This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa File: ce91baa4-4505-349d-a0fb-18653fe49913.roa (raw, json) Hash identifier: DJAV7wvZCZHoR0nDJmWz1vAOZLLtWgd+gOZQdj+Uqk4= Subject key identifier: E1:A9:74:E3:52:F0:66:C1:1D:58:03:23:DC:BF:29:58:B6:E8:3A:F9 Certificate issuer: /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Certificate serial: 010D0C9F4328584C5666B0C407A1555694B1A5C0 Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 8075 IP address blocks: 199.88.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:b0:c4:07:a1:55:56:94:b1:a5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=88df62d8-9f3e-4ccc-9d24-4215ad415f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:6b:fa:0f:e5:f3:fe:30:e7:ad:6b:88:4d: c5:77:5f:b1:76:50:8e:6f:08:d5:a4:05:ca:8c:c9: 3d:6b:2d:61:70:03:5c:67:5f:eb:2e:5c:c5:e3:b9: 30:de:b9:5e:81:dc:74:ee:bb:73:91:e0:b1:a7:a4: dd:eb:3b:d2:35:1f:6d:5b:34:35:72:1a:7a:47:2e: 79:66:90:3b:01:ad:a3:d6:ad:1e:9c:95:2f:85:1c: 17:ca:29:48:dd:91:9d:46:1f:1f:67:c7:02:03:b5: 61:41:cb:e5:94:19:fc:53:64:13:06:c0:cd:7f:60: 86:cc:74:24:cb:21:ef:33:d9:74:ad:92:74:f3:fd: 5a:d0:3e:5b:33:2d:c1:88:45:c3:08:1a:69:3e:f6: 05:66:ac:aa:98:a9:fe:15:eb:a5:f8:e6:d1:03:b9: 94:12:f7:d2:81:f2:49:6c:63:90:82:c3:c6:c6:0d: f1:81:0d:6a:e4:c0:ec:4b:e8:b2:ba:1c:93:06:ff: 30:f2:38:db:d1:94:2a:d1:6f:c5:a6:3d:48:5f:fc: 07:a3:77:8d:ed:97:ea:50:b4:18:c3:75:a3:fc:54: ba:77:8f:83:40:35:67:4c:4a:62:b5:f4:a2:54:5e: 27:9c:42:e8:af:c9:2b:97:37:8d:dc:ca:a3:76:44: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A9:74:E3:52:F0:66:C1:1D:58:03:23:DC:BF:29:58:B6:E8:3A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/ce91baa4-4505-349d-a0fb-18653fe49913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl X509v3 Authority Key Identifier: keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer sbgp-ipAddrBlock: critical IPv4: 199.88.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c5:cb:0a:ea:f4:c9:50:e3:f1:24:16:b0:f9:b7:1e:85:4b: be:96:c4:22:23:ec:7b:d5:4f:8a:b4:0c:7b:11:36:02:df:15: 98:2c:47:7a:26:01:0c:5c:74:b0:36:34:c4:f2:4e:a3:98:8a: e5:d1:7a:6e:37:26:5a:50:59:ae:31:0e:d8:db:fd:61:8c:d8: a5:04:22:6c:92:aa:f4:66:9e:7f:bd:3e:c3:ce:4f:03:71:29: 40:0a:0a:4e:74:80:af:5e:1f:00:53:9b:3c:c0:a9:b6:af:9b: 1e:22:0f:50:85:4e:02:72:88:88:cc:2a:6a:ca:16:77:fa:b0: 1a:92:1a:c1:25:d2:ec:5d:64:7a:8f:91:db:7d:d9:8e:f4:33: e0:a4:21:b5:84:3f:4b:01:6e:f4:05:4b:5d:83:49:30:f8:51: da:39:93:ab:7c:eb:ac:8b:61:12:a3:3b:a1:99:fc:5a:ba:a7: 9f:b5:31:2d:13:d8:63:bc:7b:5b:1f:a1:76:31:60:45:57:7c: 09:b6:31:58:17:a2:dd:87:d2:72:0e:02:d9:ed:22:b9:85:df: 63:79:93:23:c6:69:f4:d5:63:aa:46:85:07:52:6a:74:86:d2: 32:30:86:7b:a0:2a:f2:67:f2:b6:a3:49:41:66:8b:2b:be:c8: 5b:b9:56:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZrDEB6FVVpSxpcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli MGRlMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk ODhkZjYyZDgtOWYzZS00Y2NjLTlkMjQtNDIxNWFkNDE1ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwBr+g/l8/4w561riE3Fd1+xdlCObwjVpAXK jMk9ay1hcANcZ1/rLlzF47kw3rlegdx07rtzkeCxp6Td6zvSNR9tWzQ1chp6Ry55 ZpA7Aa2j1q0enJUvhRwXyilI3ZGdRh8fZ8cCA7VhQcvllBn8U2QTBsDNf2CGzHQk yyHvM9l0rZJ08/1a0D5bMy3BiEXDCBppPvYFZqyqmKn+Feul+ObRA7mUEvfSgfJJ bGOQgsPGxg3xgQ1q5MDsS+iyuhyTBv8w8jjb0ZQq0W/Fpj1IX/wHo3eN7ZfqULQY w3Wj/FS6d4+DQDVnTEpitfSiVF4nnELor8krlzeN3MqjdkSnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGpdONS8GbBHVgDI9y/KVi26Dr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvY2U5MWJhYTQtNDUwNS0z NDlkLWEwZmItMTg2NTNmZTQ5OTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5 YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1 YmRhOWIwZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1iYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXFywrq9MlQ4/EkFrD5tx6FS76WxCIj7HvVT4q0DHsRNgLfFZgsR3om AQxcdLA2NMTyTqOYiuXRem43JlpQWa4xDtjb/WGM2KUEImySqvRmnn+9PsPOTwNx KUAKCk50gK9eHwBTmzzAqbavmx4iD1CFTgJyiIjMKmrKFnf6sBqSGsEl0uxdZHqP kdt92Y70M+CkIbWEP0sBbvQFS12DSTD4Udo5k6t866yLYRKjO6GZ/Fq6p5+1MS0T 2GO8e1sfoXYxYEVXfAm2MVgXot2H0nIOAtntIrmF32N5kyPGafTVY6pGhQdSanSG 0jIwhnugKvJn8rajSUFmiyu+yFu5VgE= -----END CERTIFICATE-----Generated at Sun Jan 18 15:34:13 2026 by rpki-client