This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa File: efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa (raw, json) Hash identifier: /bLpJPfGb3Ugoldvw35RzmXHQbHFQC/yCuT1NTl5QRk= Subject key identifier: 6B:6E:60:5A:78:F0:22:76:B8:74:78:70:1C:48:5B:F4:2D:18:2D:FE Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DC1AA701FB9B12D2D71F00 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 199.254.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:1a:a7:01:fb:9b:12:d2:d7:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=8bea05ec-16ee-4afe-a265-665ac293de39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3c:43:b9:ef:6c:8d:85:dc:96:d6:9f:06:e6: ac:77:82:b7:78:4d:10:02:37:c1:98:65:f8:66:a8: f4:d1:b0:89:e2:ab:89:ae:9c:37:cb:41:e1:c0:b6: f4:15:16:f7:bf:e0:3a:95:74:8f:99:8f:bc:88:6d: be:a2:5f:53:b4:b3:46:57:92:87:0d:4c:ee:76:7f: bc:5f:c8:e4:e1:97:53:ea:13:61:77:8f:e9:aa:d8: 6c:7c:ef:36:41:6f:a3:ca:10:55:e0:5f:80:d0:7d: ac:41:f4:b9:22:a5:c8:54:5b:dd:8f:74:31:48:e3: 83:ad:77:2d:fb:8f:51:e3:ba:d3:37:e6:0f:db:96: ab:72:39:f8:be:a5:35:b0:4e:26:6b:dc:02:82:d2: a9:66:1d:78:b3:f4:af:30:dc:45:47:2f:f7:23:a3: 78:72:76:4c:d1:49:ac:0e:21:40:84:96:42:c2:57: 4f:b3:0a:02:40:77:bf:db:45:a3:b6:94:e6:cd:0c: b4:63:89:45:18:3f:c5:26:65:c8:be:49:cb:19:bb: 5a:a4:8d:ee:c5:79:33:12:5d:bb:81:e3:9e:63:45: c2:8a:cd:52:80:2a:72:96:e5:e7:1c:cb:85:9c:79: a1:e7:10:9b:4a:84:f1:54:ce:6b:bd:3c:c3:8b:dc: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6E:60:5A:78:F0:22:76:B8:74:78:70:1C:48:5B:F4:2D:18:2D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/efd8a9f6-7f60-3c6e-8078-d742f25ebe04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 199.254.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ad:cd:6e:1c:40:6e:36:1b:e0:51:fe:4c:52:d8:c8:c6:c0: c6:74:20:c1:f8:b2:57:ab:d8:a6:80:31:d9:56:b4:f5:94:db: 7e:64:22:72:c8:a1:77:db:b3:ef:36:d1:f3:02:29:a0:f3:bd: 76:28:6e:b6:5e:38:8f:20:e2:45:3a:5c:c4:fb:64:e5:76:89: 40:2d:15:02:62:f8:0d:e9:01:da:7f:1e:41:9c:6e:e3:5d:c4: 43:b0:c7:da:c7:bd:1b:dc:e7:a9:66:b1:f4:c3:bf:cb:50:98: 05:c7:cf:07:a5:b0:cc:a2:5c:67:5b:1b:fd:fe:5c:c3:8c:24: 41:06:92:4d:56:7b:41:7d:fb:8b:d1:c0:a8:e9:5b:ed:58:a9: 30:0e:bc:a2:21:5e:bd:71:2a:03:32:5f:28:9a:e1:af:1a:69: 39:c3:a9:94:5e:20:d7:3e:ea:16:9e:14:c5:23:f8:48:d3:a8: a8:16:91:97:8d:f2:b5:09:8c:ed:e0:71:94:17:90:7f:0c:21: c2:a1:b0:22:8a:b7:8e:56:a2:a4:53:e7:dc:05:74:97:86:90: 9b:ab:d5:cc:11:17:cd:09:fe:92:9c:29:74:38:83:1b:b1:4f: 4e:2e:23:39:11:43:80:e3:7d:e6:83:dc:9d:b8:25:21:d6:aa: fd:34:37:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BqnAfubEtLXHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OGJlYTA1ZWMtMTZlZS00YWZlLWEyNjUtNjY1YWMyOTNkZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jxDue9sjYXcltafBuasd4K3eE0QAjfBmGX4 Zqj00bCJ4quJrpw3y0HhwLb0FRb3v+A6lXSPmY+8iG2+ol9TtLNGV5KHDUzudn+8 X8jk4ZdT6hNhd4/pqthsfO82QW+jyhBV4F+A0H2sQfS5IqXIVFvdj3QxSOODrXct +49R47rTN+YP25arcjn4vqU1sE4ma9wCgtKpZh14s/SvMNxFRy/3I6N4cnZM0Ums DiFAhJZCwldPswoCQHe/20WjtpTmzQy0Y4lFGD/FJmXIvknLGbtapI3uxXkzEl27 geOeY0XCis1SgCpyluXnHMuFnHmh5xCbSoTxVM5rvTzDi9wQTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtuYFp48CJ2uHR4cBxIW/QtGC3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZWZkOGE5ZjYtN2Y2MC0z YzZlLTgwNzgtZDc0MmYyNWViZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/47MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWtzW4cQG42G+BR/kxS2MjGwMZ0IMH4sler2KaAMdlWtPWU235kInLI oXfbs+820fMCKaDzvXYobrZeOI8g4kU6XMT7ZOV2iUAtFQJi+A3pAdp/HkGcbuNd xEOwx9rHvRvc56lmsfTDv8tQmAXHzwelsMyiXGdbG/3+XMOMJEEGkk1We0F9+4vR wKjpW+1YqTAOvKIhXr1xKgMyXyia4a8aaTnDqZReINc+6haeFMUj+EjTqKgWkZeN 8rUJjO3gcZQXkH8MIcKhsCKKt45WoqRT59wFdJeGkJur1cwRF80J/pKcKXQ4gxux T04uIzkRQ4DjfeaD3J24JSHWqv00N6o= -----END CERTIFICATE-----Generated at Sun Dec 21 22:39:19 2025 by rpki-client