This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa File: a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa (raw, json) Hash identifier: rMkKz/klWS32y5170IxkDqNGlt5DLnoPsECrthh9S4o= Subject key identifier: 6F:12:AF:81:5B:4B:C4:14:E8:31:AE:0E:80:51:70:E0:92:B7:7F:36 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBCCF804BB7D11E3744090 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 65.22.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Feb 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:cc:f8:04:bb:7d:11:e3:74:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=72bc19f1-ca23-4189-b18b-e907c26d9341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:33:ca:ec:f2:a5:3b:ab:3a:5e:68:ad:34:a0: 4b:7c:05:d0:c9:d8:37:a2:19:53:ed:f7:30:41:db: 20:aa:1a:31:d2:24:e5:00:b3:62:0f:04:59:64:ce: 8d:be:2c:f6:3a:09:21:18:7d:7d:8b:e1:55:51:5b: 69:84:52:c2:d3:06:e8:c4:f0:bb:e9:3a:d9:cf:15: 27:ef:b2:b8:ef:e4:92:a1:8b:92:2a:cf:22:82:d3: 52:b7:8a:ea:76:b1:96:2c:79:50:af:14:65:f7:51: 4e:fa:f9:9e:84:92:f4:85:a6:e1:a4:50:1d:26:8d: 9a:91:d9:7c:78:de:6d:4d:eb:ce:79:97:f1:93:09: 13:8a:da:e5:15:a0:78:c9:80:32:77:d8:29:dc:5a: 32:52:61:87:a4:88:cf:33:cc:d3:2f:a0:c1:e1:91: 7d:3a:80:c6:96:03:39:a2:76:18:ab:2d:05:f3:53: d6:7d:76:a4:60:72:3c:22:e0:25:63:59:98:bc:ac: 19:2a:e4:7c:eb:11:0f:fc:17:5b:4b:e5:60:d5:aa: 22:f6:51:f9:77:a9:cf:32:f7:7c:e7:0d:8f:8b:50: 44:cf:9f:b1:2e:78:6a:26:70:6c:47:c9:9d:bc:f1: b1:95:bb:bb:9b:31:8a:9c:a9:b3:8c:0f:db:88:c8: 85:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:12:AF:81:5B:4B:C4:14:E8:31:AE:0E:80:51:70:E0:92:B7:7F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/a1ae1a77-7f99-3c2f-a7f3-cee17c970401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:1e:2d:d8:c9:de:69:65:82:7f:fb:3b:6e:1c:21:ae:c6:1d: 70:88:ae:6f:9a:73:70:7e:ef:e0:1a:27:3b:44:48:85:60:03: 93:87:db:be:cf:85:7b:b4:21:eb:fa:47:91:9a:cf:7e:45:a4: d6:b2:9a:ea:54:d1:47:01:8b:63:d1:ef:f9:da:a5:db:6a:0f: 32:08:aa:0e:ca:7b:cc:49:ad:3a:49:36:ef:e6:35:5f:1e:ec: 38:04:99:b5:80:49:33:d9:28:e1:4e:ee:fe:75:a4:fa:15:53: 22:cd:aa:ea:83:8f:60:8a:e5:d2:9f:75:2b:ee:77:bc:f5:34: 3a:9f:21:63:eb:22:bf:a7:2c:3f:07:f7:e1:00:08:39:ed:0d: a8:72:e4:aa:79:32:b9:00:3e:90:b6:51:cb:32:ef:28:be:54: 82:bb:43:dc:cf:c0:45:d7:26:2a:6f:de:c7:12:87:5d:eb:48: 2f:ea:57:a7:54:8c:f6:c1:6b:3f:b0:90:3f:e6:ed:f5:cf:52: 8b:35:74:92:6a:2b:85:84:1d:1a:fc:1f:d9:fb:2f:96:6f:41: 75:89:f2:c0:cc:84:de:75:1f:66:c4:03:b2:fe:ef:83:0b:68: ff:e6:8a:22:a4:2a:d4:ee:51:3d:4c:0a:f7:ea:56:47:be:58: aa:9a:92:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28z4BLt9EeN0QJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk NzJiYzE5ZjEtY2EyMy00MTg5LWIxOGItZTkwN2MyNmQ5MzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDPK7PKlO6s6XmitNKBLfAXQydg3ohlT7fcw Qdsgqhox0iTlALNiDwRZZM6Nviz2OgkhGH19i+FVUVtphFLC0wboxPC76TrZzxUn 77K47+SSoYuSKs8igtNSt4rqdrGWLHlQrxRl91FO+vmehJL0habhpFAdJo2akdl8 eN5tTevOeZfxkwkTitrlFaB4yYAyd9gp3FoyUmGHpIjPM8zTL6DB4ZF9OoDGlgM5 onYYqy0F81PWfXakYHI8IuAlY1mYvKwZKuR86xEP/BdbS+Vg1aoi9lH5d6nPMvd8 5w2Pi1BEz5+xLnhqJnBsR8mdvPGxlbu7mzGKnKmzjA/biMiFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8Sr4FbS8QU6DGuDoBRcOCSt382MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYTFhZTFhNzctN2Y5OS0z YzJmLWE3ZjMtY2VlMTdjOTcwNDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRYSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEeLdjJ3mllgn/7O24cIa7GHXCIrm+ac3B+7+AaJztESIVgA5OH277P hXu0Iev6R5Gaz35FpNaymupU0UcBi2PR7/napdtqDzIIqg7Ke8xJrTpJNu/mNV8e 7DgEmbWASTPZKOFO7v51pPoVUyLNquqDj2CK5dKfdSvud7z1NDqfIWPrIr+nLD8H 9+EACDntDahy5Kp5MrkAPpC2Ucsy7yi+VIK7Q9zPwEXXJipv3scSh13rSC/qV6dU jPbBaz+wkD/m7fXPUos1dJJqK4WEHRr8H9n7L5ZvQXWJ8sDMhN51H2bEA7L+74ML aP/miiKkKtTuUT1MCvfqVke+WKqakqo= -----END CERTIFICATE-----Generated at Sat Jan 31 05:37:05 2026 by rpki-client