This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa File: 85a6cf21-2056-3a41-b8bd-d016042a8028.roa (raw, json) Hash identifier: vsEG80mOypC6zTToGVV4rrpaXb2xF4TmpGF0FzV2j20= Subject key identifier: 9A:40:40:EA:2F:7C:20:50:C0:10:70:7C:7D:9D:9B:32:A5:01:B0:E2 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C040B580D8BF098CCF7BDB200 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa Signing time: Sat 29 Nov 2025 02:00:31 +0000 ROA not before: Sat 29 Nov 2025 02:00:31 +0000 ROA not after: Fri 27 Feb 2026 02:00:31 +0000 asID: 15169 IP address blocks: 192.178.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:0b:58:0d:8b:f0:98:cc:f7:bd:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 29 02:00:31 2025 GMT Not After : Feb 27 02:00:31 2026 GMT Subject: CN=788783ef-7a0f-48ce-b669-d4793ce608cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:2a:f7:f7:63:ee:bd:4e:fa:3c:30:25:f4: 60:0d:9f:a6:15:06:04:21:96:75:c1:7c:75:c4:6e: 39:7e:19:58:cc:d3:f9:bc:d5:1f:88:12:1d:96:13: ee:c4:96:c4:b2:95:b1:8e:86:84:57:6c:01:a5:f8: bb:16:86:81:47:00:96:6c:4a:de:a1:85:a3:86:c4: 0c:de:ca:4a:b7:cf:9c:6f:67:0d:72:bc:42:fc:31: 8d:81:05:33:d8:29:8c:d5:ff:4b:39:55:cc:23:e6: 81:f4:82:5e:a3:cd:47:6f:84:dc:4c:2b:6d:b0:18: 9e:4c:55:ee:ac:59:f4:1f:2f:6a:67:cf:30:74:b8: a2:eb:1b:09:72:94:f1:73:00:15:e8:03:cb:70:9d: bf:d5:c6:27:11:d6:43:01:5f:52:4d:eb:85:b8:51: 02:d9:3b:3a:0a:29:6d:a7:d9:96:dd:98:0a:b5:d6: e1:c9:ed:92:80:9a:0d:69:56:53:eb:9a:18:72:c4: 16:7f:4f:a9:0a:71:d0:04:2f:44:7d:27:55:69:8d: 0a:35:26:a0:f0:e9:65:85:8f:e0:25:6e:55:9e:e4: 4c:0d:d4:26:c4:20:23:52:c1:c2:5a:dc:67:fe:bb: ae:65:d1:20:35:06:a4:0d:48:52:7d:2e:ad:fa:23: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:40:40:EA:2F:7C:20:50:C0:10:70:7C:7D:9D:9B:32:A5:01:B0:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85a6cf21-2056-3a41-b8bd-d016042a8028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 192.178.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d3:da:f6:1a:38:0f:0e:7b:74:6f:1f:f4:0c:66:42:76:ba: 25:3a:af:2d:44:45:8d:59:f2:b0:d0:64:99:aa:61:db:ac:eb: b1:75:b2:1e:99:99:7c:35:ae:c3:ec:09:e2:72:54:0a:0f:8d: 7b:6b:f9:ff:b0:a3:6c:79:53:d5:ea:eb:3c:a7:f2:24:35:5a: be:44:96:db:9d:90:ca:ed:56:73:84:35:cd:70:58:2f:1c:e8: 4e:d4:f2:ba:ca:b5:3f:27:c0:da:d5:ca:45:df:f1:8c:1f:ee: e7:91:df:aa:38:fe:06:33:01:12:cb:1f:d6:ba:7e:ee:56:96: 55:1a:af:43:b0:d8:48:03:7c:24:31:c0:dd:cd:76:74:b4:45: 02:96:2d:21:af:b0:d8:bb:ec:3e:55:16:18:9d:39:05:fe:51: f0:9d:a5:07:f2:9e:39:d0:4f:2d:35:f8:c3:5d:87:84:ee:a5: 74:00:88:95:f9:fc:3b:fd:18:f4:66:56:ee:be:c5:f1:a3:ab: 76:d4:f6:4e:54:bb:f2:1a:c0:f8:89:44:bc:94:5a:cc:9a:74: 69:f6:16:70:cc:e6:41:db:f5:cc:93:54:5f:f3:f7:f0:73:24: af:82:b9:4d:ef:22:68:87:4b:11:1e:63:17:cd:b2:e9:d0:07: 02:7d:89:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwEC1gNi/CYzPe9sgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTEyOTAyMDAzMVoXDTI2MDIyNzAyMDAzMVowLzEtMCsGA1UEAxMk Nzg4NzgzZWYtN2EwZi00OGNlLWI2NjktZDQ3OTNjZTYwOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6gq9/dj7r1O+jwwJfRgDZ+mFQYEIZZ1wXx1 xG45fhlYzNP5vNUfiBIdlhPuxJbEspWxjoaEV2wBpfi7FoaBRwCWbEreoYWjhsQM 3spKt8+cb2cNcrxC/DGNgQUz2CmM1f9LOVXMI+aB9IJeo81Hb4TcTCttsBieTFXu rFn0Hy9qZ88wdLii6xsJcpTxcwAV6APLcJ2/1cYnEdZDAV9STeuFuFEC2Ts6Cilt p9mW3ZgKtdbhye2SgJoNaVZT65oYcsQWf0+pCnHQBC9EfSdVaY0KNSag8OllhY/g JW5VnuRMDdQmxCAjUsHCWtxn/ruuZdEgNQakDUhSfS6t+iPryQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpAQOovfCBQwBBwfH2dmzKlAbDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODVhNmNmMjEtMjA1Ni0z YTQxLWI4YmQtZDAxNjA0MmE4MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTT2vYaOA8Oe3RvH/QMZkJ2uiU6ry1ERY1Z8rDQZJmqYdus67F1sh6Z mXw1rsPsCeJyVAoPjXtr+f+wo2x5U9Xq6zyn8iQ1Wr5EltudkMrtVnOENc1wWC8c 6E7U8rrKtT8nwNrVykXf8Ywf7ueR36o4/gYzARLLH9a6fu5WllUar0Ow2EgDfCQx wN3NdnS0RQKWLSGvsNi77D5VFhidOQX+UfCdpQfynjnQTy01+MNdh4TupXQAiJX5 /Dv9GPRmVu6+xfGjq3bU9k5Uu/IawPiJRLyUWsyadGn2FnDM5kHb9cyTVF/z9/Bz JK+CuU3vImiHSxEeYxfNsunQBwJ9iWs= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:57 2025 by rpki-client