This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa File: e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa (raw, json) Hash identifier: JThcw/WDN397MEfWH+924x1+kXu9PTvX4InwKwYbn2g= Subject key identifier: E4:63:DB:6F:F2:27:E7:33:6C:4A:22:9A:30:7C:DB:0B:59:29:7E:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C215BB978E22973A630475900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 397208 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:b9:78:e2:29:73:a6:30:47:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=955d99cd-807f-4e2f-adc2-547d035083a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:d9:63:44:ce:b9:e9:a1:e5:51:88:dc:98: ca:8e:07:17:f2:19:0a:85:b3:03:4b:98:47:2c:71: 0b:ca:11:72:c7:f4:93:b8:22:d8:82:e7:29:a7:06: e4:1f:7d:3b:cc:7f:f9:a8:c5:c3:bb:cb:66:3e:12: d9:de:c9:3c:5e:31:49:cf:3b:b4:36:a4:a9:37:d2: 99:3d:0b:66:61:91:c5:ab:7a:7d:42:fe:22:e8:52: 62:fb:95:5c:a2:e4:8f:88:d6:10:03:87:a9:62:b4: 56:e3:c1:fb:08:63:6b:88:20:59:8b:2d:07:f8:8f: 59:5e:ff:fc:65:0f:4d:d2:6b:40:b1:0b:9f:21:de: 83:2a:eb:80:2e:b9:af:d2:eb:40:35:b9:6f:5b:77: 82:f9:3f:86:3b:0e:08:a6:cb:d7:b1:b6:08:e5:04: ed:7a:f8:01:96:8f:c0:49:78:e7:11:60:92:77:d4: 89:d6:a5:68:b7:48:42:62:04:dd:a7:56:e7:91:5c: ba:e6:9b:7a:09:fa:0e:fd:02:f8:34:b5:a9:15:df: 5e:3b:c4:0d:2a:d0:2e:17:40:c3:73:c7:5d:54:26: a4:b1:d2:af:b0:41:3f:f8:97:21:9d:98:1c:83:c8: 08:7e:af:c7:54:78:af:83:f5:74:6a:74:d6:39:29: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:DB:6F:F2:27:E7:33:6C:4A:22:9A:30:7C:DB:0B:59:29:7E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58e6013-3cf4-3b2c-9b2b-a6a9161c4f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:36:d6:1d:3a:fa:d2:02:d6:25:e8:97:25:75:d6:98:cb:6e: 02:6d:f8:f5:94:2f:82:7c:55:af:78:d7:a1:2e:3d:4e:8a:06: a3:7b:5c:83:ab:96:5d:5e:c1:1e:26:a2:59:e6:dd:9f:85:0c: 50:8c:cc:37:a5:72:94:8f:a7:f1:96:c8:e6:b5:ef:e3:2c:9b: e2:b0:a4:17:0f:16:ad:01:1d:ac:0c:f8:6e:cd:05:8a:81:34: 1c:cd:df:ef:c9:a9:21:5b:7b:bd:70:49:c5:29:bf:58:d1:ab: 21:1d:b6:69:6c:11:3c:f3:77:6b:ad:ab:3e:da:e6:90:c4:eb: 2e:39:de:56:1e:c1:a9:a6:71:50:2a:8c:28:38:95:55:57:91: c3:17:e9:04:a9:0c:45:da:63:8e:1d:f1:a3:03:a7:6c:db:13: a4:e5:f2:9c:9c:55:32:79:cf:4c:5b:4f:3f:5f:23:ee:d8:92: dd:61:68:10:fb:39:6b:69:41:ef:a5:98:73:1a:bf:5d:98:45: e6:5b:bf:c9:8d:b1:b3:e4:cd:a6:3d:2d:35:01:6f:96:80:84: bb:60:66:45:c5:73:13:66:9b:d8:ea:20:57:bc:a5:b6:27:d1: b2:a2:f3:48:66:47:a2:f2:d2:5d:d4:6d:66:19:65:8a:eb:57: 25:57:a7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW7l44ilzpjBHWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk OTU1ZDk5Y2QtODA3Zi00ZTJmLWFkYzItNTQ3ZDAzNTA4M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYjZY0TOuemh5VGI3JjKjgcX8hkKhbMDS5hH LHELyhFyx/STuCLYgucppwbkH307zH/5qMXDu8tmPhLZ3sk8XjFJzzu0NqSpN9KZ PQtmYZHFq3p9Qv4i6FJi+5VcouSPiNYQA4epYrRW48H7CGNriCBZiy0H+I9ZXv/8 ZQ9N0mtAsQufId6DKuuALrmv0utANblvW3eC+T+GOw4IpsvXsbYI5QTtevgBlo/A SXjnEWCSd9SJ1qVot0hCYgTdp1bnkVy65pt6CfoO/QL4NLWpFd9eO8QNKtAuF0DD c8ddVCaksdKvsEE/+JchnZgcg8gIfq/HVHivg/V0anTWOSkpzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORj22/yJ+czbEoimjB82wtZKX6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTU4ZTYwMTMtM2NmNC0z YjJjLTliMmItYTZhOTE2MWM0ZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc21h06+tIC1iXolyV11pjLbgJt+PWUL4J8Va9416EuPU6KBqN7XIOr ll1ewR4molnm3Z+FDFCMzDelcpSPp/GWyOa17+Msm+KwpBcPFq0BHawM+G7NBYqB NBzN3+/JqSFbe71wScUpv1jRqyEdtmlsETzzd2utqz7a5pDE6y453lYewammcVAq jCg4lVVXkcMX6QSpDEXaY44d8aMDp2zbE6Tl8pycVTJ5z0xbTz9fI+7Ykt1haBD7 OWtpQe+lmHMav12YReZbv8mNsbPkzaY9LTUBb5aAhLtgZkXFcxNmm9jqIFe8pbYn 0bKi80hmR6Ly0l3UbWYZZYrrVyVXp2s= -----END CERTIFICATE-----Generated at Sun Dec 14 13:39:57 2025 by rpki-client