This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa File: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json) Hash identifier: qNHqm6yr/DYuJs+Le2lN05uwImmquzWTInBOt9jX3TU= Subject key identifier: 12:72:EB:75:BC:06:9E:7B:8C:50:53:46:7A:D8:30:E0:21:CE:E2:AD Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F4328584C50D14747178579C5BA0AEF80 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa Signing time: Fri 26 Dec 2025 14:00:39 +0000 ROA not before: Fri 26 Dec 2025 14:00:39 +0000 ROA not after: Thu 26 Mar 2026 13:00:39 +0000 asID: 376 IP address blocks: 132.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:d1:47:47:17:85:79:c5:ba:0a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Dec 26 14:00:39 2025 GMT Not After : Mar 26 13:00:39 2026 GMT Subject: CN=b3b08b92-51d6-450a-a67e-b14f81393e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:09:0e:27:33:b6:b8:21:10:60:78:89:28: 5f:f4:fc:7b:1f:50:c8:70:14:0a:dd:67:a7:61:37: 30:40:c0:d5:99:a8:05:08:d7:53:ed:60:21:f5:c9: 5e:05:58:72:75:19:d4:de:55:7d:a2:da:c2:c8:c0: d0:d4:bd:7a:7f:e9:81:4c:e8:b5:91:47:e9:f4:18: be:81:1e:a7:ff:0b:fc:68:16:9f:2f:0a:79:32:db: 5c:5f:6c:1a:1a:49:36:d2:50:b0:80:76:ba:6d:a4: 80:f3:5b:58:30:0a:c6:2e:45:bf:21:ce:13:27:63: c4:ed:5a:45:1c:e8:be:be:c0:1e:d2:5f:92:96:89: 2a:a8:c8:1c:07:c8:8f:7e:0d:29:b6:89:ba:cd:4c: 59:03:16:47:1e:59:26:79:08:7e:7e:38:55:a1:9f: 65:21:4b:95:4d:dc:1b:08:4a:17:a9:cf:f1:a0:15: a0:e9:b3:64:5c:f7:98:24:7e:5f:d8:fc:f1:09:dd: 6f:d1:5e:2c:ef:79:cc:92:b0:14:45:97:a2:b8:51: 87:47:f2:8f:34:4c:f1:1f:0c:52:75:37:1e:13:ca: f4:20:22:9b:4b:2d:58:95:3b:54:5f:ae:c0:4f:46: 59:03:cb:fe:ae:6d:14:18:3c:28:52:d0:59:2a:41: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:72:EB:75:BC:06:9E:7B:8C:50:53:46:7A:D8:30:E0:21:CE:E2:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:03:7b:0a:97:b9:ac:2f:d7:ea:40:a4:ca:08:e3:5e:f5:8e: d0:87:f0:de:3d:a2:da:04:89:68:28:07:bb:bb:68:84:82:3c: 7c:43:89:ed:59:0b:14:c9:81:8c:81:3f:3e:de:57:71:6c:b3: a2:c0:f9:bc:b1:f6:31:90:2c:af:21:d7:2f:95:91:32:39:c6: 80:18:ec:22:d0:24:74:e1:70:0f:97:2a:85:18:22:b4:28:17: 0a:fb:8c:8c:d3:03:df:89:ba:ba:e3:5e:68:72:3a:de:d2:b4: e5:07:28:e3:0a:a7:93:31:99:e6:2f:b2:c0:f6:d0:41:44:c1: 84:d0:99:94:1c:ba:cd:cc:bc:40:30:75:9a:2e:3e:d3:54:27: 9a:00:f1:04:1d:27:af:79:38:9e:09:69:06:6a:d3:f4:92:7f: 93:5f:a3:f4:2b:9f:36:2e:66:3b:76:2d:77:31:a5:8f:54:b8: b7:ec:9a:41:a3:66:3c:2c:00:3c:44:c4:7b:97:a2:62:3c:9b: 8a:56:fa:a6:fc:91:2a:52:a6:80:66:bf:c9:43:5d:12:fb:69: 28:b0:88:07:e8:ed:7c:a2:80:98:48:1d:f8:cd:e9:e8:2a:f5: b8:73:98:6e:d8:bd:ac:fe:1a:d8:9b:05:22:90:a0:85:22:16: 14:28:54:89 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWExQ0UdHF4V5xboK74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI1MTIyNjE0MDAzOVoXDTI2MDMyNjEzMDAzOVowLzEtMCsGA1UEAxMk YjNiMDhiOTItNTFkNi00NTBhLWE2N2UtYjE0ZjgxMzkzZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2gJDicztrghEGB4iShf9Px7H1DIcBQK3Wen YTcwQMDVmagFCNdT7WAh9cleBVhydRnU3lV9otrCyMDQ1L16f+mBTOi1kUfp9Bi+ gR6n/wv8aBafLwp5MttcX2waGkk20lCwgHa6baSA81tYMArGLkW/Ic4TJ2PE7VpF HOi+vsAe0l+SlokqqMgcB8iPfg0ptom6zUxZAxZHHlkmeQh+fjhVoZ9lIUuVTdwb CEoXqc/xoBWg6bNkXPeYJH5f2PzxCd1v0V4s73nMkrAURZeiuFGHR/KPNEzxHwxS dTceE8r0ICKbSy1YlTtUX67AT0ZZA8v+rm0UGDwoUtBZKkEX4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBJy63W8Bp57jFBTRnrYMOAhzuKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvNWZhYjc2MjQtN2JhMC0z OGNjLTkzOWQtNDdkZDM2MmIxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAlgN7Cpe5rC/X6kCkygjjXvWO0Ifw3j2i2gSJaCgHu7tohII8fEOJ7VkL FMmBjIE/Pt5XcWyzosD5vLH2MZAsryHXL5WRMjnGgBjsItAkdOFwD5cqhRgitCgX CvuMjNMD34m6uuNeaHI63tK05Qco4wqnkzGZ5i+ywPbQQUTBhNCZlBy6zcy8QDB1 mi4+01QnmgDxBB0nr3k4nglpBmrT9JJ/k1+j9CufNi5mO3YtdzGlj1S4t+yaQaNm PCwAPETEe5eiYjybilb6pvyRKlKmgGa/yUNdEvtpKLCIB+jtfKKAmEgd+M3p6Cr1 uHOYbti9rP4a2JsFIpCghSIWFChUiQ== -----END CERTIFICATE-----Generated at Mon Dec 29 02:25:29 2025 by rpki-client