This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa File: 2d8ee973-4f04-3f39-80ec-35239969bcee.roa (raw, json) Hash identifier: wN2sYXNeT+LCgRHo1KM05rqAbG0wBx4LihpiYAnraiM= Subject key identifier: 24:CE:9D:92:C1:D3:6E:A9:83:F2:7D:AD:DB:2E:63:70:E4:83:EB:A9 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584C4CA117DF858B63318401A580 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 11892 IP address blocks: 168.146.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:17:df:85:8b:63:31:84:01:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=8790396b-c20a-4a1f-a3d5-5c82f3e2472a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:70:ca:b6:e2:31:2d:27:7f:62:e2:e0:01: 0e:0d:72:e0:00:84:e3:6c:0a:73:66:d4:44:22:23: 3b:e6:49:ba:00:97:86:ff:eb:8d:77:97:dc:6a:53: 9f:3f:55:a9:7a:fe:7d:ea:fb:d9:db:69:3a:ce:0f: 22:dc:9d:91:01:43:19:f7:08:22:1c:96:38:24:87: e0:3c:a9:71:3f:92:10:9d:8a:a5:1f:8f:15:10:1b: 4e:b5:70:66:b0:26:69:49:09:b5:8d:96:52:1d:fa: 11:7d:8b:c1:8d:3a:a6:36:ad:94:b7:55:3c:1b:04: 0c:fc:cd:93:16:2d:ac:e4:12:ec:63:11:30:46:34: 50:d2:4c:4c:60:c5:bc:c2:11:66:c2:37:42:c0:1a: 44:26:d4:36:ef:ef:06:aa:f3:8b:3b:22:5b:95:6e: e2:8d:56:9e:9d:4e:58:72:e0:74:0b:0c:a3:45:b0: e9:18:be:48:09:aa:0f:3f:f6:5b:58:b8:46:7e:a8: e1:b7:00:46:a7:c5:9b:6f:67:a6:ac:e7:3d:5d:92: aa:b0:52:3f:fe:d7:90:05:1c:a9:ad:33:0c:df:99: ca:13:0e:f4:78:79:1f:2c:c5:63:c0:f1:51:d5:02: bf:0d:3d:3d:0b:b5:39:9e:b7:a9:2a:fb:d7:da:ec: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CE:9D:92:C1:D3:6E:A9:83:F2:7D:AD:DB:2E:63:70:E4:83:EB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/2d8ee973-4f04-3f39-80ec-35239969bcee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 168.146.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:79:fc:5c:59:af:1e:74:55:bd:0b:77:9f:ae:15:90:f1:89: 39:23:43:4a:16:1c:cf:a6:dd:71:05:58:a4:66:46:65:24:32: 97:35:30:ef:b2:b6:6d:1c:d4:b5:6e:b7:64:68:69:54:2e:08: d3:7b:51:73:d8:d6:f4:eb:ce:4a:55:57:a6:e5:5f:53:7e:5a: 0f:26:a4:fb:2b:c2:5d:9a:f6:92:31:de:71:0b:6d:69:ff:56: 5d:cc:44:6a:c8:9b:49:00:0f:7f:db:b4:d7:27:b0:79:ca:1c: 4b:56:94:ff:7b:d8:ab:d6:a1:c4:e7:0f:98:bb:00:e4:bd:62: 56:fc:0e:c4:bd:5e:62:4c:a6:a3:7a:c9:f6:65:38:3c:1a:74: ca:4c:9f:60:d3:7a:53:2f:e1:6d:1c:51:9a:55:7a:5f:32:6f: e6:98:b4:b1:83:11:69:04:90:28:b3:2e:e9:51:40:8f:90:90: f9:61:75:69:55:bf:82:97:6e:ea:f8:0f:24:c2:a9:bf:50:d2: 91:80:12:0b:36:79:2d:6d:de:01:9d:5c:d8:74:11:9a:44:12: 91:f7:9b:c1:82:6e:52:c1:0c:a0:33:52:80:8e:35:45:56:51: 34:7d:f5:f9:13:8f:91:63:01:14:5a:60:bd:37:e5:b7:72:0f: 31:ac:27:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoRffhYtjMYQBpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODc5MDM5NmItYzIwYS00YTFmLWEzZDUtNWM4MmYzZTI0NzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQRwyrbiMS0nf2Li4AEODXLgAITjbApzZtRE IiM75km6AJeG/+uNd5fcalOfP1Wpev596vvZ22k6zg8i3J2RAUMZ9wgiHJY4JIfg PKlxP5IQnYqlH48VEBtOtXBmsCZpSQm1jZZSHfoRfYvBjTqmNq2Ut1U8GwQM/M2T Fi2s5BLsYxEwRjRQ0kxMYMW8whFmwjdCwBpEJtQ27+8GqvOLOyJblW7ijVaenU5Y cuB0CwyjRbDpGL5ICaoPP/ZbWLhGfqjhtwBGp8Wbb2emrOc9XZKqsFI//teQBRyp rTMM35nKEw70eHkfLMVjwPFR1QK/DT09C7U5nrepKvvX2uzT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTOnZLB026pg/J9rdsuY3Dkg+upMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvMmQ4ZWU5NzMtNGYwNC0z ZjM5LTgwZWMtMzUyMzk5NjliY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqJJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx5/FxZrx50Vb0Ld5+uFZDxiTkjQ0oWHM+m3XEFWKRmRmUkMpc1MO+y tm0c1LVut2RoaVQuCNN7UXPY1vTrzkpVV6blX1N+Wg8mpPsrwl2a9pIx3nELbWn/ Vl3MRGrIm0kAD3/btNcnsHnKHEtWlP972KvWocTnD5i7AOS9Ylb8DsS9XmJMpqN6 yfZlODwadMpMn2DTelMv4W0cUZpVel8yb+aYtLGDEWkEkCizLulRQI+QkPlhdWlV v4KXbur4DyTCqb9Q0pGAEgs2eS1t3gGdXNh0EZpEEpH3m8GCblLBDKAzUoCONUVW UTR99fkTj5FjARRaYL035bdyDzGsJ6w= -----END CERTIFICATE-----Generated at Sat Jan 10 05:01:33 2026 by rpki-client