This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa File: 9a8d9685-4393-3f04-898b-1b075a4b6c59.roa (raw, json) Hash identifier: NlVPe5r1RhwL+BOggjt9hG/dEaYlKqIBpJzV0lC+ILY= Subject key identifier: CE:FD:73:7C:87:88:C0:61:CA:EB:BB:E4:2C:3B:42:A7:91:8B:96:42 Certificate issuer: /CN=3a033ee1-5d03-497a-8120-3969593cdf7e Certificate serial: 010D0C9F4328584C34E64D244D8F41701CB27380 Authority key identifier: F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 21976 IP address blocks: 192.51.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:4d:24:4d:8f:41:70:1c:b2:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a033ee1-5d03-497a-8120-3969593cdf7e Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=bb88aa3e-3e03-4721-a778-133e96f91049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:14:16:ab:96:e8:6c:d1:d6:6c:f8:a8:06:82: f5:77:db:33:cf:77:3b:cc:55:c6:43:1d:c0:0b:6f: 77:66:b0:e2:a0:23:ca:62:51:01:dc:25:2c:83:25: 35:19:5a:73:c4:4e:96:f9:31:48:53:b9:64:aa:5a: 05:4b:f7:82:03:08:8d:07:60:18:ba:db:a4:9f:c3: 86:a7:ec:b6:ea:4d:19:1c:a6:e3:d5:4f:bc:df:41: 58:7c:21:ea:3e:94:42:d7:e2:36:36:db:1f:a0:16: 34:79:14:9f:b4:e7:51:ba:8b:ee:11:0c:87:72:cc: 6c:1b:62:77:aa:46:83:18:90:46:2b:81:86:c8:bb: 59:95:94:0d:ce:de:6a:ec:82:ea:ba:b8:46:f4:6c: bd:e8:55:ae:26:93:4e:cb:83:fd:33:e6:ac:86:df: b0:a8:79:24:6e:34:32:15:0c:19:97:a6:2b:97:41: 79:2d:a0:c5:1c:03:60:40:82:43:93:26:17:2f:14: 46:88:62:2f:e2:93:43:0e:ae:33:88:9f:1a:d2:82: cb:e5:4d:38:42:63:c3:8e:af:26:9b:6a:c8:4f:a6: 1e:e6:0f:7d:6a:3d:b5:33:74:30:d8:59:3c:9c:ab: d7:08:3a:48:fc:00:1a:30:d0:2f:9f:2d:4d:5f:23: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:73:7C:87:88:C0:61:CA:EB:BB:E4:2C:3B:42:A7:91:8B:96:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/9a8d9685-4393-3f04-898b-1b075a4b6c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e/3a033ee1-5d03-497a-8120-3969593cdf7e.crl X509v3 Authority Key Identifier: keyid:F8:10:57:08:22:D1:4D:24:0B:47:33:71:7E:77:77:21:75:97:18:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3a033ee1-5d03-497a-8120-3969593cdf7e.cer sbgp-ipAddrBlock: critical IPv4: 192.51.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:14:88:f2:0b:01:59:23:10:e2:c9:ec:fe:af:6e:6a:97:bb: 61:bb:0f:b8:fe:18:31:3f:e4:63:e3:76:19:d3:9f:50:30:ec: 5e:d8:14:3b:53:67:ef:98:79:dc:42:ac:89:68:b9:45:e7:c7: 7b:c8:73:bc:b4:4c:99:da:0f:9b:8a:00:02:df:c3:2f:7c:20: 28:7c:03:2d:27:da:6b:a7:ab:68:c8:8c:17:4f:14:0c:32:a0: 19:9b:bf:ef:36:97:16:95:ab:2e:82:89:6d:e8:56:98:6f:45: 06:d1:92:71:b8:3b:39:df:55:ac:38:c8:11:cd:a5:99:0a:89: 10:c6:53:72:db:b5:43:40:c3:a7:27:9c:b6:92:01:99:64:01: f2:c9:91:54:52:db:53:d1:60:be:13:80:08:1e:6a:b3:23:46: 0e:35:d6:4a:83:fd:ef:0d:e8:79:48:35:b3:64:ca:10:d4:01: 99:03:10:dc:8f:e2:7d:f7:4d:88:0d:ee:50:23:f9:e2:09:2b: e0:71:af:d2:9d:5d:61:58:ed:ed:74:c3:1c:51:ea:bc:ad:cc: 70:99:bc:b6:ef:67:63:9d:cd:2c:60:66:41:0c:a5:e7:af:8f: 7a:da:13:72:08:42:d1:9e:ae:e0:9f:75:c6:cf:74:b1:33:d0: e6:be:a8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05k0kTY9BcByyc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2EwMzNlZTEtNWQwMy00OTdhLTgxMjAtMzk2OTU5M2Nk ZjdlMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk YmI4OGFhM2UtM2UwMy00NzIxLWE3NzgtMTMzZTk2ZjkxMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxQWq5bobNHWbPioBoL1d9szz3c7zFXGQx3A C293ZrDioCPKYlEB3CUsgyU1GVpzxE6W+TFIU7lkqloFS/eCAwiNB2AYutukn8OG p+y26k0ZHKbj1U+830FYfCHqPpRC1+I2NtsfoBY0eRSftOdRuovuEQyHcsxsG2J3 qkaDGJBGK4GGyLtZlZQNzt5q7ILqurhG9Gy96FWuJpNOy4P9M+asht+wqHkkbjQy FQwZl6Yrl0F5LaDFHANgQIJDkyYXLxRGiGIv4pNDDq4ziJ8a0oLL5U04QmPDjq8m m2rIT6Ye5g99aj21M3Qw2Fk8nKvXCDpI/AAaMNAvny1NXyMqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM79c3yHiMBhyuu75Cw7QqeRi5ZCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYTAz M2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5NTkzY2RmN2UvOWE4ZDk2ODUtNDM5My0z ZjA0LTg5OGItMWIwNzVhNGI2YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2EwMzNlZTEtNWQwMy00OTdhLTgx MjAtMzk2OTU5M2NkZjdlLzNhMDMzZWUxLTVkMDMtNDk3YS04MTIwLTM5Njk1OTNj ZGY3ZS5jcmwwHwYDVR0jBBgwFoAU+BBXCCLRTSQLRzNxfnd3IXWXGAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zYTAzM2VlMS01ZDAzLTQ5N2EtODEyMC0zOTY5 NTkzY2RmN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUUiPILAVkjEOLJ7P6vbmqXu2G7D7j+GDE/5GPjdhnTn1Aw7F7YFDtT Z++YedxCrIlouUXnx3vIc7y0TJnaD5uKAALfwy98ICh8Ay0n2munq2jIjBdPFAwy oBmbv+82lxaVqy6CiW3oVphvRQbRknG4OznfVaw4yBHNpZkKiRDGU3LbtUNAw6cn nLaSAZlkAfLJkVRS21PRYL4TgAgearMjRg411kqD/e8N6HlINbNkyhDUAZkDENyP 4n33TYgN7lAj+eIJK+Bxr9KdXWFY7e10wxxR6rytzHCZvLbvZ2OdzSxgZkEMpeev j3raE3IIQtGeruCfdcbPdLEz0Oa+qKA= -----END CERTIFICATE-----Generated at Sat Dec 20 22:13:30 2025 by rpki-client