This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa File: 856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa (raw, json) Hash identifier: VxxXltMpQOVd+5QVbBK36DNqQrkZWZmv9S14vrJGjHg= Subject key identifier: A8:32:CC:A9:F4:FE:FF:CC:F0:A4:93:3D:67:73:AD:B2:47:08:AF:EF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4CA13B79DAFB0F3BA995AC80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 397195 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:3b:79:da:fb:0f:3b:a9:95:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=a1905a82-367f-4b16-bb7d-62d30fc6ce06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:c2:41:8e:f8:76:5c:cd:e9:8e:ac:a2:e5: 32:40:f9:55:11:13:8f:04:03:ed:e1:88:91:94:de: 96:9c:9f:39:16:28:37:ae:78:d3:d2:9a:32:c9:d0: 63:8a:a5:88:2d:29:a7:47:c3:b1:ee:82:a1:3c:fc: 7f:b0:10:3d:b0:d7:1f:7a:9d:47:5f:2d:1f:47:7d: 4a:90:dd:2f:dc:a2:e8:ae:eb:22:4e:87:24:94:3e: 16:1b:8d:46:f5:7d:d2:f3:e6:9d:65:28:4c:47:77: a2:b3:6c:a4:a9:ee:cf:c3:b2:c8:59:c4:0d:6a:96: e2:ea:6d:03:7b:01:16:d5:68:a8:5b:10:e4:2a:22: fb:34:39:2e:c7:b5:44:c3:0d:d0:9e:cc:99:3b:cb: b9:50:2d:cf:a9:0d:82:85:e3:95:0e:7f:8f:4b:cd: da:c7:9a:1e:2d:d4:66:bc:5d:a1:1a:71:4c:3b:5e: 10:e7:17:1f:04:0a:3c:0f:c9:de:ad:82:6c:ec:58: df:af:37:61:31:6c:b2:67:a4:f4:d8:a2:1d:14:48: 82:42:66:5a:73:7c:76:80:98:18:a5:8c:91:13:b2: a9:39:7c:98:0c:25:84:85:a5:8b:1c:93:10:9f:9f: 17:0a:01:da:35:cc:6f:5f:f0:86:97:6b:fb:e7:7d: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:32:CC:A9:F4:FE:FF:CC:F0:A4:93:3D:67:73:AD:B2:47:08:AF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/856f5693-c4d3-32ad-a9ff-f8a0f092265c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9a:5d:36:14:98:7c:55:8b:d9:42:b0:fb:87:82:58:aa:08: 54:f6:e9:d2:14:28:c2:5d:03:54:2f:da:88:93:52:12:01:25: 8f:1a:0e:8e:40:e6:27:22:18:53:fd:72:6b:de:64:9e:c3:0e: f1:c7:21:c3:c6:a5:1c:9b:e3:f5:bf:ab:e3:a7:8a:4c:fa:c4: 09:50:42:47:e5:48:4a:4b:2b:ee:7b:e1:66:b7:6f:b6:3f:77: 95:2f:ac:86:56:cc:e2:82:e1:82:a2:ef:0b:15:6c:f8:f1:3d: be:ed:3c:f5:93:14:f3:45:f9:97:95:dc:37:29:16:51:91:52: 43:5c:26:50:e0:79:d7:c8:21:cd:e6:07:54:03:f9:7c:07:2a: e5:5f:ae:23:2b:b6:57:53:71:88:72:ec:54:59:22:1b:50:3c: 2c:eb:81:ff:5e:06:b4:42:9a:3d:e1:20:60:97:47:f5:49:35: f5:8f:93:9c:b2:e4:1b:9c:5c:f2:8e:7c:10:77:58:31:91:40: d6:f8:d5:15:99:0b:91:14:86:72:ff:15:ff:73:87:38:10:0c: 88:ec:89:f8:73:11:6c:0c:2d:9f:4b:07:eb:68:d5:f5:5f:12: bd:25:d1:3e:29:a0:b7:c5:99:2b:53:32:9a:d2:70:b0:fd:e8: 02:9c:3e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTt52vsPO6mVrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTE5MDVhODItMzY3Zi00YjE2LWJiN2QtNjJkMzBmYzZjZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTnCQY74dlzN6Y6souUyQPlVEROPBAPt4YiR lN6WnJ85Fig3rnjT0poyydBjiqWILSmnR8Ox7oKhPPx/sBA9sNcfep1HXy0fR31K kN0v3KLorusiTocklD4WG41G9X3S8+adZShMR3eis2ykqe7Pw7LIWcQNapbi6m0D ewEW1WioWxDkKiL7NDkux7VEww3QnsyZO8u5UC3PqQ2CheOVDn+PS83ax5oeLdRm vF2hGnFMO14Q5xcfBAo8D8nerYJs7FjfrzdhMWyyZ6T02KIdFEiCQmZac3x2gJgY pYyRE7KpOXyYDCWEhaWLHJMQn58XCgHaNcxvX/CGl2v7530AswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgyzKn0/v/M8KSTPWdzrbJHCK/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODU2ZjU2OTMtYzRkMy0z MmFkLWE5ZmYtZjhhMGYwOTIyNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeaXTYUmHxVi9lCsPuHgliqCFT26dIUKMJdA1Qv2oiTUhIBJY8aDo5A 5iciGFP9cmveZJ7DDvHHIcPGpRyb4/W/q+Onikz6xAlQQkflSEpLK+574Wa3b7Y/ d5UvrIZWzOKC4YKi7wsVbPjxPb7tPPWTFPNF+ZeV3DcpFlGRUkNcJlDgedfIIc3m B1QD+XwHKuVfriMrtldTcYhy7FRZIhtQPCzrgf9eBrRCmj3hIGCXR/VJNfWPk5yy 5BucXPKOfBB3WDGRQNb41RWZC5EUhnL/Ff9zhzgQDIjsifhzEWwMLZ9LB+to1fVf Er0l0T4poLfFmStTMprScLD96AKcPjM= -----END CERTIFICATE-----Generated at Sun Jan 25 18:33:24 2026 by rpki-client