This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa File: 440c4003-c877-35d5-8850-db2208d28191.roa (raw, json) Hash identifier: +ESEbyGsXOqYKEZHVMEPaxmI0pvZXnkN8BGW5DgBwyU= Subject key identifier: FC:4C:59:DB:F8:12:B1:33:6D:7A:46:EB:12:79:28:05:43:70:39:66 Certificate issuer: /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Certificate serial: 010D0C9F4328584C34E67A106A721ED1DBB200C0 Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 400202 IP address blocks: 170.39.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:7a:10:6a:72:1e:d1:db:b2:00:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=23ed8c1a-6f5b-420f-80c8-9b374cde1ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:d9:b5:f5:74:ab:06:b8:08:35:82:cf:c2: d6:42:d2:28:3a:91:6e:df:66:5c:30:13:b5:97:48: d4:be:ff:aa:6f:f2:f1:76:e3:7e:e0:6c:0a:b0:53: c2:85:e7:4d:66:19:2a:44:9a:ac:ce:8a:bb:65:2b: f9:52:f5:6d:50:2a:c2:c4:bc:10:8f:3e:66:7d:ff: 47:a2:ce:8c:ab:66:ff:01:b2:01:8f:4b:65:07:f6: 57:af:6d:e0:6f:88:83:50:d7:de:02:e3:7d:e1:a2: cf:4f:98:e4:94:70:ce:f8:9a:83:65:82:5c:d0:c5: cd:58:4d:bc:ab:99:84:a8:00:a7:bd:22:ba:66:26: 7d:0c:02:a0:ae:90:b4:e7:54:b0:18:30:c6:da:fa: 24:fe:12:24:a9:4e:0b:be:73:d6:31:36:7d:38:1d: 26:00:98:6a:23:ca:44:65:0a:be:4f:32:3a:82:56: 51:a4:83:cc:bb:c0:8b:a4:58:7c:08:f7:55:b7:5c: 7b:c6:88:b7:5a:87:ac:49:bb:8b:ef:09:2c:17:8f: 78:1a:6d:92:26:55:ac:c6:de:2c:5d:ea:0c:65:5e: da:b4:55:8a:75:eb:26:90:3d:7e:e4:4a:77:2b:73: ca:4f:2f:f3:ab:71:57:13:6f:0f:6f:d0:df:09:93: 37:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:4C:59:DB:F8:12:B1:33:6D:7A:46:EB:12:79:28:05:43:70:39:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl X509v3 Authority Key Identifier: keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer sbgp-ipAddrBlock: critical IPv4: 170.39.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:23:f9:99:53:bb:65:b3:18:aa:de:93:d3:81:32:d7:27:72: bd:ba:7a:e9:52:34:a4:9f:2d:19:b1:25:ea:6d:44:08:66:c8: 7a:7e:57:84:2f:63:25:42:f3:f8:c5:8e:8d:ff:d5:af:5c:b8: f2:4f:85:4e:09:ab:2c:d8:0e:5c:45:4c:74:52:3f:27:19:01: b3:f2:14:3e:df:6d:7b:4e:34:6a:1e:44:ab:ba:92:c3:96:ff: a8:00:ee:80:78:a0:5f:fd:be:f5:79:7a:ed:1c:d2:c7:b9:b0: 16:63:d1:22:8d:a2:b4:8f:19:7f:e8:f7:bf:fe:81:49:82:01: 83:23:08:bd:4d:f4:ab:b1:99:f7:3b:41:26:3c:31:b7:cc:6e: 4a:5e:51:c7:e2:94:c6:e3:ac:83:29:cc:d1:24:1a:0a:e4:be: a2:7b:54:8d:83:90:5e:e1:98:a8:cc:6b:9b:eb:dd:71:44:a6: 09:02:57:75:0b:a8:42:d2:24:c4:a7:de:15:7f:73:47:a6:00: bd:2d:82:c5:42:43:03:19:47:9d:14:00:fa:70:4b:29:1a:41: 1f:98:b6:9d:cf:15:b0:f1:d6:1c:d2:f2:f4:60:78:6b:71:96: e0:b0:5e:7d:bc:ba:60:58:18:ac:51:13:fa:e0:5a:30:d8:92: b0:88:bb:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05noQanIe0duyAMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjZDFjYzUtZWQzZS00ZjllLTgxMjktOWQ0ODgzYzBh N2FlMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk MjNlZDhjMWEtNmY1Yi00MjBmLTgwYzgtOWIzNzRjZGUxZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUzZtfV0qwa4CDWCz8LWQtIoOpFu32ZcMBO1 l0jUvv+qb/LxduN+4GwKsFPChedNZhkqRJqszoq7ZSv5UvVtUCrCxLwQjz5mff9H os6Mq2b/AbIBj0tlB/ZXr23gb4iDUNfeAuN94aLPT5jklHDO+JqDZYJc0MXNWE28 q5mEqACnvSK6ZiZ9DAKgrpC051SwGDDG2vok/hIkqU4LvnPWMTZ9OB0mAJhqI8pE ZQq+TzI6glZRpIPMu8CLpFh8CPdVt1x7xoi3WoesSbuL7wksF494Gm2SJlWsxt4s XeoMZV7atFWKdesmkD1+5Ep3K3PKTy/zq3FXE28Pb9DfCZM3iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxMWdv4ErEzbXpG6xJ5KAVDcDlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNk MWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4ODNjMGE3YWUvNDQwYzQwMDMtYzg3Ny0z NWQ1LTg4NTAtZGIyMjA4ZDI4MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWFjZDFjYzUtZWQzZS00ZjllLTgx MjktOWQ0ODgzYzBhN2FlL2FhY2QxY2M1LWVkM2UtNGY5ZS04MTI5LTlkNDg4M2Mw YTdhZS5jcmwwHwYDVR0jBBgwFoAUXy5MbZ2JsVhvEqmOhYq6stgeakkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNkMWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4 ODNjMGE3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqifsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkj+ZlTu2WzGKrek9OBMtcncr26eulSNKSfLRmxJeptRAhmyHp+V4Qv YyVC8/jFjo3/1a9cuPJPhU4JqyzYDlxFTHRSPycZAbPyFD7fbXtONGoeRKu6ksOW /6gA7oB4oF/9vvV5eu0c0se5sBZj0SKNorSPGX/o97/+gUmCAYMjCL1N9Kuxmfc7 QSY8MbfMbkpeUcfilMbjrIMpzNEkGgrkvqJ7VI2DkF7hmKjMa5vr3XFEpgkCV3UL qELSJMSn3hV/c0emAL0tgsVCQwMZR50UAPpwSykaQR+Ytp3PFbDx1hzS8vRgeGtx luCwXn28umBYGKxRE/rgWjDYkrCIuy4= -----END CERTIFICATE-----Generated at Sun Dec 21 14:39:21 2025 by rpki-client