This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa File: 01307e7f-cc1e-3508-a44c-557b2e686d06.roa (raw, json) Hash identifier: UFk9zcaeD/DTwUkodyZgKCBio5C6Ag06PDziv9UaPi0= Subject key identifier: EE:29:F8:3A:3F:86:F4:9B:27:5E:D5:A1:EA:A6:8C:8C:53:37:49:CA Certificate issuer: /CN=91a5f71b-bf1d-474c-b568-55393b7da475 Certificate serial: 010D0C9F4328584C59312D5791E642E0F8888B80 Authority key identifier: E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa Signing time: Mon 29 Dec 2025 14:00:38 +0000 ROA not before: Mon 29 Dec 2025 14:00:38 +0000 ROA not after: Sun 29 Mar 2026 13:00:38 +0000 asID: 401345 IP address blocks: 23.134.252.0/24 maxlen: 24 2602:f88e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:2d:57:91:e6:42:e0:f8:88:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a5f71b-bf1d-474c-b568-55393b7da475 Validity Not Before: Dec 29 14:00:38 2025 GMT Not After : Mar 29 13:00:38 2026 GMT Subject: CN=bec9019d-b555-4dcb-ac9b-c4abe40079cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:c2:8b:09:30:e0:82:28:53:64:91:0a:9e: b5:a3:74:ca:c8:fb:1f:aa:b9:4f:7d:d8:5b:90:9a: f5:5d:42:92:0a:2c:81:22:88:17:83:a7:f9:6a:c9: db:3c:18:ce:e9:e0:92:ac:c6:6b:d0:a9:99:fe:1e: 5a:88:3d:cd:2c:3a:3d:c5:1b:75:f0:59:8d:d4:e3: 81:cd:e5:ac:3d:03:ed:35:92:b3:37:a5:24:5a:fb: 7f:0b:32:5c:63:5d:c9:3d:f2:45:10:85:00:b9:b3: 18:c3:b3:27:4b:03:6c:b2:fb:98:cb:dd:8d:84:6d: cc:d5:28:84:ee:b2:cf:d9:93:af:9c:3d:37:5e:09: 55:3b:94:45:11:6f:20:c2:f5:c5:60:09:b6:e8:9f: c0:4a:3b:41:d8:36:a2:1d:2f:44:ca:30:b0:b1:9a: 90:6d:b0:28:51:a7:75:8a:2d:ca:d8:d9:76:3d:82: d0:19:72:e5:ae:be:43:d9:56:0d:a4:08:53:2f:3e: ab:16:e6:ba:51:dd:c1:2c:48:17:de:6e:f3:6a:d3: d5:cd:4a:10:ae:37:e7:d9:94:53:67:5d:ea:78:76: d3:98:d9:99:b1:a9:5a:f6:8d:26:4e:aa:5c:2a:9d: 17:ba:7e:39:dd:eb:d5:e3:54:5a:50:74:60:24:6b: ea:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:29:F8:3A:3F:86:F4:9B:27:5E:D5:A1:EA:A6:8C:8C:53:37:49:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl X509v3 Authority Key Identifier: keyid:E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer sbgp-ipAddrBlock: critical IPv4: 23.134.252.0/24 IPv6: 2602:f88e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:c1:26:e7:ef:21:88:10:d0:45:33:33:d0:aa:60:50:57:c3: a1:6d:f9:5f:2a:ec:0f:56:95:3e:09:5e:e1:cc:0f:54:d1:f5: 33:ff:eb:63:cb:bf:2f:64:8a:40:24:e1:9d:1b:80:7f:49:84: b8:f2:c2:00:94:16:ef:9d:e8:8f:4f:9d:e4:2c:b2:a6:b0:62: 3b:1b:c3:64:2f:aa:73:c3:d9:89:25:48:a4:bb:78:1a:f2:5e: 73:e6:b9:fe:78:0d:e2:3e:a2:a0:7c:99:da:50:7a:2d:2b:48: d9:97:44:14:21:69:c2:77:3f:09:94:a6:06:b7:f8:b5:fd:13: 29:b7:a5:3b:2d:85:1f:e9:07:63:7b:e4:bc:b3:84:78:ec:6f: 85:b6:ce:24:25:f3:f6:9e:29:fd:16:cd:6a:f9:04:65:96:7d: f0:bc:c7:82:5c:7a:c0:19:e0:ac:ba:6f:19:00:c6:65:08:e3: 85:5b:50:7b:33:fe:ad:84:a9:f8:32:82:ff:52:68:2c:78:05: 9d:b5:2e:af:52:4f:37:51:a5:63:b1:43:fe:e5:0f:9e:ac:bc: 0c:b6:16:20:f1:1c:90:03:e1:d7:d8:56:dc:94:3f:28:de:d9: 90:e0:a4:6a:fc:17:04:7d:d1:44:1f:a3:a6:b7:13:b2:6e:95: 2c:63:d9:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWExZMS1XkeZC4PiIi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhNWY3MWItYmYxZC00NzRjLWI1NjgtNTUzOTNiN2Rh NDc1MB4XDTI1MTIyOTE0MDAzOFoXDTI2MDMyOTEzMDAzOFowLzEtMCsGA1UEAxMk YmVjOTAxOWQtYjU1NS00ZGNiLWFjOWItYzRhYmU0MDA3OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwArCiwkw4IIoU2SRCp61o3TKyPsfqrlPfdhb kJr1XUKSCiyBIogXg6f5asnbPBjO6eCSrMZr0KmZ/h5aiD3NLDo9xRt18FmN1OOB zeWsPQPtNZKzN6UkWvt/CzJcY13JPfJFEIUAubMYw7MnSwNssvuYy92NhG3M1SiE 7rLP2ZOvnD03XglVO5RFEW8gwvXFYAm26J/ASjtB2DaiHS9EyjCwsZqQbbAoUad1 ii3K2Nl2PYLQGXLlrr5D2VYNpAhTLz6rFua6Ud3BLEgX3m7zatPVzUoQrjfn2ZRT Z13qeHbTmNmZsala9o0mTqpcKp0Xun453evV41RaUHRgJGvqnwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFO4p+Do/hvSbJ17VoeqmjIxTN0nKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1 ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5M2I3ZGE0NzUvMDEzMDdlN2YtY2MxZS0z NTA4LWE0NGMtNTU3YjJlNjg2ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTFhNWY3MWItYmYxZC00NzRjLWI1 NjgtNTUzOTNiN2RhNDc1LzkxYTVmNzFiLWJmMWQtNDc0Yy1iNTY4LTU1MzkzYjdk YTQ3NS5jcmwwHwYDVR0jBBgwFoAU5FS/Etvzhah6d8Es3YxHr6Tf3YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5 M2I3ZGE0NzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b8MA4E AgACMAgDBgAmAviOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC8wSbn7yGIENBFMzPQqmBQV8OhbflfKuwP VpU+CV7hzA9U0fUz/+tjy78vZIpAJOGdG4B/SYS48sIAlBbvneiPT53kLLKmsGI7 G8NkL6pzw9mJJUiku3ga8l5z5rn+eA3iPqKgfJnaUHotK0jZl0QUIWnCdz8JlKYG t/i1/RMpt6U7LYUf6Qdje+S8s4R47G+Fts4kJfP2nin9Fs1q+QRlln3wvMeCXHrA GeCsum8ZAMZlCOOFW1B7M/6thKn4MoL/UmgseAWdtS6vUk83UaVjsUP+5Q+erLwM thYg8RyQA+HX2FbclD8o3tmQ4KRq/BcEfdFEH6OmtxOybpUsY9lU -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:38 2026 by rpki-client