This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa File: 698d328a-2f41-3d33-9f83-c58dfe76a12e.roa (raw, json) Hash identifier: +kAAwAOjfk22efkANM1SRaRGOB5YRdAKef7jBw8ALG0= Subject key identifier: 2A:EF:F0:A0:CB:3B:78:43:CB:70:8F:A5:95:AA:E1:08:35:89:D8:EB Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584C5F70DF55987E62FB9C008380 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa Signing time: Wed 31 Dec 2025 19:43:51 +0000 ROA not before: Wed 31 Dec 2025 19:43:51 +0000 ROA not after: Tue 31 Mar 2026 18:43:51 +0000 asID: 62943 IP address blocks: 209.152.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5f:70:df:55:98:7e:62:fb:9c:00:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Dec 31 19:43:51 2025 GMT Not After : Mar 31 18:43:51 2026 GMT Subject: CN=c08db0f7-b6bf-4142-b61a-775571462d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:46:6e:01:6e:ae:22:59:1c:08:58:6a:4b: 04:31:fe:97:50:53:ed:ab:a8:b5:65:5f:7d:82:64: 5e:7e:b6:6d:95:2d:43:96:e4:2f:4e:be:e8:98:f6: e5:39:c3:43:37:36:04:b3:9f:73:0c:91:b6:fe:db: 35:c3:59:88:80:09:eb:39:29:fb:e1:f0:68:20:ec: 0d:dc:29:33:f3:17:5e:11:be:bf:fa:8f:a1:1e:f9: 9d:b0:30:5f:16:93:92:47:14:90:de:99:91:7a:13: 09:14:72:c1:af:40:f0:1c:58:48:36:70:ae:01:c4: cf:4c:7f:74:dc:2f:9e:f2:2e:d2:f3:2d:a5:82:7e: 75:b4:10:50:0a:8f:62:34:6e:ab:60:67:d8:c4:90: fb:eb:9a:e6:d2:b5:20:be:c7:c5:88:51:35:6c:28: 59:2c:2f:07:9f:3a:f6:0d:c0:b8:8e:ab:cc:63:a9: 81:a9:c6:dd:b7:ed:39:2c:2e:f1:fe:56:e2:9c:f9: 14:3d:1e:99:75:3d:e2:d9:3c:31:77:d3:30:98:22: d3:dd:ad:f7:10:ec:d8:ba:04:3b:5f:eb:00:dc:bb: a4:86:18:96:8e:fb:47:99:7c:50:d6:f2:a7:35:68: a6:73:ad:f0:ae:d2:62:a5:b1:5c:a0:d1:17:2c:5b: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EF:F0:A0:CB:3B:78:43:CB:70:8F:A5:95:AA:E1:08:35:89:D8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/698d328a-2f41-3d33-9f83-c58dfe76a12e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 209.152.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:70:b8:d3:1f:2e:e8:d9:00:c6:6c:e2:8c:64:7f:69:50:ba: 6c:1a:7f:aa:e0:c4:e7:81:cc:b4:a7:05:26:9d:8f:f7:8f:ed: 73:4b:bc:c6:f6:ad:eb:99:ec:ab:a1:bd:e6:c2:15:8e:b6:c4: c2:06:1b:1f:8b:af:57:e6:e0:21:16:5b:4c:0b:60:71:cb:a8: 39:32:7d:73:f5:cc:bb:55:9d:84:5c:a4:98:5e:9e:ec:c9:2e: 1b:05:3f:38:ae:1d:65:8c:54:11:89:97:fa:18:cd:d1:21:f3: 27:7f:73:d2:38:76:53:f4:ea:1a:33:09:1e:0d:e5:14:90:ba: 43:1f:e2:0e:86:5b:95:ac:e1:b5:76:6e:f3:f6:1b:3a:e4:66: 52:9e:dc:a7:88:ff:99:02:9e:95:3e:7e:62:50:c5:fd:e1:0f: d3:a9:26:65:7a:c1:ac:9a:09:ff:95:9f:96:49:4a:68:4e:cf: b0:de:1b:ca:d5:a9:4d:b4:9d:e1:3c:fa:c7:e1:b5:56:43:df: 8c:eb:ff:16:6b:d2:ba:b4:98:d6:d3:10:35:05:19:e6:a4:8e: 2b:e2:c9:78:57:67:73:3d:fa:40:74:d5:2a:8e:25:d6:1e:ff: 8e:31:d9:a2:7d:77:51:c1:6b:c6:46:08:0c:20:77:f4:e6:f7: c6:f2:07:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExfcN9VmH5i+5wAg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI1MTIzMTE5NDM1MVoXDTI2MDMzMTE4NDM1MVowLzEtMCsGA1UEAxMk YzA4ZGIwZjctYjZiZi00MTQyLWI2MWEtNzc1NTcxNDYyZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9RGbgFuriJZHAhYaksEMf6XUFPtq6i1ZV99 gmRefrZtlS1DluQvTr7omPblOcNDNzYEs59zDJG2/ts1w1mIgAnrOSn74fBoIOwN 3Ckz8xdeEb6/+o+hHvmdsDBfFpOSRxSQ3pmRehMJFHLBr0DwHFhINnCuAcTPTH90 3C+e8i7S8y2lgn51tBBQCo9iNG6rYGfYxJD765rm0rUgvsfFiFE1bChZLC8Hnzr2 DcC4jqvMY6mBqcbdt+05LC7x/lbinPkUPR6ZdT3i2Twxd9MwmCLT3a33EOzYugQ7 X+sA3LukhhiWjvtHmXxQ1vKnNWimc63wrtJipbFcoNEXLFsZ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrv8KDLO3hDy3CPpZWq4Qg1idjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvNjk4ZDMyOGEtMmY0MS0z ZDMzLTlmODMtYzU4ZGZlNzZhMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ZieMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpwuNMfLujZAMZs4oxkf2lQumwaf6rgxOeBzLSnBSadj/eP7XNLvMb2 reuZ7KuhvebCFY62xMIGGx+Lr1fm4CEWW0wLYHHLqDkyfXP1zLtVnYRcpJhenuzJ LhsFPziuHWWMVBGJl/oYzdEh8yd/c9I4dlP06hozCR4N5RSQukMf4g6GW5Ws4bV2 bvP2GzrkZlKe3KeI/5kCnpU+fmJQxf3hD9OpJmV6wayaCf+Vn5ZJSmhOz7DeG8rV qU20neE8+sfhtVZD34zr/xZr0rq0mNbTEDUFGeakjiviyXhXZ3M9+kB01SqOJdYe /44x2aJ9d1HBa8ZGCAwgd/Tm98byB/k= -----END CERTIFICATE-----Generated at Sun Jan 11 03:58:00 2026 by rpki-client