This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/2274e6c9-abfe-3fa5-9bd7-8915c7ce014e.roa File: 2274e6c9-abfe-3fa5-9bd7-8915c7ce014e.roa (raw, json) Hash identifier: Ry3rf8n4NGDjW96l+bXXqsXxrRKGQhlwuknOc50bEek= Subject key identifier: 29:4A:71:3B:44:85:F2:7F:95:22:C3:53:A7:CD:FF:71:7F:B3:90:D0 Certificate issuer: /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Certificate serial: 010D0C9F4328584C75EB4D3424D45477AD9B9800 Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/2274e6c9-abfe-3fa5-9bd7-8915c7ce014e.roa Signing time: Sat 27 Dec 2025 00:35:12 +0000 ROA not before: Sat 27 Dec 2025 00:35:12 +0000 ROA not after: Thu 26 Mar 2026 23:35:12 +0000 asID: 7029 IP address blocks: 9.137.128.0/17 maxlen: 17 9.153.0.0/16 maxlen: 16 9.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:eb:4d:34:24:d4:54:77:ad:9b:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279 Validity Not Before: Dec 27 00:35:12 2025 GMT Not After : Mar 26 23:35:12 2026 GMT Subject: CN=f3f04ef8-a1ef-4598-8060-72d4b1f704ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:d3:ee:b6:ba:e1:62:bd:b2:8c:81:dd:90: 53:6f:a7:91:0f:4b:b1:c8:a9:97:f5:e3:99:03:84: 42:4d:ab:e7:9c:65:ea:a1:bf:e9:2e:8a:0c:33:0b: f6:58:32:d8:a7:8f:91:b9:70:dc:ad:52:83:c7:7e: 35:cd:90:d1:b8:c4:e8:1c:da:23:5e:9c:19:72:20: cb:27:06:43:62:03:50:67:95:74:9e:5f:f2:ed:1b: df:a0:85:aa:38:42:b8:74:b9:76:8e:14:92:21:c2: 4a:11:63:c3:41:cd:89:11:4a:9d:7f:ca:d6:43:72: ac:2b:65:d4:f7:3b:bc:de:e0:1b:af:ca:f3:9a:21: 75:71:9c:f5:6d:05:fe:7c:0c:32:e2:ff:4b:6a:44: f1:b5:7c:b7:f1:f9:06:51:41:2f:87:f1:60:7d:f1: 9b:54:20:b3:f0:0a:af:15:57:77:36:f4:72:64:d7: 26:7d:8f:7a:0f:69:66:21:16:db:9c:d3:ad:53:fc: bc:79:d7:1f:b9:6d:e5:0d:8d:0d:c0:ba:7f:4b:99: 49:67:90:da:1e:cf:8c:eb:71:e6:30:17:93:c1:c9: 8d:ba:bf:4d:62:bd:9f:f0:60:e3:a2:1d:68:12:32: 8c:05:4d:27:a5:9d:42:f2:59:f5:9a:d3:bd:6d:f5: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4A:71:3B:44:85:F2:7F:95:22:C3:53:A7:CD:FF:71:7F:B3:90:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/2274e6c9-abfe-3fa5-9bd7-8915c7ce014e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl X509v3 Authority Key Identifier: keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer sbgp-ipAddrBlock: critical IPv4: 9.137.128.0/17 9.153.0.0/16 9.171.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:f3:c2:cc:bd:0c:fa:54:89:93:86:64:3a:b4:36:28:ef:f7: 29:2f:22:79:70:0c:28:d6:38:22:64:de:c6:0b:27:89:28:68: b8:17:01:a4:0c:6e:49:e5:30:cf:04:b6:39:e8:73:05:a9:03: cf:84:3e:e4:0a:e0:ce:ea:42:58:13:79:94:5f:21:41:65:5d: 84:c6:ef:98:db:fc:c1:81:c3:c7:75:80:4b:f4:e7:c0:80:07: a7:ac:89:07:8b:fd:75:59:fa:06:85:05:93:b2:e0:11:16:29: fe:ae:b5:c2:a6:fc:4d:7b:ba:9e:2d:d5:ff:47:11:f7:63:83: 95:63:2c:06:55:63:4b:e9:93:6f:af:cd:95:38:d7:96:fb:02: 6a:c3:a2:fd:61:ae:07:17:8e:06:04:79:ce:0a:b2:47:38:a1: 0c:c6:aa:a6:3a:84:6d:f2:13:65:df:bb:14:e3:92:c6:be:7f: 80:b2:32:9e:8d:87:8a:de:6b:40:62:0f:90:a3:8c:4d:12:e8: 0e:12:14:cb:11:f0:b6:7b:36:72:b1:24:77:0d:1f:14:51:63: 5d:2b:eb:7f:8c:18:a5:93:72:ca:c2:64:56:d3:93:f3:e5:7c: 9a:09:ae:29:b7:9b:d2:40:fc:90:37:c9:e7:e6:d8:6a:e9:45: 30:7f:b8:59 -----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgIUAQ0Mn0MoWEx16000JNRUd62bmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNjOTdkOTYtNTJkMC00OGE3LWE5ZWEtYTc3NDlkYzA4 Mjc5MB4XDTI1MTIyNzAwMzUxMloXDTI2MDMyNjIzMzUxMlowLzEtMCsGA1UEAxMk ZjNmMDRlZjgtYTFlZi00NTk4LTgwNjAtNzJkNGIxZjcwNGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXrT7ra64WK9soyB3ZBTb6eRD0uxyKmX9eOZ A4RCTavnnGXqob/pLooMMwv2WDLYp4+RuXDcrVKDx341zZDRuMToHNojXpwZciDL JwZDYgNQZ5V0nl/y7RvfoIWqOEK4dLl2jhSSIcJKEWPDQc2JEUqdf8rWQ3KsK2XU 9zu83uAbr8rzmiF1cZz1bQX+fAwy4v9LakTxtXy38fkGUUEvh/FgffGbVCCz8Aqv FVd3NvRyZNcmfY96D2lmIRbbnNOtU/y8edcfuW3lDY0NwLp/S5lJZ5DaHs+M63Hm MBeTwcmNur9NYr2f8GDjoh1oEjKMBU0npZ1C8ln1mtO9bfVMSQIDAQABo4IDXzCC A1swHQYDVR0OBBYEFClKcTtEhfJ/lSLDU6fN/3F/s5DQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5 N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0OWRjMDgyNzkvMjI3NGU2YzktYWJmZS0z ZmE1LTliZDctODkxNWM3Y2UwMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGNjOTdkOTYtNTJkMC00OGE3LWE5 ZWEtYTc3NDlkYzA4Mjc5LzRjYzk3ZDk2LTUyZDAtNDhhNy1hOWVhLWE3NzQ5ZGMw ODI3OS5jcmwwHwYDVR0jBBgwFoAU4vrUb8NLZY1545Z6Y6GWz7mMjdUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Y2M5N2Q5Ni01MmQwLTQ4YTctYTllYS1hNzc0 OWRjMDgyNzkuY2VyMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwQHCYmAAwMA CZkDAwAJqzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCC88LMvQz6VImThmQ6tDYo7/cpLyJ5cAwo1jgiZN7G CyeJKGi4FwGkDG5J5TDPBLY56HMFqQPPhD7kCuDO6kJYE3mUXyFBZV2Exu+Y2/zB gcPHdYBL9OfAgAenrIkHi/11WfoGhQWTsuARFin+rrXCpvxNe7qeLdX/RxH3Y4OV YywGVWNL6ZNvr82VONeW+wJqw6L9Ya4HF44GBHnOCrJHOKEMxqqmOoRt8hNl37sU 45LGvn+AsjKejYeK3mtAYg+Qo4xNEugOEhTLEfC2ezZysSR3DR8UUWNdK+t/jBil k3LKwmRW05Pz5XyaCa4pt5vSQPyQN8nn5thq6UUwf7hZ -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:47 2026 by rpki-client