This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa File: fa861745-00da-3d9c-9262-192bcb50cab0.roa (raw, json) Hash identifier: chk0yDrCCSlQTMq9DGZQ+w6vHDwBAn34u26Y+S7Uqt0= Subject key identifier: 8B:F0:2C:68:E2:98:24:AB:9E:E7:3C:E3:3D:F3:89:B3:07:00:DD:35 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584C34E64D0E0D997E4AD5D80500 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 4213 IP address blocks: 209.151.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:4d:0e:0d:99:7e:4a:d5:d8:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=f2c28b19-5bac-480a-bb7e-d4d3dc124482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4c:09:7e:8d:6a:a8:9c:0f:0b:61:d9:a8:d4: 27:4e:43:90:4b:ab:85:29:99:d7:60:eb:23:4c:8b: cb:0d:5a:10:a5:25:f7:38:72:b0:57:55:1d:42:3d: 87:ec:49:65:27:59:b5:d8:c3:8d:60:f3:35:a3:2c: d9:91:48:a7:33:ab:77:93:ae:10:99:e8:61:2f:2e: a4:08:2d:7c:d6:de:73:db:af:f0:3f:8a:6c:8c:40: 30:98:88:3e:52:ee:c2:b6:76:ee:32:3d:b8:ce:d1: ee:79:05:bd:39:d4:3b:91:fd:9d:ab:07:5a:d7:48: bc:73:ec:7d:bb:9e:24:68:3c:e8:9b:da:67:7d:ce: ed:b0:dd:e0:8c:29:3d:9c:7d:ec:fa:11:8e:7b:bd: b2:17:97:05:47:ae:32:de:da:9d:ae:5f:14:91:09: f7:9d:f1:76:9c:da:5f:86:84:39:01:5f:20:b3:6a: f1:0e:cd:d4:6c:e0:f7:81:b6:c6:da:f0:d1:9b:08: 6d:99:a6:3d:98:0c:b1:8e:e4:00:1f:3d:a1:e8:2a: 0e:68:6f:59:c2:bc:e9:64:cb:41:35:8c:e2:ca:c2: 18:bd:9d:01:9c:ce:1a:45:79:db:9a:1e:99:00:f1: e0:11:65:b4:d8:2d:9a:fd:b2:68:82:8c:d5:8c:a9: 6f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F0:2C:68:E2:98:24:AB:9E:E7:3C:E3:3D:F3:89:B3:07:00:DD:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/fa861745-00da-3d9c-9262-192bcb50cab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 209.151.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:37:97:8c:76:74:65:15:22:91:05:ca:17:b2:46:d3:c3:33: cb:2c:de:21:a3:45:c2:c3:35:dd:1e:a1:aa:2d:cf:e0:b4:d3: 2f:a7:51:9f:a6:e0:3e:a1:f3:ea:9e:ac:a6:02:04:b8:49:fa: a5:db:11:25:b4:87:5e:37:e4:2e:e0:4c:5e:f6:a8:03:b7:b5: 40:82:ff:6b:fe:a4:f5:cc:ff:bc:9e:9e:f7:f5:df:a3:5e:db: 39:4a:e1:90:20:9b:00:b3:fc:5b:51:e4:c0:a7:24:53:dc:76: 35:c3:74:08:b7:3c:d4:0d:28:48:9b:1c:2f:ec:b6:ac:cb:d0: d9:23:fc:11:f7:d0:ec:a7:5e:63:84:45:90:f5:a7:f4:7e:9b: c4:30:d9:55:51:46:91:3a:39:f5:5a:5b:6b:98:71:7f:28:8c: 1f:a0:20:8a:56:df:d3:3b:eb:1b:40:67:94:75:50:dc:a7:45: 1f:23:0b:98:e7:95:27:56:f4:4b:00:d9:0d:00:eb:2c:9c:1a: 1a:69:c2:c1:86:91:da:d3:98:44:0e:db:ff:43:2f:a7:90:4f: 25:fd:67:8a:bf:09:2a:0e:55:48:99:7a:23:99:4a:f8:31:e9: 04:42:fd:46:33:64:fe:c4:95:dd:a5:73:4d:91:13:22:37:02: 36:b3:22:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05k0ODZl+StXYBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk ZjJjMjhiMTktNWJhYy00ODBhLWJiN2UtZDRkM2RjMTI0NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEwJfo1qqJwPC2HZqNQnTkOQS6uFKZnXYOsj TIvLDVoQpSX3OHKwV1UdQj2H7EllJ1m12MONYPM1oyzZkUinM6t3k64QmehhLy6k CC181t5z26/wP4psjEAwmIg+Uu7CtnbuMj24ztHueQW9OdQ7kf2dqwda10i8c+x9 u54kaDzom9pnfc7tsN3gjCk9nH3s+hGOe72yF5cFR64y3tqdrl8UkQn3nfF2nNpf hoQ5AV8gs2rxDs3UbOD3gbbG2vDRmwhtmaY9mAyxjuQAHz2h6CoOaG9ZwrzpZMtB NYziysIYvZ0BnM4aRXnbmh6ZAPHgEWW02C2a/bJogozVjKlv0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvwLGjimCSrnuc84z3zibMHAN01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvZmE4NjE3NDUtMDBkYS0z ZDljLTkyNjItMTkyYmNiNTBjYWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0ZfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE3l4x2dGUVIpEFyheyRtPDM8ss3iGjRcLDNd0eoaotz+C00y+nUZ+m 4D6h8+qerKYCBLhJ+qXbESW0h1435C7gTF72qAO3tUCC/2v+pPXM/7yenvf136Ne 2zlK4ZAgmwCz/FtR5MCnJFPcdjXDdAi3PNQNKEibHC/stqzL0Nkj/BH30OynXmOE RZD1p/R+m8Qw2VVRRpE6OfVaW2uYcX8ojB+gIIpW39M76xtAZ5R1UNynRR8jC5jn lSdW9EsA2Q0A6yycGhppwsGGkdrTmEQO2/9DL6eQTyX9Z4q/CSoOVUiZeiOZSvgx 6QRC/UYzZP7Eld2lc02REyI3AjazIuA= -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:27 2025 by rpki-client