This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa File: 86ff9137-ba37-3761-99ee-1e32d7d0af90.roa (raw, json) Hash identifier: S4y998EnLyXJzIFqEbPPLzJfN4XVK8kJhYT1wdwj0PY= Subject key identifier: EF:5F:B7:80:18:0A:FB:0A:5F:C7:1A:45:B2:81:EB:D4:FC:88:84:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C751F8AD5D52D6A494888D200 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1f:8a:d5:d5:2d:6a:49:48:88:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=38228fdb-2e6a-4b0e-8a01-81f8805956a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5c:33:ab:04:76:70:d0:7b:8a:96:5d:4b:0d: b9:0f:fc:42:0d:81:65:51:25:4c:9a:e1:df:65:3a: 14:c7:80:89:90:b6:ec:41:be:93:1f:df:28:c1:3d: 66:d4:e9:b6:8b:27:33:cf:c2:0c:01:84:d8:ac:ae: 41:79:ef:3d:5c:ce:83:4e:ac:05:45:36:b3:29:8e: 98:2b:b1:28:6b:d5:a7:dc:b1:27:40:c6:0f:d3:71: 49:41:01:79:79:bb:32:00:e0:38:40:2d:f5:db:98: 8b:c2:9f:7d:e7:e5:94:5f:46:ce:a0:93:31:b5:46: 20:3e:fa:6f:02:e1:87:a9:1e:8d:15:9a:17:49:10: a8:1f:60:06:de:e0:77:57:56:f5:b1:4a:b1:dc:9b: 25:72:32:03:1b:44:e3:6b:8a:03:8f:91:d8:56:c2: b3:21:00:16:ab:93:f0:a5:7c:16:84:43:7e:48:62: d7:13:16:0c:e2:03:0b:bc:6e:96:8a:b7:ed:00:a3: f1:3f:e2:27:7c:82:aa:d3:92:21:ce:6a:95:f7:27: 73:72:9a:3f:f1:36:36:cc:82:5e:23:02:00:8f:7c: 02:bc:2c:05:21:f7:3f:85:d4:03:ea:a3:37:54:6d: 12:95:a2:38:02:09:c3:bf:4c:c5:8d:c6:ae:52:bb: cb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5F:B7:80:18:0A:FB:0A:5F:C7:1A:45:B2:81:EB:D4:FC:88:84:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86ff9137-ba37-3761-99ee-1e32d7d0af90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:37:ea:2f:f5:0e:5f:7c:a8:42:d7:bc:74:b7:5f:96:e1:b1: e8:d0:b0:2c:63:55:7e:aa:9a:a2:a3:c5:80:ea:99:61:7e:8a: ee:d8:84:4a:24:62:8d:83:a4:48:80:7f:b7:c2:00:51:65:71: 38:16:e0:6c:98:c2:73:88:57:8b:e0:27:b9:78:35:f7:a2:c9: df:29:14:0a:d3:55:a3:ba:dc:88:47:d6:4f:5a:39:30:08:57: 7f:61:14:1e:61:20:b0:00:a5:6c:3f:58:c0:1c:76:5d:c7:d2: cb:21:5b:cb:a6:f5:57:3d:2d:aa:3e:ca:9e:d0:6b:f2:8d:f6: e7:64:9d:c6:aa:1c:a0:ce:46:ac:c2:b5:23:dd:00:59:69:d9: 0e:d5:69:64:8e:97:bc:ef:17:ad:a6:1e:f2:e1:46:5d:01:a7: dc:35:ce:d7:cf:db:df:d4:7a:e2:7e:a2:ca:de:85:ee:73:31: 6b:01:dc:50:3d:79:25:c1:ba:11:fc:35:cb:b3:31:06:58:2d: 9b:9b:74:92:72:e5:c7:ea:3a:fd:0d:9d:99:f8:c1:6d:67:fe: 62:cb:54:ad:27:f1:f7:49:b9:2b:9d:07:19:d9:65:d9:f3:4f: 25:ed:4e:8d:38:68:f7:57:be:30:6a:52:86:36:07:12:4a:fd: 2d:11:b7:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1H4rV1S1qSUiI0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk MzgyMjhmZGItMmU2YS00YjBlLThhMDEtODFmODgwNTk1NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVwzqwR2cNB7ipZdSw25D/xCDYFlUSVMmuHf ZToUx4CJkLbsQb6TH98owT1m1Om2iyczz8IMAYTYrK5Bee89XM6DTqwFRTazKY6Y K7Eoa9Wn3LEnQMYP03FJQQF5ebsyAOA4QC3125iLwp995+WUX0bOoJMxtUYgPvpv AuGHqR6NFZoXSRCoH2AG3uB3V1b1sUqx3JslcjIDG0Tja4oDj5HYVsKzIQAWq5Pw pXwWhEN+SGLXExYM4gMLvG6WirftAKPxP+InfIKq05IhzmqV9ydzcpo/8TY2zIJe IwIAj3wCvCwFIfc/hdQD6qM3VG0SlaI4AgnDv0zFjcauUrvLcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9ft4AYCvsKX8caRbKB69T8iIQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODZmZjkxMzctYmEzNy0z NzYxLTk5ZWUtMWUzMmQ3ZDBhZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg36i/1Dl98qELXvHS3X5bhsejQsCxjVX6qmqKjxYDqmWF+iu7YhEok Yo2DpEiAf7fCAFFlcTgW4GyYwnOIV4vgJ7l4Nfeiyd8pFArTVaO63IhH1k9aOTAI V39hFB5hILAApWw/WMAcdl3H0sshW8um9Vc9Lao+yp7Qa/KN9udkncaqHKDORqzC tSPdAFlp2Q7VaWSOl7zvF62mHvLhRl0Bp9w1ztfP29/UeuJ+osrehe5zMWsB3FA9 eSXBuhH8NcuzMQZYLZubdJJy5cfqOv0NnZn4wW1n/mLLVK0n8fdJuSudBxnZZdnz TyXtTo04aPdXvjBqUoY2BxJK/S0Rt+U= -----END CERTIFICATE-----Generated at Sun Jan 11 08:18:28 2026 by rpki-client