This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa File: 2db2e59a-1695-343f-b14c-f4f1be9a9556.roa (raw, json) Hash identifier: clXx7mbmyOJ58KkT2wO5BZ0Ol5HxC1HHZZcnwIhhN/c= Subject key identifier: 43:D8:2D:0A:30:95:42:31:BC:36:9C:7B:C1:A3:B2:C9:51:87:B2:18 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584C8476FAAB150B15B229E54860 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 13781 IP address blocks: 216.206.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:fa:ab:15:0b:15:b2:29:e5:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=ab2ff7a8-aad2-4f62-b37c-5089d67a8a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:c5:25:dd:d4:82:f6:3f:23:eb:17:9a:a7: d8:1a:51:03:36:4b:6d:94:4d:f2:ff:02:a9:74:fc: 6b:df:71:d7:97:de:4e:9a:07:c2:58:09:db:10:9c: 99:3b:13:59:71:e2:b5:3b:58:70:4b:f0:b2:26:f3: 70:ce:d8:9e:61:6b:37:fd:08:f7:4f:80:68:31:25: df:fa:7e:b3:38:25:30:f9:78:f1:cb:c3:28:87:ba: 07:4f:4e:d5:26:a6:d2:0c:e0:a8:b6:8a:15:1c:ae: 7d:8f:fa:fd:df:ac:67:5f:a4:1c:4d:da:24:e0:ef: ef:04:50:59:e9:71:a6:f2:2c:f6:3a:e7:0d:d0:29: 34:99:78:ce:66:c1:28:c5:a4:bf:71:38:77:cd:80: 01:16:5c:7e:49:23:8f:3d:41:55:2f:39:55:46:08: 23:24:a0:eb:a6:fa:65:96:c9:53:c2:64:de:d2:a8: 1b:1a:2a:f4:f9:49:2f:da:79:f5:6e:a7:77:a6:0e: 4d:23:a0:b0:5b:3f:4d:a3:e4:63:15:ae:eb:d3:06: a3:9a:f3:be:ee:07:5a:c2:9b:db:64:fa:e1:c6:eb: 2b:7b:02:4c:e7:1e:41:e2:03:cf:62:5b:3b:69:8d: 0a:c7:fc:89:8d:37:47:a2:a1:af:3e:bf:87:66:9d: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D8:2D:0A:30:95:42:31:BC:36:9C:7B:C1:A3:B2:C9:51:87:B2:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2db2e59a-1695-343f-b14c-f4f1be9a9556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 216.206.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:09:cd:ec:1a:91:ef:a6:90:cc:79:0a:07:49:95:d7:c5:37: f3:d9:0d:c6:27:f3:56:4e:46:5e:ac:b2:9c:c2:10:fd:20:87: 36:3a:dc:77:be:9c:46:96:f7:64:a7:63:f6:5a:5b:9d:39:75: 1e:ff:c4:99:f4:3b:8b:d6:cb:ba:fa:10:de:72:90:b0:42:ac: 2e:fd:41:62:53:04:1b:5b:89:ae:c0:f4:49:04:42:b3:e8:33: c2:cf:8a:8d:38:2c:b4:1a:b0:a8:a0:00:e6:02:ff:e3:c1:10: b1:53:3a:3c:a9:63:73:59:6c:25:3d:5e:aa:80:42:55:e2:67: 52:16:90:6f:6c:ea:12:04:91:74:0e:3c:c4:25:b6:c3:1e:16: bf:c6:0d:e9:e9:2a:23:3d:8c:ea:3c:b8:88:3a:ce:ff:34:4e: d1:49:97:e0:30:20:68:a1:45:ee:06:08:d6:5f:18:27:e3:7f: be:a8:3d:be:58:54:d2:76:b9:a1:d0:e6:45:0c:25:72:c1:1e: 0a:04:81:37:6f:de:68:09:0f:5d:4f:1f:e1:10:c3:f6:6d:3c: cb:b3:3f:19:6b:89:9b:3a:71:5b:d9:36:45:ab:c3:e5:64:99: 25:6d:9d:00:6e:5a:8a:e7:3f:d3:88:d7:6d:8c:ce:01:33:5c: fd:9d:af:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdvqrFQsVsinlSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YWIyZmY3YTgtYWFkMi00ZjYyLWIzN2MtNTA4OWQ2N2E4YTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoijFJd3UgvY/I+sXmqfYGlEDNkttlE3y/wKp dPxr33HXl95OmgfCWAnbEJyZOxNZceK1O1hwS/CyJvNwztieYWs3/Qj3T4BoMSXf +n6zOCUw+Xjxy8Moh7oHT07VJqbSDOCotooVHK59j/r936xnX6QcTdok4O/vBFBZ 6XGm8iz2OucN0Ck0mXjOZsEoxaS/cTh3zYABFlx+SSOPPUFVLzlVRggjJKDrpvpl lslTwmTe0qgbGir0+Ukv2nn1bqd3pg5NI6CwWz9No+RjFa7r0wajmvO+7gdawpvb ZPrhxusrewJM5x5B4gPPYls7aY0Kx/yJjTdHoqGvPr+HZp3zsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPYLQowlUIxvDace8GjsslRh7IYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMmRiMmU1OWEtMTY5NS0z NDNmLWIxNGMtZjRmMWJlOWE5NTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2M6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoJzewake+mkMx5CgdJldfFN/PZDcYn81ZORl6sspzCEP0ghzY63He+ nEaW92SnY/ZaW505dR7/xJn0O4vWy7r6EN5ykLBCrC79QWJTBBtbia7A9EkEQrPo M8LPio04LLQasKigAOYC/+PBELFTOjypY3NZbCU9XqqAQlXiZ1IWkG9s6hIEkXQO PMQltsMeFr/GDenpKiM9jOo8uIg6zv80TtFJl+AwIGihRe4GCNZfGCfjf76oPb5Y VNJ2uaHQ5kUMJXLBHgoEgTdv3mgJD11PH+EQw/ZtPMuzPxlriZs6cVvZNkWrw+Vk mSVtnQBuWornP9OI122MzgEzXP2dr6s= -----END CERTIFICATE-----Generated at Sun Jan 25 16:03:14 2026 by rpki-client