This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa File: bd4efe0c-435b-364e-90b0-423af199d985.roa (raw, json) Hash identifier: yGHtAH6RqwJ2pZiiC13fuQpK5AHQ61xF14YlGd3cQlo= Subject key identifier: 26:2F:A4:0C:0D:C5:9B:9A:60:DB:4C:A4:3B:23:03:AF:91:64:00:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4CA13B9EB600560CBA307F40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 397210 IP address blocks: 216.168.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:3b:9e:b6:00:56:0c:ba:30:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=6291fc72-6761-4c7a-9e8e-8d10c6f9ccff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:56:7b:3d:d9:e6:cd:42:7e:4d:9d:92:59:8e: b4:d7:9b:04:ae:c0:3b:f0:74:92:7a:3d:57:8e:b8: 62:0c:05:48:66:00:f5:15:ac:ee:e0:88:a8:cf:bf: e4:78:f7:30:7e:49:32:64:52:a5:ee:c4:91:92:da: 96:c2:37:16:8d:e2:4f:2e:fb:26:c8:f9:be:b3:0e: f4:f0:9c:a0:ef:8d:aa:5a:9c:7f:38:61:e4:ce:58: 91:d8:51:1d:46:44:86:b6:8b:db:08:a8:f1:d6:dc: b2:cc:fc:de:b3:7d:ef:c0:93:49:b0:3f:b3:28:8d: 8b:cf:72:56:18:82:8f:98:9b:ed:5c:6e:36:49:37: 66:98:d4:fd:df:eb:82:08:b5:76:4a:fc:f9:8a:6f: 9c:20:4a:33:86:b5:19:b2:8d:37:58:48:01:de:ef: 91:3e:5a:05:a6:77:df:90:1e:ec:87:ad:53:67:08: 9d:40:e2:18:27:50:dc:3f:26:dd:90:b7:2d:bf:9a: 78:5f:f0:7a:6a:7b:58:fb:cd:34:50:c1:62:ce:68: 4f:ed:50:25:1c:94:55:cd:65:f6:ea:fe:e0:03:17: 44:75:db:ea:ed:fc:bd:c6:c3:d3:af:d1:0d:86:c4: e8:c9:0c:0c:60:75:6c:b0:62:bd:75:8f:19:0a:81: 76:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2F:A4:0C:0D:C5:9B:9A:60:DB:4C:A4:3B:23:03:AF:91:64:00:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bd4efe0c-435b-364e-90b0-423af199d985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:95:97:f1:24:44:64:02:fd:f5:16:19:e1:7a:b8:04:d3:6f: 30:df:8f:2e:65:8c:0c:c0:92:5c:45:2f:f5:55:7b:8f:55:63: af:d0:29:21:ef:26:0c:58:4f:42:06:02:08:68:d9:5b:fd:a3: 20:c9:80:37:3f:2d:5c:1b:ad:42:21:f9:f6:ee:d3:81:0d:b3: 44:e6:96:cf:a3:c1:40:fe:00:01:aa:c5:ef:f2:32:8e:c6:a5: 84:03:2b:3d:5f:7c:5c:b1:20:b7:20:95:3e:bc:be:53:78:3a: ab:6d:21:97:41:d8:46:3d:b7:cf:4c:f2:28:72:f7:e6:42:b7: 99:de:6a:9f:12:35:da:6a:3c:22:63:80:ca:2c:af:88:59:51: 57:d8:42:28:51:d7:98:e8:7f:29:c4:b0:9a:5e:43:dd:23:37: e7:46:6a:28:09:c4:a4:a0:ac:dd:89:62:21:e6:29:91:d8:3e: 80:eb:b5:4f:ed:b5:a8:88:96:5c:89:03:bb:af:fc:b7:88:8e: 89:c9:e7:3f:58:13:d1:2f:0d:45:e8:38:b4:45:87:90:85:e4: f5:dd:45:42:8d:a6:53:3a:a6:d5:8c:d8:fc:af:4f:c9:95:e2: 2b:13:6c:73:f2:de:37:1c:55:5f:04:b4:b0:5a:7f:be:47:fb: 34:c4:f8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoTuetgBWDLowf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk NjI5MWZjNzItNjc2MS00YzdhLTllOGUtOGQxMGM2ZjljY2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1Z7PdnmzUJ+TZ2SWY6015sErsA78HSSej1X jrhiDAVIZgD1Fazu4Iioz7/kePcwfkkyZFKl7sSRktqWwjcWjeJPLvsmyPm+sw70 8Jyg742qWpx/OGHkzliR2FEdRkSGtovbCKjx1tyyzPzes33vwJNJsD+zKI2Lz3JW GIKPmJvtXG42STdmmNT93+uCCLV2Svz5im+cIEozhrUZso03WEgB3u+RPloFpnff kB7sh61TZwidQOIYJ1DcPybdkLctv5p4X/B6antY+800UMFizmhP7VAlHJRVzWX2 6v7gAxdEddvq7fy9xsPTr9ENhsToyQwMYHVssGK9dY8ZCoF2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYvpAwNxZuaYNtMpDsjA6+RZADsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYmQ0ZWZlMGMtNDM1Yi0z NjRlLTkwYjAtNDIzYWYxOTlkOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiVl/EkRGQC/fUWGeF6uATTbzDfjy5ljAzAklxFL/VVe49VY6/QKSHv JgxYT0IGAgho2Vv9oyDJgDc/LVwbrUIh+fbu04ENs0Tmls+jwUD+AAGqxe/yMo7G pYQDKz1ffFyxILcglT68vlN4OqttIZdB2EY9t89M8ihy9+ZCt5neap8SNdpqPCJj gMosr4hZUVfYQihR15jofynEsJpeQ90jN+dGaigJxKSgrN2JYiHmKZHYPoDrtU/t taiIllyJA7uv/LeIjonJ5z9YE9EvDUXoOLRFh5CF5PXdRUKNplM6ptWM2PyvT8mV 4isTbHPy3jccVV8EtLBaf75H+zTE+Kc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:13:17 2026 by rpki-client