This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/2058c396-fd0c-3779-87f5-4393d277bbe6.roa File: 2058c396-fd0c-3779-87f5-4393d277bbe6.roa (raw, json) Hash identifier: +R390TS5og/gQjPdfgjLt4pIJfAoBFNuyEhl938FQpE= Subject key identifier: 19:CC:C4:22:89:5F:2E:39:C8:70:92:B9:4F:CD:BC:DD:D8:DA:80:36 Certificate issuer: /CN=a18440d8-10a3-4fa7-aaf1-413e6086a7f5 Certificate serial: 010D0C9F4328584C470BD7504814678A1673D9C0 Authority key identifier: BD:F3:FE:4F:4E:A9:7F:40:DA:37:8D:76:64:30:C4:E9:E2:BB:83:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/2058c396-fd0c-3779-87f5-4393d277bbe6.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 152918 IP address blocks: 23.146.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:d7:50:48:14:67:8a:16:73:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a18440d8-10a3-4fa7-aaf1-413e6086a7f5 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=adff5b01-4b74-4898-9040-da5e6a1bfe37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:c1:9e:8f:a5:3c:39:ce:df:ab:55:be:f2: 3b:3e:da:c9:e1:7d:ae:24:34:a4:13:29:5d:66:57: 82:0e:21:a7:92:16:d5:a5:8c:bf:b7:8b:18:b1:30: 07:10:c2:40:a4:4f:d9:ee:51:53:6e:69:13:d3:43: ae:1f:53:f9:13:b3:40:8f:2f:59:94:a5:56:4c:82: 6b:3a:cf:0a:d6:55:60:89:ac:8f:44:07:18:5f:40: 3f:f4:33:d5:76:4f:e7:31:24:1c:6d:14:77:60:fe: 97:5e:9f:d7:a9:22:2d:07:02:e8:16:d1:32:a0:2c: 2b:33:eb:35:44:d1:27:7a:9e:b0:39:e4:6d:af:bc: f2:89:c3:78:0d:f3:3d:01:d0:16:d6:46:e4:1f:f1: b3:b3:b3:f8:42:d6:a2:52:a3:6b:2c:61:a9:c5:b6: 43:ae:00:1c:06:56:04:a0:60:53:0c:c8:35:10:81: de:a6:f6:97:13:fd:46:ea:2f:cd:99:5e:e3:ed:a5: 36:bd:e3:84:20:a5:60:28:18:e6:04:f3:8b:3f:86: 5e:34:7c:34:eb:b4:0a:77:6e:f0:be:d6:a5:1d:3d: 56:dd:76:83:a9:41:b2:77:b0:ba:1e:e2:f4:32:4c: 70:07:51:b8:9b:fa:e1:ca:ac:23:38:c6:8a:58:b1: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:CC:C4:22:89:5F:2E:39:C8:70:92:B9:4F:CD:BC:DD:D8:DA:80:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/2058c396-fd0c-3779-87f5-4393d277bbe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.crl X509v3 Authority Key Identifier: keyid:BD:F3:FE:4F:4E:A9:7F:40:DA:37:8D:76:64:30:C4:E9:E2:BB:83:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a18440d8-10a3-4fa7-aaf1-413e6086a7f5.cer sbgp-ipAddrBlock: critical IPv4: 23.146.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:31:d2:85:65:1e:ab:d6:c8:a1:d8:c6:44:1d:d3:1f:2c:39: e1:23:01:81:54:fb:72:65:59:07:2f:fe:eb:77:be:c2:c6:99: fa:9b:7b:de:5f:c9:fe:7b:b9:f9:90:30:e4:e0:d3:07:75:c9: 29:38:95:12:8c:3d:90:d6:f9:a4:55:19:af:a3:bf:76:e1:84: 83:53:a1:44:79:15:39:67:83:b2:b2:cb:ee:33:35:70:1c:b7: 9f:9f:1d:9f:cb:11:4e:2d:4a:6a:67:64:6f:c1:cc:ce:1b:4a: 6a:77:4e:19:f6:cf:d1:c5:21:f4:f0:ea:b2:62:26:0c:06:fd: 62:8b:63:cf:41:0f:1a:04:1e:46:ac:37:ee:7c:4c:f3:b4:96: 1f:74:34:7b:44:30:97:bb:fe:6b:01:dd:7f:00:92:09:70:53: 7b:85:53:92:53:37:87:bd:e2:9c:53:68:28:6a:75:f4:be:f0: 8e:df:a9:04:b1:31:79:15:43:b0:46:b7:84:41:30:ef:2c:28: 54:1e:a3:0a:d2:d4:51:4c:63:29:e2:2f:25:c2:ee:45:09:07: 2b:b9:1f:71:75:e3:41:d2:50:9f:6e:10:55:76:94:7d:32:d5: 6c:4f:db:c2:ac:7c:4c:a2:ed:59:6a:e1:34:6b:06:cf:13:57: 1a:5b:32:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExHC9dQSBRnihZz2cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NDQwZDgtMTBhMy00ZmE3LWFhZjEtNDEzZTYwODZh N2Y1MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk YWRmZjViMDEtNGI3NC00ODk4LTkwNDAtZGE1ZTZhMWJmZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLHBno+lPDnO36tVvvI7PtrJ4X2uJDSkEyld ZleCDiGnkhbVpYy/t4sYsTAHEMJApE/Z7lFTbmkT00OuH1P5E7NAjy9ZlKVWTIJr Os8K1lVgiayPRAcYX0A/9DPVdk/nMSQcbRR3YP6XXp/XqSItBwLoFtEyoCwrM+s1 RNEnep6wOeRtr7zyicN4DfM9AdAW1kbkH/Gzs7P4QtaiUqNrLGGpxbZDrgAcBlYE oGBTDMg1EIHepvaXE/1G6i/NmV7j7aU2veOEIKVgKBjmBPOLP4ZeNHw067QKd27w vtalHT1W3XaDqUGyd7C6HuL0MkxwB1G4m/rhyqwjOMaKWLH4AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnMxCKJXy45yHCSuU/NvN3Y2oA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMTg0 NDBkOC0xMGEzLTRmYTctYWFmMS00MTNlNjA4NmE3ZjUvMjA1OGMzOTYtZmQwYy0z Nzc5LTg3ZjUtNDM5M2QyNzdiYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTE4NDQwZDgtMTBhMy00ZmE3LWFh ZjEtNDEzZTYwODZhN2Y1L2ExODQ0MGQ4LTEwYTMtNGZhNy1hYWYxLTQxM2U2MDg2 YTdmNS5jcmwwHwYDVR0jBBgwFoAUvfP+T06pf0DaN412ZDDE6eK7gy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMTg0NDBkOC0xMGEzLTRmYTctYWFmMS00MTNl NjA4NmE3ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5KcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKox0oVlHqvWyKHYxkQd0x8sOeEjAYFU+3JlWQcv/ut3vsLGmfqbe95f yf57ufmQMOTg0wd1ySk4lRKMPZDW+aRVGa+jv3bhhINToUR5FTlng7Kyy+4zNXAc t5+fHZ/LEU4tSmpnZG/BzM4bSmp3Thn2z9HFIfTw6rJiJgwG/WKLY89BDxoEHkas N+58TPO0lh90NHtEMJe7/msB3X8AkglwU3uFU5JTN4e94pxTaChqdfS+8I7fqQSx MXkVQ7BGt4RBMO8sKFQeowrS1FFMYyniLyXC7kUJByu5H3F140HSUJ9uEFV2lH0y 1WxP28KsfEyi7Vlq4TRrBs8TVxpbMiQ= -----END CERTIFICATE-----Generated at Fri Jan 9 18:10:05 2026 by rpki-client