This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa File: 40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa (raw, json) Hash identifier: WsmqPK4vNqa4H86+mzkVXq16TaFqenYic3t4jCj68qM= Subject key identifier: BE:FC:F6:DA:CC:13:FE:8F:0A:AF:03:1E:3B:CF:65:AB:23:7F:06:1B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4E069CFE4952CFA1405C22C0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 397210 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:9c:fe:49:52:cf:a1:40:5c:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=f99ec70b-5b7e-4a02-a0eb-a415a7c483fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e3:9c:64:c0:b3:c7:38:39:a4:74:16:e7:9c: 43:fa:24:73:7b:0e:1e:fe:e1:ba:9c:e1:c8:43:98: 02:21:97:42:ac:88:16:5d:d0:86:99:19:85:bd:f0: dc:d1:87:dd:51:0c:d3:b4:9b:78:6e:7d:1b:dd:3e: fa:10:5b:b8:df:3f:9b:17:e6:a9:a6:94:7a:fc:6b: b4:d0:64:ac:f3:19:f7:6e:6f:06:fc:a5:98:be:1b: 2d:22:c3:53:be:47:60:b6:b7:1a:89:25:cc:18:c5: 52:71:5a:4e:20:1a:4b:44:f2:67:3e:47:d9:75:e1: b2:5c:fc:cd:d8:26:93:f3:04:61:e3:18:b6:28:94: a4:cd:2b:d9:61:d9:58:25:a1:37:88:58:5e:58:2f: fa:7b:20:b9:73:94:1c:49:5f:84:e6:21:b7:e3:65: b7:c9:ef:bb:d4:95:65:46:ae:4e:bf:66:f5:f0:17: f7:bf:de:e0:f5:a7:99:59:3d:1a:06:a7:1c:fe:c3: 0f:c2:70:c8:c4:8b:1c:9b:0f:41:81:47:a0:33:df: 1f:74:3a:bb:7a:18:df:53:fb:8f:0c:76:79:a0:f1: cc:53:d4:ee:4d:67:d4:97:a9:09:b4:c4:75:a1:3a: e8:e4:9b:6c:b1:85:c8:c4:00:99:ad:7a:df:45:fa: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FC:F6:DA:CC:13:FE:8F:0A:AF:03:1E:3B:CF:65:AB:23:7F:06:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40595a96-e1fb-31b6-8509-8bda0ace1a5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:18:86:50:e1:d3:e2:4d:59:f9:d2:79:85:48:b7:48:06:a2: 0e:f8:13:47:16:98:ee:6e:db:1a:21:5d:e2:46:2f:a1:5e:f9: 7b:72:6e:73:0c:b8:b8:f4:db:30:3d:18:12:be:64:a5:ad:4e: 88:39:84:8a:1e:e5:60:d6:3f:f0:20:97:d2:a4:52:20:b6:55: f1:ed:d1:63:2b:b0:28:41:16:5b:15:e1:d3:f4:cf:4b:3c:a9: 1e:08:4b:d0:2c:52:84:a0:b2:e7:ca:57:8e:8b:12:57:ce:0e: 0c:46:33:32:88:40:81:cd:3b:b0:12:b9:28:50:a4:77:4a:1d: 2e:71:37:15:28:6e:1e:9e:ce:a9:dc:41:54:bf:f0:2f:cd:2a: 2c:ab:0d:08:61:22:a0:08:b5:fd:dd:19:0e:e6:4d:7f:47:2d: fc:22:42:37:ea:ca:e7:7e:4c:22:a1:89:2c:90:03:e4:e3:46: b0:65:fa:8d:5d:01:26:e6:85:05:ca:c2:ed:ff:a6:03:39:64: 57:5c:c9:52:f0:ab:52:51:99:fa:99:45:e1:93:f5:a0:6f:39: 1b:61:61:f8:d6:fc:6f:6e:7c:5a:3f:d6:0b:2f:42:25:26:2e: 49:a1:05:57:24:82:c7:cb:fd:88:ef:1f:b5:cb:d7:3e:34:dd: 75:cc:71:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExOBpz+SVLPoUBcIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk Zjk5ZWM3MGItNWI3ZS00YTAyLWEwZWItYTQxNWE3YzQ4M2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOOcZMCzxzg5pHQW55xD+iRzew4e/uG6nOHI Q5gCIZdCrIgWXdCGmRmFvfDc0YfdUQzTtJt4bn0b3T76EFu43z+bF+apppR6/Gu0 0GSs8xn3bm8G/KWYvhstIsNTvkdgtrcaiSXMGMVScVpOIBpLRPJnPkfZdeGyXPzN 2CaT8wRh4xi2KJSkzSvZYdlYJaE3iFheWC/6eyC5c5QcSV+E5iG342W3ye+71JVl Rq5Ov2b18Bf3v97g9aeZWT0aBqcc/sMPwnDIxIscmw9BgUegM98fdDq7ehjfU/uP DHZ5oPHMU9TuTWfUl6kJtMR1oTro5JtssYXIxACZrXrfRfqH/QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL789trME/6PCq8DHjvPZasjfwYbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDA1OTVhOTYtZTFmYi0z MWI2LTg1MDktOGJkYTBhY2UxYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyGIZQ4dPiTVn50nmFSLdIBqIO+BNHFpjubtsaIV3iRi+hXvl7cm5z DLi49NswPRgSvmSlrU6IOYSKHuVg1j/wIJfSpFIgtlXx7dFjK7AoQRZbFeHT9M9L PKkeCEvQLFKEoLLnyleOixJXzg4MRjMyiECBzTuwErkoUKR3Sh0ucTcVKG4ens6p 3EFUv/AvzSosqw0IYSKgCLX93RkO5k1/Ry38IkI36srnfkwioYkskAPk40awZfqN XQEm5oUFysLt/6YDOWRXXMlS8KtSUZn6mUXhk/WgbzkbYWH41vxvbnxaP9YLL0Il Ji5JoQVXJILHy/2I7x+1y9c+NN11zHHs -----END CERTIFICATE-----Generated at Sun Jan 25 20:09:12 2026 by rpki-client