This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa File: a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa (raw, json) Hash identifier: LP6zJTUHqXBq8NQwN+IpoEgXzQIOToU6FvUCdLU9o8Q= Subject key identifier: 6A:BF:3E:50:7B:27:CC:BF:28:31:05:FB:15:0C:DA:85:1A:8B:46:B9 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584C1A60C2DDA08EE62CDCB4BC80 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:c2:dd:a0:8e:e6:2c:dc:b4:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=695a329e-8377-4fb7-ae26-d38996cfdac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e4:e3:8d:2f:72:e0:d3:29:72:16:a7:78:54: dc:3f:f8:0c:66:4c:a8:8b:cf:35:8b:f3:49:c9:de: 7b:a2:c6:b2:71:98:ce:03:5f:67:a6:a3:55:d3:0d: 82:28:d6:f3:7f:c9:40:4d:3b:50:93:97:1e:26:8f: 99:04:27:2a:52:e3:3b:21:1b:9e:d6:03:aa:d8:43: 07:46:57:fd:ef:35:b9:03:34:87:bc:0c:0d:de:1e: 96:96:9a:c6:ab:95:92:fa:a2:bb:99:d7:1d:f6:70: 57:c9:f2:6e:f2:e8:d3:b2:b3:97:7e:91:0e:06:fe: 3e:b8:6e:94:19:e6:fd:c2:6a:27:74:16:d0:f0:f1: 55:62:21:7d:5b:06:5c:93:a7:c6:96:a8:b1:46:ae: bd:87:5e:bf:26:e9:95:34:28:64:dd:11:a4:e5:c0: 38:cb:e0:e9:27:3a:62:22:df:fe:2d:aa:65:9d:13: 28:fa:fe:5d:40:d9:03:d1:1c:ed:1e:0e:9b:8b:ab: 14:c3:97:a2:de:13:05:8b:ba:9d:d8:38:f7:f3:e9: 59:b8:49:59:94:ec:27:e7:2e:5a:cb:5b:4c:b9:68: 9e:00:94:66:7b:74:2d:46:8d:75:65:4c:33:8e:9c: eb:e4:9f:66:74:99:91:c7:d6:34:01:24:64:f2:99: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BF:3E:50:7B:27:CC:BF:28:31:05:FB:15:0C:DA:85:1A:8B:46:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/a7aefd4a-4120-3eaf-bc68-aa2a0da6951a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:56:1f:09:11:a2:f8:06:7a:b6:22:b2:04:71:12:31:c8:0b: b3:d8:f7:97:f7:ff:3b:bc:63:4b:77:86:e2:28:82:16:91:35: 8b:45:e9:e8:af:73:fd:58:43:50:a5:4e:aa:42:35:df:7c:2e: 62:62:72:12:89:51:98:e1:09:27:20:9b:19:ed:ae:c2:e8:ab: 0d:0e:21:69:5c:cb:6b:40:40:a7:dc:ea:a1:a8:6f:26:02:42: 3d:06:c5:d8:17:c7:75:e2:a8:4d:80:ff:81:fb:8f:10:19:4f: 7b:36:e1:a5:aa:6f:5f:22:aa:3a:1f:8a:d9:cd:f4:31:18:c2: 78:53:86:04:59:6f:f6:c9:a3:c8:28:e3:97:90:c5:84:83:fe: f5:03:d0:27:f1:8e:fa:79:48:15:01:ca:c6:12:6e:78:de:d2: 20:c7:d8:f0:a1:53:f2:85:42:6c:54:4c:3b:7c:39:54:69:54: 6a:e3:2f:1d:6b:96:49:c5:fb:6e:27:6b:75:db:b3:3f:12:d0: 96:1c:43:07:bb:4a:48:12:cb:38:9c:47:25:17:db:08:07:b0: 80:49:77:b9:cc:6a:c4:70:9d:46:8a:f0:36:7e:83:a2:38:d3: 5d:aa:95:b2:35:76:e7:f0:92:51:e5:52:02:ce:5c:06:20:1d: 1e:30:35:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYMLdoI7mLNy0vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk Njk1YTMyOWUtODM3Ny00ZmI3LWFlMjYtZDM4OTk2Y2ZkYWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+TjjS9y4NMpchaneFTcP/gMZkyoi881i/NJ yd57osaycZjOA19npqNV0w2CKNbzf8lATTtQk5ceJo+ZBCcqUuM7IRue1gOq2EMH Rlf97zW5AzSHvAwN3h6WlprGq5WS+qK7mdcd9nBXyfJu8ujTsrOXfpEOBv4+uG6U Geb9wmondBbQ8PFVYiF9WwZck6fGlqixRq69h16/JumVNChk3RGk5cA4y+DpJzpi It/+LaplnRMo+v5dQNkD0RztHg6bi6sUw5ei3hMFi7qd2Dj38+lZuElZlOwn5y5a y1tMuWieAJRme3QtRo11ZUwzjpzr5J9mdJmRx9Y0ASRk8pnf4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq/PlB7J8y/KDEF+xUM2oUai0a5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvYTdhZWZkNGEtNDEyMC0z ZWFmLWJjNjgtYWEyYTBkYTY5NTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElWHwkRovgGerYisgRxEjHIC7PY95f3/zu8Y0t3huIoghaRNYtF6eiv c/1YQ1ClTqpCNd98LmJichKJUZjhCScgmxntrsLoqw0OIWlcy2tAQKfc6qGobyYC Qj0GxdgXx3XiqE2A/4H7jxAZT3s24aWqb18iqjofitnN9DEYwnhThgRZb/bJo8go 45eQxYSD/vUD0Cfxjvp5SBUBysYSbnje0iDH2PChU/KFQmxUTDt8OVRpVGrjLx1r lknF+24na3Xbsz8S0JYcQwe7SkgSyzicRyUX2wgHsIBJd7nMasRwnUaK8DZ+g6I4 012qlbI1dufwklHlUgLOXAYgHR4wNW4= -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:12 2025 by rpki-client