This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa File: d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa (raw, json) Hash identifier: czjt+M7MeHek91SRGb+Mer2quzh+2AkIEbAvMX4U55Y= Subject key identifier: 2C:1F:02:A2:9D:62:B5:82:A9:38:CE:71:EA:7D:75:62:12:A9:D9:E0 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584BF4B0960F2DF2A4EFE5B89500 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 22781 IP address blocks: 216.131.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:96:0f:2d:f2:a4:ef:e5:b8:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=1a29bfba-1fc8-49ae-a508-a9b646c0cc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:e2:e0:38:8d:8a:86:1e:ff:f9:bc:59:20: 9c:1d:be:d4:33:b0:95:7c:62:51:a9:7c:e4:9d:f1: 36:49:21:6b:84:ca:25:97:4b:d5:9c:49:7e:c4:73: cf:90:e3:54:2e:b2:4d:e8:8b:c2:1d:52:fb:4b:78: 5b:e0:f2:ac:8b:02:4c:63:5b:3b:ad:f0:38:62:05: 6a:32:43:f7:0c:57:d5:9f:df:10:30:c8:7d:dc:54: 15:41:47:04:b6:c1:d6:ff:78:33:53:08:5a:99:17: 45:ec:0c:be:30:09:ba:6f:02:b9:77:b5:ee:e3:54: b9:de:77:cc:22:ce:90:ce:1a:a7:c6:30:79:ac:2d: c4:03:8d:e7:75:80:d8:e6:d3:c1:5d:90:f4:0d:f5: 75:6a:fe:87:b8:aa:cd:a5:be:55:06:66:9e:da:a9: 50:72:21:a4:3d:53:00:3a:a9:8b:d3:d3:70:45:3e: 71:76:68:a7:f7:57:11:a9:0c:b3:8b:98:48:54:1f: 7b:40:be:84:47:bd:88:ac:97:25:10:6f:d7:b2:9e: 41:9a:81:ee:46:61:f2:2a:c1:5e:6e:36:ef:85:c4: a4:e4:17:46:75:30:ba:bd:bd:47:41:73:91:ab:15: 4e:35:9f:64:27:a9:55:19:3d:16:d9:eb:46:60:ca: 28:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:1F:02:A2:9D:62:B5:82:A9:38:CE:71:EA:7D:75:62:12:A9:D9:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d4c35eea-db7f-3a31-84ac-144a1f7c2328.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:11:8b:17:03:3b:b8:7a:b0:b6:6c:aa:94:f2:72:8d:37:ea: 73:44:69:4f:2c:21:2e:bd:66:9d:fa:eb:da:28:e4:5d:76:85: ca:99:43:06:4a:1e:0f:a0:75:95:70:33:68:01:09:6b:5a:73: 3f:8d:55:ff:84:e4:c0:d2:ea:a3:1d:55:59:d3:f7:a4:9f:90: fd:4b:76:f0:bd:e0:a7:58:17:d6:75:58:6a:9d:9f:ac:36:ce: 37:5a:90:e2:2b:6e:ed:72:20:d8:6e:c7:8b:86:e1:21:bc:28: 56:12:2a:ca:53:dc:f1:53:39:a0:7b:e7:6f:86:07:e1:4f:6b: 72:42:88:1e:69:07:b5:24:83:d4:d5:a9:d7:e0:e6:cc:93:ca: 64:b0:3b:17:ae:fb:da:6b:df:c6:56:b7:71:6c:38:06:ef:26: 69:93:9d:c6:23:b2:26:9d:1f:60:05:69:6e:b1:87:bb:14:17: 9a:b3:0f:b5:ec:db:a0:cd:94:1a:8c:5b:17:09:3b:cc:cc:93: 09:ae:15:94:3f:67:60:b5:8a:9a:29:69:6c:b4:46:f9:2d:3b: a4:3f:93:d0:b5:99:32:5a:74:cc:8a:02:e4:75:76:41:a7:37: 3a:5f:2f:07:9b:43:2a:42:b8:35:0b:4d:b8:90:ff:a7:54:0e: 80:e1:3c:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sJYPLfKk7+W4lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk MWEyOWJmYmEtMWZjOC00OWFlLWE1MDgtYTliNjQ2YzBjYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXTi4DiNioYe//m8WSCcHb7UM7CVfGJRqXzk nfE2SSFrhMoll0vVnEl+xHPPkONULrJN6IvCHVL7S3hb4PKsiwJMY1s7rfA4YgVq MkP3DFfVn98QMMh93FQVQUcEtsHW/3gzUwhamRdF7Ay+MAm6bwK5d7Xu41S53nfM Is6QzhqnxjB5rC3EA43ndYDY5tPBXZD0DfV1av6HuKrNpb5VBmae2qlQciGkPVMA OqmL09NwRT5xdmin91cRqQyzi5hIVB97QL6ER72IrJclEG/Xsp5BmoHuRmHyKsFe bjbvhcSk5BdGdTC6vb1HQXORqxVONZ9kJ6lVGT0W2etGYMoohwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwfAqKdYrWCqTjOcep9dWISqdngMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDRjMzVlZWEtZGI3Zi0z YTMxLTg0YWMtMTQ0YTFmN2MyMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2INUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAERixcDO7h6sLZsqpTyco036nNEaU8sIS69Zp3669oo5F12hcqZQwZK Hg+gdZVwM2gBCWtacz+NVf+E5MDS6qMdVVnT96SfkP1LdvC94KdYF9Z1WGqdn6w2 zjdakOIrbu1yINhux4uG4SG8KFYSKspT3PFTOaB752+GB+FPa3JCiB5pB7Ukg9TV qdfg5syTymSwOxeu+9pr38ZWt3FsOAbvJmmTncYjsiadH2AFaW6xh7sUF5qzD7Xs 26DNlBqMWxcJO8zMkwmuFZQ/Z2C1ipopaWy0RvktO6Q/k9C1mTJadMyKAuR1dkGn NzpfLwebQypCuDULTbiQ/6dUDoDhPLw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:59 2025 by rpki-client