This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/f97ec8ba-5a01-3322-a955-9fd5feeda135.roa File: f97ec8ba-5a01-3322-a955-9fd5feeda135.roa (raw, json) Hash identifier: BknEe+5tg5qoWvbt6VDUZOnr+p/PI8i1daoFmlje9i8= Subject key identifier: 22:2F:B1:21:65:F5:10:5E:41:E8:99:8B:23:3B:A4:7C:9F:C6:38:E3 Certificate issuer: /CN=3df10a54-f467-4553-b08a-03574eb5cce7 Certificate serial: 010D0C9F4328584C44411C85D574E2070D768C80 Authority key identifier: 4C:25:9A:B4:92:F2:B1:D4:98:60:A7:2C:9B:DD:CE:04:1A:2C:59:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/f97ec8ba-5a01-3322-a955-9fd5feeda135.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 25925 IP address blocks: 198.161.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:1c:85:d5:74:e2:07:0d:76:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3df10a54-f467-4553-b08a-03574eb5cce7 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=8ca8ce4b-9797-4095-a492-97c4a9759f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:02:48:e4:9b:fd:c5:30:8d:a4:7b:a2:00: de:72:25:ac:af:8a:3b:1a:fd:d0:17:9c:07:93:15: fc:80:79:27:38:3a:93:4b:68:ff:54:8a:5a:8a:1e: e1:a5:03:7a:42:70:82:0e:f3:8c:83:28:05:ff:ef: 8e:e5:1b:64:60:e7:b8:66:23:61:c8:fa:44:3a:ee: c8:86:82:87:48:e1:17:0d:9c:f6:70:5a:78:85:ee: 92:a4:ea:d5:15:51:66:aa:af:bb:f1:88:d5:a6:6c: ea:f4:9e:30:57:5f:a3:c4:0e:09:d9:19:3a:89:e0: 66:4a:a8:de:e6:4c:e1:1c:d0:55:b3:81:9f:6a:83: aa:20:02:a9:d1:bb:47:19:c0:7b:81:4d:e7:25:54: 04:5f:cf:62:f2:5c:d2:89:7b:13:fd:50:5c:b9:90: 87:ab:d8:34:17:fe:94:8a:68:23:2f:df:b3:8f:1b: 73:b2:61:ab:92:c7:e7:d6:69:63:ec:ab:62:85:be: ce:b7:dd:f4:7a:c0:4b:b4:1f:83:a6:69:3d:8f:7e: 6f:3c:50:77:dd:ae:62:0e:5c:4d:0e:54:26:d5:62: 5a:2a:4b:72:be:e4:0f:07:2a:bc:2d:52:36:2f:e0: 2f:41:9d:74:05:81:28:b5:2b:8e:0f:2a:b9:11:5c: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2F:B1:21:65:F5:10:5E:41:E8:99:8B:23:3B:A4:7C:9F:C6:38:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/f97ec8ba-5a01-3322-a955-9fd5feeda135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7/3df10a54-f467-4553-b08a-03574eb5cce7.crl X509v3 Authority Key Identifier: keyid:4C:25:9A:B4:92:F2:B1:D4:98:60:A7:2C:9B:DD:CE:04:1A:2C:59:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3df10a54-f467-4553-b08a-03574eb5cce7.cer sbgp-ipAddrBlock: critical IPv4: 198.161.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:04:7e:89:47:6b:ba:05:3f:0d:b9:49:53:83:69:cb:52:9f: 78:11:88:58:61:46:93:48:85:84:a6:9a:da:79:eb:60:f2:28: b5:fb:a0:70:09:dd:a4:fc:20:87:53:63:91:0d:e5:62:5f:f7: 9e:75:0c:71:d7:87:f7:80:91:45:69:d7:84:4a:3d:d2:cb:cd: 6b:4d:e4:ee:8d:9e:b7:b9:aa:c7:8d:21:00:7d:d4:ba:22:10: 93:b9:00:d7:e7:63:88:9b:0a:0a:af:fe:e9:ec:5c:66:f1:21: 16:b7:48:12:1b:43:17:1d:f0:70:78:c2:5f:4c:ab:11:71:95: f7:ab:e5:20:69:f6:f5:4f:0c:86:2d:c7:5e:0e:68:b4:89:79: 9e:32:08:a4:71:4c:35:de:df:6b:62:6d:87:95:8a:b8:5f:4f: 45:6b:6c:8c:5d:8b:c0:3b:7d:3f:34:6a:90:4e:d0:74:2b:a8: 81:60:58:e1:69:59:a1:67:c2:a8:80:f3:fa:f9:be:34:fb:94: 00:1c:b9:f9:90:dd:38:d5:35:6b:b7:66:16:b6:63:17:e2:42: 2f:6c:98:87:ff:fc:4a:1e:5a:08:62:d0:82:73:59:e1:51:c5: 5e:a8:09:01:b0:fe:e2:e2:10:94:41:97:62:a1:36:bd:27:48: bf:26:aa:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQRyF1XTiBw12jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RmMTBhNTQtZjQ2Ny00NTUzLWIwOGEtMDM1NzRlYjVj Y2U3MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk OGNhOGNlNGItOTc5Ny00MDk1LWE0OTItOTdjNGE5NzU5ZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFACSOSb/cUwjaR7ogDeciWsr4o7Gv3QF5wH kxX8gHknODqTS2j/VIpaih7hpQN6QnCCDvOMgygF/++O5RtkYOe4ZiNhyPpEOu7I hoKHSOEXDZz2cFp4he6SpOrVFVFmqq+78YjVpmzq9J4wV1+jxA4J2Rk6ieBmSqje 5kzhHNBVs4GfaoOqIAKp0btHGcB7gU3nJVQEX89i8lzSiXsT/VBcuZCHq9g0F/6U imgjL9+zjxtzsmGrksfn1mlj7Ktihb7Ot930esBLtB+Dpmk9j35vPFB33a5iDlxN DlQm1WJaKktyvuQPByq8LVI2L+AvQZ10BYEotSuODyq5EVwTWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIvsSFl9RBeQeiZiyM7pHyfxjjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZGYx MGE1NC1mNDY3LTQ1NTMtYjA4YS0wMzU3NGViNWNjZTcvZjk3ZWM4YmEtNWEwMS0z MzIyLWE5NTUtOWZkNWZlZWRhMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2RmMTBhNTQtZjQ2Ny00NTUzLWIw OGEtMDM1NzRlYjVjY2U3LzNkZjEwYTU0LWY0NjctNDU1My1iMDhhLTAzNTc0ZWI1 Y2NlNy5jcmwwHwYDVR0jBBgwFoAUTCWatJLysdSYYKcsm93OBBosWTMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZGYxMGE1NC1mNDY3LTQ1NTMtYjA4YS0wMzU3 NGViNWNjZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsEfolHa7oFPw25SVODactSn3gRiFhhRpNIhYSmmtp562DyKLX7oHAJ 3aT8IIdTY5EN5WJf9551DHHXh/eAkUVp14RKPdLLzWtN5O6Nnre5qseNIQB91Loi EJO5ANfnY4ibCgqv/unsXGbxIRa3SBIbQxcd8HB4wl9MqxFxlfer5SBp9vVPDIYt x14OaLSJeZ4yCKRxTDXe32tibYeVirhfT0VrbIxdi8A7fT80apBO0HQrqIFgWOFp WaFnwqiA8/r5vjT7lAAcufmQ3TjVNWu3Zha2YxfiQi9smIf//EoeWghi0IJzWeFR xV6oCQGw/uLiEJRBl2KhNr0nSL8mqkQ= -----END CERTIFICATE-----Generated at Sat Jan 10 14:13:29 2026 by rpki-client