This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa File: afb66b1c-4c26-3945-b917-6f62e119b9c6.roa (raw, json) Hash identifier: nnJm4JVhReHzTATY/06MsHhkhw+THUURgklwZWE0V28= Subject key identifier: 8B:6A:C6:24:30:71:B9:5C:A3:FD:81:5F:31:18:91:17:11:27:2E:5B Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584C3916483F9A36D650290ACD80 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 62610 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:48:3f:9a:36:d6:50:29:0a:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=2dec9219-740e-4170-b9e9-17cfd94e794f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:a9:58:ad:fd:1e:52:7a:a8:d8:a1:1d:6f: 71:12:4a:ea:84:a2:39:89:98:36:64:55:1c:49:c9: fd:c1:44:67:7d:d1:36:0b:eb:f1:98:ca:0c:0d:e7: 2b:d1:ef:de:7e:26:2e:6e:3e:0d:3b:7d:19:b8:b3: 62:89:e6:fc:97:5c:ea:9c:bc:76:a7:c2:83:67:29: 70:ff:27:d7:19:a0:95:c0:e8:90:aa:88:a5:eb:88: 15:4a:99:5d:34:4e:a4:13:c9:14:2e:dd:4b:5e:49: eb:61:0f:a3:6b:0c:30:7a:bf:4d:6e:63:87:89:64: 64:f1:03:d4:ce:fb:f5:cc:b5:65:89:5e:04:11:1a: 35:c5:30:1c:cd:c3:24:6b:fb:16:06:67:01:28:b9: c9:f7:dc:b5:0b:0d:13:10:3f:7c:62:47:2b:90:88: 93:53:ac:1e:12:bd:93:cd:e0:16:98:70:a8:a3:16: 85:22:ea:27:75:a9:45:d8:d6:14:c6:51:e6:25:44: 87:cf:41:84:db:5a:6b:b6:c7:91:97:75:6d:81:5f: 0f:89:f6:90:9f:08:a2:55:cd:f7:17:2f:a7:4f:c7: 91:4e:5b:e2:af:0d:56:f1:64:84:79:88:10:c9:ac: a7:8c:da:6c:af:f8:6b:81:5c:d9:45:7e:dc:80:96: ea:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6A:C6:24:30:71:B9:5C:A3:FD:81:5F:31:18:91:17:11:27:2E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:41:36:82:ce:aa:ae:42:e2:58:df:f0:b8:fc:26:70:6c:26: 62:d7:c8:20:ba:41:4f:2e:4f:74:8d:4c:2b:58:5c:bd:64:a3: 6b:5c:67:02:5e:8d:07:5d:cc:5d:92:93:5e:5b:15:05:2a:ed: 53:23:ed:ea:50:59:1e:fb:a2:92:06:12:90:0c:ec:30:55:5a: 25:9d:94:a4:0c:a3:73:65:33:98:9f:10:90:59:ae:9e:54:c0: 5c:4c:fb:8d:9f:40:57:40:82:35:a7:27:54:c8:f4:68:b4:e0: e6:7e:b5:cf:39:0a:6e:53:82:fa:1f:cf:c3:f1:cf:5f:ee:72: a8:ed:58:c7:df:cc:8f:98:16:cc:28:f9:88:59:ba:14:61:f8: d1:f6:6a:d2:9e:27:c1:ce:73:bf:c7:4b:68:f2:99:7b:19:fc: 88:d5:ea:f0:e1:14:ab:bc:50:12:b5:5d:cf:f8:d8:a7:63:78: 62:49:ee:ae:2b:4e:2c:f8:a6:2f:bd:66:ed:71:8a:af:e0:a7: e9:79:7a:2a:3e:20:58:5f:50:67:f2:4b:68:5a:fa:73:9b:72: 2f:b7:96:56:58:07:1a:e1:25:b4:7e:58:b9:70:93:60:8f:52: cb:43:f6:ae:db:b2:2e:48:2f:69:d5:26:52:8e:6f:7d:9f:b7: 1a:65:43:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5Fkg/mjbWUCkKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MmRlYzkyMTktNzQwZS00MTcwLWI5ZTktMTdjZmQ5NGU3OTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP6pWK39HlJ6qNihHW9xEkrqhKI5iZg2ZFUc Scn9wURnfdE2C+vxmMoMDecr0e/efiYubj4NO30ZuLNiieb8l1zqnLx2p8KDZylw /yfXGaCVwOiQqoil64gVSpldNE6kE8kULt1LXknrYQ+jawwwer9NbmOHiWRk8QPU zvv1zLVliV4EERo1xTAczcMka/sWBmcBKLnJ99y1Cw0TED98YkcrkIiTU6weEr2T zeAWmHCooxaFIuondalF2NYUxlHmJUSHz0GE21prtseRl3VtgV8PifaQnwiiVc33 Fy+nT8eRTlvirw1W8WSEeYgQyaynjNpsr/hrgVzZRX7cgJbqLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItqxiQwcblco/2BXzEYkRcRJy5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYWZiNjZiMWMtNGMyNi0z OTQ1LWI5MTctNmY2MmUxMTliOWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZBNoLOqq5C4ljf8Lj8JnBsJmLXyCC6QU8uT3SNTCtYXL1ko2tcZwJe jQddzF2Sk15bFQUq7VMj7epQWR77opIGEpAM7DBVWiWdlKQMo3NlM5ifEJBZrp5U wFxM+42fQFdAgjWnJ1TI9Gi04OZ+tc85Cm5Tgvofz8Pxz1/ucqjtWMffzI+YFswo +YhZuhRh+NH2atKeJ8HOc7/HS2jymXsZ/IjV6vDhFKu8UBK1Xc/42KdjeGJJ7q4r Tiz4pi+9Zu1xiq/gp+l5eio+IFhfUGfyS2ha+nObci+3llZYBxrhJbR+WLlwk2CP UstD9q7bsi5IL2nVJlKOb32ftxplQx8= -----END CERTIFICATE-----Generated at Tue Jan 20 15:24:16 2026 by rpki-client