM3vcSmL7ViCJvFwXOc HQZTMtvbadp8B5kN0rK5ZJBrATzFwk8wCXZRTUZGnvQpVjwV3HxOpyz+xGoYk3Yb y6X3h6xJ22Me22A1li6TJtsrRUJhf5XAbql0fiTvd0wkZ5KktBXtUs0FK5sT5sZQ i4oHoEi5eWmahgYaQRzE8RJDbrbXIGtWOQr23Rfd6OY3pPI4n03GKOOxqQHBmlUk PcgNABj9THPqGary0hiIG97YNnOfHH/8UZxolKgFjkg0LZfIc+XN12vMQKngFyNl Uw1dkx4QVh7Ktkbui7tGdgjYSN1TGnVIqLsAARA= -----END CERTIFICATE-----Generated at Sat Dec 20 10:00:05 2025 by rpki-client