This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa File: 2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa (raw, json) Hash identifier: woYWa/2+OIn7shLifPhQw/zNJcp7VqZKspkjTITzV7I= Subject key identifier: 85:E1:A7:96:83:52:3C:74:21:F7:84:63:F4:B7:B2:BA:2E:E0:BF:07 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584C69F16A5F311BCE7C3BD72700 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa Signing time: Sun 04 Jan 2026 14:00:38 +0000 ROA not before: Sun 04 Jan 2026 14:00:38 +0000 ROA not after: Sat 04 Apr 2026 13:00:38 +0000 asID: 14618 IP address blocks: 157.239.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:69:f1:6a:5f:31:1b:ce:7c:3b:d7:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Jan 4 14:00:38 2026 GMT Not After : Apr 4 13:00:38 2026 GMT Subject: CN=21efaf96-a880-4342-950b-49a18280523b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4a:10:5d:ea:44:8c:9c:57:06:77:68:74:05: 66:57:ab:c5:08:9b:df:91:8c:39:84:ca:e5:d7:d6: 1c:64:23:c0:19:04:2d:f4:80:64:71:b9:28:cc:25: bf:60:53:4d:a8:f4:92:44:3b:d3:0c:44:a2:ab:56: 02:a3:46:b6:2c:ec:9b:be:69:bb:3c:1f:4c:cc:87: 75:71:0f:44:00:b1:e6:74:68:be:66:4a:03:d5:f1: f4:3e:26:26:4c:82:38:ab:61:e7:e4:85:ea:b9:44: 27:8e:dc:7a:45:85:bc:f7:35:07:00:0e:f0:7e:f4: 4e:be:75:41:c6:45:db:c0:23:44:fb:f0:00:92:89: 3b:c6:55:b0:57:8a:58:4d:d7:f5:3d:43:0f:ca:fc: 8c:4d:15:3d:33:29:5b:71:3d:e2:0e:2c:4b:27:90: 11:21:78:18:4d:e2:0a:18:dd:d9:60:f3:92:da:6b: b7:50:9c:56:5e:45:e4:04:d9:96:54:8c:90:d8:82: 21:d7:05:1e:2a:0b:d3:d4:8a:9e:25:4d:7e:3c:a8: 9a:c4:2a:af:df:79:81:7a:f4:74:cc:87:f3:fc:99: 8f:e1:24:7f:11:7e:58:18:79:4c:39:5e:75:c6:5b: 67:38:1b:36:e7:52:6e:84:c9:78:64:ad:ab:3a:c5: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:A7:96:83:52:3C:74:21:F7:84:63:F4:B7:B2:BA:2E:E0:BF:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:89:9c:5d:eb:1d:18:ff:43:96:03:fb:48:53:bb:89:23:36: 3a:be:b2:a4:d1:8b:52:6d:87:cc:2b:f0:93:13:d3:e9:15:6c: da:ec:f3:20:f8:06:cd:fb:12:b7:e9:de:1a:60:76:82:ae:b6: 62:4e:a9:be:26:ff:54:79:a2:0c:34:32:95:7e:f0:8f:a7:d8: 53:9e:00:9e:08:e0:35:4f:11:f4:37:97:cb:33:05:89:15:ef: de:a8:e8:4f:37:f3:da:d4:a8:9f:e6:ae:eb:19:c5:08:f6:e3: c0:97:0f:f1:ad:7f:32:2e:5a:ae:50:ad:7f:61:e1:58:a1:c4: 6d:25:bc:5b:02:1a:aa:a9:a9:7c:7f:34:23:9c:8a:cd:61:04: 3d:c3:db:bd:57:f2:01:91:02:34:52:55:22:c4:48:50:9c:ab: 6f:11:83:7a:29:55:43:04:c4:b0:5a:f7:8c:4e:82:17:40:ab: 21:8a:fd:5e:92:46:db:ea:eb:7b:a1:67:d0:6e:79:43:a0:e6: c1:f5:27:4d:d4:02:f2:ae:ea:3f:a2:2a:f6:98:64:9a:11:00: d3:6d:62:04:ca:7f:60:4a:3a:07:62:09:62:8d:8a:72:bd:26: 5b:83:ef:cc:fc:2b:bb:b3:08:86:ae:53:83:f6:a4:34:84:75: 18:bf:03:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExp8WpfMRvOfDvXJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDEwNDE0MDAzOFoXDTI2MDQwNDEzMDAzOFowLzEtMCsGA1UEAxMk MjFlZmFmOTYtYTg4MC00MzQyLTk1MGItNDlhMTgyODA1MjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00oQXepEjJxXBndodAVmV6vFCJvfkYw5hMrl 19YcZCPAGQQt9IBkcbkozCW/YFNNqPSSRDvTDESiq1YCo0a2LOybvmm7PB9MzId1 cQ9EALHmdGi+ZkoD1fH0PiYmTII4q2Hn5IXquUQnjtx6RYW89zUHAA7wfvROvnVB xkXbwCNE+/AAkok7xlWwV4pYTdf1PUMPyvyMTRU9MylbcT3iDixLJ5ARIXgYTeIK GN3ZYPOS2mu3UJxWXkXkBNmWVIyQ2IIh1wUeKgvT1IqeJU1+PKiaxCqv33mBevR0 zIfz/JmP4SR/EX5YGHlMOV51xltnOBs251JuhMl4ZK2rOsWnXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXhp5aDUjx0IfeEY/S3srou4L8HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmRlMzNkYzgtMWQzNC0z YmMyLTg1ZjItNjk1Y2NjYWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2JnF3rHRj/Q5YD+0hTu4kjNjq+sqTRi1Jth8wr8JMT0+kVbNrs8yD4 Bs37Erfp3hpgdoKutmJOqb4m/1R5ogw0MpV+8I+n2FOeAJ4I4DVPEfQ3l8szBYkV 796o6E8389rUqJ/mrusZxQj248CXD/GtfzIuWq5QrX9h4VihxG0lvFsCGqqpqXx/ NCOcis1hBD3D271X8gGRAjRSVSLESFCcq28Rg3opVUMExLBa94xOghdAqyGK/V6S Rtvq63uhZ9BueUOg5sH1J03UAvKu6j+iKvaYZJoRANNtYgTKf2BKOgdiCWKNinK9 JluD78z8K7uzCIauU4P2pDSEdRi/A4U= -----END CERTIFICATE-----Generated at Fri Jan 9 01:01:59 2026 by rpki-client