This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/17173946-91ef-3494-bbe8-afdae1e8e836.roa File: 17173946-91ef-3494-bbe8-afdae1e8e836.roa (raw, json) Hash identifier: D5lQiF7QNQvLZxbNk7ePoUbjrevobz1SDwCyFT8271U= Subject key identifier: 45:4D:EF:2F:4F:B1:A0:04:3D:26:73:22:16:7B:3A:D6:C2:35:79:6E Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Certificate serial: 010D0C9F4328584C4440FD1E72B5E6BB963DF400 Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/17173946-91ef-3494-bbe8-afdae1e8e836.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 2615 IP address blocks: 147.1.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:40:fd:1e:72:b5:e6:bb:96:3d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=2fb30685-8075-40dc-933f-b439ed36132a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:f5:7a:51:1b:b2:d3:99:ea:4c:63:45:3d: f3:b6:f2:b2:46:e3:d5:9d:f9:af:44:ec:0d:34:ca: f4:d5:b0:04:39:bc:5d:75:e6:43:59:9b:c1:94:44: f8:52:2a:39:6e:76:2c:91:d1:f0:c0:ac:8c:b4:c0: 2d:45:d8:11:f4:2f:e9:8f:71:d1:8f:3d:a6:09:14: b1:5d:75:d0:43:e8:05:bf:f3:2d:97:76:0c:ab:42: 13:81:ac:2a:91:28:69:a3:bc:8e:26:08:6f:b6:57: ca:16:6c:6f:d1:80:a1:d0:94:90:e7:dc:f4:e1:b4: c7:63:f4:6b:12:dc:e3:d3:9c:7c:2b:94:03:5a:75: c0:36:df:3f:fb:4f:e7:af:7e:84:22:92:c7:b6:a6: 45:30:ba:ad:f7:1a:dd:de:a1:58:f8:2c:c1:4b:fd: f0:ea:79:ba:8b:22:c5:c1:cd:e3:23:b5:29:f0:f7: 5e:e3:2b:a4:b3:c1:e3:4a:11:c6:73:68:1a:16:55: 3b:01:5d:da:51:be:62:83:43:32:37:6c:b0:da:ed: 96:1d:b2:dc:a4:24:f6:03:db:fa:d1:df:55:0e:1b: f4:6b:51:09:72:1d:13:71:a7:bc:08:9a:7e:b5:83: a1:7a:50:b0:8a:d5:79:e4:16:d8:fc:a9:14:d0:e6: d3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:4D:EF:2F:4F:B1:A0:04:3D:26:73:22:16:7B:3A:D6:C2:35:79:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/17173946-91ef-3494-bbe8-afdae1e8e836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl X509v3 Authority Key Identifier: keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer sbgp-ipAddrBlock: critical IPv4: 147.1.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:2f:14:3d:ff:83:f8:67:af:1c:bf:39:93:28:7d:02:0d:57: 0a:f6:5f:a6:c7:07:80:11:fb:be:18:7a:f0:3e:3c:83:1c:36: 5b:87:15:08:34:9e:22:21:5f:11:b5:cf:9a:15:26:cf:18:d4: 8e:b3:47:ff:21:d3:75:83:ed:27:cc:fb:f1:59:97:b6:7a:53: 71:fe:93:b0:2d:20:b1:1c:41:8e:bf:89:e1:9e:a7:17:78:c4: 02:f4:56:66:e9:40:58:2b:df:5b:3b:72:ba:ec:a6:c0:d6:69: bf:36:ea:5a:5c:9f:a7:e3:af:95:fc:b9:a5:b8:ea:bd:75:4a: 56:71:1a:14:22:a6:db:cb:09:a4:c8:54:3a:fa:80:a8:89:b7: 61:59:e6:c0:a9:c1:7d:29:7e:63:89:73:9b:a5:3d:1a:20:2a: ee:54:b2:a4:23:89:06:97:95:4a:d8:a4:08:42:e7:b9:42:ae: f6:a1:8e:29:de:a7:00:eb:3e:1a:33:8c:7c:d4:67:d0:8d:cd: 84:b8:ea:3a:5c:3b:62:4e:8d:c0:26:7c:d0:ac:e7:d0:24:6b: b6:75:a7:69:98:7a:f1:46:c2:4e:be:ba:78:0e:e2:c7:6e:88: a1:0e:fe:35:d1:f4:8f:b7:f3:95:16:55:4b:53:4e:0b:f0:13: 06:75:1e:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQP0ecrXmu5Y99AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4ZWFmYTQtZjcxZi00YmFlLTk4MjUtZTU2OTQ4YTJm NTIzMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk MmZiMzA2ODUtODA3NS00MGRjLTkzM2YtYjQzOWVkMzYxMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtD1elEbstOZ6kxjRT3ztvKyRuPVnfmvROwN NMr01bAEObxddeZDWZvBlET4Uio5bnYskdHwwKyMtMAtRdgR9C/pj3HRjz2mCRSx XXXQQ+gFv/Mtl3YMq0ITgawqkShpo7yOJghvtlfKFmxv0YCh0JSQ59z04bTHY/Rr Etzj05x8K5QDWnXANt8/+0/nr36EIpLHtqZFMLqt9xrd3qFY+CzBS/3w6nm6iyLF wc3jI7Up8Pde4yuks8HjShHGc2gaFlU7AV3aUb5ig0MyN2yw2u2WHbLcpCT2A9v6 0d9VDhv0a1EJch0Tcae8CJp+tYOhelCwitV55BbY/KkU0ObTIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVN7y9PsaAEPSZzIhZ7OtbCNXluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjhl YWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5NDhhMmY1MjMvMTcxNzM5NDYtOTFlZi0z NDk0LWJiZTgtYWZkYWUxZThlODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI4ZWFmYTQtZjcxZi00YmFlLTk4 MjUtZTU2OTQ4YTJmNTIzL2FiOGVhZmE0LWY3MWYtNGJhZS05ODI1LWU1Njk0OGEy ZjUyMy5jcmwwHwYDVR0jBBgwFoAUtz8u8assUs1BKTbOzWS1eXrvEeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjhlYWZhNC1mNzFmLTRiYWUtOTgyNS1lNTY5 NDhhMmY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkwHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgvFD3/g/hnrxy/OZMofQINVwr2X6bHB4AR+74YevA+PIMcNluHFQg0 niIhXxG1z5oVJs8Y1I6zR/8h03WD7SfM+/FZl7Z6U3H+k7AtILEcQY6/ieGepxd4 xAL0VmbpQFgr31s7crrspsDWab826lpcn6fjr5X8uaW46r11SlZxGhQiptvLCaTI VDr6gKiJt2FZ5sCpwX0pfmOJc5ulPRogKu5UsqQjiQaXlUrYpAhC57lCrvahjine pwDrPhozjHzUZ9CNzYS46jpcO2JOjcAmfNCs59Aka7Z1p2mYevFGwk6+ungO4sdu iKEO/jXR9I+385UWVUtTTgvwEwZ1HsA= -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:30 2025 by rpki-client