This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa File: bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa (raw, json) Hash identifier: 6N/X76aaS8Yf4JGpaHRsHEW6oHD7mxpFYpWsZPqCCVk= Subject key identifier: 17:F1:A7:B5:F6:C1:49:C1:61:D4:E7:81:61:BC:E5:C9:C4:81:7C:AE Certificate issuer: /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Certificate serial: 010D0C9F4328584C48712C941C77359EF2FF3FC0 Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 28931 IP address blocks: 199.201.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:2c:94:1c:77:35:9e:f2:ff:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=b6f3fd8e-ad8d-4fc7-81b0-8f1c51229324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:61:6f:8d:49:b8:9f:a0:40:97:4a:a0:8d:00: 53:f3:fd:2a:cd:e8:98:40:cc:41:e0:7b:b5:4d:3c: 1e:ed:4d:78:46:b1:97:c6:29:f2:ce:ac:51:12:a5: ef:fa:1c:62:f6:6b:3a:b1:30:94:5d:f9:b9:08:b6: a0:44:77:a9:77:af:2c:bb:df:9e:1a:7e:55:42:8b: 28:f6:54:7e:21:d8:90:ed:a5:ad:57:f9:2b:d5:27: 2c:70:0b:d9:4e:56:08:e2:72:c7:10:81:6a:ae:b1: c7:78:a8:16:18:e0:ec:98:85:08:1e:27:ad:7b:e1: 5c:48:02:44:bc:97:80:ca:bd:f0:d1:7b:04:de:32: 32:cc:81:47:20:2c:73:ac:16:6c:3a:09:f5:37:0d: 6d:0e:1e:11:cd:db:18:9d:28:33:95:cd:c5:98:62: ab:34:d6:c0:dd:23:41:c1:f4:e4:85:d5:31:e8:26: 09:bd:e9:bf:27:ef:4d:b1:c7:d6:c3:f4:27:7a:ff: f1:a2:ed:75:42:dd:43:36:3d:12:cd:e1:2d:f2:36: f4:44:5d:6b:36:1f:a3:1c:d7:e7:ad:1a:bc:73:42: b2:dd:1b:f9:4b:b4:25:ea:a3:4b:77:18:fe:2b:07: ae:fc:3a:74:2f:60:b8:d2:31:41:f5:33:a4:a9:de: 94:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F1:A7:B5:F6:C1:49:C1:61:D4:E7:81:61:BC:E5:C9:C4:81:7C:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/bff59b2a-b7e8-33f0-8d55-72a1869e139e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl X509v3 Authority Key Identifier: keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer sbgp-ipAddrBlock: critical IPv4: 199.201.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:90:e6:28:e3:06:21:ac:c7:42:71:23:49:81:5e:e8:ed:53: ac:e4:94:d0:b9:c5:ab:56:bf:5e:39:3f:dc:94:20:b4:6d:94: 0b:b2:b7:12:52:de:b9:c7:f3:34:96:44:9b:31:51:0c:ca:45: b9:82:c7:98:b6:25:09:7b:8e:59:ef:53:9f:bc:ab:32:bc:2a: 99:30:b6:b5:1e:49:9b:c1:65:77:dd:c0:40:d3:99:4a:e2:17: 24:c1:d0:c7:af:25:c0:83:55:0e:0a:75:f6:da:5f:3c:d6:0b: 2b:12:55:f8:2e:e1:ec:c5:5e:10:e2:61:bb:f2:37:73:c1:18: bf:2f:ea:3f:85:97:85:d2:55:2f:3e:69:cc:67:4c:8b:bf:1d: e0:7f:db:79:0b:bd:9a:0c:98:0b:fa:c7:43:c6:0a:27:2f:76: e1:1f:e6:83:78:63:95:c9:d3:df:8d:d6:21:8e:ff:4e:41:c5: 98:39:5d:00:57:1b:2c:4f:3f:af:dd:0e:ed:ec:87:52:b4:ce: 60:95:b8:d1:43:3c:44:fc:3c:67:70:97:14:7b:f9:e4:a1:29: 4d:bc:2a:0a:4c:6f:c3:b1:7b:aa:db:e0:fb:c9:ed:5f:ca:23: af:8a:aa:b0:db:84:e4:1a:cc:99:d6:1e:56:43:30:cb:cb:d4: 55:9a:e0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcSyUHHc1nvL/P8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy YWEyMB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk YjZmM2ZkOGUtYWQ4ZC00ZmM3LTgxYjAtOGYxYzUxMjI5MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGFvjUm4n6BAl0qgjQBT8/0qzeiYQMxB4Hu1 TTwe7U14RrGXxinyzqxREqXv+hxi9ms6sTCUXfm5CLagRHepd68su9+eGn5VQoso 9lR+IdiQ7aWtV/kr1ScscAvZTlYI4nLHEIFqrrHHeKgWGODsmIUIHiete+FcSAJE vJeAyr3w0XsE3jIyzIFHICxzrBZsOgn1Nw1tDh4RzdsYnSgzlc3FmGKrNNbA3SNB wfTkhdUx6CYJvem/J+9NscfWw/Qnev/xou11Qt1DNj0SzeEt8jb0RF1rNh+jHNfn rRq8c0Ky3Rv5S7Ql6qNLdxj+Kweu/Dp0L2C40jFB9TOkqd6U1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfxp7X2wUnBYdTngWG85cnEgXyuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvYmZmNTliMmEtYjdlOC0z M2YwLThkNTUtNzJhMTg2OWUxMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1 OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0 MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4 ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGQ5ijjBiGsx0JxI0mBXujtU6zklNC5xatWv145P9yUILRtlAuytxJS 3rnH8zSWRJsxUQzKRbmCx5i2JQl7jlnvU5+8qzK8KpkwtrUeSZvBZXfdwEDTmUri FyTB0MevJcCDVQ4KdfbaXzzWCysSVfgu4ezFXhDiYbvyN3PBGL8v6j+Fl4XSVS8+ acxnTIu/HeB/23kLvZoMmAv6x0PGCicvduEf5oN4Y5XJ09+N1iGO/05BxZg5XQBX GyxPP6/dDu3sh1K0zmCVuNFDPET8PGdwlxR7+eShKU28KgpMb8Oxe6rb4PvJ7V/K I6+KqrDbhOQazJnWHlZDMMvL1FWa4D0= -----END CERTIFICATE-----Generated at Wed Dec 24 18:12:41 2025 by rpki-client