This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: 7HErQwCGpiVslq6G2HpDqw4CYPvsoUM0GZo+Tw69Q7c= Subject key identifier: 4E:FB:0D:58:FB:E6:15:D7:A2:0F:65:C2:41:96:0D:98:81:6F:15:10 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584C6E214971197816A786604F80 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:49:71:19:78:16:a7:86:60:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=0facf5dd-cf39-4bab-8576-2971e9be506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:1a:33:5b:bf:30:39:88:7f:a4:dd:80:ee: 97:ba:8f:fd:4a:ad:ab:0e:4e:f4:d9:84:f4:ce:de: 08:36:f2:8d:e6:18:d1:22:6a:77:ba:c1:e3:cc:ec: 30:ca:8d:e6:3d:e6:22:1e:e6:e8:7e:d7:4e:e6:3f: b7:b4:3b:94:da:c6:f1:33:78:44:eb:6e:fb:83:92: 05:48:bb:7c:c9:8b:0c:c9:a4:fb:73:4b:e9:d1:c0: 95:47:16:90:d0:f0:b3:00:4c:ab:3d:56:f0:66:6f: 42:cc:0b:40:d9:3f:b1:15:0d:e7:aa:ce:21:75:b4: 4d:94:50:88:0b:56:01:08:3b:60:26:62:be:43:c7: ce:ee:0e:e6:3b:11:4f:38:1a:57:a7:bc:ac:94:8a: de:61:b4:21:5f:66:d7:99:0a:87:ca:a8:79:d0:51: fe:6d:aa:8f:71:7c:43:70:d1:3d:46:f5:84:4a:2b: a6:b0:2c:1d:c9:19:d8:b6:a1:82:8e:ff:b2:5b:ec: 13:95:0e:a4:0d:d6:e4:13:47:ca:c9:42:dc:fe:90: 44:1a:a5:b7:88:80:93:d1:fc:74:c7:aa:1b:b5:bf: a7:75:90:37:a3:2d:fa:2c:1b:ba:79:c3:5a:3a:e1: c0:47:74:e5:90:47:d4:0b:f4:e2:15:aa:74:98:ff: e0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FB:0D:58:FB:E6:15:D7:A2:0F:65:C2:41:96:0D:98:81:6F:15:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:54:76:19:f4:65:37:87:24:3c:e1:97:59:cb:b4:0b:ad:79: 9a:37:54:50:f1:4f:28:3b:db:27:37:4c:94:fa:0f:7f:ce:4b: 10:55:5f:32:e0:dd:b7:f4:da:80:0d:a8:1d:b9:0e:f7:a4:ef: cc:25:bc:15:6c:cc:16:0f:29:2d:dd:23:9f:d7:10:90:70:5f: 08:9a:d6:3e:ba:03:f0:5e:f3:a7:c9:90:5c:8c:9a:21:f4:8d: cc:c1:73:39:4b:ae:ff:b2:ef:59:de:d3:b8:fc:80:74:b6:45: b3:0a:c1:6c:59:57:ed:13:2e:4f:62:0a:0b:2b:5b:22:85:aa: 37:83:74:a7:07:12:6d:3a:70:bd:28:ec:df:0f:b5:63:58:e5: 1a:a6:e2:cf:2a:a4:7e:82:79:2d:f6:0d:33:49:be:69:a3:bd: bb:56:59:e6:d6:f5:83:dd:ab:47:97:34:6c:e3:9e:86:f4:62: b8:6c:5c:29:45:ce:64:b0:58:cf:89:28:3d:36:89:7c:dc:cc: 98:1b:8c:48:37:c5:47:89:30:8a:d7:b8:2c:0c:e7:2b:b4:e0: 05:f3:a6:2e:71:c0:7c:0e:c8:ae:30:02:d9:f5:e4:5a:37:4e: 2a:4f:9f:b8:1a:3b:e2:79:0d:07:8c:b5:2f:c4:88:4f:12:9c: 59:12:9b:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIUlxGXgWp4ZgT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk MGZhY2Y1ZGQtY2YzOS00YmFiLTg1NzYtMjk3MWU5YmU1MDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKEaM1u/MDmIf6TdgO6Xuo/9Sq2rDk702YT0 zt4INvKN5hjRImp3usHjzOwwyo3mPeYiHuboftdO5j+3tDuU2sbxM3hE6277g5IF SLt8yYsMyaT7c0vp0cCVRxaQ0PCzAEyrPVbwZm9CzAtA2T+xFQ3nqs4hdbRNlFCI C1YBCDtgJmK+Q8fO7g7mOxFPOBpXp7yslIreYbQhX2bXmQqHyqh50FH+baqPcXxD cNE9RvWESiumsCwdyRnYtqGCjv+yW+wTlQ6kDdbkE0fKyULc/pBEGqW3iICT0fx0 x6obtb+ndZA3oy36LBu6ecNaOuHAR3TlkEfUC/TiFap0mP/giQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE77DVj75hXXog9lwkGWDZiBbxUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdUdhn0ZTeHJDzhl1nLtAuteZo3VFDxTyg72yc3TJT6D3/OSxBVXzLg 3bf02oANqB25Dvek78wlvBVszBYPKS3dI5/XEJBwXwia1j66A/Be86fJkFyMmiH0 jczBczlLrv+y71ne07j8gHS2RbMKwWxZV+0TLk9iCgsrWyKFqjeDdKcHEm06cL0o 7N8PtWNY5Rqm4s8qpH6CeS32DTNJvmmjvbtWWebW9YPdq0eXNGzjnob0YrhsXClF zmSwWM+JKD02iXzczJgbjEg3xUeJMIrXuCwM5yu04AXzpi5xwHwOyK4wAtn15Fo3 TipPn7gaO+J5DQeMtS/EiE8SnFkSm8s= -----END CERTIFICATE-----Generated at Sun Jan 11 08:17:11 2026 by rpki-client