This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa File: a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa (raw, json) Hash identifier: DccxRDHwle0IbBdXvKU0mNs0TgKPpWHeJwLFUwbBihA= Subject key identifier: 1D:5B:FE:A0:44:56:08:B2:BE:54:7A:23:C4:4B:57:74:D3:26:41:A6 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584C3EABCE8B4C3CB5501BC17780 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 11404 IP address blocks: 209.236.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:ce:8b:4c:3c:b5:50:1b:c1:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=40f3ab17-1233-4e6b-b3db-23311198fd2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:7d:20:88:2a:82:08:c1:69:90:d6:a3:1e:33: b8:5b:9e:85:65:ba:c8:7e:78:bb:a4:11:6c:4d:21: 84:96:eb:f8:18:f6:8b:fe:5e:e5:7a:e0:cb:71:85: dc:d4:51:cb:03:f9:52:da:0d:66:4a:60:e9:64:3a: 14:3e:74:04:0f:8d:4d:a0:e0:87:5f:a4:86:3c:4f: bc:fa:15:d9:42:55:87:be:d2:12:d8:65:ca:8c:f9: 2c:ad:08:1c:01:bf:fc:ca:91:b5:12:14:7e:f5:6e: cd:23:a6:aa:00:b5:7c:53:a8:33:4c:10:f7:67:ef: d9:1b:45:27:f4:9d:10:35:ce:d3:05:f6:5e:b6:40: 90:e9:10:13:59:41:b8:ea:f8:58:ba:db:4a:89:91: a4:bd:0a:f3:2d:59:96:3c:08:4c:89:27:f0:2b:4c: 99:7f:d9:97:a1:33:a1:8e:b6:12:94:d4:8e:5d:ca: 22:fd:0a:e3:ac:e0:96:61:31:c4:61:03:3f:96:f3: 10:e2:a7:1e:72:33:f6:23:db:56:21:6a:68:f4:31: 1e:db:67:0e:3e:02:0a:b9:94:d3:e7:55:72:b1:7d: 4a:ec:4c:3b:68:50:9b:50:4c:65:12:71:c2:82:43: bd:d3:c1:7d:75:dd:43:f6:9d:ed:f4:ee:d1:e6:2b: 4d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5B:FE:A0:44:56:08:B2:BE:54:7A:23:C4:4B:57:74:D3:26:41:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a8c511f3-e3d8-3058-9991-60a89d2dd1fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ba:a0:67:55:c4:05:2c:94:d6:e6:d9:18:d7:d8:29:4f:50: 4e:19:9b:f6:b1:05:04:f2:4a:73:92:5b:b2:8f:11:9a:84:a5: 10:25:d9:31:99:9c:d5:71:63:5f:2c:a2:38:ad:c0:bf:07:e1: e3:68:07:b0:cc:3c:eb:11:8e:8b:3b:30:e0:48:b3:e2:b4:c7: 7b:a6:eb:c8:75:25:4d:35:99:4e:73:6c:78:ea:b3:06:96:88: 89:f1:3c:af:f3:bd:f1:25:29:88:ce:c6:ca:24:4e:2f:e8:ad: c6:f8:05:01:f1:d2:1f:5c:88:f2:e3:60:a1:32:2c:43:7b:d9: ef:4c:62:dd:a9:6a:f7:31:f8:8a:7d:17:3b:64:a4:69:3e:23: 72:3f:dc:f4:7d:11:a9:9a:e3:23:63:c3:94:02:b5:3e:62:f1: a9:7f:26:3b:1e:ed:c2:f4:eb:56:1b:24:2e:a8:03:ed:03:eb: 35:6e:3e:04:cd:f4:2d:11:09:2c:c1:f7:8e:17:e5:a9:16:e8: 40:99:31:a1:61:ee:2b:8f:06:cb:80:dc:33:05:14:21:6b:ee: 6c:9f:47:54:67:c1:b8:cd:30:ae:3a:74:10:0e:a6:02:b7:c8: 87:ab:2d:9b:e7:07:4f:51:8a:b9:c0:73:51:4c:db:bc:c3:0a: 0a:66:6d:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q86LTDy1UBvBd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk NDBmM2FiMTctMTIzMy00ZTZiLWIzZGItMjMzMTExOThmZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7H0giCqCCMFpkNajHjO4W56FZbrIfni7pBFs TSGEluv4GPaL/l7leuDLcYXc1FHLA/lS2g1mSmDpZDoUPnQED41NoOCHX6SGPE+8 +hXZQlWHvtIS2GXKjPksrQgcAb/8ypG1EhR+9W7NI6aqALV8U6gzTBD3Z+/ZG0Un 9J0QNc7TBfZetkCQ6RATWUG46vhYuttKiZGkvQrzLVmWPAhMiSfwK0yZf9mXoTOh jrYSlNSOXcoi/QrjrOCWYTHEYQM/lvMQ4qcecjP2I9tWIWpo9DEe22cOPgIKuZTT 51VysX1K7Ew7aFCbUExlEnHCgkO908F9dd1D9p3t9O7R5itNmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1b/qBEVgiyvlR6I8RLV3TTJkGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYThjNTExZjMtZTNkOC0z MDU4LTk5OTEtNjBhODlkMmRkMWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK6oGdVxAUslNbm2RjX2ClPUE4Zm/axBQTySnOSW7KPEZqEpRAl2TGZ nNVxY18sojitwL8H4eNoB7DMPOsRjos7MOBIs+K0x3um68h1JU01mU5zbHjqswaW iInxPK/zvfElKYjOxsokTi/orcb4BQHx0h9ciPLjYKEyLEN72e9MYt2pavcx+Ip9 FztkpGk+I3I/3PR9Eama4yNjw5QCtT5i8al/Jjse7cL061YbJC6oA+0D6zVuPgTN 9C0RCSzB944X5akW6ECZMaFh7iuPBsuA3DMFFCFr7myfR1RnwbjNMK46dBAOpgK3 yIerLZvnB09RirnAc1FM27zDCgpmbfQ= -----END CERTIFICATE-----Generated at Mon Jan 19 20:03:12 2026 by rpki-client