This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa File: faa2ef74-f3ac-358c-9428-0eb061b7e349.roa (raw, json) Hash identifier: v8jdGpzp5T9hZJ3u1vsFqZMWYLI2h1mVYxSx9lasYO0= Subject key identifier: 88:37:A5:6D:D9:01:8F:8E:E0:E4:EE:89:65:CC:3B:3E:9E:D4:FF:26 Certificate issuer: /CN=1a319486-03d5-4fb1-997e-228350330847 Certificate serial: 010D0C9F4328584C24265413EA0D0ABEDF5499C0 Authority key identifier: A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 46983 IP address blocks: 23.157.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:54:13:ea:0d:0a:be:df:54:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a319486-03d5-4fb1-997e-228350330847 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=c3e68aa7-bded-4281-9d0a-dd07a3a2db8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:17:6a:32:d4:31:e8:ee:4f:55:eb:e1:84: 96:9e:d7:cb:56:bd:9b:1d:ef:17:d0:13:5f:65:e3: ae:9a:23:1b:63:ee:4f:04:8d:d4:23:db:c5:f0:33: 26:c4:9b:b0:3a:21:61:a4:14:e8:83:16:db:96:4d: 01:cc:1b:8b:32:ee:dd:32:67:9b:75:09:b7:49:ff: d3:17:fb:4d:b8:8e:2e:14:d4:fb:c5:c8:bf:2e:66: 76:ea:10:f5:ab:fd:e0:8f:b1:90:62:60:5d:ff:98: c6:44:9c:f4:a5:30:67:5a:73:0f:ba:68:f7:3f:61: bc:f4:a1:d3:80:86:63:1d:44:61:b0:17:14:51:d0: eb:69:a2:38:d6:5c:6d:3f:4a:36:93:d8:75:5f:a7: 25:15:88:4d:c8:c7:c7:5d:68:ed:23:da:82:76:f0: 9d:1a:1e:93:de:94:e7:75:65:81:22:d2:6c:de:f2: ef:b3:7b:ee:5c:e0:2d:54:52:37:58:a0:6d:29:b3: 2d:52:14:5b:da:13:6a:6e:4f:bb:6b:01:6a:04:f0: e9:f7:d4:1e:a8:f1:78:51:1f:81:b8:2d:66:d3:70: 7e:92:b1:f3:6b:55:02:6a:77:b2:e0:8f:c9:38:a8: 00:90:ba:d4:15:e3:6e:7f:70:13:b8:b0:c7:70:1e: 29:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:37:A5:6D:D9:01:8F:8E:E0:E4:EE:89:65:CC:3B:3E:9E:D4:FF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/faa2ef74-f3ac-358c-9428-0eb061b7e349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847/1a319486-03d5-4fb1-997e-228350330847.crl X509v3 Authority Key Identifier: keyid:A2:3A:14:63:64:B3:CB:CF:FC:80:6A:4F:EB:85:F1:97:70:1D:C6:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a319486-03d5-4fb1-997e-228350330847.cer sbgp-ipAddrBlock: critical IPv4: 23.157.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:59:73:0c:83:30:8d:f2:de:5b:48:b8:4d:91:cb:9b:2c:88: df:44:21:8d:07:96:ff:f4:1c:e5:e1:86:27:78:ca:cd:62:a4: a4:fc:1d:bb:3b:96:63:be:90:a0:a5:1e:e0:04:b5:9e:aa:95: 4a:98:fd:85:3d:7f:2a:c8:aa:a3:72:8f:08:8b:d9:11:7c:09: 7e:24:71:0d:3d:8e:27:6b:3a:eb:79:60:e7:57:c7:a5:b8:e8: 95:8c:87:cf:86:aa:bd:9e:47:9b:f3:3a:dd:9c:fb:04:70:c8: a2:8b:05:5c:b6:44:7b:3a:16:13:1a:e6:87:38:7a:f6:ef:ba: 78:90:b6:e9:11:b7:ac:49:15:f8:a9:c9:9d:15:0d:3a:77:3d: e1:b5:e6:51:4b:f5:81:39:e8:18:c6:4a:5e:72:0c:a6:9e:fd: 03:fc:ef:ae:e4:61:6a:79:f3:15:e0:1f:87:df:78:2d:a0:f9: bc:7b:5e:1d:26:5c:c3:e4:63:0d:7a:f4:20:94:65:34:ab:f9: ca:55:d7:60:48:64:51:65:8f:7f:4a:15:58:b2:29:05:78:2c: 75:de:c8:2c:3a:7a:2c:90:ae:4a:f3:c3:2a:70:0d:cf:38:dd: ba:b4:2a:b6:56:85:e4:e3:ce:93:1d:10:4b:ed:8b:ff:6f:72: db:39:76:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJlQT6g0Kvt9UmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWEzMTk0ODYtMDNkNS00ZmIxLTk5N2UtMjI4MzUwMzMw ODQ3MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk YzNlNjhhYTctYmRlZC00MjgxLTlkMGEtZGQwN2EzYTJkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPMXajLUMejuT1Xr4YSWntfLVr2bHe8X0BNf ZeOumiMbY+5PBI3UI9vF8DMmxJuwOiFhpBTogxbblk0BzBuLMu7dMmebdQm3Sf/T F/tNuI4uFNT7xci/LmZ26hD1q/3gj7GQYmBd/5jGRJz0pTBnWnMPumj3P2G89KHT gIZjHURhsBcUUdDraaI41lxtP0o2k9h1X6clFYhNyMfHXWjtI9qCdvCdGh6T3pTn dWWBItJs3vLvs3vuXOAtVFI3WKBtKbMtUhRb2hNqbk+7awFqBPDp99QeqPF4UR+B uC1m03B+krHza1UCaney4I/JOKgAkLrUFeNuf3ATuLDHcB4p9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIg3pW3ZAY+O4OTuiWXMOz6e1P8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMx OTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgzNTAzMzA4NDcvZmFhMmVmNzQtZjNhYy0z NThjLTk0MjgtMGViMDYxYjdlMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWEzMTk0ODYtMDNkNS00ZmIxLTk5 N2UtMjI4MzUwMzMwODQ3LzFhMzE5NDg2LTAzZDUtNGZiMS05OTdlLTIyODM1MDMz MDg0Ny5jcmwwHwYDVR0jBBgwFoAUojoUY2Szy8/8gGpP64Xxl3Adxp0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xYTMxOTQ4Ni0wM2Q1LTRmYjEtOTk3ZS0yMjgz NTAzMzA4NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlZcwyDMI3y3ltIuE2Ry5ssiN9EIY0Hlv/0HOXhhid4ys1ipKT8Hbs7 lmO+kKClHuAEtZ6qlUqY/YU9fyrIqqNyjwiL2RF8CX4kcQ09jidrOut5YOdXx6W4 6JWMh8+Gqr2eR5vzOt2c+wRwyKKLBVy2RHs6FhMa5oc4evbvuniQtukRt6xJFfip yZ0VDTp3PeG15lFL9YE56BjGSl5yDKae/QP8767kYWp58xXgH4ffeC2g+bx7Xh0m XMPkYw169CCUZTSr+cpV12BIZFFlj39KFViyKQV4LHXeyCw6eiyQrkrzwypwDc84 3bq0KrZWheTjzpMdEEvti/9vcts5dj4= -----END CERTIFICATE-----Generated at Mon Dec 22 23:28:20 2025 by rpki-client