This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4dfd718f-5595-3e7a-b444-ff1de47847f0.roa File: 4dfd718f-5595-3e7a-b444-ff1de47847f0.roa (raw, json) Hash identifier: wTehNKhlnJXkK4teLKt9iBCP2rJ11346GwC0P+Tqy6c= Subject key identifier: 7E:54:7F:CA:5E:AB:C1:27:F9:92:09:98:72:FB:08:6C:A0:11:CB:BF Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C470BD6931BDE5C20689BF100 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4dfd718f-5595-3e7a-b444-ff1de47847f0.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 214432 IP address blocks: 204.0.56.0/22 maxlen: 24 204.1.128.0/22 maxlen: 24 204.141.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d6:93:1b:de:5c:20:68:9b:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=6f314553-3a16-4a94-82d5-d779f4da7f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:b0:75:8e:68:35:e5:b4:14:ee:ab:25:ab: c0:86:6d:94:f4:a6:ac:74:2e:9f:7f:8c:df:6d:a0: c3:89:9d:5b:da:93:1c:43:dd:98:1a:9a:08:ac:d6: e8:1f:e0:07:38:15:29:93:b1:dc:62:05:c4:1b:b5: ce:28:8b:48:53:e6:c5:27:75:64:e0:d6:a2:f9:a1: 4b:55:cc:26:18:1b:ee:5d:a0:7d:87:92:ef:e1:d8: 28:96:fc:0c:8e:69:3b:ad:5c:8b:13:07:0f:b8:b9: 1f:18:d1:8b:1c:68:76:89:a1:37:57:29:64:94:ed: 3b:87:15:e4:bc:2d:7d:76:2d:7c:1a:9a:3e:ba:a1: bb:a0:22:5b:bf:b7:38:71:d7:1d:4a:b4:5d:10:10: 89:63:2a:d7:1d:30:3f:74:6b:93:fa:50:fd:b7:80: d2:be:09:54:ec:11:99:62:4b:19:14:4c:a1:4d:62: 39:fd:5a:50:da:1d:94:f6:48:bf:56:26:96:a2:b4: 39:4b:11:a0:d2:da:2e:98:f7:d8:66:4f:f5:a3:d9: b1:de:6f:6d:4e:ad:88:c6:43:8c:1a:eb:03:c3:70: 61:71:60:f7:2c:05:5a:69:4b:ca:2d:6d:67:6f:27: 65:6d:4a:b3:9a:29:7c:f0:93:95:7f:0e:d1:4c:28: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:54:7F:CA:5E:AB:C1:27:F9:92:09:98:72:FB:08:6C:A0:11:CB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4dfd718f-5595-3e7a-b444-ff1de47847f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.56.0/22 204.1.128.0/22 204.141.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:68:cc:7c:06:70:3a:28:fe:68:9c:6a:b0:1a:cc:57:60:03: a0:89:d5:a4:93:3c:e7:39:bc:e2:20:6f:01:26:b8:14:aa:fd: d2:85:15:00:45:6e:56:77:d3:21:cb:a6:d5:06:fc:d8:a8:80: 04:96:72:6f:ff:c9:c2:41:7e:4c:59:92:9f:f9:45:a8:6e:f1: 81:6d:cf:1b:a1:c0:dd:06:4e:6c:98:21:2f:08:44:f9:bd:b7: 3e:a3:b5:1b:b0:eb:87:15:18:b9:fa:82:68:cb:ee:4a:89:ab: c3:82:4d:c7:9e:41:1d:3d:45:39:77:fd:7d:d2:76:17:46:a9: 7c:51:70:6f:0b:64:0a:61:6e:97:2e:3c:d0:74:c7:ed:13:e9: 47:01:13:9d:48:01:8a:b4:f6:0f:b8:63:ae:c2:71:6b:87:1d: 3d:80:3f:62:7c:8d:de:4f:51:61:2e:b4:fc:07:66:e5:03:3c: 38:d7:45:f9:9f:e2:d3:bf:f9:cd:e6:74:b6:ae:74:1c:23:b9: 19:df:12:f9:a6:52:66:93:d6:e3:b9:25:59:53:74:cb:07:f6: 71:2b:ae:39:23:ba:6a:70:c9:a2:f3:17:02:8f:06:f5:24:95: 32:32:c4:99:40:ec:81:ba:b1:52:d5:f9:81:51:75:44:42:e3: b1:92:a9:6b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWExHC9aTG95cIGib8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk NmYzMTQ1NTMtM2ExNi00YTk0LTgyZDUtZDc3OWY0ZGE3ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuywdY5oNeW0FO6rJavAhm2U9KasdC6ff4zf baDDiZ1b2pMcQ92YGpoIrNboH+AHOBUpk7HcYgXEG7XOKItIU+bFJ3Vk4Nai+aFL VcwmGBvuXaB9h5Lv4dgolvwMjmk7rVyLEwcPuLkfGNGLHGh2iaE3VylklO07hxXk vC19di18Gpo+uqG7oCJbv7c4cdcdSrRdEBCJYyrXHTA/dGuT+lD9t4DSvglU7BGZ YksZFEyhTWI5/VpQ2h2U9ki/ViaWorQ5SxGg0toumPfYZk/1o9mx3m9tTq2IxkOM GusDw3BhcWD3LAVaaUvKLW1nbydlbUqzmil88JOVfw7RTCi0XwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFH5Uf8peq8En+ZIJmHL7CGygEcu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNGRmZDcxOGYtNTU5NS0z ZTdhLWI0NDQtZmYxZGU0Nzg0N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCzAA4AwQC zAGAAwQCzI3UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGFozHwGcDoo/micarAazFdgA6CJ1aSTPOc5vOIg bwEmuBSq/dKFFQBFblZ30yHLptUG/NiogASWcm//ycJBfkxZkp/5Rahu8YFtzxuh wN0GTmyYIS8IRPm9tz6jtRuw64cVGLn6gmjL7kqJq8OCTceeQR09RTl3/X3SdhdG qXxRcG8LZAphbpcuPNB0x+0T6UcBE51IAYq09g+4Y67CcWuHHT2AP2J8jd5PUWEu tPwHZuUDPDjXRfmf4tO/+c3mdLaudBwjuRnfEvmmUmaT1uO5JVlTdMsH9nErrjkj umpwyaLzFwKPBvUklTIyxJlA7IG6sVLV+YFRdURC47GSqWs= -----END CERTIFICATE-----Generated at Sun Jan 25 09:24:34 2026 by rpki-client