This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa File: 026ccb72-c117-308c-aa09-3af8c0e2afb8.roa (raw, json) Hash identifier: OIUj4WPGk/f5i7C45hjJjEqi6H1CDrbSs0wzDqVf9xc= Subject key identifier: 40:94:F7:99:22:BD:3A:70:37:F0:09:1D:E6:D7:3C:D0:BE:3B:4C:76 Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196 Certificate serial: 010D0C9F4328584C3BE12D60CCC7C03C572EC840 Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 12119 IP address blocks: 142.204.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2d:60:cc:c7:c0:3c:57:2e:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=d59ccb86-bb28-4b4f-a07a-93a6362005d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:d2:eb:e8:d5:0c:65:f4:6a:13:d3:2b:71: f3:d9:03:31:43:71:22:f5:d4:b6:b6:fd:f1:58:9b: 26:de:65:be:96:9c:81:f7:20:aa:b7:c6:79:40:4f: 20:fe:59:05:40:48:d4:eb:b8:61:9e:e1:64:5b:f6: 7c:41:b7:9f:33:20:cc:d3:1a:1a:cf:a5:6a:f3:8c: a2:bb:b5:c5:09:cf:b6:cb:3b:89:f7:1c:b4:ca:80: 39:90:49:af:1b:7c:47:97:4e:bf:5c:71:93:23:da: d5:82:d7:f8:68:2e:0a:3b:3a:f7:fc:47:c1:bb:a7: 94:9d:12:54:a6:99:31:63:e8:12:c8:d4:f3:46:d3: e6:07:20:55:c8:9e:eb:8b:fd:de:a2:95:80:06:90: da:1f:a7:88:1d:da:e1:0b:8c:71:52:f6:b2:b9:10: f5:d5:08:40:b5:d1:b4:20:b7:bf:56:e2:2a:b8:98: 16:c5:0f:ed:b6:cd:9e:53:e8:9e:ef:c1:76:4c:b3: 62:2e:db:89:9c:7d:87:e6:ca:1b:1d:cb:a1:70:e9: 22:c3:23:08:79:6d:8f:1d:b2:15:ba:e9:a2:a8:4c: 57:f0:10:eb:40:f1:36:11:3a:7f:b0:47:15:10:3a: 88:d9:aa:a5:2c:08:7e:50:ef:c9:d4:01:46:70:da: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:F7:99:22:BD:3A:70:37:F0:09:1D:E6:D7:3C:D0:BE:3B:4C:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/026ccb72-c117-308c-aa09-3af8c0e2afb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl X509v3 Authority Key Identifier: keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer sbgp-ipAddrBlock: critical IPv4: 142.204.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:08:51:b8:02:d7:91:f3:43:4f:44:26:dd:08:9c:e6:59:66: 35:65:15:98:e0:72:b5:7a:5f:09:40:39:7b:35:ed:ed:a8:bb: 1e:76:ff:2e:4b:9e:26:4c:87:c6:f3:1c:7e:bb:1f:22:24:fa: a8:6b:46:e5:50:7a:45:12:b0:81:e4:bc:8d:80:a1:eb:1e:e3: f2:8d:0b:3f:0f:75:c3:ad:3f:c1:51:15:6e:a3:f9:b9:c5:5c: 9d:cf:4b:37:e5:af:34:d7:ad:7c:30:a1:f8:54:22:85:0f:c1: 33:24:4e:d3:d0:4c:71:94:97:9b:7a:e9:9c:eb:65:92:bc:63: 1a:9a:c6:6d:22:e2:49:f1:66:6a:87:ea:68:fe:37:52:23:c2: 92:7e:ac:e1:e3:9c:74:ef:9b:b0:9b:48:da:5f:44:df:a7:6c: 62:a4:bc:62:ef:f1:af:64:d2:74:7f:15:b5:6f:35:5e:a2:6a: 59:dd:21:c5:af:d5:cb:31:55:26:1c:94:36:5c:96:9b:43:10: 6e:51:a9:cb:b8:86:69:d7:5d:e6:d7:c4:16:1e:e7:5e:3b:2d: 1a:10:fd:f8:d0:af:85:2d:93:c4:0d:90:d6:5b:40:a0:7e:d8: cb:da:56:82:cc:37:4d:40:e4:1f:3c:31:d1:9f:8a:8b:e9:b0: bc:1d:f6:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74S1gzMfAPFcuyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5MjdkMjYtYzIyOS00OTZhLTg5NDAtYzg4YTgzNGY1 MTk2MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDU5Y2NiODYtYmIyOC00YjRmLWEwN2EtOTNhNjM2MjAwNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqTS6+jVDGX0ahPTK3Hz2QMxQ3Ei9dS2tv3x WJsm3mW+lpyB9yCqt8Z5QE8g/lkFQEjU67hhnuFkW/Z8QbefMyDM0xoaz6Vq84yi u7XFCc+2yzuJ9xy0yoA5kEmvG3xHl06/XHGTI9rVgtf4aC4KOzr3/EfBu6eUnRJU ppkxY+gSyNTzRtPmByBVyJ7ri/3eopWABpDaH6eIHdrhC4xxUvayuRD11QhAtdG0 ILe/VuIquJgWxQ/tts2eU+ie78F2TLNiLtuJnH2H5sobHcuhcOkiwyMIeW2PHbIV uumiqExX8BDrQPE2ETp/sEcVEDqI2aqlLAh+UO/J1AFGcNoxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECU95kivTpwN/AJHebXPNC+O0x2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMzky N2QyNi1jMjI5LTQ5NmEtODk0MC1jODhhODM0ZjUxOTYvMDI2Y2NiNzItYzExNy0z MDhjLWFhMDktM2FmOGMwZTJhZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzM5MjdkMjYtYzIyOS00OTZhLTg5 NDAtYzg4YTgzNGY1MTk2L2MzOTI3ZDI2LWMyMjktNDk2YS04OTQwLWM4OGE4MzRm NTE5Ni5jcmwwHwYDVR0jBBgwFoAU3iC7Zcii3YxtAozJJDHZDGDF51owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jMzkyN2QyNi1jMjI5LTQ5NmEtODk0MC1jODhh ODM0ZjUxOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjsxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMoIUbgC15HzQ09EJt0InOZZZjVlFZjgcrV6XwlAOXs17e2oux52/y5L niZMh8bzHH67HyIk+qhrRuVQekUSsIHkvI2Aoese4/KNCz8PdcOtP8FRFW6j+bnF XJ3PSzflrzTXrXwwofhUIoUPwTMkTtPQTHGUl5t66ZzrZZK8Yxqaxm0i4knxZmqH 6mj+N1IjwpJ+rOHjnHTvm7CbSNpfRN+nbGKkvGLv8a9k0nR/FbVvNV6ialndIcWv 1csxVSYclDZclptDEG5Rqcu4hmnXXebXxBYe5147LRoQ/fjQr4Utk8QNkNZbQKB+ 2MvaVoLMN01A5B88MdGfiovpsLwd9sc= -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:49 2025 by rpki-client