This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa File: 956684d0-4ee8-376e-8434-580d51955390.roa (raw, json) Hash identifier: 0bQCpTGHKSTayOmmFJ94vxgZAzr44NNVzpZ4zT+6GKs= Subject key identifier: 0E:BA:2A:1E:F4:0A:6C:F1:11:B6:CD:F1:6B:1D:37:5D:64:28:21:03 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C4176538C5B6049F89A1950F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 63949 IP address blocks: 172.237.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:53:8c:5b:60:49:f8:9a:19:50:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=8f5bf924-4324-4f00-a450-670f8f22dd64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:13:fd:89:fb:d4:83:84:0b:69:d4:46:44: 61:08:70:e9:0b:cc:a4:5e:32:61:61:9d:92:00:ab: 13:86:e1:3f:92:b8:73:3f:a7:65:b0:10:47:6d:65: d7:07:4a:57:14:e4:f5:9c:5a:59:0c:fc:7d:a4:e6: e7:6a:87:7e:3a:0f:c0:84:fc:db:9b:99:41:49:19: 51:c3:51:80:0c:b5:3e:71:03:b3:7d:18:04:47:f8: 99:cb:71:35:7d:6b:0c:66:9c:2f:d2:2e:0d:ed:38: 4f:78:8d:95:33:96:cf:d9:6d:1b:6d:1b:cd:54:51: a6:4c:72:80:c0:22:c6:34:f7:a5:65:bc:13:0f:63: e9:bc:95:b6:11:d2:99:94:5d:60:93:4c:8f:56:15: 98:3a:c8:11:a2:04:0d:02:4c:18:02:35:8a:32:57: 7c:9e:92:07:9d:90:c4:84:59:13:76:aa:4f:98:e7: 95:d6:98:b5:9f:4d:5d:e5:2d:66:6a:2d:61:0b:5d: a3:70:20:e6:d1:91:05:28:d7:78:41:9b:b0:63:0b: 82:32:57:e4:cc:dd:d7:b1:7e:99:8d:16:4f:a9:ee: cb:ba:e4:af:4e:66:c0:80:78:2e:cf:3c:2d:00:2e: 7d:89:7d:2d:59:03:7c:4a:0f:90:28:0a:fa:77:7e: 72:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BA:2A:1E:F4:0A:6C:F1:11:B6:CD:F1:6B:1D:37:5D:64:28:21:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/956684d0-4ee8-376e-8434-580d51955390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:61:65:27:9f:8d:59:b9:01:79:fa:a3:b7:0b:a5:8d:4c:11: 48:3b:4f:69:33:af:97:d8:9e:cf:64:2b:ad:b6:58:90:89:1b: db:9d:fc:13:13:bc:ab:c1:f6:79:79:19:c3:79:91:53:23:c2: 5a:c0:79:b9:a2:10:44:57:d5:fe:22:c1:7a:b0:8f:fa:60:52: ea:d3:3d:d0:c0:39:d5:d7:fd:11:58:b0:3d:8f:86:35:ac:ac: fe:b0:93:1a:9c:7a:ff:bf:75:42:49:c9:43:f0:54:14:c3:8a: 2e:fa:e8:af:22:a0:03:01:1f:49:26:98:e9:c3:1f:93:88:d8: 78:b3:44:3f:c6:9d:f4:e1:11:7a:cd:c2:4d:e1:21:c1:6e:80: 4a:3e:3d:c2:fb:3e:25:be:a6:7e:64:da:fa:e0:d2:d7:37:c4: 3f:21:fb:87:82:14:04:b4:8b:ba:0b:18:25:cf:e2:2f:85:6c: 91:09:63:04:67:d2:dc:8a:64:9f:18:95:05:d5:99:8f:fc:58: 47:47:d5:d3:ad:86:00:56:5c:05:22:7e:3c:d3:7b:f1:67:e3: bd:09:c9:1f:83:47:38:20:ab:8b:73:36:91:72:70:f1:2d:ca: 66:b5:23:7d:fc:26:70:1d:16:e0:e5:04:51:d7:28:bc:3e:5a: c2:85:2e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlOMW2BJ+JoZUPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk OGY1YmY5MjQtNDMyNC00ZjAwLWE0NTAtNjcwZjhmMjJkZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJwT/Yn71IOEC2nURkRhCHDpC8ykXjJhYZ2S AKsThuE/krhzP6dlsBBHbWXXB0pXFOT1nFpZDPx9pObnaod+Og/AhPzbm5lBSRlR w1GADLU+cQOzfRgER/iZy3E1fWsMZpwv0i4N7ThPeI2VM5bP2W0bbRvNVFGmTHKA wCLGNPelZbwTD2PpvJW2EdKZlF1gk0yPVhWYOsgRogQNAkwYAjWKMld8npIHnZDE hFkTdqpPmOeV1pi1n01d5S1mai1hC12jcCDm0ZEFKNd4QZuwYwuCMlfkzN3XsX6Z jRZPqe7LuuSvTmbAgHguzzwtAC59iX0tWQN8Sg+QKAr6d35yzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA66Kh70CmzxEbbN8WsdN11kKCEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTU2Njg0ZDAtNGVlOC0z NzZlLTg0MzQtNTgwZDUxOTU1MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRhZSefjVm5AXn6o7cLpY1MEUg7T2kzr5fYns9kK622WJCJG9ud/BMT vKvB9nl5GcN5kVMjwlrAebmiEERX1f4iwXqwj/pgUurTPdDAOdXX/RFYsD2PhjWs rP6wkxqcev+/dUJJyUPwVBTDii766K8ioAMBH0kmmOnDH5OI2HizRD/GnfThEXrN wk3hIcFugEo+PcL7PiW+pn5k2vrg0tc3xD8h+4eCFAS0i7oLGCXP4i+FbJEJYwRn 0tyKZJ8YlQXVmY/8WEdH1dOthgBWXAUifjzTe/Fn470JyR+DRzggq4tzNpFycPEt yma1I338JnAdFuDlBFHXKLw+WsKFLmU= -----END CERTIFICATE-----Generated at Wed Jan 21 13:24:28 2026 by rpki-client