This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa File: 9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa (raw, json) Hash identifier: RN1HvFdC434oytePuaMTfNvA4B+9Sh7/d/RdYG/4zAM= Subject key identifier: 10:C8:2C:1B:D0:1F:45:74:3D:97:C4:28:A2:AB:DE:88:6A:BD:E7:52 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584C42DBD23984FE003B1F8C6F40 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 395494 IP address blocks: 23.139.104.0/24 maxlen: 24 72.19.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:d2:39:84:fe:00:3b:1f:8c:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=8ec03039-fcc5-4d5a-b2c3-34793bb62cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:53:85:69:fe:4c:7c:2a:c4:ab:a2:8a:f4:2b: 63:cf:94:bf:d6:69:cc:70:e5:f7:c5:dd:55:2d:b2: db:81:86:86:58:d9:2a:96:7c:1c:49:b5:16:74:2f: 4f:42:89:bb:a3:28:7e:b8:41:e1:25:1e:bf:17:2f: 14:7c:be:0e:a2:a3:7e:eb:49:51:09:84:a3:83:3a: bd:b8:64:69:7a:2a:e3:1e:03:86:27:10:31:cd:6f: 3a:6d:e0:b5:99:0b:2b:a8:4f:26:80:58:34:6c:9b: 71:e9:2d:8f:e6:cd:48:ab:5c:6d:c8:cc:b6:d8:95: d0:da:fa:11:70:29:ee:07:da:d0:1b:09:ae:22:33: be:da:2b:58:3d:bd:19:25:f8:c0:a0:48:87:1d:18: 54:c9:b1:2a:4a:37:b6:1c:f6:38:5b:60:c8:5d:c1: 60:c1:24:4b:6c:22:ab:40:e6:0f:41:6f:14:f4:e6: 2e:1f:55:31:05:58:e4:67:f2:5d:31:f8:fd:35:b9: fe:d5:b4:4b:28:d5:4d:58:83:6f:5f:c2:0b:b2:d4: 15:9a:ff:58:12:69:56:83:63:50:b3:01:29:f9:81: 52:2a:b6:43:f1:3f:8c:17:47:8c:88:f2:37:f0:88: 93:92:fa:12:ed:b2:8e:64:d8:58:00:70:00:79:19: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C8:2C:1B:D0:1F:45:74:3D:97:C4:28:A2:AB:DE:88:6A:BD:E7:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 23.139.104.0/24 72.19.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f1:9b:d7:26:1f:c9:7f:04:b5:0f:33:6c:f2:4c:5d:b5:fa: a2:5e:c1:a7:70:86:22:24:dd:82:94:49:6c:e7:6b:29:6c:ca: 0b:1d:54:26:0d:7a:bc:e1:c9:cc:3d:f0:2b:01:ff:bd:3a:aa: 18:85:97:37:9e:2c:9b:37:45:b4:d0:c3:73:f1:29:99:1e:30: cd:97:18:38:1e:be:40:28:52:05:b1:7a:fa:63:3b:a7:a8:02: 0d:90:cd:ca:40:d6:b9:2e:e7:f0:e7:f4:d3:d2:a0:26:da:b6: 44:c2:4d:a4:aa:f0:8e:f0:15:ef:61:7e:aa:21:e1:2b:45:48: 37:6b:13:cc:ef:8a:b3:15:7c:a0:ef:1e:37:ad:9d:8d:8a:42: ca:ec:74:f0:5d:69:f1:dd:21:ff:c5:ac:fa:bc:d8:ce:ea:71: ff:bc:6c:b8:d4:45:cc:ee:b7:51:31:bb:dc:5f:96:5b:d3:a7: b8:8a:83:f8:4f:64:05:fb:66:46:06:8b:ef:be:c1:57:bc:4e: 6e:b2:d9:6d:9f:76:0b:71:28:05:1e:94:d3:02:a3:20:0e:9f: 39:3f:cf:45:9e:51:57:8e:97:b1:12:32:be:bf:e6:3e:da:64: 1f:89:df:05:e4:ac:ab:6d:74:23:a9:ce:86:4e:00:30:85:79: 3c:76:87:b9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExC29I5hP4AOx+Mb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OGVjMDMwMzktZmNjNS00ZDVhLWIyYzMtMzQ3OTNiYjYyY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlOFaf5MfCrEq6KK9Ctjz5S/1mnMcOX3xd1V LbLbgYaGWNkqlnwcSbUWdC9PQom7oyh+uEHhJR6/Fy8UfL4OoqN+60lRCYSjgzq9 uGRpeirjHgOGJxAxzW86beC1mQsrqE8mgFg0bJtx6S2P5s1Iq1xtyMy22JXQ2voR cCnuB9rQGwmuIjO+2itYPb0ZJfjAoEiHHRhUybEqSje2HPY4W2DIXcFgwSRLbCKr QOYPQW8U9OYuH1UxBVjkZ/JdMfj9Nbn+1bRLKNVNWINvX8ILstQVmv9YEmlWg2NQ swEp+YFSKrZD8T+MF0eMiPI38IiTkvoS7bKOZNhYAHAAeRm8NQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBDILBvQH0V0PZfEKKKr3ohqvedSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvOWZiMGYzMjUtMWEzZi0z ZDU2LTlkMDYtYjMyN2Q2NTgxNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4toAwQC SBMcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACnxm9cmH8l/BLUPM2zyTF21+qJewadwhiIk3YKUSWznayls ygsdVCYNerzhycw98CsB/706qhiFlzeeLJs3RbTQw3PxKZkeMM2XGDgevkAoUgWx evpjO6eoAg2QzcpA1rku5/Dn9NPSoCbatkTCTaSq8I7wFe9hfqoh4StFSDdrE8zv irMVfKDvHjetnY2KQsrsdPBdafHdIf/FrPq82M7qcf+8bLjURczut1Exu9xfllvT p7iKg/hPZAX7ZkYGi+++wVe8Tm6y2W2fdgtxKAUelNMCoyAOnzk/z0WeUVeOl7ES Mr6/5j7aZB+J3wXkrKttdCOpzoZOADCFeTx2h7k= -----END CERTIFICATE-----Generated at Sat Jan 10 04:47:49 2026 by rpki-client