This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa File: 2ab65280-fd1c-322e-bb70-8afda5598e79.roa (raw, json) Hash identifier: kVyRWoWmAHP+2Ip6AOrBC7Jxa2X9JUoNBIODkBGR4EM= Subject key identifier: 24:A7:EF:B4:F4:C8:AB:95:2C:BC:9C:AD:E5:E9:51:B9:D0:AB:06:AA Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584CA9F0730D1CCB5EC72A955794 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa Signing time: Tue 27 Jan 2026 12:10:43 +0000 ROA not before: Tue 27 Jan 2026 12:10:43 +0000 ROA not after: Mon 27 Apr 2026 11:10:43 +0000 asID: 402139 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Feb 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a9:f0:73:0d:1c:cb:5e:c7:2a:95:57:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jan 27 12:10:43 2026 GMT Not After : Apr 27 11:10:43 2026 GMT Subject: CN=4c0b9e1d-3484-40e0-b60a-6dec749bbc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:55:9a:0b:b2:0a:eb:ae:55:31:da:f5:62: 51:ad:69:82:04:64:01:71:46:b7:84:a7:a8:ec:35: 69:3c:66:4f:8e:78:b7:5c:e3:a1:58:60:15:53:ed: b0:36:ce:4e:6d:0d:95:4b:02:a7:1d:41:36:02:d0: 16:6d:82:d0:9f:ea:38:87:dc:b9:cc:5f:da:03:c1: 08:20:45:55:e2:29:e8:7a:b0:62:92:59:4d:1b:fb: e5:72:67:1e:d4:97:11:d9:a9:3f:04:d3:d1:85:d1: 37:6d:92:37:b3:d7:8d:c8:7e:e8:1f:71:e3:cc:dc: 51:fa:db:b1:37:ad:24:42:f1:48:5e:75:bf:91:69: 25:fd:bd:38:a2:5c:40:73:49:ea:ec:73:6f:66:4f: f5:e0:9b:8b:d2:44:25:84:2a:a1:e6:7c:15:78:35: 7f:b7:81:04:d6:88:b5:a3:88:55:a5:fe:a1:93:cf: e6:90:59:10:46:e2:2e:af:6b:ec:3e:db:4a:18:39: d1:19:75:bc:79:ab:fd:7f:05:6d:a9:e0:b2:b4:f8: 35:ed:c1:03:3e:c9:4e:bb:7e:d5:4f:e6:68:35:0f: 7e:c4:80:94:f0:94:bf:f4:1b:c4:d9:8b:b7:fe:b5: e0:d9:34:36:ad:6b:d9:cf:f2:10:09:20:12:6f:31: 48:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A7:EF:B4:F4:C8:AB:95:2C:BC:9C:AD:E5:E9:51:B9:D0:AB:06:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/2ab65280-fd1c-322e-bb70-8afda5598e79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:90:39:d9:02:dd:03:3d:5d:f1:2b:c9:d1:16:50:67:57:89: 31:8c:29:92:2c:93:25:59:83:7b:d0:93:53:a0:b3:34:99:6a: ff:cd:51:3e:e2:20:ab:11:85:11:b6:2d:fe:ee:fe:d2:ef:d6: af:38:0c:08:48:37:90:41:66:d4:cc:5e:8e:b0:16:c3:ee:c2: 15:96:36:79:a0:97:aa:12:fe:40:31:f2:cc:af:04:7c:0f:46: 87:52:dd:5d:8a:03:62:d7:9e:3d:84:ab:91:41:a5:56:a8:04: 16:3a:db:f9:0a:f1:be:ee:03:a9:64:c7:95:fe:26:cc:f3:6a: a2:70:7b:e9:98:9e:09:22:10:9c:5d:29:63:9c:4c:1b:e0:a6: 33:a3:af:8e:a0:b1:b2:16:13:4e:f7:5d:01:cf:06:bd:a1:21: e7:2c:f3:84:c1:64:9b:37:4d:69:45:b9:46:bf:1e:0f:bf:78: 5d:b2:a7:13:12:7a:56:c9:8d:4e:38:ca:ac:3b:4f:3e:5a:ea: 36:83:d6:2d:d6:a9:f1:8e:10:b5:ab:51:5b:f4:8f:0b:4d:c5: d0:b1:74:8d:78:e0:ed:39:32:68:2f:97:74:cd:b0:cf:6c:94: 4b:ae:e4:76:d6:74:49:0b:ce:5a:f4:ba:b3:b4:29:ef:81:61: 98:aa:2d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyp8HMNHMtexyqVV5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDEyNzEyMTA0M1oXDTI2MDQyNzExMTA0M1owLzEtMCsGA1UEAxMk NGMwYjllMWQtMzQ4NC00MGUwLWI2MGEtNmRlYzc0OWJiYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKVVmguyCuuuVTHa9WJRrWmCBGQBcUa3hKeo 7DVpPGZPjni3XOOhWGAVU+2wNs5ObQ2VSwKnHUE2AtAWbYLQn+o4h9y5zF/aA8EI IEVV4inoerBikllNG/vlcmce1JcR2ak/BNPRhdE3bZI3s9eNyH7oH3HjzNxR+tux N60kQvFIXnW/kWkl/b04olxAc0nq7HNvZk/14JuL0kQlhCqh5nwVeDV/t4EE1oi1 o4hVpf6hk8/mkFkQRuIur2vsPttKGDnRGXW8eav9fwVtqeCytPg17cEDPslOu37V T+ZoNQ9+xICU8JS/9BvE2Yu3/rXg2TQ2rWvZz/IQCSASbzFIOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSn77T0yKuVLLycreXpUbnQqwaqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMmFiNjUyODAtZmQxYy0z MjJlLWJiNzAtOGFmZGE1NTk4ZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeQOdkC3QM9XfErydEWUGdXiTGMKZIskyVZg3vQk1OgszSZav/NUT7i IKsRhRG2Lf7u/tLv1q84DAhIN5BBZtTMXo6wFsPuwhWWNnmgl6oS/kAx8syvBHwP RodS3V2KA2LXnj2Eq5FBpVaoBBY62/kK8b7uA6lkx5X+JszzaqJwe+mYngkiEJxd KWOcTBvgpjOjr46gsbIWE073XQHPBr2hIecs84TBZJs3TWlFuUa/Hg+/eF2ypxMS elbJjU44yqw7Tz5a6jaD1i3WqfGOELWrUVv0jwtNxdCxdI144O05Mmgvl3TNsM9s lEuu5HbWdEkLzlr0urO0Ke+BYZiqLV0= -----END CERTIFICATE-----Generated at Sat Jan 31 04:53:15 2026 by rpki-client