This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa File: 8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa (raw, json) Hash identifier: rgDkulWIow0WZ82vTKNZMpnc62ISc8wFJamXXzWM7s4= Subject key identifier: DD:11:C4:38:10:90:2F:9B:B2:80:B5:F2:44:21:95:5A:0E:73:BE:73 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584C751C2DAD9B8CA98931852C40 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 14618 IP address blocks: 198.44.180.0/24 maxlen: 24 198.44.181.0/24 maxlen: 24 198.44.182.0/24 maxlen: 24 198.44.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:2d:ad:9b:8c:a9:89:31:85:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=9ce70d51-5302-41b8-a274-0a1547e7bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:9c:42:f4:81:28:c5:b5:1f:26:a8:b8:94: 9a:6f:b9:bd:7d:f2:76:c2:9b:95:11:6c:c0:d3:0e: bc:6e:9b:41:ea:8d:5c:dc:b3:bd:00:da:e1:23:36: 16:3a:13:00:bd:71:ee:5a:98:8f:45:e3:44:dc:9d: 32:94:ee:24:35:7a:87:b3:7e:ee:6e:a2:76:50:0a: 74:65:ac:50:61:47:81:c8:b6:74:67:53:84:ac:64: 91:68:c6:cd:c1:84:5f:e9:c6:64:94:90:56:19:e0: 3e:64:e6:26:45:78:45:11:e7:58:6d:a5:c4:66:7d: ec:50:9d:f0:ab:c6:89:e4:65:5b:1d:4c:01:bc:15: c3:c0:b1:90:3c:a0:a7:90:5f:6a:98:22:bb:d5:d1: 53:23:e0:18:26:25:b3:94:b1:75:81:d5:1b:52:8e: 4a:c8:74:67:22:b7:dd:5d:f7:69:8f:9e:07:43:a1: 34:63:8e:ff:e0:a2:97:9a:8c:a6:e1:6d:85:62:c1: ef:4b:dd:c3:54:ad:d1:73:49:32:b6:67:31:8c:bd: 9c:a4:a6:41:08:87:1f:16:bb:d3:4a:e2:27:8c:34: 76:7f:a5:05:5f:23:da:13:f8:af:e6:a9:e9:ec:15: 60:0e:4e:27:11:06:be:83:14:97:a1:0d:6b:8b:b7: 13:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:11:C4:38:10:90:2F:9B:B2:80:B5:F2:44:21:95:5A:0E:73:BE:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/8a8e8570-ac84-33d7-bf2f-cf2e0a795853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 198.44.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:30:4a:ab:53:4e:64:ce:19:5e:e7:eb:95:ac:b4:ba:d0:f2: a3:97:65:5b:9f:b9:88:10:61:2e:43:12:7b:85:7d:3e:fa:e7: 77:d7:e5:64:6e:7a:17:47:b3:93:6b:8e:f9:c7:6b:14:8f:96: 94:57:b3:b9:55:dc:7c:da:e9:17:5f:0d:5a:3a:e8:2b:ca:70: ab:05:bc:86:87:c1:07:bf:d4:26:f1:d2:f9:f8:21:cd:29:dd: 54:25:f5:e7:24:bf:36:38:30:d1:a4:38:f2:0f:a7:ed:a0:d2: 98:60:f8:37:4a:6c:14:60:d2:85:f1:dd:d1:f6:71:dc:b4:7e: eb:c5:bc:34:b9:79:fb:18:48:e4:53:7c:36:b7:25:5c:03:1e: 7b:ce:6c:1d:b5:a4:be:04:e8:47:8c:06:31:3a:cc:3c:2e:93: b1:eb:1a:04:c3:03:c8:6e:e1:99:7c:98:85:f2:a9:39:a1:cb: 7b:d4:bc:22:c3:b3:97:0f:d2:29:04:4c:40:66:cc:dd:45:8d: 0f:99:35:b6:b8:9f:81:af:43:7b:93:49:4a:cb:fd:0e:dd:40: 4b:92:a8:d9:d2:8c:a1:d6:3f:9d:86:19:6c:a0:be:e5:72:15: 4f:22:b6:48:7d:d2:1e:93:50:8b:eb:3f:51:e5:de:a6:a9:21: 2f:58:5c:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HC2tm4ypiTGFLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk OWNlNzBkNTEtNTMwMi00MWI4LWEyNzQtMGExNTQ3ZTdiYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdecQvSBKMW1HyaouJSab7m9ffJ2wpuVEWzA 0w68bptB6o1c3LO9ANrhIzYWOhMAvXHuWpiPReNE3J0ylO4kNXqHs37ubqJ2UAp0 ZaxQYUeByLZ0Z1OErGSRaMbNwYRf6cZklJBWGeA+ZOYmRXhFEedYbaXEZn3sUJ3w q8aJ5GVbHUwBvBXDwLGQPKCnkF9qmCK71dFTI+AYJiWzlLF1gdUbUo5KyHRnIrfd Xfdpj54HQ6E0Y47/4KKXmoym4W2FYsHvS93DVK3Rc0kytmcxjL2cpKZBCIcfFrvT SuInjDR2f6UFXyPaE/iv5qnp7BVgDk4nEQa+gxSXoQ1ri7cTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0RxDgQkC+bsoC18kQhlVoOc75zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvOGE4ZTg1NzAtYWM4NC0z M2Q3LWJmMmYtY2YyZTBhNzk1ODUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxiy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwwSqtTTmTOGV7n65WstLrQ8qOXZVufuYgQYS5DEnuFfT7653fX5WRu ehdHs5NrjvnHaxSPlpRXs7lV3Hza6RdfDVo66CvKcKsFvIaHwQe/1Cbx0vn4Ic0p 3VQl9eckvzY4MNGkOPIPp+2g0phg+DdKbBRg0oXx3dH2cdy0fuvFvDS5efsYSORT fDa3JVwDHnvObB21pL4E6EeMBjE6zDwuk7HrGgTDA8hu4Zl8mIXyqTmhy3vUvCLD s5cP0ikETEBmzN1FjQ+ZNba4n4GvQ3uTSUrL/Q7dQEuSqNnSjKHWP52GGWygvuVy FU8itkh90h6TUIvrP1Hl3qapIS9YXLE= -----END CERTIFICATE-----Generated at Fri Jan 9 01:02:25 2026 by rpki-client