This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: 3W9gvzszD/n0C9UFC7mdJu2L2ixX/5+O4470IbBnqQs= Subject key identifier: 26:52:11:3E:49:C7:3E:AE:8B:43:70:92:F5:BB:26:1D:10:F1:C1:04 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584C40114D16D4E069F834ECDB80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:4d:16:d4:e0:69:f8:34:ec:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=dea90c11-da26-4757-a644-7e12b0134262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:6b:eb:f8:61:3c:a9:32:49:fd:67:21:ac: 2c:43:8f:02:a6:9d:f6:dd:26:c5:f2:04:76:56:c8: b6:00:17:d2:ca:44:5b:18:f4:b0:6a:48:89:ea:6c: d5:01:4c:c6:1c:f5:33:99:33:16:1d:de:71:dc:bb: 9e:44:4d:71:81:0e:a2:59:1e:b7:69:31:08:aa:b0: 2f:4e:b5:a7:67:1d:8b:bb:c8:96:46:17:cc:44:52: d9:26:fd:f4:09:d8:06:7b:58:3d:76:d0:b2:b2:36: c2:66:b0:44:b1:e1:d0:c9:26:e6:93:35:12:a6:cb: ec:1a:e4:b9:89:c5:43:67:a9:a7:cf:ae:89:3a:dd: 74:51:fa:34:53:32:8a:73:8f:88:da:2f:23:55:08: 08:46:7b:f3:e1:b4:af:c0:72:ba:1e:78:df:e4:94: b1:04:9b:f6:9b:5f:44:c0:89:7e:6e:0d:fe:2d:70: 42:20:44:e7:df:2b:60:b7:20:0b:b1:b5:1f:73:d5: 08:44:14:94:10:c5:f4:6f:96:86:ac:08:f7:0f:df: 29:cd:b7:9c:b1:a3:2b:e6:3e:c2:23:53:ec:3a:bb: e5:bc:23:3d:2d:f0:15:fe:14:a6:e0:d3:0a:bd:de: 81:90:cf:74:8d:2d:f0:07:72:d7:f1:1c:69:c4:90: ef:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:52:11:3E:49:C7:3E:AE:8B:43:70:92:F5:BB:26:1D:10:F1:C1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:0b:4b:68:12:ad:a2:de:e2:4f:95:87:18:79:d6:9e:c4:d9: e2:4d:bb:cc:f9:7f:b2:75:01:f8:a1:fc:04:ef:bb:9c:aa:14: 2f:93:e1:40:39:a9:28:ad:4e:f6:5c:09:0e:43:95:1c:af:a5: 57:6c:26:15:1d:6d:29:ce:33:4c:1e:72:d2:4d:ab:c4:a2:a6: 64:4e:c9:53:11:1f:0d:8e:94:92:35:b1:64:50:f7:71:92:f0: 2b:e1:47:51:bb:50:96:32:0e:b3:ab:69:7b:c2:0a:c9:df:7a: f6:37:e5:56:17:de:5f:47:40:ff:78:19:ce:c7:ae:2d:d5:91: 3a:ab:7b:08:98:b8:74:7f:b6:42:23:6d:eb:1a:03:c1:42:4f: 5f:89:5b:8a:33:c1:77:66:9c:ec:af:5c:76:a7:ff:62:c2:52: 1b:c3:95:26:4b:f3:cd:32:7e:19:72:2f:70:b6:5b:7f:8b:c8: ec:60:8e:7d:23:b7:c3:c7:ea:02:02:7a:e3:0f:4b:83:a2:70: ee:04:b5:40:63:20:0f:a1:ac:5c:a0:70:3f:72:3b:3d:b2:5f: 20:dd:73:0b:f6:43:97:1c:fb:33:90:bd:e2:17:bf:b2:d0:bd: 8d:37:08:97:98:8e:d3:4a:22:37:af:d6:56:10:a4:ed:a8:f1: 01:b9:96:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEU0W1OBp+DTs24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZGVhOTBjMTEtZGEyNi00NzU3LWE2NDQtN2UxMmIwMTM0MjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso1r6/hhPKkySf1nIawsQ48Cpp323SbF8gR2 Vsi2ABfSykRbGPSwakiJ6mzVAUzGHPUzmTMWHd5x3LueRE1xgQ6iWR63aTEIqrAv TrWnZx2Lu8iWRhfMRFLZJv30CdgGe1g9dtCysjbCZrBEseHQySbmkzUSpsvsGuS5 icVDZ6mnz66JOt10Ufo0UzKKc4+I2i8jVQgIRnvz4bSvwHK6Hnjf5JSxBJv2m19E wIl+bg3+LXBCIETn3ytgtyALsbUfc9UIRBSUEMX0b5aGrAj3D98pzbecsaMr5j7C I1PsOrvlvCM9LfAV/hSm4NMKvd6BkM90jS3wB3LX8RxpxJDvdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZSET5Jxz6ui0NwkvW7Jh0Q8cEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcLS2gSraLe4k+Vhxh51p7E2eJNu8z5f7J1Afih/ATvu5yqFC+T4UA5 qSitTvZcCQ5DlRyvpVdsJhUdbSnOM0wectJNq8SipmROyVMRHw2OlJI1sWRQ93GS 8CvhR1G7UJYyDrOraXvCCsnfevY35VYX3l9HQP94Gc7Hri3VkTqrewiYuHR/tkIj besaA8FCT1+JW4ozwXdmnOyvXHan/2LCUhvDlSZL880yfhlyL3C2W3+LyOxgjn0j t8PH6gICeuMPS4OicO4EtUBjIA+hrFygcD9yOz2yXyDdcwv2Q5cc+zOQveIXv7LQ vY03CJeYjtNKIjev1lYQpO2o8QG5lo8= -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:29 2026 by rpki-client