This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa File: b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa (raw, json) Hash identifier: MFsqTY2UIRYC8I2DxCqKM5F9uRynfncNNLoZ3Z6MPC4= Subject key identifier: D5:64:E3:65:46:7D:BE:B3:B0:9A:24:CD:C2:CB:7A:8B:5E:C9:D0:21 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4CA13C2B27F4D3673D7D2D80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 396542 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:3c:2b:27:f4:d3:67:3d:7d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=40c08211-fd43-47eb-aeee-0de0f6726534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:e6:d8:fb:38:92:41:d0:91:5d:89:fe:16: d0:a8:17:01:d1:e4:74:b7:68:8b:40:01:b5:ed:f0: 36:5d:82:1e:ca:23:51:1d:b1:54:4a:6f:37:4c:0d: d8:4a:e8:e7:18:d8:46:d8:d9:89:fb:49:96:27:2d: 21:82:d1:43:29:74:cd:3a:a6:3f:79:ba:6f:7b:bc: 1a:9c:e9:39:5a:50:0b:6f:f9:08:99:f8:4c:d2:ea: e3:64:e2:b7:4d:df:d9:74:34:aa:3e:1d:57:dc:d4: 86:6b:72:2c:a6:e7:b9:9d:6f:31:0d:5b:07:19:05: 44:de:94:19:9e:0a:6a:26:48:d4:b5:22:30:cc:b3: 4c:50:ba:91:2e:df:45:0a:1c:c8:80:e1:06:35:77: 05:d8:0b:ae:81:a7:84:d7:74:f4:9a:fe:f3:88:86: ea:50:af:04:1d:71:24:74:5d:2b:18:20:e9:df:34: 71:bc:44:90:df:49:92:bf:e0:7b:3a:bf:b6:d3:68: 3a:17:07:22:5d:10:30:b3:a7:11:7b:00:89:33:29: 75:33:7f:e6:71:1b:b3:51:2b:1a:c0:77:4b:bb:39: 41:b2:87:58:c4:5e:c1:6d:dd:6e:63:ba:1e:05:dc: e9:2f:4f:1c:ec:1f:5c:72:4c:d8:5c:50:09:dd:02: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:E3:65:46:7D:BE:B3:B0:9A:24:CD:C2:CB:7A:8B:5E:C9:D0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3e59f0f-3759-3833-9a05-71cc1b1e1732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ce:89:d1:d3:be:6d:c6:0c:d8:8a:9d:ff:7d:19:0c:29:c3: 48:77:a0:b4:2d:17:e6:5b:f7:f0:b3:b9:27:f7:4f:50:5c:a0: 8b:c1:1e:91:77:01:fb:7d:3a:67:f3:1a:1b:f7:83:ed:88:a4: 82:a8:5b:92:be:62:8a:33:ea:f7:ef:85:30:74:6e:d9:7d:f2: d3:50:80:21:d8:d8:26:28:c0:51:1a:7a:a7:2e:6c:d7:44:17: a3:94:91:5d:ef:5a:1d:2e:bd:47:7a:a5:ab:6a:8a:b8:68:dd: 97:7d:c9:e5:ad:c1:88:37:3d:38:73:22:20:af:bc:47:9f:68: 27:df:24:9a:24:66:28:c3:74:94:9e:82:47:d0:9f:fd:31:21: 4c:60:22:f0:5c:35:b5:9a:79:ef:62:4d:77:53:cd:9c:40:a6: 30:90:7d:93:8a:16:42:06:ca:76:1f:3b:ce:5c:81:f6:d1:fd: cd:31:94:c3:54:4f:5e:5c:92:4b:66:e5:a8:7d:26:68:b7:45: 40:be:61:27:dd:c0:87:10:2a:2f:b8:59:4c:df:ed:aa:52:f6: 06:b7:82:d6:c1:72:cb:2c:4d:dc:9c:fa:5d:16:3a:12:94:9d: 21:73:5e:0d:63:67:5a:f4:64:1b:1d:8e:88:e9:b8:b0:c5:a3: 0f:6a:40:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTwrJ/TTZz19LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDBjMDgyMTEtZmQ0My00N2ViLWFlZWUtMGRlMGY2NzI2NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZXm2Ps4kkHQkV2J/hbQqBcB0eR0t2iLQAG1 7fA2XYIeyiNRHbFUSm83TA3YSujnGNhG2NmJ+0mWJy0hgtFDKXTNOqY/ebpve7wa nOk5WlALb/kImfhM0urjZOK3Td/ZdDSqPh1X3NSGa3Ispue5nW8xDVsHGQVE3pQZ ngpqJkjUtSIwzLNMULqRLt9FChzIgOEGNXcF2AuugaeE13T0mv7ziIbqUK8EHXEk dF0rGCDp3zRxvESQ30mSv+B7Or+202g6FwciXRAws6cRewCJMyl1M3/mcRuzUSsa wHdLuzlBsodYxF7Bbd1uY7oeBdzpL08c7B9cckzYXFAJ3QJ1PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVk42VGfb6zsJokzcLLeoteydAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjNlNTlmMGYtMzc1OS0z ODMzLTlhMDUtNzFjYzFiMWUxNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTOidHTvm3GDNiKnf99GQwpw0h3oLQtF+Zb9/CzuSf3T1BcoIvBHpF3 Aft9OmfzGhv3g+2IpIKoW5K+Yooz6vfvhTB0btl98tNQgCHY2CYowFEaeqcubNdE F6OUkV3vWh0uvUd6patqirho3Zd9yeWtwYg3PThzIiCvvEefaCffJJokZijDdJSe gkfQn/0xIUxgIvBcNbWaee9iTXdTzZxApjCQfZOKFkIGynYfO85cgfbR/c0xlMNU T15ckktm5ah9Jmi3RUC+YSfdwIcQKi+4WUzf7apS9ga3gtbBcsssTdyc+l0WOhKU nSFzXg1jZ1r0ZBsdjojpuLDFow9qQOI= -----END CERTIFICATE-----Generated at Sun Jan 25 23:10:11 2026 by rpki-client