This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa File: 5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa (raw, json) Hash identifier: zsdxJFilvflN5P7Ti4u4ge/ucFgMkyBejQgquMJRsRQ= Subject key identifier: 43:B6:75:94:08:06:E8:DB:E0:0F:7F:9F:EE:B4:3B:29:A5:EF:FF:75 Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Certificate serial: 010D0C9F4328584C6726996D4640DB2A9A3985A0 Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa Signing time: Sat 03 Jan 2026 14:00:37 +0000 ROA not before: Sat 03 Jan 2026 14:00:37 +0000 ROA not after: Fri 03 Apr 2026 13:00:37 +0000 asID: 1034 IP address blocks: 16.7.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:67:26:99:6d:46:40:db:2a:9a:39:85:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa Validity Not Before: Jan 3 14:00:37 2026 GMT Not After : Apr 3 13:00:37 2026 GMT Subject: CN=0c321615-a1ee-48d7-9e6c-e45e3793c889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:ef:6e:52:34:eb:0c:6e:d0:d7:06:4e:8a: ec:1c:54:8a:5e:a0:6a:c2:54:72:04:54:fe:c9:c0: ed:92:a7:6b:da:12:b0:74:16:65:b3:18:b6:c7:42: a4:38:2f:ed:06:48:eb:51:4e:cd:4f:c3:c8:74:3e: c7:b9:c8:d6:12:d9:6d:4b:6d:be:a8:b8:88:7a:45: 13:ad:bc:c0:58:10:a5:d6:02:06:d6:bb:0b:0b:a3: ef:4e:c2:f6:4e:4a:79:1e:b2:8a:78:31:2b:1c:7e: 7e:8f:48:30:4b:c9:23:49:5f:4b:de:dc:89:56:5c: d7:97:2f:fe:0d:9c:de:5d:8b:a5:19:b8:94:4d:47: c3:5b:29:31:63:63:7b:c8:6d:72:83:94:1e:d1:08: da:ba:ba:fe:05:b6:f9:b0:6d:7e:89:51:f7:2c:f6: 34:be:3f:55:82:fc:bd:8a:3f:37:60:52:30:0d:55: 8f:bd:05:c0:fe:28:4b:0d:d4:86:79:64:bd:3c:50: 20:75:dd:ed:b5:ab:c2:eb:b8:f9:ba:66:52:e3:dc: 0f:45:1a:0c:0c:59:6e:61:9e:8c:61:f6:2f:25:0f: 88:7c:2b:0d:77:73:bb:52:7a:9c:84:2a:3a:1b:f2: 5a:47:8c:40:52:74:c3:20:4a:88:35:8d:7c:10:a9: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B6:75:94:08:06:E8:DB:E0:0F:7F:9F:EE:B4:3B:29:A5:EF:FF:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5ba3de9b-c5ee-39a7-9e7e-34d16a3fe9c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl X509v3 Authority Key Identifier: keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer sbgp-ipAddrBlock: critical IPv4: 16.7.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1e:56:2b:ac:e0:0b:8a:41:03:0d:97:ae:c2:53:ba:37:40: 61:eb:80:b7:bd:6e:0e:1a:af:7e:2b:c1:a1:17:6d:8d:8e:3e: 6d:fd:53:54:11:b2:db:57:f1:50:a9:30:70:7a:e4:43:1b:a2: a9:86:d9:d1:1c:57:1d:d3:1b:9e:53:d1:e8:3f:14:e7:27:3d: fa:d2:b5:57:91:96:e9:80:e6:73:33:f4:d2:5e:be:b7:2e:f7: 99:be:76:76:e2:9e:44:be:e7:32:e8:ba:45:8a:08:b1:02:0d: ed:99:12:70:6f:7d:73:fe:18:9d:02:4f:87:f8:31:db:d5:78: 06:f4:9a:a3:bf:d9:13:5b:ac:20:75:eb:04:8c:0d:73:7d:7a: 81:2d:55:b2:88:7c:36:2d:19:f0:05:09:fb:82:6f:75:a0:d5: 53:f9:60:c5:7b:87:17:d9:63:62:0a:48:d3:20:06:89:d3:66: 4e:eb:28:63:8b:1c:4b:61:ba:55:aa:07:40:1e:fc:d2:45:fa: 4a:40:9b:e5:dc:95:fe:8a:31:54:f4:0e:29:7d:89:f1:a4:ca: ce:6a:63:b4:7a:e2:16:0d:6f:5b:13:a8:50:af:c4:b1:96:33: 2c:55:4a:fa:e8:74:d1:d7:b6:65:0c:5e:6b:c1:8c:c3:65:c7: 80:b5:db:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExnJpltRkDbKpo5haAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWFiYzM0YmEtNWFiNC00ZjFhLTk2NWUtM2Q2ZWMwNGNk YmZhMB4XDTI2MDEwMzE0MDAzN1oXDTI2MDQwMzEzMDAzN1owLzEtMCsGA1UEAxMk MGMzMjE2MTUtYTFlZS00OGQ3LTllNmMtZTQ1ZTM3OTNjODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy7vblI06wxu0NcGTorsHFSKXqBqwlRyBFT+ ycDtkqdr2hKwdBZlsxi2x0KkOC/tBkjrUU7NT8PIdD7HucjWEtltS22+qLiIekUT rbzAWBCl1gIG1rsLC6PvTsL2Tkp5HrKKeDErHH5+j0gwS8kjSV9L3tyJVlzXly/+ DZzeXYulGbiUTUfDWykxY2N7yG1yg5Qe0Qjaurr+Bbb5sG1+iVH3LPY0vj9Vgvy9 ij83YFIwDVWPvQXA/ihLDdSGeWS9PFAgdd3ttavC67j5umZS49wPRRoMDFluYZ6M YfYvJQ+IfCsNd3O7UnqchCo6G/JaR4xAUnTDIEqINY18EKmCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO2dZQIBujb4A9/n+60Oyml7/91MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YWJj MzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZlYzA0Y2RiZmEvNWJhM2RlOWItYzVlZS0z OWE3LTllN2UtMzRkMTZhM2ZlOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWFiYzM0YmEtNWFiNC00ZjFhLTk2 NWUtM2Q2ZWMwNGNkYmZhLzVhYmMzNGJhLTVhYjQtNGYxYS05NjVlLTNkNmVjMDRj ZGJmYS5jcmwwHwYDVR0jBBgwFoAUqEN60KPgFcyfI1WW88UB8LZwZH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YWJjMzRiYS01YWI0LTRmMWEtOTY1ZS0zZDZl YzA0Y2RiZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCEAcYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABweVius4AuKQQMNl67CU7o3QGHrgLe9bg4ar34rwaEXbY2OPm39U1QR sttX8VCpMHB65EMboqmG2dEcVx3TG55T0eg/FOcnPfrStVeRlumA5nMz9NJevrcu 95m+dnbinkS+5zLoukWKCLECDe2ZEnBvfXP+GJ0CT4f4MdvVeAb0mqO/2RNbrCB1 6wSMDXN9eoEtVbKIfDYtGfAFCfuCb3Wg1VP5YMV7hxfZY2IKSNMgBonTZk7rKGOL HEthulWqB0Ae/NJF+kpAm+Xclf6KMVT0Dil9ifGkys5qY7R64hYNb1sTqFCvxLGW MyxVSvrodNHXtmUMXmvBjMNlx4C12/4= -----END CERTIFICATE-----Generated at Sun Jan 11 21:03:53 2026 by rpki-client