This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa File: 28213a0a-1611-3f7f-994d-69a3d187a4c4.roa (raw, json) Hash identifier: mX7AoOCso/C/83NIqytrO7PXOtdM5TM69QwCMVEQBk4= Subject key identifier: 86:15:EE:F3:2B:34:7F:70:3F:FA:08:27:DC:25:82:1D:36:1B:8D:38 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C28564385D43CD4A3555A8C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 396578 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:43:85:d4:3c:d4:a3:55:5a:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=ac423ed0-01b1-427c-afdc-7e2a76cac939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:26:ee:28:42:50:af:5b:c4:7e:02:9a:15: 85:b5:dd:cc:ad:9c:76:67:2a:74:3c:f5:c7:3a:21: 12:94:30:df:8b:b5:0a:16:4d:fd:35:f8:8b:a3:de: 31:b6:ba:5b:5e:42:b0:f0:4a:a4:c0:12:9f:1e:f8: 45:cf:11:a8:9b:a4:a5:b2:d1:0e:1b:c7:42:71:57: 0e:7c:54:30:21:33:9b:22:31:3f:f4:c1:0c:19:1b: 9a:85:64:99:99:ab:c8:8b:e8:0b:de:0e:dd:c0:f1: b5:87:0f:16:fb:3f:44:dc:73:a8:ab:cb:0f:19:14: 49:cc:cf:36:09:61:07:71:e2:7c:e2:33:ab:9b:9c: 65:86:b4:79:ff:37:64:0c:71:ff:18:65:58:2f:e2: cc:eb:85:30:79:d3:d5:50:0f:c4:3c:79:a0:5e:86: 65:b3:50:88:12:d8:32:0b:e8:fb:1a:53:77:19:da: cd:95:bc:c5:dd:ca:f3:f0:da:d7:f4:90:70:c8:7a: 24:ec:f4:5f:24:2e:e2:a9:99:7d:ca:d1:24:2b:6e: 5a:15:d6:00:a5:55:57:f0:a7:ee:55:21:eb:0d:ab: 8e:b7:5d:c6:85:7e:5a:55:ea:e4:18:f1:7e:25:f6: 55:74:6b:42:21:92:d0:89:e3:0b:01:7f:1f:39:e6: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:EE:F3:2B:34:7F:70:3F:FA:08:27:DC:25:82:1D:36:1B:8D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28213a0a-1611-3f7f-994d-69a3d187a4c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:ce:2b:f2:bd:8d:b1:90:d2:dd:e5:3a:9a:8c:35:fb:a8:68: 52:08:cc:f4:0b:73:a4:ff:78:16:0b:3c:7e:31:09:3d:a5:90: 20:c9:5d:e6:b5:b9:75:ae:50:9b:73:0c:b6:84:32:bd:74:9f: 57:61:ac:bc:4d:c2:43:f1:b1:23:11:93:b7:bd:62:50:bc:59: 15:d4:bb:53:89:48:0c:00:1d:9e:93:00:5b:21:b3:ca:9c:2d: 47:3a:6e:31:64:04:d0:65:6f:c7:9e:61:7d:16:16:ee:7c:68: 3d:fd:2a:86:26:f2:a5:db:95:73:c7:ee:60:d5:7b:ec:84:ee: 43:84:3d:4c:7b:78:0e:1f:89:fd:3e:b2:2c:1f:cd:6d:4d:dd: e9:4a:cb:bd:fb:9f:6a:9e:56:ad:d9:df:37:83:e2:57:9b:49: 35:d2:11:df:a1:42:2e:96:4b:0a:c3:e5:26:1c:ce:0f:4b:0b: 71:86:65:b9:83:7b:43:dc:00:e9:ee:c3:3a:01:2d:b2:ba:6a: b4:3a:e6:c2:2c:b5:12:b2:e5:fd:2e:b8:26:88:0f:e8:a2:b7: 8b:0c:93:c1:39:e8:9c:8e:58:d7:a3:ad:bf:c6:36:03:d1:00: 16:b6:a4:ca:6e:83:66:f6:38:bb:92:9e:a5:1d:42:07:8b:76: 22:b2:9f:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwoVkOF1DzUo1VajIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk YWM0MjNlZDAtMDFiMS00MjdjLWFmZGMtN2UyYTc2Y2FjOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCEm7ihCUK9bxH4CmhWFtd3MrZx2Zyp0PPXH OiESlDDfi7UKFk39NfiLo94xtrpbXkKw8EqkwBKfHvhFzxGom6SlstEOG8dCcVcO fFQwITObIjE/9MEMGRuahWSZmavIi+gL3g7dwPG1hw8W+z9E3HOoq8sPGRRJzM82 CWEHceJ84jOrm5xlhrR5/zdkDHH/GGVYL+LM64UwedPVUA/EPHmgXoZls1CIEtgy C+j7GlN3GdrNlbzF3crz8NrX9JBwyHok7PRfJC7iqZl9ytEkK25aFdYApVVX8Kfu VSHrDauOt13GhX5aVerkGPF+JfZVdGtCIZLQieMLAX8fOeYf7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIYV7vMrNH9wP/oIJ9wlgh02G404MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjgyMTNhMGEtMTYxMS0z ZjdmLTk5NGQtNjlhM2QxODdhNGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCyzivyvY2xkNLd5TqajDX7qGhSCMz0C3Ok/3gWCzx+MQk9pZAgyV3m tbl1rlCbcwy2hDK9dJ9XYay8TcJD8bEjEZO3vWJQvFkV1LtTiUgMAB2ekwBbIbPK nC1HOm4xZATQZW/HnmF9FhbufGg9/SqGJvKl25Vzx+5g1XvshO5DhD1Me3gOH4n9 PrIsH81tTd3pSsu9+59qnlat2d83g+JXm0k10hHfoUIulksKw+UmHM4PSwtxhmW5 g3tD3ADp7sM6AS2yumq0OubCLLUSsuX9LrgmiA/ooreLDJPBOeicjljXo62/xjYD 0QAWtqTKboNm9ji7kp6lHUIHi3Yisp9Y -----END CERTIFICATE-----Generated at Sun Dec 14 15:47:56 2025 by rpki-client