This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa File: 9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa (raw, json) Hash identifier: H04d2XkNQ4Rpyl2fN9lYbVnhP53TDmQFUwZKX4mNS38= Subject key identifier: 2B:B7:52:0A:D6:50:8A:0F:CB:18:31:83:6F:D9:4D:4E:98:FC:F8:52 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584C339F3CE1A910C26DE624F040 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa Signing time: Tue 16 Dec 2025 03:01:42 +0000 ROA not before: Tue 16 Dec 2025 03:01:42 +0000 ROA not after: Mon 16 Mar 2026 02:01:42 +0000 asID: 40676 IP address blocks: 199.89.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:9f:3c:e1:a9:10:c2:6d:e6:24:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Dec 16 03:01:42 2025 GMT Not After : Mar 16 02:01:42 2026 GMT Subject: CN=1afe6ec2-07de-4e5c-9c42-ecdf5c830977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:d2:66:02:b5:56:5d:44:40:b7:e6:0e:4d: 35:f8:48:c6:c6:12:9f:a5:89:4e:9e:46:bb:8e:ec: ca:bc:3f:a8:75:d5:ee:b8:95:eb:51:b2:5a:af:12: 8d:bd:a0:c6:b8:16:95:33:26:a6:6c:8b:33:b3:bb: 6c:39:46:e0:c8:de:33:91:54:66:f0:31:b1:df:03: f1:cd:3c:42:dd:85:ab:81:ae:4a:f4:2d:7f:90:78: c3:49:b0:ad:58:16:8b:fd:e6:b3:1e:e9:9a:d1:77: 0b:da:64:cb:68:f8:93:a6:5b:fd:77:b1:4b:e2:3e: 18:a7:3b:57:64:90:36:09:2d:af:6c:71:b0:cc:de: 42:3a:f1:f3:1f:10:1b:2e:48:26:b0:c0:e3:88:d6: 75:c9:c2:f5:0a:14:17:4b:b0:9f:c8:2b:f3:c4:a4: 4d:77:bb:4f:5b:ff:70:f8:be:fa:b3:7e:67:59:99: 4b:d6:47:ab:75:38:f0:ea:46:ce:45:7e:60:26:db: 53:5a:1d:4d:69:48:13:d2:3d:9d:62:9f:3f:91:a6: c4:b5:cf:84:67:37:2e:f5:25:0b:b4:fd:68:df:2d: 16:a7:46:d5:60:58:6a:e0:d6:e1:b2:ed:28:c3:01: 2b:07:0c:7b:52:96:2f:50:eb:5b:39:a4:1d:77:49: 6b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B7:52:0A:D6:50:8A:0F:CB:18:31:83:6F:D9:4D:4E:98:FC:F8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/9d8e6218-4dc8-34fa-a5e1-15f63a4eea98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c9:e0:55:f0:6b:ac:1a:40:74:7b:f4:8c:ca:49:79:05:6e: f3:4a:f2:3d:65:1a:7c:7e:c2:eb:b7:7d:2c:b7:af:19:3b:8c: 57:ca:62:28:13:76:6b:4c:c4:80:2c:c8:df:30:7a:d0:a7:0d: d0:7e:55:16:dc:6a:a9:a0:8a:e6:e9:7d:ef:68:46:83:42:99: b6:bd:05:45:d2:f4:36:f3:c9:5c:e0:ff:cd:36:9e:ff:f7:ae: 8b:95:9e:53:81:a8:36:11:c5:97:21:af:84:0e:96:d3:62:7d: 89:34:84:69:dc:82:82:da:2e:e9:4f:05:15:29:72:db:b5:7c: 4d:de:23:e6:33:5b:95:9c:8c:08:83:48:35:37:3b:92:65:cd: b2:1f:6b:17:e2:1a:00:15:84:4d:90:1a:98:9e:63:ab:ac:9e: a1:5c:11:8b:a4:3d:74:c8:db:86:bc:86:00:a0:1a:d2:15:ab: 61:9b:bb:ec:98:2b:8c:4f:4f:72:6d:bb:63:76:bc:62:61:a6: 95:8b:64:b4:53:f0:54:2f:b1:62:c5:45:ef:26:8b:83:6b:26: db:ce:81:5c:00:ef:ef:8b:ee:3d:13:09:19:52:4e:82:46:6f: ed:67:e1:d1:f8:27:21:07:d5:b7:c9:b3:0a:a1:ae:f3:74:d7: 67:f9:1c:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwznzzhqRDCbeYk8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI1MTIxNjAzMDE0MloXDTI2MDMxNjAyMDE0MlowLzEtMCsGA1UEAxMk MWFmZTZlYzItMDdkZS00ZTVjLTljNDItZWNkZjVjODMwOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIrSZgK1Vl1EQLfmDk01+EjGxhKfpYlOnka7 juzKvD+oddXuuJXrUbJarxKNvaDGuBaVMyambIszs7tsOUbgyN4zkVRm8DGx3wPx zTxC3YWrga5K9C1/kHjDSbCtWBaL/eazHuma0XcL2mTLaPiTplv9d7FL4j4YpztX ZJA2CS2vbHGwzN5COvHzHxAbLkgmsMDjiNZ1ycL1ChQXS7CfyCvzxKRNd7tPW/9w +L76s35nWZlL1kerdTjw6kbORX5gJttTWh1NaUgT0j2dYp8/kabEtc+EZzcu9SUL tP1o3y0Wp0bVYFhq4Nbhsu0owwErBwx7UpYvUOtbOaQdd0lrRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu3UgrWUIoPyxgxg2/ZTU6Y/PhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvOWQ4ZTYyMTgtNGRjOC0z NGZhLWE1ZTEtMTVmNjNhNGVlYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXJ4FXwa6waQHR79IzKSXkFbvNK8j1lGnx+wuu3fSy3rxk7jFfKYigT dmtMxIAsyN8wetCnDdB+VRbcaqmgiubpfe9oRoNCmba9BUXS9DbzyVzg/802nv/3 rouVnlOBqDYRxZchr4QOltNifYk0hGncgoLaLulPBRUpctu1fE3eI+YzW5WcjAiD SDU3O5JlzbIfaxfiGgAVhE2QGpieY6usnqFcEYukPXTI24a8hgCgGtIVq2Gbu+yY K4xPT3Jtu2N2vGJhppWLZLRT8FQvsWLFRe8mi4NrJtvOgVwA7++L7j0TCRlSToJG b+1n4dH4JyEH1bfJswqhrvN012f5HE8= -----END CERTIFICATE-----Generated at Fri Dec 19 23:36:00 2025 by rpki-client