This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa File: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (raw, json) Hash identifier: bLKfGG3dGbhX+6vR86L0lb/lJV0xzbBFN5S9+18TrA8= Subject key identifier: A1:C5:DE:AC:6D:AD:44:E1:7A:21:3B:75:0A:56:80:CD:DA:13:4B:81 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584C52366DA94E46FE74CB4A8420 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 14965 IP address blocks: 158.51.216.0/22 maxlen: 24 199.241.44.0/22 maxlen: 24 2605:98c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:6d:a9:4e:46:fe:74:cb:4a:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=bb4490f2-c720-4abe-a881-fb2e49952390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:70:05:79:f6:1d:5c:04:5e:c4:91:5b:91: 55:71:4a:7e:ed:ad:d5:e1:40:48:4e:06:4f:da:2d: ab:6b:4f:59:07:62:65:49:c3:b4:0f:39:5e:db:a7: a2:a9:2d:cd:30:d8:c2:da:25:00:aa:89:fa:66:4f: 6b:39:3b:b7:8b:d2:d5:e4:16:ff:89:22:65:3a:80: b1:0e:c9:58:f9:0d:d1:1b:c3:fa:de:a4:50:37:22: c9:60:a8:47:8b:fb:c4:60:f2:ad:95:6a:e0:84:0c: 0a:a7:93:3d:dd:73:b2:e9:30:70:f2:d9:2e:18:c4: e5:7e:41:31:d7:b1:99:3a:d3:fa:97:48:65:32:9f: 13:93:41:51:cc:5d:4b:56:2b:56:3a:31:7f:e5:f5: 77:fd:60:11:a1:52:b0:c6:16:7e:3f:9b:2a:35:c1: 5f:61:10:7a:d0:2f:85:60:9c:99:49:56:55:b9:fa: 1b:c0:05:3c:b2:6b:4f:8b:21:c1:ef:06:cd:a4:2b: 86:34:29:b2:2d:9b:7d:83:a2:91:d2:4e:b6:8c:ab: 4b:6e:95:19:21:c8:ad:1a:3f:cb:93:c4:8f:ce:08: e2:cb:6b:b6:e2:7f:fc:8e:ca:12:19:a5:8d:62:a2: 01:67:93:aa:ab:ae:55:f5:32:c5:b3:74:67:1f:f4: 9a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C5:DE:AC:6D:AD:44:E1:7A:21:3B:75:0A:56:80:CD:DA:13:4B:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.216.0/22 199.241.44.0/22 IPv6: 2605:98c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:7d:c2:ab:23:80:3e:7b:3f:5c:b5:40:f4:61:4b:2c:6b:76: 0b:78:83:e9:d8:e9:77:f1:ca:ea:5b:a6:20:b4:96:ef:dc:85: 65:e7:6c:c2:86:4d:9e:8b:d6:2e:1b:1a:37:99:1c:f5:86:5c: be:8b:ee:f9:8f:9f:46:73:f5:14:de:7e:36:3d:af:78:84:37: 4d:b2:56:08:5a:8d:d0:a1:0d:08:69:c8:fd:b0:6e:8a:66:d4: 3a:31:58:ad:c6:e6:42:7f:75:30:54:6d:bf:29:76:20:a9:d0: 0a:a0:b8:96:18:c9:77:39:ae:b3:90:aa:bd:57:5c:b3:eb:61: f4:74:82:fe:1e:7d:eb:b9:04:87:f8:ba:00:29:14:a3:94:01: fb:72:db:cb:62:27:a9:b0:38:e1:61:ec:95:7f:86:c6:b4:e4: 50:6f:d5:f5:82:33:36:32:c2:62:aa:37:9e:2e:f5:20:08:db: 51:bf:03:c9:3c:08:4d:0c:00:0d:24:cf:b3:5d:7f:84:d9:79: d7:d1:3e:80:b1:1d:af:0f:3c:86:b1:e0:97:64:38:81:02:2b: a1:83:7c:a3:68:ee:d7:02:22:c1:6a:f7:f0:a4:8f:e7:7f:52: 59:84:09:c7:54:81:3c:44:b6:db:3e:2b:1e:b3:09:d0:9d:1b: 3f:5d:c6:25 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWExSNm2pTkb+dMtKhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk YmI0NDkwZjItYzcyMC00YWJlLWE4ODEtZmIyZTQ5OTUyMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvxwBXn2HVwEXsSRW5FVcUp+7a3V4UBITgZP 2i2ra09ZB2JlScO0Dzle26eiqS3NMNjC2iUAqon6Zk9rOTu3i9LV5Bb/iSJlOoCx DslY+Q3RG8P63qRQNyLJYKhHi/vEYPKtlWrghAwKp5M93XOy6TBw8tkuGMTlfkEx 17GZOtP6l0hlMp8Tk0FRzF1LVitWOjF/5fV3/WARoVKwxhZ+P5sqNcFfYRB60C+F YJyZSVZVufobwAU8smtPiyHB7wbNpCuGNCmyLZt9g6KR0k62jKtLbpUZIcitGj/L k8SPzgjiy2u24n/8jsoSGaWNYqIBZ5Oqq65V9TLFs3RnH/SajwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKHF3qxtrUTheiE7dQpWgM3aE0uBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMWM4ZmNhMjItM2M5My0z ZWFjLThmOTEtY2Y3MTg3YmQyODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCnjPYAwQC x/EsMA0EAgACMAcDBQAmBZjAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAD59wqsjgD57P1y1QPRhSyxrdgt4 g+nY6XfxyupbpiC0lu/chWXnbMKGTZ6L1i4bGjeZHPWGXL6L7vmPn0Zz9RTefjY9 r3iEN02yVghajdChDQhpyP2wbopm1DoxWK3G5kJ/dTBUbb8pdiCp0AqguJYYyXc5 rrOQqr1XXLPrYfR0gv4efeu5BIf4ugApFKOUAfty28tiJ6mwOOFh7JV/hsa05FBv 1fWCMzYywmKqN54u9SAI21G/A8k8CE0MAA0kz7Ndf4TZedfRPoCxHa8PPIax4Jdk OIECK6GDfKNo7tcCIsFq9/Ckj+d/UlmECcdUgTxEtts+Kx6zCdCdGz9dxiU= -----END CERTIFICATE-----Generated at Sat Jan 10 14:54:54 2026 by rpki-client