This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa File: 3af3f3e9-925f-3f08-8530-42b4b99328f5.roa (raw, json) Hash identifier: /0OsgGZtw5l96tKsSze6b8ismmOde/BwgVuPgxDIT0I= Subject key identifier: 64:EF:35:D4:4C:8D:BF:57:8E:4B:8D:96:B9:BC:D0:6F:E3:37:9C:73 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C41767F371136B8C1B71C4A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 203020 IP address blocks: 128.242.128.0/19 maxlen: 24 128.242.224.0/20 maxlen: 24 128.242.240.0/20 maxlen: 24 130.94.176.0/20 maxlen: 24 130.94.208.0/20 maxlen: 24 131.103.0.0/20 maxlen: 24 131.103.96.0/20 maxlen: 24 168.143.160.0/20 maxlen: 24 198.64.80.0/20 maxlen: 24 198.64.192.0/19 maxlen: 24 204.1.192.0/19 maxlen: 24 204.3.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7f:37:11:36:b8:c1:b7:1c:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=afcd9a7c-fd56-40d6-ad94-fa6c3d4439e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:79:b6:2d:4c:1c:53:fc:3f:db:cf:b1:7d:d9: d2:96:8d:d8:60:25:c6:0d:4f:51:b4:e5:77:f8:fa: 58:6a:e9:ee:51:05:ee:7e:47:fd:e6:9e:a8:b2:8d: 52:91:4f:d2:ef:04:c2:1f:90:de:cd:2a:03:ec:05: ef:4f:3a:f6:75:bb:5b:e1:27:88:40:7a:de:62:63: 47:ca:bb:9e:5c:61:da:02:e1:1e:d6:ad:db:1d:e8: 0b:71:29:d6:96:f9:77:a2:1e:3d:96:5f:e6:17:8c: 6d:4e:ef:f0:4b:fa:77:0e:1f:dc:98:ff:84:d3:7f: c6:32:27:7f:da:8d:40:5b:20:a2:94:be:d2:08:56: 20:e6:09:fe:c8:7c:73:4c:28:43:c1:07:da:f6:3f: 8f:6d:13:52:cb:6b:39:3b:8e:33:90:14:83:16:fd: bb:30:39:ff:10:70:c3:85:1b:cb:01:d4:89:02:1a: d8:f8:ac:08:17:17:6c:2c:e5:ff:b3:27:95:a1:ca: c2:e8:b1:f3:8a:8e:01:e1:a6:4e:49:28:c0:29:d7: 4b:dd:57:66:1c:f0:fa:e0:fb:ae:0a:bb:21:fe:d5: 3c:06:8a:5f:27:94:c0:fc:96:7d:db:cc:82:22:c2: 1b:2d:87:f7:43:14:19:7d:c5:ee:5e:af:39:8b:85: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:35:D4:4C:8D:BF:57:8E:4B:8D:96:B9:BC:D0:6F:E3:37:9C:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/3af3f3e9-925f-3f08-8530-42b4b99328f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.128.0/19 128.242.224.0/19 130.94.176.0/20 130.94.208.0/20 131.103.0.0/20 131.103.96.0/20 168.143.160.0/20 198.64.80.0/20 198.64.192.0/19 204.1.192.0/19 204.3.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:22:c0:7a:cb:d2:05:aa:d3:d4:23:ec:f7:10:f5:93:5b:79: 6d:ce:23:ca:e2:34:13:c1:0a:09:2a:8e:17:46:a3:6a:ca:6d: e9:e3:2e:ae:c1:89:8d:0a:f0:8c:f0:6c:d9:16:a0:0c:db:10: d3:00:2b:fe:18:1c:67:ae:95:85:a2:90:16:1f:6d:3e:0e:da: e5:ae:0a:6b:1e:a3:80:25:83:6e:7f:76:77:ed:73:5d:20:5c: 58:5d:1e:2e:35:26:c0:43:68:e0:8f:31:49:d9:00:7e:7a:c1: 50:ee:07:b9:d6:7d:0a:aa:d1:85:c0:5f:3d:4c:8e:24:c9:73: fa:18:6f:75:6a:93:57:34:b5:ab:8a:49:54:63:30:af:35:28: d4:53:f4:1c:c7:4c:95:a0:28:5b:75:cd:fc:0d:ab:fe:62:9d: c5:83:b8:c5:49:1f:e8:b4:90:96:d1:ac:8b:b8:89:03:ae:5f: 41:ca:3b:89:15:43:ae:de:5b:2c:2a:bc:ca:3f:eb:d3:d4:8c: bb:55:9d:ff:53:82:6c:4e:35:04:5e:81:ba:91:fb:e9:ef:f9: 93:37:65:42:b4:d1:ec:23:67:da:2f:53:bd:d0:d0:68:f6:52: 93:49:00:96:b3:22:84:91:5c:d5:d0:28:a3:cf:1d:bf:70:05: 15:07:22:81 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWExBdn83ETa4wbccSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YWZjZDlhN2MtZmQ1Ni00MGQ2LWFkOTQtZmE2YzNkNDQzOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXm2LUwcU/w/28+xfdnSlo3YYCXGDU9RtOV3 +PpYaunuUQXufkf95p6oso1SkU/S7wTCH5DezSoD7AXvTzr2dbtb4SeIQHreYmNH yrueXGHaAuEe1q3bHegLcSnWlvl3oh49ll/mF4xtTu/wS/p3Dh/cmP+E03/GMid/ 2o1AWyCilL7SCFYg5gn+yHxzTChDwQfa9j+PbRNSy2s5O44zkBSDFv27MDn/EHDD hRvLAdSJAhrY+KwIFxdsLOX/syeVocrC6LHzio4B4aZOSSjAKddL3VdmHPD64Puu Crsh/tU8BopfJ5TA/JZ928yCIsIbLYf3QxQZfcXuXq85i4WHkwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFGTvNdRMjb9XjkuNlrm80G/jN5xzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvM2FmM2YzZTktOTI1Zi0z ZjA4LTg1MzAtNDJiNGI5OTMyOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQFgPKAAwQF gPLgAwQEgl6wAwQEgl7QAwQEg2cAAwQEg2dgAwQEqI+gAwQExkBQAwQFxkDAAwQF zAHAAwQFzAMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEwiwHrL0gWq09Qj7PcQ9ZNbeW3OI8riNBPBCgkq jhdGo2rKbenjLq7BiY0K8IzwbNkWoAzbENMAK/4YHGeulYWikBYfbT4O2uWuCmse o4Alg25/dnftc10gXFhdHi41JsBDaOCPMUnZAH56wVDuB7nWfQqq0YXAXz1MjiTJ c/oYb3Vqk1c0tauKSVRjMK81KNRT9BzHTJWgKFt1zfwNq/5incWDuMVJH+i0kJbR rIu4iQOuX0HKO4kVQ67eWywqvMo/69PUjLtVnf9TgmxONQRegbqR++nv+ZM3ZUK0 0ewjZ9ovU73Q0Gj2UpNJAJazIoSRXNXQKKPPHb9wBRUHIoE= -----END CERTIFICATE-----Generated at Sun Jan 18 10:51:08 2026 by rpki-client