This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa File: 3a5025bf-ee37-315a-a197-68996a369c6a.roa (raw, json) Hash identifier: bmepONaE92AOZip0ZvKT8qmO6YGgAW0ZA0lI1F3HIh0= Subject key identifier: 28:19:59:F4:8D:FD:89:0F:F3:46:27:09:48:40:5E:D4:B7:AE:59:91 Certificate issuer: /CN=24b82191-9eab-4780-afd2-8d7640123b59 Certificate serial: 010D0C9F4328584C391658C623A82D8DD5E1A280 Authority key identifier: AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 54714 IP address blocks: 172.83.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:58:c6:23:a8:2d:8d:d5:e1:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24b82191-9eab-4780-afd2-8d7640123b59 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=1b7df82e-cf88-496f-b80c-ca90698a93cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:cd:ab:d6:c0:e5:f8:d0:8b:8f:d7:79:f4: f4:4e:88:f0:d9:11:15:2c:f0:0d:8f:49:e5:ef:97: 89:bb:40:aa:52:33:3a:c1:1c:19:6e:6b:0d:41:25: 3f:01:4f:0f:41:c4:6a:40:60:b3:7d:eb:d2:37:28: 13:58:fc:48:cc:c9:b3:16:d3:a6:ea:f6:c9:74:92: 7c:fb:d8:25:b8:88:ce:a5:cd:30:60:eb:39:13:26: 27:37:3e:af:16:6b:44:27:bb:2e:62:5e:c4:df:3d: 05:ec:84:2e:55:ee:4b:2b:a2:5a:4e:98:cd:88:c5: 0a:64:6e:0c:f0:f6:ef:bc:b4:98:cd:1a:54:41:28: 58:56:8c:2a:bf:98:c2:2a:0e:5c:7c:64:15:d2:b3: ce:d3:12:a3:f9:e7:16:dc:d7:13:a7:a2:50:c9:cf: 61:86:a2:92:5c:71:b1:a1:3d:00:f0:88:59:dc:b9: 9e:2c:19:79:a6:e8:d4:fe:53:2d:d2:1a:bd:9e:67: 2c:1e:de:63:82:bf:3f:25:0a:fc:37:a6:ef:ec:87: 64:39:33:f0:c3:93:f2:39:ff:ea:5d:28:1f:83:8d: 29:8a:f9:2e:60:f3:c5:d0:04:90:5b:82:75:df:dd: f3:b4:db:a7:df:4c:b1:12:09:be:11:c9:fd:18:43: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:59:F4:8D:FD:89:0F:F3:46:27:09:48:40:5E:D4:B7:AE:59:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/3a5025bf-ee37-315a-a197-68996a369c6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59/24b82191-9eab-4780-afd2-8d7640123b59.crl X509v3 Authority Key Identifier: keyid:AF:7B:56:6B:03:E4:B9:A5:9A:F5:A6:82:3B:9E:58:80:60:B5:12:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/24b82191-9eab-4780-afd2-8d7640123b59.cer sbgp-ipAddrBlock: critical IPv4: 172.83.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:3c:8e:93:b8:97:80:a6:94:79:4d:dc:f2:22:4a:50:0a:b2: 40:1b:66:ee:8a:cd:1d:20:05:9a:a3:8a:c7:fa:d4:fa:01:f4: 66:ae:43:48:5f:9c:f3:57:2d:fe:84:3e:1e:0f:ab:b7:37:42: cc:8a:53:a7:da:e7:12:74:59:ec:20:b4:72:1e:4a:ee:89:f6: 36:48:50:f6:26:6f:76:be:56:25:24:5c:ff:13:7d:0c:62:fa: 41:49:b1:22:f9:84:17:13:be:b7:d2:63:c9:ba:3a:33:70:f7: b5:2d:4d:b8:b1:d2:f9:ab:a2:16:fa:94:fe:10:37:8d:9a:14: 9d:89:c7:d6:ff:e3:d0:c9:3b:d6:16:6a:a4:8b:8d:54:ee:94: 51:23:3e:fb:17:c5:3a:1f:e6:33:01:e1:4c:e7:89:f4:bc:96: 9c:d8:59:1a:93:7e:d9:1c:8b:96:44:3c:8d:f4:5a:34:97:45: d2:a9:5b:06:46:51:f7:1e:45:44:19:77:f3:7f:b2:48:da:65: d7:1c:75:de:5f:3f:a7:40:59:ac:c5:21:c8:d5:dd:4b:69:78: c8:e3:be:67:7a:39:01:90:34:e8:a5:15:96:4a:84:cc:71:92: b2:ae:d1:01:79:5a:6b:ca:0e:df:38:37:e0:3c:77:10:d9:f1: a0:2a:7b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FljGI6gtjdXhooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRiODIxOTEtOWVhYi00NzgwLWFmZDItOGQ3NjQwMTIz YjU5MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MWI3ZGY4MmUtY2Y4OC00OTZmLWI4MGMtY2E5MDY5OGE5M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAzNq9bA5fjQi4/XefT0Tojw2REVLPANj0nl 75eJu0CqUjM6wRwZbmsNQSU/AU8PQcRqQGCzfevSNygTWPxIzMmzFtOm6vbJdJJ8 +9gluIjOpc0wYOs5EyYnNz6vFmtEJ7suYl7E3z0F7IQuVe5LK6JaTpjNiMUKZG4M 8PbvvLSYzRpUQShYVowqv5jCKg5cfGQV0rPO0xKj+ecW3NcTp6JQyc9hhqKSXHGx oT0A8IhZ3LmeLBl5pujU/lMt0hq9nmcsHt5jgr8/JQr8N6bv7IdkOTPww5PyOf/q XSgfg40pivkuYPPF0ASQW4J1393ztNun30yxEgm+Ecn9GEMt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgZWfSN/YkP80YnCUhAXtS3rlmRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4 MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2NDAxMjNiNTkvM2E1MDI1YmYtZWUzNy0z MTVhLWExOTctNjg5OTZhMzY5YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMjRiODIxOTEtOWVhYi00NzgwLWFm ZDItOGQ3NjQwMTIzYjU5LzI0YjgyMTkxLTllYWItNDc4MC1hZmQyLThkNzY0MDEy M2I1OS5jcmwwHwYDVR0jBBgwFoAUr3tWawPkuaWa9aaCO55YgGC1EjowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yNGI4MjE5MS05ZWFiLTQ3ODAtYWZkMi04ZDc2 NDAxMjNiNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE48jpO4l4CmlHlN3PIiSlAKskAbZu6KzR0gBZqjisf61PoB9GauQ0hf nPNXLf6EPh4Pq7c3QsyKU6fa5xJ0WewgtHIeSu6J9jZIUPYmb3a+ViUkXP8TfQxi +kFJsSL5hBcTvrfSY8m6OjNw97UtTbix0vmrohb6lP4QN42aFJ2Jx9b/49DJO9YW aqSLjVTulFEjPvsXxTof5jMB4UznifS8lpzYWRqTftkci5ZEPI30WjSXRdKpWwZG UfceRUQZd/N/skjaZdccdd5fP6dAWazFIcjV3UtpeMjjvmd6OQGQNOilFZZKhMxx krKu0QF5WmvKDt84N+A8dxDZ8aAqe64= -----END CERTIFICATE-----Generated at Thu Dec 25 02:49:45 2025 by rpki-client