This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa File: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (raw, json) Hash identifier: CMS6QdmKBoB8G4S++W6bleXArQZ1a0W2GAJsRrENVSA= Subject key identifier: 36:16:3C:0E:0F:19:24:71:55:90:66:95:F7:8A:30:13:F3:3E:C7:32 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584C5EC6CD0FC3949390F1661F80 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 26677 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:cd:0f:c3:94:93:90:f1:66:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=3def0d73-5c29-4f65-bfa4-28ff22d5155d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a6:4e:77:82:a9:56:bc:2d:f1:bb:70:d8:85: b1:ec:08:d0:03:75:11:01:be:20:4e:02:45:94:81: ea:34:b3:39:11:5f:eb:e4:64:70:08:31:cf:00:96: e1:49:cd:56:1a:2e:d7:5e:b7:3a:59:72:e3:42:7f: a0:5c:43:29:64:d5:fe:bd:25:70:cd:63:a5:17:a9: b1:dc:5f:25:e0:c4:d6:d3:af:5c:54:5e:46:76:a4: fc:21:55:d8:6c:e1:89:66:9c:41:ae:05:91:2a:df: 5c:e5:a5:fb:6e:8e:ba:f5:f9:87:c5:f7:33:42:ac: e9:10:a9:83:d7:04:7a:b3:17:df:7f:92:aa:51:46: 09:76:52:49:c6:dd:31:68:ce:ea:a5:9a:fc:78:c6: ef:e1:75:ef:32:9f:61:fd:18:6d:a5:af:08:41:10: e4:f3:6e:6f:b8:1c:10:96:fb:f9:af:a0:b0:77:52: 20:c8:a8:3f:88:3e:dc:77:38:74:1b:26:b8:6e:f0: ea:ad:5c:f5:64:1f:d0:fd:ca:b6:7e:ca:ef:7e:e6: 39:b2:d9:eb:cd:ec:fb:00:38:1d:6b:4d:bf:62:fc: 0e:c4:ee:75:58:98:72:92:31:99:d6:2f:c8:0e:c5: fc:66:28:08:d8:f8:fb:5c:a6:90:33:65:e7:83:3a: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:3C:0E:0F:19:24:71:55:90:66:95:F7:8A:30:13:F3:3E:C7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5f:32:23:f1:77:e4:37:bf:12:5f:b5:f1:0c:32:e5:ec:7a: e7:72:07:7b:8e:de:4d:fd:a4:5d:b4:11:41:4c:be:c4:4b:48: 5f:ac:96:ce:c7:1c:b8:e1:66:1f:52:32:34:e1:ae:ed:00:5a: 51:e3:f3:20:d7:af:59:e6:d3:c9:ee:80:3c:e8:2f:93:b9:89: d1:51:3f:60:70:eb:b9:ea:2b:a5:9c:e2:ee:3e:39:14:30:46: d0:52:d1:4a:1a:13:d2:bf:5f:08:d3:c2:5f:de:f8:95:54:cb: 0a:86:23:b0:34:46:5a:ea:e8:ba:3e:c8:3b:6b:32:87:be:d7: ee:6c:69:94:4c:41:b2:80:19:38:e9:ef:d6:e6:f9:38:0a:e7: af:53:a0:d3:d8:f5:da:ee:8f:c6:16:dc:1e:08:7b:80:08:c6: 90:da:af:a8:3a:8e:78:77:97:ee:43:e9:6b:93:e7:95:1b:6a: 2e:17:04:fc:6f:e3:e6:2e:22:79:fc:24:8d:18:9f:97:f0:7c: 83:73:ee:76:b9:9d:be:89:2d:37:a2:00:eb:17:ae:d7:56:2f: 4e:6a:3c:48:75:b8:18:37:ee:fc:f5:b7:b5:01:5f:c6:69:72: 01:de:58:bf:83:d4:a9:6b:ad:c1:bf:11:44:7b:96:29:f3:10: f0:f4:fa:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexs0Pw5STkPFmH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk M2RlZjBkNzMtNWMyOS00ZjY1LWJmYTQtMjhmZjIyZDUxNTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaZOd4KpVrwt8btw2IWx7AjQA3URAb4gTgJF lIHqNLM5EV/r5GRwCDHPAJbhSc1WGi7XXrc6WXLjQn+gXEMpZNX+vSVwzWOlF6mx 3F8l4MTW069cVF5GdqT8IVXYbOGJZpxBrgWRKt9c5aX7bo669fmHxfczQqzpEKmD 1wR6sxfff5KqUUYJdlJJxt0xaM7qpZr8eMbv4XXvMp9h/Rhtpa8IQRDk825vuBwQ lvv5r6Cwd1IgyKg/iD7cdzh0Gya4bvDqrVz1ZB/Q/cq2fsrvfuY5stnrzez7ADgd a02/YvwOxO51WJhykjGZ1i/IDsX8ZigI2Pj7XKaQM2XngzpdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYWPA4PGSRxVZBmlfeKMBPzPscyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvMGY4NmFmOGYtMzEyMi0z NGRmLWFlN2UtMDQ4MTFkOGM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5fMiPxd+Q3vxJftfEMMuXseudyB3uO3k39pF20EUFMvsRLSF+sls7H HLjhZh9SMjThru0AWlHj8yDXr1nm08nugDzoL5O5idFRP2Bw67nqK6Wc4u4+ORQw RtBS0UoaE9K/XwjTwl/e+JVUywqGI7A0Rlrq6Lo+yDtrMoe+1+5saZRMQbKAGTjp 79bm+TgK569ToNPY9druj8YW3B4Ie4AIxpDar6g6jnh3l+5D6WuT55Ubai4XBPxv 4+YuInn8JI0Yn5fwfINz7na5nb6JLTeiAOsXrtdWL05qPEh1uBg37vz1t7UBX8Zp cgHeWL+D1KlrrcG/EUR7linzEPD0+gs= -----END CERTIFICATE-----Generated at Sun Jan 11 08:30:53 2026 by rpki-client