This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa File: 2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa (raw, json) Hash identifier: HAI4arcqZbMrD+KyY7sQ4QitxEpkJ7pQd1rXeYhK+FA= Subject key identifier: C1:C1:52:89:9F:E3:AD:A1:30:87:9B:2D:D7:77:0F:42:E2:66:36:1D Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf Certificate serial: 010D0C9F4328584C215B9A55C88C2527B1E004A0 Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 14618 IP address blocks: 192.161.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:9a:55:c8:8c:25:27:b1:e0:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=5f77daf5-88b5-45e8-adbd-668476f5be1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e4:a5:16:e2:26:d2:9c:1d:db:77:62:85:6d: 2e:7c:b2:81:40:dc:ce:1f:15:bc:02:c6:ce:4b:5b: ce:3e:b7:a0:1b:61:6e:0f:0d:2f:1a:2d:72:d3:5a: 5c:ae:65:ca:19:9f:2e:2b:87:d9:99:42:47:85:9c: 7d:24:19:7b:86:22:c6:6a:a5:d3:cd:df:98:2b:7b: ad:5d:3c:54:3a:cf:62:2b:4e:5c:06:de:6f:21:7f: 1c:e4:16:e3:42:61:80:be:df:7e:70:53:7a:1a:b0: b2:01:6f:3b:38:52:6f:47:69:e8:33:f6:d4:e6:7c: 3a:f9:1f:a6:13:49:75:c9:6f:9a:7e:bf:94:fc:f7: 44:4d:52:b9:d8:1e:ea:5a:1b:47:a6:0d:b0:ff:fd: 94:06:82:e3:2c:df:45:65:c0:79:fb:0b:3c:2e:01: 92:75:17:e5:57:b7:30:8f:a0:7c:85:d9:a0:a5:0d: 2a:23:cb:75:8a:85:01:43:06:a5:a5:39:67:2b:c6: 44:3d:d5:5a:cc:9a:c0:19:cc:c0:cf:1d:05:9d:36: 32:29:4a:18:52:17:48:56:f2:b5:68:48:7e:28:14: 2d:33:d5:b6:e8:73:67:d5:85:47:01:f8:70:90:12: 4e:70:45:86:e2:87:1f:b8:79:51:fb:b6:d0:d3:59: 6a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C1:52:89:9F:E3:AD:A1:30:87:9B:2D:D7:77:0F:42:E2:66:36:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2590afa5-22aa-3adc-92a6-2dc4e6df1ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl X509v3 Authority Key Identifier: keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer sbgp-ipAddrBlock: critical IPv4: 192.161.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:85:dd:64:8d:79:84:ae:36:e8:35:cb:73:7a:25:dd:8b:31: 5f:43:f3:b5:71:69:62:62:17:27:07:f9:a5:dc:e6:5d:80:98: f4:4f:95:bd:66:d5:e9:ee:31:fc:29:a4:4f:05:47:3c:75:23: 44:83:77:78:26:f4:d6:aa:56:3f:23:b1:32:9c:1e:f0:92:b6: a1:ef:c2:cf:04:5d:4b:04:16:86:0b:20:1d:69:78:65:b4:56: 5d:e7:a9:53:ba:10:57:16:ab:bd:61:c1:9c:f5:97:c2:ea:4a: db:2f:47:4e:63:01:70:2c:34:09:7a:1e:df:8e:ac:b4:5b:aa: 46:43:43:99:50:92:a9:43:08:28:9e:f4:5f:57:1b:07:56:2d: c5:0b:f0:50:66:2a:5d:2c:fe:37:e5:33:8a:fa:9f:e1:39:e3: 33:50:dc:b2:0f:58:b6:a8:42:f2:61:e7:cd:5c:11:a7:ae:d2: 36:3b:c9:b1:94:87:90:27:39:44:88:40:7f:a3:b9:6c:1a:52: 0c:f8:7c:15:5e:04:59:53:05:81:47:e0:52:8b:80:5b:b5:2d: c9:21:63:c5:cf:70:20:f7:a2:0f:4f:ef:10:4d:84:a3:41:27: 4f:83:e7:1d:50:c5:0d:49:0d:ef:b9:61:6c:b4:a7:e6:82:d1: 24:d9:7f:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5pVyIwlJ7HgBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5 MGNmMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk NWY3N2RhZjUtODhiNS00NWU4LWFkYmQtNjY4NDc2ZjViZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeSlFuIm0pwd23dihW0ufLKBQNzOHxW8AsbO S1vOPregG2FuDw0vGi1y01pcrmXKGZ8uK4fZmUJHhZx9JBl7hiLGaqXTzd+YK3ut XTxUOs9iK05cBt5vIX8c5BbjQmGAvt9+cFN6GrCyAW87OFJvR2noM/bU5nw6+R+m E0l1yW+afr+U/PdETVK52B7qWhtHpg2w//2UBoLjLN9FZcB5+ws8LgGSdRflV7cw j6B8hdmgpQ0qI8t1ioUBQwalpTlnK8ZEPdVazJrAGczAzx0FnTYyKUoYUhdIVvK1 aEh+KBQtM9W26HNn1YVHAfhwkBJOcEWG4ocfuHlR+7bQ01lq+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHBUomf462hMIebLdd3D0LiZjYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvMjU5MGFmYTUtMjJhYS0z YWRjLTkyYTYtMmRjNGU2ZGYxY2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0 OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4 NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiF3WSNeYSuNug1y3N6Jd2LMV9D87VxaWJiFycH+aXc5l2AmPRPlb1m 1enuMfwppE8FRzx1I0SDd3gm9NaqVj8jsTKcHvCStqHvws8EXUsEFoYLIB1peGW0 Vl3nqVO6EFcWq71hwZz1l8LqStsvR05jAXAsNAl6Ht+OrLRbqkZDQ5lQkqlDCCie 9F9XGwdWLcUL8FBmKl0s/jflM4r6n+E54zNQ3LIPWLaoQvJh581cEaeu0jY7ybGU h5AnOUSIQH+juWwaUgz4fBVeBFlTBYFH4FKLgFu1LckhY8XPcCD3og9P7xBNhKNB J0+D5x1QxQ1JDe+5YWy0p+aC0STZf9U= -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:38 2025 by rpki-client