This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa File: ea5fac7c-b585-38d4-8a2c-649c73995029.roa (raw, json) Hash identifier: VNPltgZ/NGuxYUtqzYG8Sx/Qx75envSvngbuNM08Mn0= Subject key identifier: C6:BF:09:DF:EB:A9:7A:DB:A2:98:41:3D:A3:AE:84:3C:BC:20:71:E7 Certificate issuer: /CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Certificate serial: 010D0C9F4328584C4CA10E5E8F6FC39D25AB6E80 Authority key identifier: F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 29016 IP address blocks: 159.182.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:0e:5e:8f:6f:c3:9d:25:ab:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d2cd209-f77d-4fb6-8d28-946d42f60d8e Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=9d41b096-ad9f-4ad0-90a2-e447b25520c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:23:ad:56:0b:a5:20:ae:71:48:f2:f1:8b: 96:ed:61:29:4a:6f:f6:9e:cc:34:09:8b:2b:9f:db: 92:00:1e:01:72:15:a6:34:30:9b:6b:89:fb:db:be: 6c:e8:35:14:da:22:5b:d0:f5:0e:7a:3b:a0:6d:07: 6e:93:b5:11:84:22:b5:e0:76:96:9d:96:79:c4:5f: 2b:0d:1c:33:df:79:ca:d6:d1:36:8b:65:fb:e4:d2: 2d:7b:81:cc:38:9b:dd:7e:04:ac:1b:80:40:4f:da: 43:0b:61:d8:e2:9b:7c:61:39:6d:f7:41:ff:e7:ab: f0:f3:2d:a4:59:b2:cf:04:b0:5d:06:07:0c:8d:b6: a2:88:24:f6:0b:35:2c:f0:52:1c:2f:f7:06:6a:a0: 15:30:f2:ec:50:19:79:c7:82:31:0e:89:46:8e:25: 99:fd:19:71:12:50:bd:88:41:5a:30:e6:4f:1c:02: 40:8d:60:d1:53:70:cd:8b:ea:91:d1:d5:fc:5b:6a: a3:81:a8:7c:05:8e:48:77:7a:e7:04:8a:84:ea:f3: e2:9b:8b:f9:b3:23:30:92:83:55:09:f7:a4:8e:99: 51:d2:e5:2c:54:23:21:88:d2:a3:0f:a2:42:35:c2: f8:9d:b8:7a:5d:84:12:91:64:09:d3:58:93:74:ce: 8b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BF:09:DF:EB:A9:7A:DB:A2:98:41:3D:A3:AE:84:3C:BC:20:71:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/ea5fac7c-b585-38d4-8a2c-649c73995029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.crl X509v3 Authority Key Identifier: keyid:F8:F3:80:E4:03:08:2D:F8:8E:62:61:A8:E5:D1:0A:0E:97:D1:7A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4d2cd209-f77d-4fb6-8d28-946d42f60d8e.cer sbgp-ipAddrBlock: critical IPv4: 159.182.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:df:01:12:2f:c3:3c:0a:d9:4b:6d:6c:e7:51:3a:5a:cf:63: 23:ca:d7:17:be:6e:75:3a:65:1c:5e:9c:94:28:ed:7f:8e:77: 0d:a0:e5:60:c1:8c:a2:a1:b3:2a:9f:5d:aa:bb:3a:a6:50:d8: d1:0b:6c:5f:95:b9:89:84:9d:b8:0f:08:60:4c:4d:bc:8c:fe: f6:07:af:89:d6:a5:79:5a:a0:62:70:55:73:98:3b:7a:10:f8: 60:ec:8e:1e:3d:c7:a7:25:09:d2:2b:9d:84:db:c4:2d:ab:93: 78:56:a1:db:84:a1:a7:a0:90:94:69:50:29:68:58:dd:be:b7: 41:ad:a3:34:62:ae:bb:ce:51:14:63:23:c5:9b:88:8a:31:cb: 21:13:25:02:09:69:3e:bd:64:38:c9:08:16:78:b1:46:4f:11: 5c:71:88:7d:eb:6b:92:7f:9f:d1:ae:f7:bf:b6:0f:ec:65:7b: fe:9b:8f:b7:5e:ef:b7:04:84:ca:c8:61:15:5d:53:ea:8a:d3: 49:e3:d0:a0:5b:e1:2c:b4:8e:24:a3:b8:8f:1a:20:fe:6a:6e: 22:f9:a0:2d:cc:c1:24:e0:a0:2d:f3:6e:72:b0:91:89:a0:14: 9d:fd:1b:b9:b9:d0:24:9a:11:e5:ec:e6:de:55:82:83:b7:0d: c6:e0:76:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoQ5ej2/DnSWrboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQyY2QyMDktZjc3ZC00ZmI2LThkMjgtOTQ2ZDQyZjYw ZDhlMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk OWQ0MWIwOTYtYWQ5Zi00YWQwLTkwYTItZTQ0N2IyNTUyMGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXcjrVYLpSCucUjy8YuW7WEpSm/2nsw0CYsr n9uSAB4BchWmNDCba4n7275s6DUU2iJb0PUOejugbQduk7URhCK14HaWnZZ5xF8r DRwz33nK1tE2i2X75NIte4HMOJvdfgSsG4BAT9pDC2HY4pt8YTlt90H/56vw8y2k WbLPBLBdBgcMjbaiiCT2CzUs8FIcL/cGaqAVMPLsUBl5x4IxDolGjiWZ/RlxElC9 iEFaMOZPHAJAjWDRU3DNi+qR0dX8W2qjgah8BY5Id3rnBIqE6vPim4v5syMwkoNV CfekjplR0uUsVCMhiNKjD6JCNcL4nbh6XYQSkWQJ01iTdM6LvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMa/Cd/rqXrbophBPaOuhDy8IHHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJj ZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZkNDJmNjBkOGUvZWE1ZmFjN2MtYjU4NS0z OGQ0LThhMmMtNjQ5YzczOTk1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGQyY2QyMDktZjc3ZC00ZmI2LThk MjgtOTQ2ZDQyZjYwZDhlLzRkMmNkMjA5LWY3N2QtNGZiNi04ZDI4LTk0NmQ0MmY2 MGQ4ZS5jcmwwHwYDVR0jBBgwFoAU+POA5AMILfiOYmGo5dEKDpfReucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZDJjZDIwOS1mNzdkLTRmYjYtOGQyOC05NDZk NDJmNjBkOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn7ZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzfARIvwzwK2UttbOdROlrPYyPK1xe+bnU6ZRxenJQo7X+Odw2g5WDB jKKhsyqfXaq7OqZQ2NELbF+VuYmEnbgPCGBMTbyM/vYHr4nWpXlaoGJwVXOYO3oQ +GDsjh49x6clCdIrnYTbxC2rk3hWoduEoaegkJRpUCloWN2+t0GtozRirrvOURRj I8WbiIoxyyETJQIJaT69ZDjJCBZ4sUZPEVxxiH3ra5J/n9Gu97+2D+xle/6bj7de 77cEhMrIYRVdU+qK00nj0KBb4Sy0jiSjuI8aIP5qbiL5oC3MwSTgoC3zbnKwkYmg FJ39G7m50CSaEeXs5t5VgoO3DcbgdhQ= -----END CERTIFICATE-----Generated at Sat Jan 10 05:01:33 2026 by rpki-client