This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa File: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (raw, json) Hash identifier: UF1cBpSq5fZZHH3rCe6EVpARVczHdct6KG69+tffFpE= Subject key identifier: D2:60:05:8D:93:10:5A:A8:FE:3A:59:53:77:C8:22:AD:D3:81:F9:00 Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584C5EC6CD2090385F392D1F4E80 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 65068 IP address blocks: 192.139.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:cd:20:90:38:5f:39:2d:1f:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=907ae389-2ac3-444f-9f53-239bf5c4b8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:38:90:15:32:eb:06:cb:d5:5d:c0:ec:fd:4d: ee:cf:c9:f8:af:6f:27:f4:8e:88:24:51:c8:0e:0d: 5f:81:0b:09:ea:e7:64:a6:9d:96:2e:a4:ba:6c:a4: 0a:14:3d:a7:cc:7b:da:e0:87:e6:4d:2b:27:67:19: ff:85:1d:40:ee:1f:e3:7a:a1:9e:ad:00:20:3a:83: 00:80:bc:80:37:94:4f:1b:9d:44:0d:4d:bf:1a:09: 1c:d2:cb:04:6e:9b:fa:c9:81:f6:5e:fa:f1:f7:8e: 67:e3:fe:60:5c:5b:ba:10:f2:57:29:4a:57:0a:10: 3a:c2:e3:21:21:5b:44:6c:09:1f:f2:6b:88:4f:cb: 18:65:dd:69:ab:db:97:18:e5:7b:0c:70:a0:7c:7a: a7:c3:80:84:a1:9d:91:19:3c:d6:af:2f:c7:1f:f5: 4b:03:19:70:dc:a5:3d:5f:cc:1f:32:34:5c:cc:1d: 4b:01:93:5f:32:a6:17:df:ed:b5:75:45:64:56:96: c5:5c:4c:59:6c:bb:a5:61:e7:3f:2d:28:7f:ea:0f: d5:92:b7:2f:a4:2a:a4:c3:ce:60:e2:64:b4:e3:de: a3:78:58:7c:46:e0:82:9b:a7:0a:0d:d5:21:23:ae: 35:02:aa:69:2b:1e:db:6d:15:ae:e9:5a:16:e6:97: d8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:60:05:8D:93:10:5A:A8:FE:3A:59:53:77:C8:22:AD:D3:81:F9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/3f4559cd-55eb-3ee4-96a6-22d37db39638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: 192.139.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:72:5f:79:b7:ca:c1:f9:72:77:71:d5:10:78:ee:d0:7c:fd: f6:bc:f1:55:ac:b8:7a:c7:23:74:56:02:ab:5a:cb:ca:13:9b: 19:95:8c:b7:6e:6a:44:5c:7d:56:ac:ef:a9:5d:73:3d:7f:e9: 68:e3:4f:2e:fe:30:b3:b9:84:09:18:90:67:4b:2a:37:6f:39: a8:23:b8:b4:fa:06:ae:51:f6:50:1f:30:58:46:85:c2:d7:7e: 02:ee:79:bb:26:0a:13:84:e9:14:b0:fe:c7:29:bc:5b:a6:92: cb:39:bb:e7:f5:a5:d7:6f:15:7c:98:e2:75:34:e0:27:f7:f7: cb:18:a1:c9:d0:89:cc:39:87:88:f3:8d:77:87:15:49:98:ec: f4:39:6e:56:75:05:a8:4f:91:fd:a0:de:43:7b:72:fe:3f:a3: e7:e2:85:bc:6b:9e:6f:41:47:fe:c4:b1:3f:d1:55:15:be:6c: 11:a6:5b:29:4a:44:b1:9d:0b:3b:a6:7f:09:44:d2:49:00:e8: 71:b0:38:60:e5:ca:8c:2a:8e:e3:04:f9:c2:08:79:dc:83:cf: 7d:3e:ef:94:39:cc:30:d6:48:67:6f:5e:17:67:0c:2e:60:26: 82:14:00:f7:da:95:54:c0:1e:91:37:a4:1e:cc:99:3d:e7:ff: 92:68:94:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexs0gkDhfOS0fToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk OTA3YWUzODktMmFjMy00NDRmLTlmNTMtMjM5YmY1YzRiOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjiQFTLrBsvVXcDs/U3uz8n4r28n9I6IJFHI Dg1fgQsJ6udkpp2WLqS6bKQKFD2nzHva4IfmTSsnZxn/hR1A7h/jeqGerQAgOoMA gLyAN5RPG51EDU2/Ggkc0ssEbpv6yYH2Xvrx945n4/5gXFu6EPJXKUpXChA6wuMh IVtEbAkf8muIT8sYZd1pq9uXGOV7DHCgfHqnw4CEoZ2RGTzWry/HH/VLAxlw3KU9 X8wfMjRczB1LAZNfMqYX3+21dUVkVpbFXExZbLulYec/LSh/6g/VkrcvpCqkw85g 4mS0496jeFh8RuCCm6cKDdUhI641AqppKx7bbRWu6VoW5pfYjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJgBY2TEFqo/jpZU3fIIq3TgfkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvM2Y0NTU5Y2QtNTVlYi0z ZWU0LTk2YTYtMjJkMzdkYjM5NjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJyX3m3ysH5cndx1RB47tB8/fa88VWsuHrHI3RWAqtay8oTmxmVjLdu akRcfVas76ldcz1/6WjjTy7+MLO5hAkYkGdLKjdvOagjuLT6Bq5R9lAfMFhGhcLX fgLuebsmChOE6RSw/scpvFumkss5u+f1pddvFXyY4nU04Cf398sYocnQicw5h4jz jXeHFUmY7PQ5blZ1BahPkf2g3kN7cv4/o+fihbxrnm9BR/7EsT/RVRW+bBGmWylK RLGdCzumfwlE0kkA6HGwOGDlyowqjuME+cIIedyDz30+75Q5zDDWSGdvXhdnDC5g JoIUAPfalVTAHpE3pB7MmT3n/5JolLU= -----END CERTIFICATE-----Generated at Sun Jan 11 08:30:18 2026 by rpki-client