This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa File: 9e3f9052-7b5f-3e95-83d1-b1311d837811.roa (raw, json) Hash identifier: dnxVMBlsfmc4LfHItFBg3ZibHwq8Qc47SeTow6bROvY= Subject key identifier: 60:C8:97:44:54:AF:88:C1:71:55:2F:3F:DF:22:13:01:AB:B8:EC:3B Certificate issuer: /CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Certificate serial: 010D0C9F4328584C4F6BCE5701697C5755CF4600 Authority key identifier: DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 396982 IP address blocks: 167.176.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:ce:57:01:69:7c:57:55:cf:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=1d65e724-77af-40d9-a169-d7d0f60a8739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e0:7e:16:c2:e9:c0:dd:b3:8f:af:18:6d:77: 44:3b:8c:2a:e2:41:bc:a2:76:fb:8a:ec:5a:dc:10: 00:7b:5c:95:24:48:d9:b0:48:1b:c9:3f:cf:93:bb: ff:ca:dd:e2:cf:a0:3e:d3:13:ee:78:d9:c4:97:ba: af:5f:2d:d9:be:7b:73:f8:d3:de:bf:c8:23:be:7e: 25:68:d9:7a:78:26:f4:33:39:20:e7:bf:f4:f0:8d: 62:a9:db:16:94:2d:f0:33:46:0f:88:28:8e:86:0c: 25:86:73:65:c3:f5:b2:fe:33:39:f2:bc:39:4f:ff: 71:f1:23:12:97:39:1d:5f:cf:f6:22:14:f2:40:8f: 51:2e:11:a9:49:6e:83:c5:64:17:1a:76:e6:73:c5: 49:a4:15:be:ff:66:56:84:04:61:80:4d:12:d9:6e: 28:6a:06:49:bd:a1:1b:e3:7a:15:19:d8:f0:1a:a5: c2:34:a4:af:3c:9b:0f:b4:7a:4d:39:91:de:a7:a6: 13:fa:a8:c1:0d:b8:60:d0:8f:86:2b:e8:6b:00:60: ac:26:f1:21:95:db:b8:5f:bd:26:ef:58:31:31:f8: f9:36:ee:d8:b4:08:ae:fc:1f:e6:be:0b:1d:ff:91: 8a:76:f6:d1:88:2c:ae:1d:a1:b6:6d:a6:39:62:af: 11:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:97:44:54:AF:88:C1:71:55:2F:3F:DF:22:13:01:AB:B8:EC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/9e3f9052-7b5f-3e95-83d1-b1311d837811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.crl X509v3 Authority Key Identifier: keyid:DB:48:8B:C0:9E:92:82:91:36:F9:9A:84:9D:8C:04:EF:F8:C0:68:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2d2cb9ef-5fb7-43fe-bcc5-0a10b750f88a.cer sbgp-ipAddrBlock: critical IPv4: 167.176.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f6:95:dd:c8:d3:0d:94:47:8f:1a:0d:d6:7c:79:ff:89:bc: cd:24:1d:7a:d0:dd:c8:58:95:4b:0c:20:dc:2b:a3:ba:80:bd: 41:f8:78:ec:ff:9a:26:12:db:08:73:10:9f:82:9c:52:73:0b: a6:78:4d:19:d7:2f:d8:10:be:46:ba:d5:2e:69:d4:fd:72:57: b1:08:dc:0a:2b:31:c1:73:92:02:7c:8a:d1:56:b7:d0:58:ef: 46:c7:c1:6e:f8:94:d2:4e:7e:46:81:89:bb:ce:44:ed:1d:2c: 61:07:c1:39:66:fc:b7:87:0e:e1:f8:11:d1:43:c7:20:fc:2b: 29:28:b9:2e:fe:88:2e:66:dd:ca:10:dc:09:80:dd:63:92:09: fb:cc:90:75:bf:f8:b7:0d:0e:fe:1d:b5:dc:db:ee:a2:8c:4b: b5:ab:13:60:b5:1a:a4:61:6c:8b:14:70:7d:fb:75:af:07:65: 37:6c:a2:57:9f:73:d2:74:60:5d:a1:b8:13:43:8c:91:85:36: 7e:5f:b2:0b:49:01:14:52:76:da:af:ad:e2:d6:bb:5b:06:9e: 58:76:e7:97:2b:14:b0:e9:92:ce:3c:af:33:61:dc:05:29:8a: dd:07:97:99:70:3a:c4:01:d7:e0:f7:8f:33:95:42:71:65:62: 55:ca:55:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa85XAWl8V1XPRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQyY2I5ZWYtNWZiNy00M2ZlLWJjYzUtMGExMGI3NTBm ODhhMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk MWQ2NWU3MjQtNzdhZi00MGQ5LWExNjktZDdkMGY2MGE4NzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuB+FsLpwN2zj68YbXdEO4wq4kG8onb7iuxa 3BAAe1yVJEjZsEgbyT/Pk7v/yt3iz6A+0xPueNnEl7qvXy3Zvntz+NPev8gjvn4l aNl6eCb0Mzkg57/08I1iqdsWlC3wM0YPiCiOhgwlhnNlw/Wy/jM58rw5T/9x8SMS lzkdX8/2IhTyQI9RLhGpSW6DxWQXGnbmc8VJpBW+/2ZWhARhgE0S2W4oagZJvaEb 43oVGdjwGqXCNKSvPJsPtHpNOZHep6YT+qjBDbhg0I+GK+hrAGCsJvEhldu4X70m 71gxMfj5Nu7YtAiu/B/mvgsd/5GKdvbRiCyuHaG2baY5Yq8RbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDIl0RUr4jBcVUvP98iEwGruOw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJj YjllZi01ZmI3LTQzZmUtYmNjNS0wYTEwYjc1MGY4OGEvOWUzZjkwNTItN2I1Zi0z ZTk1LTgzZDEtYjEzMTFkODM3ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmQyY2I5ZWYtNWZiNy00M2ZlLWJj YzUtMGExMGI3NTBmODhhLzJkMmNiOWVmLTVmYjctNDNmZS1iY2M1LTBhMTBiNzUw Zjg4YS5jcmwwHwYDVR0jBBgwFoAU20iLwJ6SgpE2+ZqEnYwE7/jAaDswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yZDJjYjllZi01ZmI3LTQzZmUtYmNjNS0wYTEw Yjc1MGY4OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7B2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED2ld3I0w2UR48aDdZ8ef+JvM0kHXrQ3chYlUsMINwro7qAvUH4eOz/ miYS2whzEJ+CnFJzC6Z4TRnXL9gQvka61S5p1P1yV7EI3AorMcFzkgJ8itFWt9BY 70bHwW74lNJOfkaBibvORO0dLGEHwTlm/LeHDuH4EdFDxyD8KykouS7+iC5m3coQ 3AmA3WOSCfvMkHW/+LcNDv4dtdzb7qKMS7WrE2C1GqRhbIsUcH37da8HZTdsolef c9J0YF2huBNDjJGFNn5fsgtJARRSdtqvreLWu1sGnlh255crFLDpks48rzNh3AUp it0Hl5lwOsQB1+D3jzOVQnFlYlXKVbw= -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:11 2026 by rpki-client