This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa File: 29a85c30-a52d-36a6-9030-0ec6daf5320c.roa (raw, json) Hash identifier: OXjYiVHXu9qGKUIeVJwkv2xseCBwhgHskew0Ysey3bA= Subject key identifier: 6A:F2:78:6A:6F:D7:A0:5D:FD:F9:1F:77:00:B1:20:C6:17:14:25:EE Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584C4F6BCD3AF63F5CA71FEA7A00 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 14618 IP address blocks: 167.176.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:cd:3a:f6:3f:5c:a7:1f:ea:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=854b32e5-8eaf-40ef-b5ff-6f3892ad7a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:c7:f5:4e:ae:15:b6:dc:f0:ba:9d:5b:ab: ac:a0:c4:42:77:5d:47:c9:36:73:2f:69:db:b1:07: 04:a2:37:ec:93:d2:11:6b:90:3f:33:8d:ae:79:cb: c7:88:15:a9:e5:75:fa:dd:f4:50:18:cc:39:55:85: cb:a3:5c:32:85:28:bb:6e:27:22:35:61:e4:70:84: eb:c0:e6:e8:dd:25:62:94:70:2e:c6:48:f4:30:7f: 20:2d:78:4c:85:76:e9:ab:b2:53:f2:23:0f:15:3f: 1a:37:9e:3d:0a:c3:04:9b:8f:c3:0f:bf:26:b5:27: 4e:3d:db:1c:ae:42:31:bd:c6:c1:06:d2:68:bd:92: a2:fd:17:3c:bf:00:b5:01:09:c5:77:7e:8b:a8:cc: a5:7f:bb:6f:90:17:aa:e7:d4:37:6b:1d:c9:85:35: 30:fc:e5:30:ba:32:10:64:54:90:86:40:cd:b5:15: 2e:6c:2f:51:ea:07:48:09:1a:a6:0f:72:8b:6e:3b: 8d:e6:60:bd:60:cb:be:a4:4c:f8:e8:b1:47:09:46: eb:a3:a9:15:a4:ab:a3:cd:cf:83:fd:90:87:95:1a: 6d:9a:08:41:09:e0:5e:74:b7:d0:c8:5a:a4:50:8b: 37:7a:d7:f5:91:cd:f9:50:b2:df:6f:1f:f9:60:87: 74:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F2:78:6A:6F:D7:A0:5D:FD:F9:1F:77:00:B1:20:C6:17:14:25:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/29a85c30-a52d-36a6-9030-0ec6daf5320c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:09:be:e7:ab:16:96:59:4f:31:35:da:f0:e5:fc:88:8d:90: 84:84:4e:db:61:56:67:d6:49:ee:18:9c:b5:b3:5e:34:f1:f8: a5:0c:3b:0e:8e:61:98:b4:20:fd:21:2b:f8:47:27:08:12:f0: a4:d1:57:4d:84:d9:87:76:5b:9f:fc:30:e0:17:32:6b:19:a2: c8:38:cd:1a:01:d4:66:9f:b8:fe:d7:62:90:d7:8e:04:54:ad: 59:7d:7c:0b:03:c5:ae:33:92:19:d3:69:69:6d:6c:96:42:20: bc:57:37:90:d3:d0:40:34:81:6a:62:9a:9b:96:ad:51:bc:c8: 55:d3:7a:0a:ec:c5:97:1a:c0:5c:17:5f:2b:c1:57:a3:75:4c: 8b:e2:62:81:f4:ae:23:4a:6a:78:9d:f1:17:cb:1b:e4:b9:94: fd:99:25:e3:33:64:43:f8:cc:07:ad:c5:95:24:73:fd:ea:5c: d9:50:ab:b4:fc:f8:ef:40:ce:4d:dc:ed:bd:96:32:0f:17:9f: 33:61:47:d8:28:6d:a1:bf:9d:aa:b8:f6:7f:b3:e8:b6:cd:c4: c7:a4:8f:d7:12:57:a4:82:24:50:d1:1e:c3:1e:56:88:d7:3b: 2e:b2:2e:ec:c2:8e:ee:32:68:a7:f6:04:8b:78:58:ca:45:bf: d6:85:cd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa8069j9cpx/qegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk ODU0YjMyZTUtOGVhZi00MGVmLWI1ZmYtNmYzODkyYWQ3YTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1HH9U6uFbbc8LqdW6usoMRCd11HyTZzL2nb sQcEojfsk9IRa5A/M42uecvHiBWp5XX63fRQGMw5VYXLo1wyhSi7biciNWHkcITr wObo3SVilHAuxkj0MH8gLXhMhXbpq7JT8iMPFT8aN549CsMEm4/DD78mtSdOPdsc rkIxvcbBBtJovZKi/Rc8vwC1AQnFd36LqMylf7tvkBeq59Q3ax3JhTUw/OUwujIQ ZFSQhkDNtRUubC9R6gdICRqmD3KLbjuN5mC9YMu+pEz46LFHCUbro6kVpKujzc+D /ZCHlRptmghBCeBedLfQyFqkUIs3etf1kc35ULLfbx/5YId0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGryeGpv16Bd/fkfdwCxIMYXFCXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvMjlhODVjMzAtYTUyZC0z NmE2LTkwMzAtMGVjNmRhZjUzMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7ByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8JvuerFpZZTzE12vDl/IiNkISETtthVmfWSe4YnLWzXjTx+KUMOw6O YZi0IP0hK/hHJwgS8KTRV02E2Yd2W5/8MOAXMmsZosg4zRoB1GafuP7XYpDXjgRU rVl9fAsDxa4zkhnTaWltbJZCILxXN5DT0EA0gWpimpuWrVG8yFXTegrsxZcawFwX XyvBV6N1TIviYoH0riNKanid8RfLG+S5lP2ZJeMzZEP4zAetxZUkc/3qXNlQq7T8 +O9Azk3c7b2WMg8XnzNhR9gobaG/naq49n+z6LbNxMekj9cSV6SCJFDRHsMeVojX Oy6yLuzCju4yaKf2BIt4WMpFv9aFzTI= -----END CERTIFICATE-----Generated at Fri Jan 9 01:04:18 2026 by rpki-client