This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa File: dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa (raw, json) Hash identifier: HC1B0mkS0op1iI5JKmj0ngv4t5lgiLKjTqJQNX21jLc= Subject key identifier: 18:F5:27:D1:CD:37:C6:1F:C8:DD:13:F4:FA:0D:15:0B:CB:8C:4C:B5 Certificate issuer: /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Certificate serial: 010D0C9F4328584C3EABCFBAE11BBC399A35CA80 Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 14537 IP address blocks: 162.250.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:cf:ba:e1:1b:bc:39:9a:35:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=436e4450-9014-45f8-899c-22b2c84d7757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:16:28:49:79:72:03:16:c2:7d:df:aa:b3: a2:47:fa:1d:2c:fe:c4:08:1b:4d:e2:b7:7e:e2:c5: 2f:14:2b:94:0e:18:0e:f8:2f:c9:62:21:91:90:1a: f2:92:45:72:b3:4b:84:d3:83:c5:4f:d8:dd:57:04: dc:ba:d8:bd:f6:ce:59:59:f5:e9:ed:1a:0a:85:c8: 70:2d:8c:32:81:b8:17:79:2a:0e:3e:bd:79:0b:b4: e9:6b:18:4c:f1:37:b1:08:20:e4:5c:4f:94:56:af: bc:e0:83:9b:1d:2d:d3:74:f4:ea:92:10:08:0a:da: d9:73:b4:c7:ac:f6:7f:67:73:cd:1c:13:4a:d7:e4: 99:e9:38:fa:c3:f0:e4:a2:da:7e:ab:85:43:5a:4a: f8:83:be:75:bb:d2:f7:a7:43:59:b0:02:1d:5c:55: d2:08:d2:52:33:f1:c7:5c:7b:e3:b3:bc:2c:d7:01: 32:bc:7e:aa:cd:72:c1:51:ae:f5:3d:73:57:55:4b: 37:f0:96:f1:c9:7d:19:99:50:a0:78:84:c8:5f:ba: f5:a4:4c:b4:55:24:94:fe:ff:ae:b7:0b:df:a4:c6: 83:66:aa:77:4d:72:7c:e3:2e:dc:c8:85:b7:8f:68: 5a:71:e5:0f:6a:5d:9f:da:9f:a8:0b:2e:1e:4d:ee: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F5:27:D1:CD:37:C6:1F:C8:DD:13:F4:FA:0D:15:0B:CB:8C:4C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dd7ee9a6-00f3-3daf-874c-8a9dfacb5e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl X509v3 Authority Key Identifier: keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer sbgp-ipAddrBlock: critical IPv4: 162.250.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:13:b2:ae:ef:83:0b:7a:02:35:f4:5c:46:ed:c7:0d:47:45: 34:78:ee:35:4c:f3:44:ba:a6:7a:7c:b3:62:4e:b2:01:b1:8f: 72:f5:0d:63:a3:9c:7e:8a:3d:52:9d:3b:18:ec:46:78:a1:02: 72:21:4b:c1:8d:b4:3a:9f:58:97:12:10:bd:59:8e:c7:65:11: 8b:3b:5d:e1:c4:0b:2b:13:d7:9f:a5:64:f5:0c:29:a9:c0:1d: 45:54:5a:73:d2:7e:62:7e:67:e8:d9:25:6a:56:11:e0:4f:1f: f2:50:81:b9:3f:45:58:39:c0:d0:7a:fe:d6:b1:6a:a9:2a:bf: 5f:53:d1:ce:ba:bc:be:7f:d7:5a:10:42:83:ec:02:af:1f:09: 80:bd:95:1f:10:34:11:36:6a:78:bd:fe:38:96:dc:a8:be:e5: e0:f3:86:3f:63:32:58:9a:f4:5e:15:fc:a1:29:72:8e:8e:7e: 49:c4:24:9a:9e:9d:6b:c7:cd:59:49:51:a5:c7:27:fc:9e:4e: 87:de:51:f5:7a:06:2f:d9:ef:5c:0d:96:16:5c:dd:92:13:17: 93:f2:01:c7:69:6b:92:14:55:02:ad:d4:dc:8b:b2:26:c2:89: db:92:58:90:ba:64:1c:4b:f1:43:0e:58:75:d5:90:80:1d:d3: a7:98:cd:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q8+64Ru8OZo1yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJhNmE2NDMtYjVkMC00ZjA5LThlNjAtZTgyYmExZWI3 ODQ4MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk NDM2ZTQ0NTAtOTAxNC00NWY4LTg5OWMtMjJiMmM4NGQ3NzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvAWKEl5cgMWwn3fqrOiR/odLP7ECBtN4rd+ 4sUvFCuUDhgO+C/JYiGRkBrykkVys0uE04PFT9jdVwTcuti99s5ZWfXp7RoKhchw LYwygbgXeSoOPr15C7TpaxhM8TexCCDkXE+UVq+84IObHS3TdPTqkhAICtrZc7TH rPZ/Z3PNHBNK1+SZ6Tj6w/Dkotp+q4VDWkr4g751u9L3p0NZsAIdXFXSCNJSM/HH XHvjs7ws1wEyvH6qzXLBUa71PXNXVUs38JbxyX0ZmVCgeITIX7r1pEy0VSSU/v+u twvfpMaDZqp3TXJ84y7cyIW3j2haceUPal2f2p+oCy4eTe7wVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBj1J9HNN8YfyN0T9PoNFQvLjEy1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2 YTY0My1iNWQwLTRmMDktOGU2MC1lODJiYTFlYjc4NDgvZGQ3ZWU5YTYtMDBmMy0z ZGFmLTg3NGMtOGE5ZGZhY2I1ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGJhNmE2NDMtYjVkMC00ZjA5LThl NjAtZTgyYmExZWI3ODQ4L2RiYTZhNjQzLWI1ZDAtNGYwOS04ZTYwLWU4MmJhMWVi Nzg0OC5jcmwwHwYDVR0jBBgwFoAUNX+gJNiHITtZZOj7Qig1gK5dUycwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYmE2YTY0My1iNWQwLTRmMDktOGU2MC1lODJi YTFlYjc4NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovo4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Tsq7vgwt6AjX0XEbtxw1HRTR47jVM80S6pnp8s2JOsgGxj3L1DWOj nH6KPVKdOxjsRnihAnIhS8GNtDqfWJcSEL1ZjsdlEYs7XeHECysT15+lZPUMKanA HUVUWnPSfmJ+Z+jZJWpWEeBPH/JQgbk/RVg5wNB6/taxaqkqv19T0c66vL5/11oQ QoPsAq8fCYC9lR8QNBE2ani9/jiW3Ki+5eDzhj9jMlia9F4V/KEpco6OfknEJJqe nWvHzVlJUaXHJ/yeTofeUfV6Bi/Z71wNlhZc3ZITF5PyAcdpa5IUVQKt1NyLsibC iduSWJC6ZBxL8UMOWHXVkIAd06eYzaY= -----END CERTIFICATE-----Generated at Thu Jan 22 19:31:48 2026 by rpki-client