This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa File: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (raw, json) Hash identifier: 6Bo4WsDeHa9EsW9/naw8h0ZN9e/3mCqRVjvAwBbYjKc= Subject key identifier: AF:6B:7D:64:49:CE:EE:35:88:AC:E1:0D:6F:4C:2F:83:20:94:95:41 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584C44411CD692E34A0A721273C8 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 16509 IP address blocks: 204.152.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:1c:d6:92:e3:4a:0a:72:12:73:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=d04993a7-62a1-4572-ade4-4e3398ef4927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:e8:14:93:90:59:e2:e1:e3:46:2e:c3:4b: af:0c:fd:97:8b:11:4a:42:6f:a3:ea:51:09:b3:fa: 94:ca:90:70:01:d0:fa:2f:c4:91:33:ac:63:b0:fb: 4c:ec:e5:6d:61:23:ea:1c:01:85:77:9d:f0:85:69: d5:0e:91:aa:ed:1f:85:6d:99:c1:73:a6:47:66:03: 8f:b3:b1:49:7b:37:0b:37:09:32:fb:99:97:ba:c3: 43:5c:8b:6a:26:08:f4:e9:37:91:c6:e5:c5:c2:e8: 8e:43:e0:58:b9:38:52:b0:4e:40:7c:27:e9:19:a0: ab:84:19:03:87:d3:24:88:7e:77:00:fa:b0:3a:3d: 64:62:57:3f:93:79:c1:9d:98:89:93:ba:56:37:e2: e6:72:d9:af:7e:99:d7:ae:1d:9d:27:a9:28:74:e9: dc:be:f8:95:ec:23:36:b8:61:53:6a:3e:12:9b:0e: 85:52:29:d4:40:a6:35:0e:53:07:27:cd:f3:0c:58: 92:0e:2d:79:c0:0e:eb:43:d6:e6:71:e7:80:73:e5: b2:23:84:17:27:20:91:66:c3:05:8c:fb:8b:e1:e6: cd:5c:1c:12:a9:e2:4f:e9:47:40:ff:8e:af:b0:82: 3d:7a:6d:b7:e1:9e:84:09:21:23:d9:c6:fa:04:73: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6B:7D:64:49:CE:EE:35:88:AC:E1:0D:6F:4C:2F:83:20:94:95:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/a18bc8e5-3031-3334-b765-3392f5d4fe56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: 204.152.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:d6:02:1a:90:43:51:3a:30:88:85:af:48:cc:ab:16:b6:25: e0:95:27:72:0b:bc:a0:02:32:4d:8e:d2:d4:83:c7:41:cb:74: 1e:f8:9e:aa:02:10:9f:dc:60:62:91:df:23:d5:c0:de:1c:ae: 63:e5:74:d5:2e:30:46:a6:9a:c4:af:93:b2:7a:75:64:c7:24: 90:d5:1a:e7:16:27:8f:56:0a:d6:aa:07:8c:8e:00:71:a6:87: 18:b5:45:e9:47:b3:1f:cb:e1:c3:be:d0:fb:d7:41:95:35:41: 8f:54:09:49:cc:f2:cc:97:22:1f:0b:5b:b3:62:e0:81:fb:92: b3:9b:7e:93:8f:e6:23:61:12:c2:b2:2c:f8:64:86:68:f0:c0: e8:ab:54:60:15:97:55:19:73:42:fc:05:fd:fd:1e:19:4f:f7: a8:bf:e1:0b:f8:95:a7:a2:89:81:f8:71:49:f5:6f:16:46:c4: de:89:cc:cf:ac:e9:1d:90:cf:ea:6d:ff:54:34:ca:6f:0e:9f: 86:92:9e:9c:24:16:da:a2:0e:a1:89:a8:0a:96:33:bc:9d:8a: 76:00:ee:64:3a:fc:27:b9:b6:f0:58:4f:92:df:61:91:ef:b1: b4:9f:53:ad:17:dd:e3:e2:9c:ea:27:3c:b5:c8:29:9f:71:de: d2:84:da:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRzWkuNKCnISc8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk ZDA0OTkzYTctNjJhMS00NTcyLWFkZTQtNGUzMzk4ZWY0OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzroFJOQWeLh40Yuw0uvDP2XixFKQm+j6lEJ s/qUypBwAdD6L8SRM6xjsPtM7OVtYSPqHAGFd53whWnVDpGq7R+FbZnBc6ZHZgOP s7FJezcLNwky+5mXusNDXItqJgj06TeRxuXFwuiOQ+BYuThSsE5AfCfpGaCrhBkD h9MkiH53APqwOj1kYlc/k3nBnZiJk7pWN+LmctmvfpnXrh2dJ6kodOncvviV7CM2 uGFTaj4Smw6FUinUQKY1DlMHJ83zDFiSDi15wA7rQ9bmceeAc+WyI4QXJyCRZsMF jPuL4ebNXBwSqeJP6UdA/46vsII9em234Z6ECSEj2cb6BHOiOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9rfWRJzu41iKzhDW9ML4MglJVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvYTE4YmM4ZTUtMzAzMS0z MzM0LWI3NjUtMzM5MmY1ZDRmZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJjoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANHWAhqQQ1E6MIiFr0jMqxa2JeCVJ3ILvKACMk2O0tSDx0HLdB74nqoC EJ/cYGKR3yPVwN4crmPldNUuMEammsSvk7J6dWTHJJDVGucWJ49WCtaqB4yOAHGm hxi1RelHsx/L4cO+0PvXQZU1QY9UCUnM8syXIh8LW7Ni4IH7krObfpOP5iNhEsKy LPhkhmjwwOirVGAVl1UZc0L8Bf39HhlP96i/4Qv4laeiiYH4cUn1bxZGxN6JzM+s 6R2Qz+pt/1Q0ym8On4aSnpwkFtqiDqGJqAqWM7ydinYA7mQ6/Ce5tvBYT5LfYZHv sbSfU60X3ePinOonPLXIKZ9x3tKE2uA= -----END CERTIFICATE-----Generated at Sat Jan 10 14:26:46 2026 by rpki-client