This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa File: 2a6b35d8-8539-3c36-9a9a-42084d63216c.roa (raw, json) Hash identifier: UkIfwuig/S6PfxwOIYX9dNVxV3nrmGilGVb8EC1o+wA= Subject key identifier: 0F:D9:F5:C6:F6:36:97:1A:BE:42:AB:12:4D:72:D9:84:20:B6:4C:5A Certificate issuer: /CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Certificate serial: 010D0C9F4328584C3BE12E81C200AE12222DB400 Authority key identifier: A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 0 IP address blocks: 139.187.0.0/16 maxlen: 24 156.117.0.0/16 maxlen: 24 192.138.138.0/24 maxlen: 24 192.138.139.0/24 maxlen: 24 192.138.140.0/24 maxlen: 24 192.138.141.0/24 maxlen: 24 192.138.142.0/24 maxlen: 24 192.138.143.0/24 maxlen: 24 192.138.144.0/24 maxlen: 24 192.138.145.0/24 maxlen: 24 192.138.146.0/24 maxlen: 24 192.138.147.0/24 maxlen: 24 192.226.8.0/21 maxlen: 21 192.226.8.0/22 maxlen: 22 192.226.8.0/23 maxlen: 23 192.226.8.0/24 maxlen: 24 192.226.9.0/24 maxlen: 24 192.226.10.0/23 maxlen: 23 192.226.10.0/24 maxlen: 24 192.226.11.0/24 maxlen: 24 192.226.12.0/22 maxlen: 22 192.226.12.0/23 maxlen: 23 192.226.12.0/24 maxlen: 24 192.226.13.0/24 maxlen: 24 192.226.14.0/23 maxlen: 23 192.226.14.0/24 maxlen: 24 192.226.15.0/24 maxlen: 24 192.226.16.0/20 maxlen: 20 192.226.16.0/21 maxlen: 21 192.226.16.0/22 maxlen: 22 192.226.16.0/23 maxlen: 23 192.226.16.0/24 maxlen: 24 192.226.17.0/24 maxlen: 24 192.226.18.0/23 maxlen: 23 192.226.18.0/24 maxlen: 24 192.226.19.0/24 maxlen: 24 192.226.20.0/22 maxlen: 22 192.226.20.0/23 maxlen: 23 192.226.20.0/24 maxlen: 24 192.226.21.0/24 maxlen: 24 192.226.22.0/23 maxlen: 23 192.226.22.0/24 maxlen: 24 192.226.23.0/24 maxlen: 24 192.226.24.0/22 maxlen: 22 192.226.24.0/23 maxlen: 23 192.226.24.0/24 maxlen: 24 192.226.25.0/24 maxlen: 24 192.226.26.0/23 maxlen: 23 192.226.26.0/24 maxlen: 24 192.226.27.0/24 maxlen: 24 192.226.28.0/22 maxlen: 22 192.226.28.0/23 maxlen: 23 192.226.28.0/24 maxlen: 24 192.226.29.0/24 maxlen: 24 192.226.30.0/23 maxlen: 23 192.226.30.0/24 maxlen: 24 192.226.31.0/24 maxlen: 24 199.120.176.0/23 maxlen: 23 199.120.176.0/24 maxlen: 24 199.120.177.0/24 maxlen: 24 199.120.178.0/24 maxlen: 24 199.245.247.0/24 maxlen: 24 199.249.226.0/24 maxlen: 24 204.52.153.0/24 maxlen: 24 204.52.201.0/24 maxlen: 24 2620:9e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2e:81:c2:00:ae:12:22:2d:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bbbccaf-eb44-4080-88de-8f4cc6938ce6 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=d81e491f-18ca-4942-80df-3302c86ee954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:c6:6a:73:ce:a6:89:b8:0a:6a:44:3d:f7: 61:9a:3b:09:af:66:77:02:b8:2b:ed:0e:74:af:0d: ca:15:3f:ce:85:e7:b2:a0:17:7e:b7:06:23:71:63: 8c:d3:46:85:b8:ce:b2:76:ba:69:63:d4:e6:d4:01: 0d:45:13:30:f8:bb:58:84:e6:dd:d2:83:c2:6f:54: 12:7b:59:65:47:6d:3c:49:d8:57:ad:dd:03:23:22: d7:94:cd:cd:ff:df:44:c3:f0:ab:0b:d3:a6:b1:40: 4b:b1:d2:10:37:9e:26:12:a6:cc:f8:91:4e:39:56: f7:83:33:51:40:a3:18:df:e5:46:cd:9e:02:7e:55: aa:28:27:d6:da:fa:20:29:6c:e9:ac:8a:ef:38:9d: dc:d2:a1:da:40:a6:05:da:8d:0a:74:18:01:66:db: 47:7a:de:58:dd:93:49:32:27:9f:46:f3:f3:06:85: c9:c0:16:6e:3c:9b:65:d3:93:28:78:6d:1c:49:4c: 9a:b2:28:90:b6:1e:0c:d7:f3:2b:18:0f:db:62:54: 53:b4:dd:f5:df:a1:13:31:a6:7d:30:5e:17:20:9e: b5:34:8a:45:cc:ef:7b:ac:80:fb:40:d4:21:2c:5a: 15:fa:74:a5:65:c0:c5:31:24:b0:9a:7a:39:a9:82: 34:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D9:F5:C6:F6:36:97:1A:BE:42:AB:12:4D:72:D9:84:20:B6:4C:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2a6b35d8-8539-3c36-9a9a-42084d63216c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.crl X509v3 Authority Key Identifier: keyid:A0:F9:29:E4:D3:66:80:3D:1D:E3:F0:60:40:70:58:1E:2E:65:1E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2bbbccaf-eb44-4080-88de-8f4cc6938ce6.cer sbgp-ipAddrBlock: critical IPv4: 139.187.0.0/16 156.117.0.0/16 192.138.138.0-192.138.147.255 192.226.8.0-192.226.31.255 199.120.176.0-199.120.178.255 199.245.247.0/24 199.249.226.0/24 204.52.153.0/24 204.52.201.0/24 IPv6: 2620:9e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:af:f7:71:ce:3c:91:bf:fb:61:47:b6:3a:a9:0c:0a:fb:b6: 49:54:c5:29:c2:f6:4c:2c:f8:a9:89:e9:98:e6:52:52:fd:11: ca:aa:4f:07:1e:c4:37:d9:78:32:03:e6:9f:2b:24:8f:ee:25: c7:7f:f0:f3:d9:36:5e:f4:a5:9c:7f:c7:0d:be:86:0c:60:9c: 2b:36:b8:ab:fa:aa:fd:44:fa:8b:44:8b:69:09:15:93:4d:b0: b7:46:67:af:64:f7:97:4a:c0:73:7e:e8:2a:27:58:6e:3c:35: d3:7b:2f:ac:62:82:12:93:3e:77:c9:ea:54:e5:3e:3d:49:25: 7e:78:c5:79:d2:24:48:a5:eb:d0:a5:6f:f9:d8:d4:0b:32:cb: 2c:4a:82:7d:fe:3c:20:e7:cc:d9:ae:b2:b1:c8:42:79:22:12: 08:17:60:31:b6:1d:71:35:b6:1f:47:ef:92:08:c9:25:1f:65: 6b:22:e4:f8:4f:f5:dd:26:c8:56:30:1a:20:bd:1a:c8:e0:f1: 07:e2:60:26:25:2a:59:7b:b8:f6:3e:e5:66:99:13:99:ba:d1: b2:e2:5d:1d:82:cb:3f:a0:af:c0:f7:0e:50:56:68:40:06:e3: ba:ad:d6:40:90:82:d4:31:61:32:80:99:07:19:2f:10:24:a1: 49:f1:ab:cb -----BEGIN CERTIFICATE----- MIIGmjCCBYKgAwIBAgIUAQ0Mn0MoWEw74S6BwgCuEiIttAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJiYmNjYWYtZWI0NC00MDgwLTg4ZGUtOGY0Y2M2OTM4 Y2U2MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZDgxZTQ5MWYtMThjYS00OTQyLTgwZGYtMzMwMmM4NmVlOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63fGanPOpom4CmpEPfdhmjsJr2Z3Argr7Q50 rw3KFT/OheeyoBd+twYjcWOM00aFuM6ydrppY9Tm1AENRRMw+LtYhObd0oPCb1QS e1llR208SdhXrd0DIyLXlM3N/99Ew/CrC9OmsUBLsdIQN54mEqbM+JFOOVb3gzNR QKMY3+VGzZ4CflWqKCfW2vogKWzprIrvOJ3c0qHaQKYF2o0KdBgBZttHet5Y3ZNJ MiefRvPzBoXJwBZuPJtl05MoeG0cSUyasiiQth4M1/MrGA/bYlRTtN3136ETMaZ9 MF4XIJ61NIpFzO97rID7QNQhLFoV+nSlZcDFMSSwmno5qYI0FQIDAQABo4IDrDCC A6gwHQYDVR0OBBYEFA/Z9cb2NpcavkKrEk1y2YQgtkxaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJi Y2NhZi1lYjQ0LTQwODAtODhkZS04ZjRjYzY5MzhjZTYvMmE2YjM1ZDgtODUzOS0z YzM2LTlhOWEtNDIwODRkNjMyMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmJiYmNjYWYtZWI0NC00MDgwLTg4 ZGUtOGY0Y2M2OTM4Y2U2LzJiYmJjY2FmLWViNDQtNDA4MC04OGRlLThmNGNjNjkz OGNlNi5jcmwwHwYDVR0jBBgwFoAUoPkp5NNmgD0d4/BgQHBYHi5lHr0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYmJiY2NhZi1lYjQ0LTQwODAtODhkZS04ZjRj YzY5MzhjZTYuY2VyMHYGCCsGAQUFBwEHAQH/BGcwZTBSBAIAATBMAwMAi7sDAwCc dTAMAwQBwIqKAwQCwIqQMAwDBAPA4ggDBAXA4gAwDAMEBMd4sAMEAMd4sgMEAMf1 9wMEAMf54gMEAMw0mQMEAMw0yTAPBAIAAjAJAwcAJiAAngAAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEiv 93HOPJG/+2FHtjqpDAr7tklUxSnC9kws+KmJ6ZjmUlL9EcqqTwcexDfZeDID5p8r JI/uJcd/8PPZNl70pZx/xw2+hgxgnCs2uKv6qv1E+otEi2kJFZNNsLdGZ69k95dK wHN+6ConWG48NdN7L6xighKTPnfJ6lTlPj1JJX54xXnSJEil69Clb/nY1AsyyyxK gn3+PCDnzNmusrHIQnkiEggXYDG2HXE1th9H75IIySUfZWsi5PhP9d0myFYwGiC9 Gsjg8QfiYCYlKll7uPY+5WaZE5m60bLiXR2Cyz+gr8D3DlBWaEAG47qt1kCQgtQx YTKAmQcZLxAkoUnxq8s= -----END CERTIFICATE-----Generated at Sun Dec 21 06:17:01 2025 by rpki-client