This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa File: b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa (raw, json) Hash identifier: lbSPHi1+AiTSTT6D67tavsVDNblR/iy29w3+OyMuisQ= Subject key identifier: 58:35:57:0D:6B:4B:7D:6F:5E:12:01:22:9B:CA:84:57:B7:0D:31:49 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584C5EC6FFC1A6C34DE763E8D080 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 20115 IP address blocks: 172.223.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:ff:c1:a6:c3:4d:e7:63:e8:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=c443289d-4b1e-4720-8291-b424c8fdc01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cc:e1:c5:a4:aa:95:13:ec:94:c8:a5:23:59: 66:ff:26:58:54:5c:b7:c6:ec:e4:06:1b:45:46:75: 7d:16:2a:1b:6e:40:c8:55:0e:39:72:b9:d5:7b:35: 35:cc:d6:fe:ca:3c:80:ef:d0:42:d7:68:e2:0f:76: c6:db:77:21:b8:6a:d7:5f:6c:f8:c7:60:a8:d1:94: b1:d7:c3:24:47:a0:33:90:b5:e0:f9:3a:ad:d1:4b: 15:2b:19:0e:e8:8c:1d:13:c1:41:90:df:cb:84:5f: a2:f4:67:db:9a:60:cd:e3:a3:98:f0:b0:a9:20:23: dd:3b:19:e9:b8:0a:9a:13:9b:f1:60:97:6b:74:c9: e6:b6:45:aa:7a:7c:bf:a1:d8:f8:e1:ef:dd:17:66: 9e:73:25:0e:9b:29:62:fb:c7:9e:2e:cf:2d:25:50: 8a:06:b1:44:f0:2f:e9:b7:57:5f:84:3b:30:00:00: 19:a5:d9:6f:77:c8:d4:06:7f:db:b8:cb:45:39:96: 96:c7:59:b8:b0:9c:ee:26:79:74:3f:7f:ad:66:3d: 0d:87:64:75:50:fd:2b:5c:13:3e:23:dd:ea:6d:25: 27:11:14:93:8c:1a:ed:b8:74:6b:13:75:a8:94:d2: 39:36:69:b4:7d:bb:28:fb:67:16:c9:6b:99:94:67: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:35:57:0D:6B:4B:7D:6F:5E:12:01:22:9B:CA:84:57:B7:0D:31:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b7942ba5-a7e4-36fd-b2ca-a0e4e5d33d8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b5:4c:01:06:b4:2b:57:13:1a:46:48:86:7f:c5:a5:e7:88: 0d:e2:6f:c1:d3:c6:7f:80:44:81:5b:0d:a2:af:ce:0a:cd:f8: 2b:f7:2d:3c:d4:7a:d9:9b:c5:02:fe:89:72:93:c0:eb:21:7b: 78:9a:41:d5:1e:f1:30:e0:b8:06:d0:06:5b:38:b0:76:a4:dd: ba:9f:89:cf:5b:82:dc:cd:55:95:3c:20:61:6d:00:7b:a6:dd: c0:68:e4:f6:33:67:9d:32:fb:08:e5:4e:a2:0e:dd:35:0b:8b: 82:2c:90:e2:4e:54:1a:da:9d:f0:f0:06:83:a5:e2:a8:29:c2: 0c:a1:28:8a:39:d1:ba:c3:f4:2d:a1:3c:c7:24:40:6e:1e:a2: ad:11:f6:17:7b:9d:a4:cf:28:19:1a:34:54:68:32:29:23:33: 46:54:27:fa:6b:d1:23:f7:25:90:43:77:b4:47:4e:0f:66:48: d7:0a:e4:89:5f:7b:75:fa:de:61:b2:8a:d8:54:e7:4b:f6:46: 66:ed:9e:39:d2:e0:e5:9c:3f:1a:54:ad:60:a6:d4:ca:1c:b0: fe:03:0d:de:67:74:d2:bd:77:3b:45:bb:30:4c:5b:99:81:85: 13:cb:de:73:fa:06:b1:89:39:41:6c:a2:0a:2e:6a:8b:16:f7: 9b:5f:57:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexv/BpsNN52Po0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk YzQ0MzI4OWQtNGIxZS00NzIwLTgyOTEtYjQyNGM4ZmRjMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68zhxaSqlRPslMilI1lm/yZYVFy3xuzkBhtF RnV9FiobbkDIVQ45crnVezU1zNb+yjyA79BC12jiD3bG23chuGrXX2z4x2Co0ZSx 18MkR6AzkLXg+Tqt0UsVKxkO6IwdE8FBkN/LhF+i9GfbmmDN46OY8LCpICPdOxnp uAqaE5vxYJdrdMnmtkWqeny/odj44e/dF2aecyUOmyli+8eeLs8tJVCKBrFE8C/p t1dfhDswAAAZpdlvd8jUBn/buMtFOZaWx1m4sJzuJnl0P3+tZj0Nh2R1UP0rXBM+ I93qbSUnERSTjBrtuHRrE3WolNI5Nmm0fbso+2cWyWuZlGdfwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg1Vw1rS31vXhIBIpvKhFe3DTFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjc5NDJiYTUtYTdlNC0z NmZkLWIyY2EtYTBlNGU1ZDMzZDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAO1TAEGtCtXExpGSIZ/xaXniA3ib8HTxn+ARIFbDaKvzgrN+Cv3LTzU etmbxQL+iXKTwOshe3iaQdUe8TDguAbQBls4sHak3bqfic9bgtzNVZU8IGFtAHum 3cBo5PYzZ50y+wjlTqIO3TULi4IskOJOVBranfDwBoOl4qgpwgyhKIo50brD9C2h PMckQG4eoq0R9hd7naTPKBkaNFRoMikjM0ZUJ/pr0SP3JZBDd7RHTg9mSNcK5Ilf e3X63mGyithU50v2RmbtnjnS4OWcPxpUrWCm1MocsP4DDd5ndNK9dztFuzBMW5mB hRPL3nP6BrGJOUFsogouaosW95tfV1I= -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:26 2026 by rpki-client