This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa File: 2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa (raw, json) Hash identifier: ueshBr793qFRVXuUBz0t7AVwras4WXH3ghsVbThA8CI= Subject key identifier: 04:E1:3B:11:60:41:EC:73:AC:4E:B3:B4:4E:C5:49:7E:06:D8:DB:CE Certificate issuer: /CN=8e5312d0-770c-4d40-8042-53d0eadc436b Certificate serial: 010D0C9F4328584C470BC6BA87A2CDA67E6F3BA0 Authority key identifier: 3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 21976 IP address blocks: 192.135.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:c6:ba:87:a2:cd:a6:7e:6f:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5312d0-770c-4d40-8042-53d0eadc436b Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=d7bedc1f-e3f0-49b0-b009-423ea52f9eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:be:56:2a:13:a2:fd:a4:97:28:14:94:9b: fd:bf:cc:ce:8a:cd:f5:b0:82:ca:b6:98:35:32:e1: 3d:61:7c:a9:fd:a3:4d:dc:78:bc:75:d8:df:59:7b: 9c:d3:30:6e:07:6b:e4:fb:63:f3:76:d1:b3:3a:f8: 4d:65:29:7b:ad:e1:f5:ee:58:7f:4c:82:a2:a9:1e: 02:40:fc:f9:83:15:38:50:46:57:af:93:f9:95:c9: 3f:fd:75:c9:fd:ec:f6:83:a2:44:bc:11:1d:af:39: b2:6b:74:35:d7:60:82:21:fd:86:a4:5a:15:7c:2b: 33:ea:93:14:c0:54:a9:10:8e:2f:ef:9f:71:85:81: 00:00:10:3f:75:f4:70:0b:05:ae:d4:09:7f:01:b2: 6a:9d:10:e5:80:94:31:17:94:76:89:c1:cf:44:82: 73:26:44:c0:9d:9b:96:27:14:ef:7a:78:a8:72:7c: de:86:16:33:43:5e:fd:08:64:ee:aa:91:6e:4b:4c: 7f:9e:a5:3c:dd:6e:f0:66:2b:c0:55:dc:ed:09:99: be:88:12:c8:30:d1:fe:0a:71:5f:9a:ac:05:be:6b: 3b:64:30:19:ee:98:ce:c8:48:a4:ff:39:62:99:fd: bf:99:d9:80:df:99:38:9e:6f:db:6b:0e:ad:eb:c5: 22:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E1:3B:11:60:41:EC:73:AC:4E:B3:B4:4E:C5:49:7E:06:D8:DB:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/2ddbbf32-de8c-3aeb-93d8-80ebfd156030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b/8e5312d0-770c-4d40-8042-53d0eadc436b.crl X509v3 Authority Key Identifier: keyid:3F:76:89:BD:0C:17:F7:63:C3:53:18:D2:89:B5:0A:47:37:D6:89:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e5312d0-770c-4d40-8042-53d0eadc436b.cer sbgp-ipAddrBlock: critical IPv4: 192.135.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:1f:7b:f7:ac:94:5c:62:4a:2f:5d:45:fe:cf:5b:61:e2:ec: a8:4a:72:82:b1:ae:73:fb:36:01:9b:33:07:f8:dc:dc:48:3e: 6d:4e:a0:70:ff:a0:b2:0b:76:58:10:fd:0c:5f:f4:70:8c:17: 89:1b:41:15:1f:43:de:9a:63:91:cd:a6:73:ae:a0:45:c0:83: f7:d7:1d:a9:77:71:5a:53:44:d9:9b:87:39:80:fd:0b:cb:9d: 8c:48:cf:bf:3c:b8:a3:b8:75:51:68:9c:a1:bb:71:e5:3a:29: 72:c4:03:39:c4:45:31:b5:c0:62:54:46:47:f9:c9:04:2f:29: c4:5b:8d:3d:f9:5c:e3:13:23:20:e7:5b:50:ec:83:29:ef:74: 3c:5f:13:37:70:5a:5d:19:85:db:d8:4e:7f:82:91:41:5c:95: c0:c5:a4:17:b2:0d:6c:22:df:63:6d:af:99:95:72:6f:4e:03: 2e:c5:f8:f2:58:03:96:17:65:d8:97:be:44:24:d5:7c:ad:e1: 7c:88:44:35:1e:e1:f3:d7:57:55:bd:19:bf:f7:15:89:ad:fc: 9d:1f:27:22:bc:6b:36:be:a7:3a:f1:58:22:e3:9c:08:13:ee: ba:7d:bc:e9:83:ae:57:83:77:fc:06:9a:33:62:42:56:e9:78: 5c:b3:d5:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC8a6h6LNpn5vO6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MzEyZDAtNzcwYy00ZDQwLTgwNDItNTNkMGVhZGM0 MzZiMB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk ZDdiZWRjMWYtZTNmMC00OWIwLWIwMDktNDIzZWE1MmY5ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka2+VioTov2klygUlJv9v8zOis31sILKtpg1 MuE9YXyp/aNN3Hi8ddjfWXuc0zBuB2vk+2PzdtGzOvhNZSl7reH17lh/TIKiqR4C QPz5gxU4UEZXr5P5lck//XXJ/ez2g6JEvBEdrzmya3Q112CCIf2GpFoVfCsz6pMU wFSpEI4v759xhYEAABA/dfRwCwWu1Al/AbJqnRDlgJQxF5R2icHPRIJzJkTAnZuW JxTveniocnzehhYzQ179CGTuqpFuS0x/nqU83W7wZivAVdztCZm+iBLIMNH+CnFf mqwFvms7ZDAZ7pjOyEik/zlimf2/mdmA35k4nm/baw6t68UiMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAThOxFgQexzrE6ztE7FSX4G2NvOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUz MTJkMC03NzBjLTRkNDAtODA0Mi01M2QwZWFkYzQzNmIvMmRkYmJmMzItZGU4Yy0z YWViLTkzZDgtODBlYmZkMTU2MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGU1MzEyZDAtNzcwYy00ZDQwLTgw NDItNTNkMGVhZGM0MzZiLzhlNTMxMmQwLTc3MGMtNGQ0MC04MDQyLTUzZDBlYWRj NDM2Yi5jcmwwHwYDVR0jBBgwFoAUP3aJvQwX92PDUxjSibUKRzfWiQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZTUzMTJkMC03NzBjLTRkNDAtODA0Mi01M2Qw ZWFkYzQzNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUfe/eslFxiSi9dRf7PW2Hi7KhKcoKxrnP7NgGbMwf43NxIPm1OoHD/ oLILdlgQ/Qxf9HCMF4kbQRUfQ96aY5HNpnOuoEXAg/fXHal3cVpTRNmbhzmA/QvL nYxIz788uKO4dVFonKG7ceU6KXLEAznERTG1wGJURkf5yQQvKcRbjT35XOMTIyDn W1DsgynvdDxfEzdwWl0ZhdvYTn+CkUFclcDFpBeyDWwi32Ntr5mVcm9OAy7F+PJY A5YXZdiXvkQk1Xyt4XyIRDUe4fPXV1W9Gb/3FYmt/J0fJyK8aza+pzrxWCLjnAgT 7rp9vOmDrleDd/wGmjNiQlbpeFyz1Wc= -----END CERTIFICATE-----Generated at Sun Jan 11 06:43:58 2026 by rpki-client