This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa File: 0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa (raw, json) Hash identifier: LxhjyhVMCO6hbCpDeqJc1GNCaSLXKZvWCZiLahHeFSI= Subject key identifier: 12:A5:36:E8:9F:26:37:BA:C1:AF:F7:A9:79:CC:23:A9:2B:37:4E:3D Certificate issuer: /CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Certificate serial: 010D0C9F4328584C364BA454E1823AF3EAE0C340 Authority key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa Signing time: Wed 17 Dec 2025 02:00:31 +0000 ROA not before: Wed 17 Dec 2025 02:00:31 +0000 ROA not after: Tue 17 Mar 2026 01:00:31 +0000 asID: 25222 IP address blocks: 192.40.224.0/22 maxlen: 24 216.86.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:4b:a4:54:e1:82:3a:f3:ea:e0:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Validity Not Before: Dec 17 02:00:31 2025 GMT Not After : Mar 17 01:00:31 2026 GMT Subject: CN=0a8cdd40-4a6a-4091-9850-0094bf8d36d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:ab:50:3d:67:f2:fa:e3:38:e0:35:5b:b7: 72:f0:d8:09:b2:e8:86:34:8a:9b:cb:f2:18:fa:cc: 05:90:f9:cc:c7:98:19:5e:d2:46:f0:29:9a:ff:3a: 6d:39:f3:fb:ad:c7:85:87:47:62:4a:71:86:27:00: 61:07:58:95:a3:22:01:7c:7b:65:65:9f:23:80:25: ec:e8:07:19:03:9f:20:58:f5:b9:35:d9:69:1c:8e: 54:45:c9:2a:df:88:31:0f:d1:d5:23:32:62:dc:58: ae:c0:3f:7b:9b:dd:c7:51:84:75:30:79:11:ac:b0: 23:17:b8:ca:22:ec:07:89:0f:30:78:3f:44:16:62: 91:50:8c:c5:a3:af:78:04:45:c1:1b:cf:26:90:9c: ce:d8:cb:0b:7b:c6:f0:be:79:88:96:7b:38:00:e3: 29:a2:ea:36:3e:d6:ad:b2:c7:78:4b:3c:e7:59:73: 5b:b6:e3:cd:69:73:44:1f:70:b8:7d:6d:be:ff:7a: 90:19:90:df:08:9e:a2:ae:fa:67:d5:e4:88:d2:d1: a3:5b:96:c6:2b:1e:d1:01:2f:e2:79:a0:de:6a:d6: 65:7f:d5:4d:41:b1:5b:bb:1f:4b:c7:b8:eb:ce:ae: 02:fa:bc:51:90:8f:2c:3f:27:9f:bf:86:07:59:a0: 0d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A5:36:E8:9F:26:37:BA:C1:AF:F7:A9:79:CC:23:A9:2B:37:4E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/0a1c3907-f7d7-3691-8044-6f13e6d1cfbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.crl X509v3 Authority Key Identifier: keyid:5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer sbgp-ipAddrBlock: critical IPv4: 192.40.224.0/22 216.86.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e7:fd:77:18:05:94:7d:82:d1:59:e4:e3:b4:42:07:a7:16: 07:98:ae:06:06:72:08:5f:ac:6c:86:25:89:75:80:08:e0:e2: 30:40:bb:c9:2d:e9:d3:04:82:af:45:32:cd:fc:e9:d4:26:22: 23:98:54:21:5c:69:2e:ee:37:a7:0b:7e:2f:81:cc:a5:ec:65: 87:92:0a:35:43:de:cf:48:a4:ad:43:d9:d8:7a:35:f7:3c:1e: 5c:e1:d4:ce:ca:67:97:b2:f1:e7:ac:d1:ad:cc:80:9f:2b:a8: cc:02:74:f6:27:25:f8:b9:22:e5:69:19:70:57:6c:2c:93:18: 7b:7e:30:9a:89:79:c5:76:50:39:be:48:84:80:be:b6:2a:2c: ba:60:14:9d:60:2c:3a:b9:80:83:42:5e:2f:f8:42:cd:0d:27: ad:b5:95:f0:36:2e:d4:25:21:c7:31:df:93:9f:7a:be:08:12: e7:1e:c4:15:8d:d3:25:0a:b1:7a:f0:e8:76:d9:f1:d0:3b:84: 2b:fc:8c:05:17:46:0b:31:61:c8:43:82:3d:aa:89:e4:a8:50: bd:02:4f:5d:61:3d:27:ab:2b:67:8f:29:ca:ab:23:f8:ae:0e: 4a:9a:98:93:93:b2:fc:9a:2b:9f:cc:ec:7d:20:b7:24:18:20: e2:83:64:0d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEw2S6RU4YI68+rgw0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlk NWQ3MB4XDTI1MTIxNzAyMDAzMVoXDTI2MDMxNzAxMDAzMVowLzEtMCsGA1UEAxMk MGE4Y2RkNDAtNGE2YS00MDkxLTk4NTAtMDA5NGJmOGQzNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP2rUD1n8vrjOOA1W7dy8NgJsuiGNIqby/IY +swFkPnMx5gZXtJG8Cma/zptOfP7rceFh0diSnGGJwBhB1iVoyIBfHtlZZ8jgCXs 6AcZA58gWPW5NdlpHI5URckq34gxD9HVIzJi3FiuwD97m93HUYR1MHkRrLAjF7jK IuwHiQ8weD9EFmKRUIzFo694BEXBG88mkJzO2MsLe8bwvnmIlns4AOMpouo2Ptat ssd4SzznWXNbtuPNaXNEH3C4fW2+/3qQGZDfCJ6irvpn1eSI0tGjW5bGKx7RAS/i eaDeatZlf9VNQbFbux9Lx7jrzq4C+rxRkI8sPyefv4YHWaANgQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBKlNuifJje6wa/3qXnMI6krN049MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5 NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMGExYzM5MDctZjdkNy0z NjkxLTgwNDQtNmYxM2U2ZDFjZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWU3OTY1NTgtODJkNi00MWE1LWI4 ZWMtNWRmZGJkODlkNWQ3L2VlNzk2NTU4LTgyZDYtNDFhNS1iOGVjLTVkZmRiZDg5 ZDVkNy5jcmwwHwYDVR0jBBgwFoAUXKPtievnlv+HCDJGhWB6bKFGHdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZk YmQ4OWQ1ZDcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwCjgAwQE 2FbwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEjn/XcYBZR9gtFZ5OO0QgenFgeYrgYGcghfrGyGJYl1gAjg 4jBAu8kt6dMEgq9FMs386dQmIiOYVCFcaS7uN6cLfi+BzKXsZYeSCjVD3s9IpK1D 2dh6Nfc8Hlzh1M7KZ5ey8ees0a3MgJ8rqMwCdPYnJfi5IuVpGXBXbCyTGHt+MJqJ ecV2UDm+SISAvrYqLLpgFJ1gLDq5gINCXi/4Qs0NJ621lfA2LtQlIccx35Ofer4I EucexBWN0yUKsXrw6HbZ8dA7hCv8jAUXRgsxYchDgj2qieSoUL0CT11hPSerK2eP KcqrI/iuDkqamJOTsvyaK5/M7H0gtyQYIOKDZA0= -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:21 2025 by rpki-client