This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa File: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (raw, json) Hash identifier: 6CQtsrrtB7i2JArbXIItmTUqDO4y6Hb1xFdpcj/Q9X8= Subject key identifier: C3:4A:EA:62:97:32:CE:76:1A:1B:90:05:69:AE:3F:0D:89:DF:7C:54 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584C44411CE53C57DC4E23C51880 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 14618 IP address blocks: 204.152.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:1c:e5:3c:57:dc:4e:23:c5:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=9aaccb2c-154c-418c-8921-962c6d393e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:09:fd:7d:2e:44:c2:09:7f:29:c1:a6:4f: 7d:b7:29:5e:a7:0f:7e:ac:c9:4e:72:9c:bb:5e:4b: 98:88:75:3b:20:9c:e8:66:2e:5b:2f:05:3a:1b:97: 34:7c:6e:04:a5:a1:7c:c0:f9:62:30:f1:b1:59:d0: fa:bf:11:18:87:33:39:4a:2d:c0:86:e8:20:71:89: e0:5b:ab:63:b4:fb:61:42:c7:5e:64:6a:ed:ab:ac: 8e:be:cd:b2:2a:be:27:1c:39:07:25:c5:43:52:4c: 96:91:43:65:eb:04:9a:c9:52:ac:1c:e2:e3:59:5b: e0:29:f6:0a:8a:36:af:07:c8:35:3e:ea:ec:21:22: a3:e2:c1:35:b3:90:df:30:19:5a:f1:a1:7e:a2:d7: 46:1a:df:16:dc:86:ec:92:b2:c2:c8:dc:ee:b9:83: 93:5b:b1:94:07:23:c1:c4:a4:5c:c7:8d:45:b1:81: 70:73:cc:00:8d:08:77:4e:1c:3e:44:a5:ea:47:72: 78:b6:1d:e0:dc:45:2f:2d:4b:78:3c:16:79:5f:d2: fe:39:fa:78:fb:91:7f:10:72:96:db:21:83:e0:d3: c7:19:c7:51:73:4b:10:1e:04:05:0f:09:d0:b2:ee: 2d:80:f6:a2:d9:a0:79:7b:16:c0:3e:54:ef:66:1e: dd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:EA:62:97:32:CE:76:1A:1B:90:05:69:AE:3F:0D:89:DF:7C:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/256d24fc-eda3-3794-a5c2-a337859acf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ba:ba:cf:71:7f:97:cf:c3:83:b2:ad:7e:31:f0:fd:0f:6d: e1:bd:78:62:3e:12:48:14:c2:22:80:aa:88:84:c2:43:b1:40: 85:e7:d7:dc:62:62:01:d4:01:d3:74:3b:0e:d8:b8:82:2e:3a: 57:25:cb:5d:41:ed:d5:b2:47:5b:07:05:24:90:51:1e:92:3c: 72:cc:f8:6a:db:42:03:88:d2:5f:6c:3c:9c:b4:fa:4b:97:bf: c4:52:0e:5d:3e:f4:42:9e:af:1a:ae:64:0e:5c:32:98:f8:53: d7:d2:cb:42:0b:94:cb:8c:32:fa:e8:5b:10:8c:7d:e6:e1:73: e5:b2:af:09:1f:4c:d9:81:8a:7d:62:b6:38:b1:4e:bf:76:df: 4a:77:e9:bc:0b:13:b9:68:0b:d5:61:49:b3:e3:52:ab:6b:24: a9:51:f4:1d:1e:38:f3:c3:72:37:a9:2e:8e:6f:e4:e2:49:25: 9a:60:05:58:7a:ef:d1:95:20:45:b0:45:fe:9f:fe:04:47:13: b2:83:2d:a7:20:2c:b7:63:5d:90:1a:17:c3:eb:48:d9:b6:a4: 0a:9c:91:2f:49:15:71:de:9a:e8:88:dc:d5:41:97:ea:e1:c6: 6b:e6:33:c1:20:79:28:34:e5:22:db:d4:ff:7b:07:1b:7e:7a: 13:2c:62:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRzlPFfcTiPFGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk OWFhY2NiMmMtMTU0Yy00MThjLTg5MjEtOTYyYzZkMzkzZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBcJ/X0uRMIJfynBpk99tylepw9+rMlOcpy7 XkuYiHU7IJzoZi5bLwU6G5c0fG4EpaF8wPliMPGxWdD6vxEYhzM5Si3AhuggcYng W6tjtPthQsdeZGrtq6yOvs2yKr4nHDkHJcVDUkyWkUNl6wSayVKsHOLjWVvgKfYK ijavB8g1PursISKj4sE1s5DfMBla8aF+otdGGt8W3IbskrLCyNzuuYOTW7GUByPB xKRcx41FsYFwc8wAjQh3Thw+RKXqR3J4th3g3EUvLUt4PBZ5X9L+Ofp4+5F/EHKW 2yGD4NPHGcdRc0sQHgQFDwnQsu4tgPai2aB5exbAPlTvZh7d6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNK6mKXMs52GhuQBWmuPw2J33xUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMjU2ZDI0ZmMtZWRhMy0z Nzk0LWE1YzItYTMzNzg1OWFjZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm6us9xf5fPw4OyrX4x8P0PbeG9eGI+EkgUwiKAqoiEwkOxQIXn19xi YgHUAdN0Ow7YuIIuOlcly11B7dWyR1sHBSSQUR6SPHLM+GrbQgOI0l9sPJy0+kuX v8RSDl0+9EKerxquZA5cMpj4U9fSy0ILlMuMMvroWxCMfebhc+WyrwkfTNmBin1i tjixTr9230p36bwLE7loC9VhSbPjUqtrJKlR9B0eOPPDcjepLo5v5OJJJZpgBVh6 79GVIEWwRf6f/gRHE7KDLacgLLdjXZAaF8PrSNm2pAqckS9JFXHemuiI3NVBl+rh xmvmM8EgeSg05SLb1P97Bxt+ehMsYrE= -----END CERTIFICATE-----Generated at Fri Jan 9 01:04:18 2026 by rpki-client