This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa File: 86c115a8-a259-3026-ad5d-3e896c9dae00.roa (raw, json) Hash identifier: v99k3TlYCEo/jHH53HZ6xvnXCanbqr12y3xO6qRkfG0= Subject key identifier: F8:24:AF:8A:E9:94:76:4E:ED:E4:11:13:0E:F8:16:E4:6A:75:51:77 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C5EC6D06955DCA0980C878700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 63949 IP address blocks: 172.236.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:d0:69:55:dc:a0:98:0c:87:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=87a4b956-022c-4ed7-8fec-3ea3e4974fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:34:86:19:cf:68:72:13:7e:d7:18:38:ac: 8f:6c:dc:8b:d4:41:1d:4f:28:aa:bf:f0:20:51:fe: 30:40:12:4a:85:78:f1:82:09:9d:2b:e7:c9:66:e3: 1c:32:76:da:9a:21:78:a7:d2:50:2e:0c:63:3a:d4: 34:3a:79:e2:c8:22:02:cf:a3:bc:d6:27:77:9d:5d: b6:cb:67:62:14:f0:46:fb:a0:31:9f:59:87:db:16: 4b:56:0a:9e:c0:d0:a4:4c:46:c5:81:35:4f:a8:b5: a5:0c:87:d1:fd:9c:8b:b0:d8:99:81:92:36:ff:7d: ad:06:2d:68:4c:88:0c:dc:4a:e7:59:bd:e5:1f:e6: 31:88:1b:6c:99:ef:31:5a:90:c7:ce:2a:0c:c9:67: 15:ff:8d:3e:1d:b2:aa:1a:51:87:b1:45:e6:dd:e3: 0d:29:43:25:47:7d:2c:76:b4:c8:2f:7c:34:c3:9a: 63:7d:be:d7:2c:54:c3:96:76:e2:14:3b:9e:0b:cb: 7b:0e:16:20:33:d1:e4:19:aa:2e:44:2c:95:b8:35: 02:bd:77:2a:d2:b5:40:be:66:f2:4e:a9:4a:96:6c: d1:39:65:d5:5d:cc:ce:56:54:e7:ff:63:6a:44:2b: 52:a4:85:54:56:92:89:86:c3:58:7a:7a:69:c4:5f: e5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:24:AF:8A:E9:94:76:4E:ED:E4:11:13:0E:F8:16:E4:6A:75:51:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86c115a8-a259-3026-ad5d-3e896c9dae00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b7:41:21:e0:28:f2:fa:9c:a1:09:b3:20:d8:7e:9c:85:8c: 28:14:f9:a0:d6:c9:2b:89:53:5f:39:a9:2e:05:92:44:c0:73: 80:b6:4e:2e:4a:d5:16:06:a6:b3:9d:56:0d:89:dd:e1:bf:49: 44:1b:6c:06:66:18:4e:14:2e:55:c8:b0:1a:7e:4d:d7:ab:db: 38:a1:c8:ee:02:5b:82:8e:09:a6:ba:4d:be:7d:41:c6:9b:64: a4:ba:40:7e:83:03:1c:51:4c:79:9e:77:21:47:4c:3d:4b:69: a6:0e:63:f0:f1:da:16:bb:a8:b5:34:82:44:8a:69:87:eb:d8: 87:56:b2:ca:6a:b7:54:01:d4:9e:5a:fa:70:d7:de:ad:8d:3b: 38:cb:f9:27:22:31:b6:68:29:ff:07:ad:8c:fa:72:3c:61:39: e9:9b:00:a7:2b:3e:a8:63:02:d5:ee:a1:8d:a6:de:0e:97:30: b8:aa:47:f3:44:55:fe:f2:fc:ab:8f:85:34:aa:7d:7f:90:d3: 62:7a:80:13:55:4c:cb:05:22:00:2d:a3:21:ac:99:d9:fa:02: d5:d5:d2:ec:f3:cf:49:ea:11:30:25:ca:84:28:9e:13:5a:4f: 60:25:65:7e:08:a6:6a:8f:95:32:52:66:b2:63:3d:ba:8e:64: c1:a6:5b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExextBpVdygmAyHhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ODdhNGI5NTYtMDIyYy00ZWQ3LThmZWMtM2VhM2U0OTc0ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QY0hhnPaHITftcYOKyPbNyL1EEdTyiqv/Ag Uf4wQBJKhXjxggmdK+fJZuMcMnbamiF4p9JQLgxjOtQ0OnniyCICz6O81id3nV22 y2diFPBG+6Axn1mH2xZLVgqewNCkTEbFgTVPqLWlDIfR/ZyLsNiZgZI2/32tBi1o TIgM3ErnWb3lH+YxiBtsme8xWpDHzioMyWcV/40+HbKqGlGHsUXm3eMNKUMlR30s drTIL3w0w5pjfb7XLFTDlnbiFDueC8t7DhYgM9HkGaouRCyVuDUCvXcq0rVAvmby TqlKlmzROWXVXczOVlTn/2NqRCtSpIVUVpKJhsNYenppxF/lGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgkr4rplHZO7eQREw74FuRqdVF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZjMTE1YTgtYTI1OS0z MDI2LWFkNWQtM2U4OTZjOWRhZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK3QSHgKPL6nKEJsyDYfpyFjCgU+aDWySuJU185qS4FkkTAc4C2Ti5K 1RYGprOdVg2J3eG/SUQbbAZmGE4ULlXIsBp+Tder2zihyO4CW4KOCaa6Tb59Qcab ZKS6QH6DAxxRTHmedyFHTD1LaaYOY/Dx2ha7qLU0gkSKaYfr2IdWsspqt1QB1J5a +nDX3q2NOzjL+SciMbZoKf8HrYz6cjxhOembAKcrPqhjAtXuoY2m3g6XMLiqR/NE Vf7y/KuPhTSqfX+Q02J6gBNVTMsFIgAtoyGsmdn6AtXV0uzzz0nqETAlyoQonhNa T2AlZX4IpmqPlTJSZrJjPbqOZMGmW50= -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:30 2026 by rpki-client