This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa File: 2383ad5c-9223-3580-ad15-2b553e832e5d.roa (raw, json) Hash identifier: F6HQZPo2hSCWt4Bg7xr85cdwZ5zEQdY/Wmk1wrNqKGo= Subject key identifier: FF:17:BB:A2:20:1D:54:25:8B:64:B1:E2:6A:B2:64:80:DE:E0:19:C4 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4CA10E2745EB20DEBF8DAF40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 396610 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:0e:27:45:eb:20:de:bf:8d:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=423873fe-5f3e-421c-887a-4bc3ffebc1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:3f:f3:1c:81:78:0c:7e:ad:85:4b:0d:15: c6:72:66:49:fe:ae:3d:5d:6e:22:38:7f:cc:a5:f7: 1e:b0:a7:61:cd:65:98:4a:55:cf:a2:59:29:fb:b8: 33:ef:0a:65:1f:35:8f:41:71:9e:6d:35:24:22:bb: d8:c1:03:d3:a6:6c:b7:ef:c7:7f:e6:68:64:6c:29: 6f:ef:24:ab:e9:72:6c:a2:8e:dd:13:99:30:eb:ad: de:7c:fd:98:ca:1e:6c:b1:67:32:9c:27:2f:45:32: 87:03:14:17:b9:80:d3:01:7a:42:05:0f:37:a2:51: 9e:dd:32:9f:8a:2b:3d:d2:cf:c4:9c:10:2e:fc:c6: 00:9f:ca:d6:1b:db:d1:a7:4a:db:11:ec:20:f3:18: df:b5:7d:f1:67:98:cc:a2:88:52:31:35:e8:64:1c: 07:01:4a:99:2e:cd:39:17:48:3e:16:73:3e:86:eb: 9e:75:ff:74:37:1b:af:b0:7f:aa:c6:42:fc:ee:33: 9c:fc:dd:10:f1:1d:56:bb:6f:b8:c5:67:cf:7d:de: d5:de:19:ec:ab:ed:f7:b3:e7:a3:08:3e:5b:fa:76: ba:a9:92:d1:ec:08:f1:05:f8:f0:54:9f:36:22:53: 60:b1:ac:d3:7c:62:6c:c1:f3:37:37:89:39:73:cf: a4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:17:BB:A2:20:1D:54:25:8B:64:B1:E2:6A:B2:64:80:DE:E0:19:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/2383ad5c-9223-3580-ad15-2b553e832e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e4:48:c8:bc:d7:23:ec:14:54:a9:6d:dd:dc:f8:f7:c2:1d: 48:68:b1:cf:62:9c:21:84:37:3a:e0:f6:0e:bf:70:30:de:3d: ea:aa:9b:37:ed:e2:5a:16:6a:ee:30:01:62:a1:6a:e1:42:a3: f5:b7:29:4d:12:c2:14:6a:9f:22:6c:08:2b:7a:68:f9:25:f5: 06:c7:75:4c:ac:cd:63:2a:9f:ef:bc:e0:ce:2f:9c:5c:36:17: 2c:bd:18:b4:0e:dd:74:ea:99:a4:66:1b:44:b5:0d:9c:7e:a8: 37:dc:1a:b0:21:56:64:8c:3c:38:f6:fa:68:bc:a2:96:37:dc: e3:c6:57:32:fc:f0:13:95:25:fb:73:23:40:4a:99:38:15:86: 71:55:18:54:d2:79:da:db:50:4b:2b:a7:19:cc:11:52:ff:8a: 64:93:10:90:8b:ef:c3:1d:29:e0:e8:18:7a:84:3e:49:3e:56: 61:1e:53:70:b9:1c:ef:80:27:ba:60:a0:be:fc:7e:99:55:ea: 63:93:0b:93:aa:16:da:9c:d9:15:a7:1b:a7:65:1c:53:4f:e6: 60:2d:12:ae:f8:ae:a2:09:7a:1d:66:8d:1a:53:17:3c:03:5f: 64:0d:0f:fd:4d:92:23:f9:f8:bb:1d:7c:33:b6:87:65:7d:4e: 68:d0:b5:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoQ4nResg3r+Nr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDIzODczZmUtNWYzZS00MjFjLTg4N2EtNGJjM2ZmZWJjMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+c/8xyBeAx+rYVLDRXGcmZJ/q49XW4iOH/M pfcesKdhzWWYSlXPolkp+7gz7wplHzWPQXGebTUkIrvYwQPTpmy378d/5mhkbClv 7ySr6XJsoo7dE5kw663efP2Yyh5ssWcynCcvRTKHAxQXuYDTAXpCBQ83olGe3TKf iis90s/EnBAu/MYAn8rWG9vRp0rbEewg8xjftX3xZ5jMoohSMTXoZBwHAUqZLs05 F0g+FnM+huuedf90NxuvsH+qxkL87jOc/N0Q8R1Wu2+4xWfPfd7V3hnsq+33s+ej CD5b+na6qZLR7AjxBfjwVJ82IlNgsazTfGJswfM3N4k5c8+kLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8Xu6IgHVQli2Sx4mqyZIDe4BnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMjM4M2FkNWMtOTIyMy0z NTgwLWFkMTUtMmI1NTNlODMyZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfkSMi81yPsFFSpbd3c+PfCHUhosc9inCGENzrg9g6/cDDePeqqmzft 4loWau4wAWKhauFCo/W3KU0SwhRqnyJsCCt6aPkl9QbHdUyszWMqn++84M4vnFw2 Fyy9GLQO3XTqmaRmG0S1DZx+qDfcGrAhVmSMPDj2+mi8opY33OPGVzL88BOVJftz I0BKmTgVhnFVGFTSedrbUEsrpxnMEVL/imSTEJCL78MdKeDoGHqEPkk+VmEeU3C5 HO+AJ7pgoL78fplV6mOTC5OqFtqc2RWnG6dlHFNP5mAtEq74rqIJeh1mjRpTFzwD X2QND/1NkiP5+LsdfDO2h2V9TmjQtQ8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:13:55 2026 by rpki-client