This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa File: aa17f969-ed94-3d77-a18a-b485416a12af.roa (raw, json) Hash identifier: QB1Vld9pa8602+NFYSR0GMlb4t9+Mu0bl8E9AeAap1g= Subject key identifier: AB:2C:A0:8E:F2:DC:02:2D:66:92:9C:98:F7:70:53:E1:93:93:B9:D4 Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584C339EF5187092E07A953FB380 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa Signing time: Tue 16 Dec 2025 03:01:09 +0000 ROA not before: Tue 16 Dec 2025 03:01:09 +0000 ROA not after: Mon 16 Mar 2026 02:01:09 +0000 asID: 40676 IP address blocks: 199.89.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:9e:f5:18:70:92:e0:7a:95:3f:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Dec 16 03:01:09 2025 GMT Not After : Mar 16 02:01:09 2026 GMT Subject: CN=c4588759-d272-4f50-97a4-0347c0bd671a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:5e:d4:c6:f1:f8:fe:a3:39:ab:4f:36:66: db:df:1b:1f:a7:c8:98:bf:e5:cd:d2:3b:54:97:c4: f4:f6:50:74:0a:d1:c7:d3:72:c4:ce:36:52:e8:ad: a0:e8:80:a9:81:29:8d:52:b4:34:e5:ab:9a:67:83: 90:57:85:99:82:0e:71:d2:78:0f:2b:30:7f:ca:8e: 0a:0b:5f:19:f8:13:c8:ee:7d:89:4c:6c:b9:bd:d6: a2:85:ee:c7:4e:ed:27:09:a6:54:a3:f4:f9:6a:e4: 60:e9:fc:6d:31:0d:0b:da:b1:37:14:fe:87:8f:e0: f6:93:64:a2:5f:f8:df:f4:17:91:c0:4a:d6:f9:d1: 03:bd:93:15:20:5b:4f:ee:62:65:51:97:e6:70:b2: d0:ed:22:56:ca:80:5c:11:ca:a7:ab:81:27:5f:df: 70:dc:2b:5f:c5:3d:de:39:73:39:e3:10:4a:e8:f8: 4a:96:2b:4e:a1:db:24:8f:ac:71:bc:90:56:e0:25: 39:b2:ef:dd:38:73:4c:ff:d4:79:7d:df:e2:4a:91: 4c:1b:27:04:cb:64:0f:9d:e8:e9:e9:32:9b:37:7f: 11:49:56:b3:b2:ec:c2:64:71:64:85:7a:76:f4:93: d0:cc:61:45:83:a0:8e:9a:4a:da:64:0a:fe:f1:8b: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:2C:A0:8E:F2:DC:02:2D:66:92:9C:98:F7:70:53:E1:93:93:B9:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/aa17f969-ed94-3d77-a18a-b485416a12af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:9c:ad:11:b9:d7:40:99:08:98:06:52:fe:29:b9:42:b9:18: ad:7e:9d:8b:33:e5:9c:65:9e:7f:85:54:f1:d8:bb:2c:d0:39: 62:b5:1b:e5:e9:b7:a0:ae:53:a9:8a:e7:00:9d:8b:1c:37:46: aa:73:bb:04:f0:48:e9:10:a9:60:9c:e9:cc:44:ec:5f:4c:73: 0d:3f:29:57:a8:d9:a9:d2:28:0f:d4:06:fe:84:c0:8e:42:67: 10:50:5c:22:76:ff:af:01:1a:b7:89:51:fc:24:00:fc:74:c9: 8e:a4:33:d0:35:db:87:b1:2e:db:c5:89:9f:b8:70:45:2a:24: 4f:57:54:bf:f0:5f:2f:dc:95:b3:6d:cb:49:56:b5:dd:83:7e: a8:4b:89:56:b2:7a:d3:f5:1c:f2:da:7c:96:14:0f:55:9c:3c: 32:2a:83:84:df:33:00:99:14:fc:4a:38:a8:a9:16:f7:52:43: ef:66:55:77:94:ed:ae:1a:82:4a:eb:72:75:4d:9c:eb:d5:34: 98:de:de:b0:33:ec:d4:95:b6:d9:05:4e:e9:63:41:f0:fd:1a: ac:89:13:a6:eb:5f:bf:d9:56:73:e1:13:3b:91:e4:4b:e2:b7: 3d:53:5a:e1:fd:c6:1b:c6:4d:0d:d2:18:ae:a5:01:44:ba:ae: 1f:ca:25:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwznvUYcJLgepU/s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI1MTIxNjAzMDEwOVoXDTI2MDMxNjAyMDEwOVowLzEtMCsGA1UEAxMk YzQ1ODg3NTktZDI3Mi00ZjUwLTk3YTQtMDM0N2MwYmQ2NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXhe1Mbx+P6jOatPNmbb3xsfp8iYv+XN0jtU l8T09lB0CtHH03LEzjZS6K2g6ICpgSmNUrQ05auaZ4OQV4WZgg5x0ngPKzB/yo4K C18Z+BPI7n2JTGy5vdaihe7HTu0nCaZUo/T5auRg6fxtMQ0L2rE3FP6Hj+D2k2Si X/jf9BeRwErW+dEDvZMVIFtP7mJlUZfmcLLQ7SJWyoBcEcqnq4EnX99w3CtfxT3e OXM54xBK6PhKlitOodskj6xxvJBW4CU5su/dOHNM/9R5fd/iSpFMGycEy2QPnejp 6TKbN38RSVazsuzCZHFkhXp29JPQzGFFg6COmkraZAr+8Yv55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKssoI7y3AItZpKcmPdwU+GTk7nUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvYWExN2Y5NjktZWQ5NC0z ZDc3LWExOGEtYjQ4NTQxNmExMmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECcrRG510CZCJgGUv4puUK5GK1+nYsz5Zxlnn+FVPHYuyzQOWK1G+Xp t6CuU6mK5wCdixw3RqpzuwTwSOkQqWCc6cxE7F9Mcw0/KVeo2anSKA/UBv6EwI5C ZxBQXCJ2/68BGreJUfwkAPx0yY6kM9A124exLtvFiZ+4cEUqJE9XVL/wXy/clbNt y0lWtd2DfqhLiVayetP1HPLafJYUD1WcPDIqg4TfMwCZFPxKOKipFvdSQ+9mVXeU 7a4agkrrcnVNnOvVNJje3rAz7NSVttkFTuljQfD9GqyJE6brX7/ZVnPhEzuR5Evi tz1TWuH9xhvGTQ3SGK6lAUS6rh/KJbM= -----END CERTIFICATE-----Generated at Fri Dec 19 23:35:59 2025 by rpki-client