This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa File: 0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa (raw, json) Hash identifier: n7lzzrGN4OcLyOr/WfqJL47O1VASzRmsw18bIPEi1HY= Subject key identifier: E9:1E:B7:09:9D:BF:A0:45:7A:DB:E2:08:CB:BD:17:FF:C1:C8:E5:36 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584C5EE6DEAD1E90B030867EA010 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa Signing time: Wed 31 Dec 2025 15:05:48 +0000 ROA not before: Wed 31 Dec 2025 15:05:48 +0000 ROA not after: Tue 31 Mar 2026 14:05:48 +0000 asID: 55081 IP address blocks: 192.119.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:e6:de:ad:1e:90:b0:30:86:7e:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Dec 31 15:05:48 2025 GMT Not After : Mar 31 14:05:48 2026 GMT Subject: CN=ba56fe91-c293-4be4-a5c9-44a845d37a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:76:10:fa:fd:bd:57:a4:dd:5b:fb:52:7d: ed:88:a9:59:18:e8:2a:ef:96:ab:c8:c2:ca:e7:52: 0f:ab:80:9e:70:19:f7:7f:cb:f0:e8:00:58:ae:cc: bc:b8:43:ce:38:7d:d6:93:8e:14:54:f8:e1:99:bf: d6:a1:dc:e7:01:36:db:6d:98:00:a9:4e:99:ac:db: b8:9c:f4:ef:d0:e1:9f:0b:de:87:a5:b1:59:51:21: 2a:d6:6b:1d:92:1a:bb:b9:99:3e:85:71:36:59:cb: 1d:10:8d:a4:08:8d:d5:03:7b:d0:2b:63:b5:bb:54: e7:32:2c:2d:e5:6a:a0:ce:8f:a5:27:36:3d:c0:4d: eb:11:35:b7:5e:8c:e8:3e:c4:d1:c3:3f:57:51:23: 17:16:ea:b5:dc:b8:b7:24:34:9a:5c:44:ca:c2:e5: 88:4d:ae:04:06:8e:47:e3:e8:da:cd:5b:ab:1b:bf: 6e:d2:3b:13:83:a8:88:4a:21:2d:80:a3:32:3e:f4: 54:e2:e4:e5:4c:31:17:ed:c1:1d:da:2f:f2:83:9a: 90:1d:30:12:ba:be:2a:d2:7e:bc:25:8f:76:d8:0a: 06:8e:59:33:6a:b0:29:02:54:db:6e:1e:02:53:2f: 1b:d0:17:48:25:15:d2:2d:8b:2b:7b:ea:57:e1:17: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1E:B7:09:9D:BF:A0:45:7A:DB:E2:08:CB:BD:17:FF:C1:C8:E5:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0342b8f3-057f-3bf8-9394-1f273c1b1e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 192.119.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:be:1a:64:60:05:4c:1b:98:7b:f7:1f:42:d7:79:a9:5e:b9: 4e:f5:c6:f2:64:28:c8:3d:0e:9b:9e:90:7a:fb:13:24:6e:be: 5e:e6:83:32:fd:d9:f1:f8:3d:d7:c6:c8:f2:68:dd:62:94:9c: 56:49:6a:53:10:94:94:ad:96:1b:aa:da:85:73:13:62:1b:45: 3a:97:60:2f:84:af:03:cf:b0:a4:bd:29:da:98:af:a5:0f:7d: 60:2b:43:b3:71:4c:ad:8d:74:c1:9f:b7:9e:d0:93:af:67:1e: ea:65:14:63:9d:d8:06:2e:53:27:ff:a2:3c:3e:71:8e:0e:4d: 44:4e:98:e3:9f:dc:5b:69:78:b3:76:27:5c:70:35:17:e5:21: a1:d8:3d:f3:f1:69:36:b2:b0:f2:e0:87:20:ff:02:6f:e2:a9: 30:86:a5:c9:b9:47:3f:4f:ed:12:a6:50:f0:4e:97:bb:07:d2: bb:fb:d2:c7:47:2e:f1:91:66:78:b4:9b:81:09:65:b0:eb:f1: 66:e9:eb:27:37:a2:40:18:60:c1:e9:88:d5:00:e8:d4:dc:a5: 93:4b:68:45:64:6b:6a:c2:c1:1b:32:2f:29:57:56:d3:94:98: d7:78:23:82:c8:f8:f0:67:3c:8c:ad:c4:3a:0f:22:ca:e0:8c: fd:af:c9:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExe5t6tHpCwMIZ+oBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTIzMTE1MDU0OFoXDTI2MDMzMTE0MDU0OFowLzEtMCsGA1UEAxMk YmE1NmZlOTEtYzI5My00YmU0LWE1YzktNDRhODQ1ZDM3YTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirp2EPr9vVek3Vv7Un3tiKlZGOgq75aryMLK 51IPq4CecBn3f8vw6ABYrsy8uEPOOH3Wk44UVPjhmb/WodznATbbbZgAqU6ZrNu4 nPTv0OGfC96HpbFZUSEq1msdkhq7uZk+hXE2WcsdEI2kCI3VA3vQK2O1u1TnMiwt 5Wqgzo+lJzY9wE3rETW3XozoPsTRwz9XUSMXFuq13Li3JDSaXETKwuWITa4EBo5H 4+jazVurG79u0jsTg6iISiEtgKMyPvRU4uTlTDEX7cEd2i/yg5qQHTASur4q0n68 JY922AoGjlkzarApAlTbbh4CUy8b0BdIJRXSLYsre+pX4RfrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOketwmdv6BFetviCMu9F//ByOU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMDM0MmI4ZjMtMDU3Zi0z YmY4LTkzOTQtMWYyNzNjMWIxZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwHcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGW+GmRgBUwbmHv3H0LXealeuU71xvJkKMg9DpuekHr7EyRuvl7mgzL9 2fH4PdfGyPJo3WKUnFZJalMQlJStlhuq2oVzE2IbRTqXYC+ErwPPsKS9KdqYr6UP fWArQ7NxTK2NdMGft57Qk69nHuplFGOd2AYuUyf/ojw+cY4OTUROmOOf3FtpeLN2 J1xwNRflIaHYPfPxaTaysPLghyD/Am/iqTCGpcm5Rz9P7RKmUPBOl7sH0rv70sdH LvGRZni0m4EJZbDr8Wbp6yc3okAYYMHpiNUA6NTcpZNLaEVka2rCwRsyLylXVtOU mNd4I4LI+PBnPIytxDoPIsrgjP2vyWk= -----END CERTIFICATE-----Generated at Sun Jan 11 16:25:57 2026 by rpki-client