This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa File: 39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa (raw, json) Hash identifier: 4rzOx4Sbh7S4oB/Krgq1KbuZ6sWMQDdjAl8rLxExozA= Subject key identifier: DB:EC:78:6D:F5:EC:71:51:E0:B0:34:AD:F4:AC:4B:79:43:E0:21:85 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C3916587C6D60522B1D85D580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 198.160.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:58:7c:6d:60:52:2b:1d:85:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=0d9da148-320b-4eed-8b85-0d60e1a6ead3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:ac:c3:8c:61:9f:71:90:3a:c6:c9:60:e8: ff:b4:7f:f8:ca:2c:e7:2a:c7:17:ae:47:e6:cc:8c: 4e:90:d7:a7:00:4a:b8:6c:a2:42:bd:cd:1e:dc:09: 89:f7:e5:d0:bc:58:18:11:44:30:10:e9:4e:73:b8: 9d:e3:9b:eb:24:25:0a:c9:17:20:57:00:cc:52:73: 4e:90:22:52:e2:e9:de:e8:ea:18:69:b9:21:ff:77: 8f:11:e5:ea:b3:80:89:1a:f9:e5:6c:db:60:96:8e: e6:0e:d6:d7:3f:25:25:2f:d3:de:b8:63:9b:e9:c9: 59:02:25:e6:d9:7f:58:bb:b7:8e:43:f1:da:dc:17: d7:77:a1:bd:ad:b4:07:17:9e:58:6b:c7:8b:b5:c4: 16:49:d5:e9:71:c3:4b:a1:aa:43:ba:39:13:e3:6a: f7:3d:49:e7:69:ce:a9:dc:ad:1a:bc:b4:12:54:3d: e1:9b:fd:b2:12:c2:cc:84:44:ec:49:04:a6:51:6d: df:ef:f6:73:88:c8:ea:25:3d:a2:d9:06:30:03:b5: 82:2d:4c:62:56:b2:7d:91:38:a6:ca:a8:90:98:83: 95:8c:ad:d7:0a:6e:93:f8:68:47:9a:b3:3d:40:b7: 30:bd:b3:08:ad:70:be:6b:11:34:ae:2c:e8:11:c2: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EC:78:6D:F5:EC:71:51:E0:B0:34:AD:F4:AC:4B:79:43:E0:21:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/39b2346d-124f-373a-a9a3-41a3ac1e3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 198.160.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:11:62:79:60:ae:a9:81:8a:6b:8f:0b:de:c4:7c:8d:53:e8: 4c:7f:49:04:60:12:6b:65:6c:7a:a3:79:bc:27:0b:e4:ab:13: b6:81:21:97:4b:01:2b:aa:76:2a:ab:7a:42:d3:45:b3:c2:14: 42:36:12:d8:32:db:72:41:aa:90:48:55:5c:85:fc:08:e7:8f: 82:00:76:de:89:b2:ee:26:e8:7a:2f:08:09:74:48:86:0a:1d: 6d:f7:14:a3:92:f5:66:d7:de:6e:32:33:6c:dd:82:ae:93:e1: 74:2c:3a:d4:22:3b:65:d6:e6:8d:60:b5:ec:86:3a:f6:0e:86: 5f:e3:22:2d:8b:ea:05:c8:26:01:98:65:74:79:f6:e9:ce:d4: 47:94:eb:d1:1e:e9:7c:a4:89:43:aa:62:0c:86:92:18:57:0e: fc:b4:de:8f:7d:89:f3:f3:31:73:ac:f4:8b:fc:2c:d5:f3:1d: bb:fd:f7:04:66:d7:38:d9:16:77:d0:26:7a:78:61:8a:75:6f: 15:97:d2:95:8e:a0:30:33:62:e2:ad:2a:4b:9c:55:57:c2:5e: f5:89:d5:be:22:4c:7b:59:85:b0:50:ef:1f:7c:ff:6d:8b:b5: 36:c1:cc:04:07:01:0f:0d:d9:6f:42:b7:c1:cd:37:b2:f9:64: a0:ae:0a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5Flh8bWBSKx2F1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MGQ5ZGExNDgtMzIwYi00ZWVkLThiODUtMGQ2MGUxYTZlYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ6sw4xhn3GQOsbJYOj/tH/4yiznKscXrkfm zIxOkNenAEq4bKJCvc0e3AmJ9+XQvFgYEUQwEOlOc7id45vrJCUKyRcgVwDMUnNO kCJS4une6OoYabkh/3ePEeXqs4CJGvnlbNtglo7mDtbXPyUlL9PeuGOb6clZAiXm 2X9Yu7eOQ/Ha3BfXd6G9rbQHF55Ya8eLtcQWSdXpccNLoapDujkT42r3PUnnac6p 3K0avLQSVD3hm/2yEsLMhETsSQSmUW3f7/ZziMjqJT2i2QYwA7WCLUxiVrJ9kTim yqiQmIOVjK3XCm6T+GhHmrM9QLcwvbMIrXC+axE0rizoEcK2awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvseG317HFR4LA0rfSsS3lD4CGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzliMjM0NmQtMTI0Zi0z NzNhLWE5YTMtNDFhM2FjMWUzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkRYnlgrqmBimuPC97EfI1T6Ex/SQRgEmtlbHqjebwnC+SrE7aBIZdL ASuqdiqrekLTRbPCFEI2Etgy23JBqpBIVVyF/Ajnj4IAdt6Jsu4m6HovCAl0SIYK HW33FKOS9WbX3m4yM2zdgq6T4XQsOtQiO2XW5o1gteyGOvYOhl/jIi2L6gXIJgGY ZXR59unO1EeU69Ee6XykiUOqYgyGkhhXDvy03o99ifPzMXOs9Iv8LNXzHbv99wRm 1zjZFnfQJnp4YYp1bxWX0pWOoDAzYuKtKkucVVfCXvWJ1b4iTHtZhbBQ7x98/22L tTbBzAQHAQ8N2W9Ct8HNN7L5ZKCuCrE= -----END CERTIFICATE-----Generated at Sun Dec 21 20:33:04 2025 by rpki-client