This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa File: bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa (raw, json) Hash identifier: XqwHQYA3k/6qGCF0QAQz/B6u+Gq7pg9kqOB3hkiCqeE= Subject key identifier: C3:1A:22:82:FF:4E:D0:E6:FB:1B:7B:7F:76:D9:23:95:7D:22:74:6C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4E069F355A509C0518E0AD80 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 397207 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:9f:35:5a:50:9c:05:18:e0:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=bca96013-9db7-4d3d-935f-ddbffa16d146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b8:e4:45:80:c0:e6:59:9a:d1:29:7b:87:a5: 22:85:93:b4:6a:ca:b6:8b:05:e3:e1:47:83:84:7a: 88:af:48:b2:25:54:d3:8e:ad:52:3e:84:e6:bb:3d: e4:81:aa:f4:c9:13:e1:a6:84:78:8b:e3:5b:ee:6f: 53:8a:94:25:fe:2c:15:27:44:33:b9:7a:b1:9f:93: 5e:f3:33:03:54:5e:a7:f0:d0:03:1b:35:71:fe:bc: ac:cf:15:37:34:76:f7:dd:24:0a:79:96:90:2e:2e: 09:11:78:9d:ed:7c:5d:94:c4:c3:d0:28:70:1a:e2: 13:ea:dd:49:2f:60:70:d5:99:6a:4d:41:a1:79:8a: 50:70:a1:2a:d1:f6:77:fd:ed:07:a4:63:31:7a:61: 15:16:73:69:cb:03:0f:6a:63:2d:f2:1b:ae:cf:14: b7:45:0d:9d:31:b2:75:c8:86:d5:f1:bf:1c:cb:dd: f0:3f:6b:91:3a:36:df:db:43:7e:17:2b:99:17:e9: 48:aa:78:24:a4:53:e5:ed:d1:4d:a6:a4:fd:36:94: 38:40:0a:69:73:d0:ba:ea:3d:44:fe:8a:3b:f3:ff: 27:4b:3d:a8:89:e3:89:f0:0e:6e:55:97:7a:16:a8: 23:5e:10:f5:38:e7:44:70:89:21:f7:f0:f5:83:97: 64:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1A:22:82:FF:4E:D0:E6:FB:1B:7B:7F:76:D9:23:95:7D:22:74:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bbddffd1-e73a-39b6-a7b9-2dc149cc1170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ad:06:fa:7f:ec:83:1c:82:5c:db:d4:a8:96:f3:1d:2d:2d: a6:5c:f2:d8:69:62:c8:f3:f2:7d:13:0c:85:9b:4d:7f:26:2b: 6a:eb:03:0b:81:e3:4f:c4:88:2c:44:29:c7:3b:a6:68:f0:04: 63:36:fc:c2:3a:cc:c3:ae:d8:20:03:00:74:a6:13:7b:38:83: fc:2e:5e:a7:6b:bc:b8:9a:cb:d4:21:8d:b6:eb:74:d1:7c:4e: 92:f3:fc:ca:5b:1e:9e:51:c5:e5:4d:7a:ec:55:eb:83:e1:90: fc:8c:a0:7d:17:99:d9:e5:16:0f:de:3c:af:72:30:90:1b:d1: 90:a3:8f:d7:45:33:50:96:df:64:c0:6f:74:12:1a:13:c1:62: e6:02:36:40:d1:02:bc:69:bc:49:62:f1:e3:3d:47:ce:10:03: 17:ce:bf:e5:06:73:d6:c6:84:33:ea:8f:e5:8e:40:b8:13:20: aa:c9:4a:55:70:36:73:38:ee:fe:39:f9:fa:a0:eb:bd:4d:1f: 83:59:66:94:90:89:65:4b:d9:52:27:5d:bd:60:36:9f:bf:7a: a5:7a:e7:7e:b6:ad:44:e0:cc:73:4a:53:f5:bf:33:83:44:f0: 4d:d5:50:a4:b7:90:92:c1:21:b1:db:07:31:f3:52:c4:7f:2c: 38:26:0a:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExOBp81WlCcBRjgrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk YmNhOTYwMTMtOWRiNy00ZDNkLTkzNWYtZGRiZmZhMTZkMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbjkRYDA5lma0Sl7h6UihZO0asq2iwXj4UeD hHqIr0iyJVTTjq1SPoTmuz3kgar0yRPhpoR4i+Nb7m9TipQl/iwVJ0QzuXqxn5Ne 8zMDVF6n8NADGzVx/ryszxU3NHb33SQKeZaQLi4JEXid7XxdlMTD0ChwGuIT6t1J L2Bw1ZlqTUGheYpQcKEq0fZ3/e0HpGMxemEVFnNpywMPamMt8huuzxS3RQ2dMbJ1 yIbV8b8cy93wP2uROjbf20N+FyuZF+lIqngkpFPl7dFNpqT9NpQ4QAppc9C66j1E /oo78/8nSz2oieOJ8A5uVZd6FqgjXhD1OOdEcIkh9/D1g5dknQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMMaIoL/TtDm+xt7f3bZI5V9InRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmJkZGZmZDEtZTczYS0z OWI2LWE3YjktMmRjMTQ5Y2MxMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAirQb6f+yDHIJc29SolvMdLS2mXPLYaWLI8/J9EwyFm01/Jitq6wML geNPxIgsRCnHO6Zo8ARjNvzCOszDrtggAwB0phN7OIP8Ll6na7y4msvUIY2263TR fE6S8/zKWx6eUcXlTXrsVeuD4ZD8jKB9F5nZ5RYP3jyvcjCQG9GQo4/XRTNQlt9k wG90EhoTwWLmAjZA0QK8abxJYvHjPUfOEAMXzr/lBnPWxoQz6o/ljkC4EyCqyUpV cDZzOO7+Ofn6oOu9TR+DWWaUkIllS9lSJ129YDafv3qleud+tq1E4MxzSlP1vzOD RPBN1VCkt5CSwSGx2wcx81LEfyw4Jgql -----END CERTIFICATE-----Generated at Sun Jan 25 18:30:51 2026 by rpki-client