This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa File: a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa (raw, json) Hash identifier: fmaQ6Qpw8QjWi3MvEtw0kW/Hfpz2UBAb5mq1PHjg19w= Subject key identifier: 21:47:37:C6:3A:22:A0:70:2B:E9:76:BC:0A:AB:9D:39:7F:A9:03:0D Certificate issuer: /CN=f3281a82-6c17-4658-80f7-ee1327b4779a Certificate serial: 010D0C9F4328584C619156693D6347FA40D59500 Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 22418 IP address blocks: 192.157.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:56:69:3d:63:47:fa:40:d5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=47e57413-9d12-478a-9aa6-c453e4d3e27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6b:a5:cf:30:7e:d3:92:14:81:b0:9e:d1:cd: ab:d8:d8:51:c9:c8:b3:e8:f3:48:1e:f8:c2:5a:af: e6:d6:11:a3:02:b7:c8:19:86:e9:d8:69:fa:cf:09: 0b:36:07:44:b2:28:36:48:51:c7:4e:0b:61:01:ad: d9:67:84:04:76:26:c7:91:f2:6b:67:a1:15:9a:a6: 8e:72:4a:b0:d6:0e:71:23:97:d6:b8:21:af:2a:9c: 48:bb:59:07:88:8b:52:d5:eb:dd:64:4e:5b:91:d0: 88:0a:d0:bd:dc:be:fb:82:3e:76:7d:c6:62:0d:80: 9d:57:e9:f7:42:b1:a4:cf:42:21:9f:72:49:2b:09: 9a:5f:5a:ca:ab:ca:5c:5f:aa:22:f0:16:30:ae:28: e9:06:6f:78:72:00:65:a2:ff:9f:d0:4c:a0:6f:a8: 4c:7f:29:6c:55:28:94:29:52:e2:53:68:38:77:5b: b4:f8:d0:79:5f:37:7f:2e:02:fe:58:d9:eb:88:23: fa:b4:b6:37:62:d2:be:0a:3b:6e:6a:3e:04:70:74: 2b:a9:9a:b5:c3:bf:84:82:7e:94:d6:fe:ee:e5:12: 55:a2:6f:91:1f:a7:8d:e3:01:81:fa:a6:71:be:fd: bd:fa:46:c4:9d:77:6e:4b:eb:33:c4:7f:aa:3e:2c: db:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:37:C6:3A:22:A0:70:2B:E9:76:BC:0A:AB:9D:39:7F:A9:03:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/a9af6a4f-c817-33df-8d56-22afaab5c0a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl X509v3 Authority Key Identifier: keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer sbgp-ipAddrBlock: critical IPv4: 192.157.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:20:52:16:c4:b3:77:ea:54:c0:4e:09:d4:c2:45:94:7b:6b: 62:4b:2a:dd:b6:49:b8:3d:54:16:54:34:e0:a1:4e:82:9f:4b: 9d:7e:d6:19:45:ef:98:a1:fc:65:91:77:4f:03:c0:af:18:ea: 8d:8b:00:9d:08:3a:46:e2:dd:42:01:df:c4:b8:df:9f:91:2d: ce:14:77:1d:00:ba:63:9a:6c:2f:2c:a9:5d:13:4c:d1:7c:b2: fa:4f:92:11:76:f6:b5:5d:e0:7f:be:dd:14:24:d3:40:e9:29: 09:7b:80:a4:78:49:71:05:30:e6:c0:76:0a:86:34:38:b8:4c: 81:17:a6:f6:8e:74:f8:f1:db:01:8f:af:6f:95:2e:17:08:2e: 3a:b1:73:e3:22:7e:5d:66:31:e9:4f:2a:d0:d1:dc:e7:08:d0: d4:78:0d:be:1b:45:20:96:c9:5e:12:ab:89:51:9a:59:d7:4b: 44:12:82:5a:c4:d4:2a:42:1c:3a:1d:7f:51:67:aa:9f:04:19: 89:85:98:94:63:42:09:ba:f3:05:92:d8:84:64:4e:99:d8:73: 8c:3e:6c:11:b9:72:e5:bf:04:8f:77:0e:5c:b5:29:ef:f6:66: 43:84:b2:cf:89:94:6a:b3:1e:0f:9c:af:d6:6e:53:db:3b:c0: 5a:b7:59:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkVZpPWNH+kDVlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjMyODFhODItNmMxNy00NjU4LTgwZjctZWUxMzI3YjQ3 NzlhMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NDdlNTc0MTMtOWQxMi00NzhhLTlhYTYtYzQ1M2U0ZDNlMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmulzzB+05IUgbCe0c2r2NhRyciz6PNIHvjC Wq/m1hGjArfIGYbp2Gn6zwkLNgdEsig2SFHHTgthAa3ZZ4QEdibHkfJrZ6EVmqaO ckqw1g5xI5fWuCGvKpxIu1kHiItS1evdZE5bkdCICtC93L77gj52fcZiDYCdV+n3 QrGkz0Ihn3JJKwmaX1rKq8pcX6oi8BYwrijpBm94cgBlov+f0Eygb6hMfylsVSiU KVLiU2g4d1u0+NB5Xzd/LgL+WNnriCP6tLY3YtK+Cjtuaj4EcHQrqZq1w7+Egn6U 1v7u5RJVom+RH6eN4wGB+qZxvv29+kbEnXduS+szxH+qPizbKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFHN8Y6IqBwK+l2vAqrnTl/qQMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4 MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEzMjdiNDc3OWEvYTlhZjZhNGYtYzgxNy0z M2RmLThkNTYtMjJhZmFhYjVjMGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjMyODFhODItNmMxNy00NjU4LTgw ZjctZWUxMzI3YjQ3NzlhL2YzMjgxYTgyLTZjMTctNDY1OC04MGY3LWVlMTMyN2I0 Nzc5YS5jcmwwHwYDVR0jBBgwFoAUnADJBPwikRxD9McDuOMXvvVr1YgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMzI4MWE4Mi02YzE3LTQ2NTgtODBmNy1lZTEz MjdiNDc3OWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAgUhbEs3fqVMBOCdTCRZR7a2JLKt22Sbg9VBZUNOChToKfS51+1hlF 75ih/GWRd08DwK8Y6o2LAJ0IOkbi3UIB38S435+RLc4Udx0AumOabC8sqV0TTNF8 svpPkhF29rVd4H++3RQk00DpKQl7gKR4SXEFMObAdgqGNDi4TIEXpvaOdPjx2wGP r2+VLhcILjqxc+Mifl1mMelPKtDR3OcI0NR4Db4bRSCWyV4Sq4lRmlnXS0QSglrE 1CpCHDodf1Fnqp8EGYmFmJRjQgm68wWS2IRkTpnYc4w+bBG5cuW/BI93Dly1Ke/2 ZkOEss+JlGqzHg+cr9ZuU9s7wFq3WTU= -----END CERTIFICATE-----Generated at Sun Jan 11 08:16:55 2026 by rpki-client