This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa File: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (raw, json) Hash identifier: d265fQHelul9TREOyZONN/w31g2IrTQhH3DeYGvf+ds= Subject key identifier: 8C:8D:5D:57:8B:8B:EF:B0:86:10:B7:E5:84:69:63:77:4D:39:8E:54 Certificate issuer: /CN=252aff2f-9807-45d4-ba31-1a3198784cae Certificate serial: 010D0C9F4328584C6E21A5F34EA4B8E13FBF26C0 Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 393468 IP address blocks: 199.185.120.0/23 maxlen: 23 199.185.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:a5:f3:4e:a4:b8:e1:3f:bf:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=5b2ac150-24a0-4a6c-ae3c-a20cdde534e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:de:93:97:5c:65:64:2b:f6:a7:69:46:60:b3: 05:f6:a6:b7:a3:cd:af:99:ef:b1:e8:f0:8f:ea:a0: fb:58:c4:67:ad:ac:b8:b1:7c:56:3c:35:b0:c9:bb: 1a:d7:e4:8a:18:ff:2b:92:6a:2f:23:b2:fe:02:4e: aa:b7:3d:2c:ca:d5:30:f8:35:76:08:b5:0d:d8:6c: 56:f4:3e:b2:9f:00:e2:08:67:a8:c1:20:44:9d:86: f5:99:d8:e4:03:82:31:6b:50:84:a3:f6:c9:4a:5d: ed:39:6b:22:5b:f8:46:cc:5b:f6:20:83:a9:2f:7f: a4:50:1d:24:f0:fe:16:52:aa:dc:a4:e4:c2:b6:80: 9b:4a:9b:8a:4c:5e:d1:1a:da:06:16:da:fa:08:86: 9e:cd:62:70:f3:6c:48:d2:2d:04:d1:eb:76:a5:24: 31:46:a7:c2:33:dd:fb:2f:8c:88:6d:43:dc:cc:da: 9c:95:63:26:70:ae:83:0c:5f:57:57:d6:e4:93:43: 79:c9:8c:9e:60:e5:60:08:ba:9a:25:7d:5f:e3:66: 57:d9:5f:f3:bc:ee:15:7e:95:ae:f0:a8:78:d7:58: a7:c2:82:b7:54:89:92:35:07:dd:36:6d:5c:aa:89: e3:a3:e1:80:0e:b7:92:29:1d:14:4f:7e:73:78:18: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:5D:57:8B:8B:EF:B0:86:10:B7:E5:84:69:63:77:4D:39:8E:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl X509v3 Authority Key Identifier: keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer sbgp-ipAddrBlock: critical IPv4: 199.185.120.0-199.185.122.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:aa:0e:e8:96:01:de:70:eb:ae:5e:fc:1e:53:c6:00:bf:0f: f9:8a:64:5f:2e:fa:15:bc:09:4e:2f:5e:38:16:55:42:55:f6: 80:41:d0:98:32:37:57:5b:7f:cd:08:cd:ca:39:82:6f:d7:fa: 09:0b:13:1b:65:4f:15:7a:f1:1c:a4:83:dd:fb:db:50:60:93: c7:77:01:ad:9d:3f:ca:a3:ed:28:5a:ea:17:d2:a0:21:e9:ce: e1:dd:ab:31:d0:5c:75:fd:70:dd:78:71:d4:94:57:68:9c:a4: 74:db:f0:c4:c7:74:b4:5e:ce:6b:0b:78:eb:fc:f0:c5:f0:2d: 10:9c:d1:d1:ed:69:48:31:70:03:0f:32:1c:66:a1:2c:c5:5d: e9:52:d2:c8:21:18:c9:73:b4:3e:6e:0b:13:08:cb:2b:c1:00: cd:5b:fe:8c:9a:6b:e7:9c:2b:52:46:e3:07:90:41:38:00:0c: 58:07:6b:74:86:af:0b:7f:85:00:4a:03:3f:e5:37:e8:c9:db: a9:ba:09:ed:fa:89:de:ab:a2:33:92:1d:e1:18:0d:62:db:87: a6:af:30:67:30:a2:b8:3c:ed:c0:47:6f:42:21:cb:4a:44:1b: 1a:cd:40:f2:04:f4:96:7e:ed:28:24:b2:29:fc:58:10:8a:2f: 86:96:4f:cd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWExuIaXzTqS44T+/JsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0 Y2FlMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk NWIyYWMxNTAtMjRhMC00YTZjLWFlM2MtYTIwY2RkZTUzNGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd6Tl1xlZCv2p2lGYLMF9qa3o82vme+x6PCP 6qD7WMRnray4sXxWPDWwybsa1+SKGP8rkmovI7L+Ak6qtz0sytUw+DV2CLUN2GxW 9D6ynwDiCGeowSBEnYb1mdjkA4Ixa1CEo/bJSl3tOWsiW/hGzFv2IIOpL3+kUB0k 8P4WUqrcpOTCtoCbSpuKTF7RGtoGFtr6CIaezWJw82xI0i0E0et2pSQxRqfCM937 L4yIbUPczNqclWMmcK6DDF9XV9bkk0N5yYyeYOVgCLqaJX1f42ZX2V/zvO4VfpWu 8Kh411inwoK3VImSNQfdNm1cqonjo+GADreSKR0UT35zeBgsywIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIyNXVeLi++whhC35YRpY3dNOY5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMzU0NGE0NzEtMjdjYS0z ZDhiLTlmOGEtNmZhMmY2MTM0NDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4 NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx OTg3ODRjYWUuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPHuXgD BADHuXowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbqoO6JYB3nDrrl78HlPGAL8P+YpkXy76FbwJTi9eOBZV QlX2gEHQmDI3V1t/zQjNyjmCb9f6CQsTG2VPFXrxHKSD3fvbUGCTx3cBrZ0/yqPt KFrqF9KgIenO4d2rMdBcdf1w3Xhx1JRXaJykdNvwxMd0tF7Oawt46/zwxfAtEJzR 0e1pSDFwAw8yHGahLMVd6VLSyCEYyXO0Pm4LEwjLK8EAzVv+jJpr55wrUkbjB5BB OAAMWAdrdIavC3+FAEoDP+U36MnbqboJ7fqJ3quiM5Id4RgNYtuHpq8wZzCiuDzt wEdvQiHLSkQbGs1A8gT0ln7tKCSyKfxYEIovhpZPzQ== -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:50 2026 by rpki-client