This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa File: 905a33b2-a747-3537-9cda-de429490b8f0.roa (raw, json) Hash identifier: qg086jAv9WA3A7iKKhOFNaV10zxcCBrJBWD0D0leXv4= Subject key identifier: A6:21:7D:E1:47:34:DD:B7:05:F0:21:65:A2:BF:D4:CB:FF:2C:A6:F3 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584C41765521E294E626CA3F6900 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 931 IP address blocks: 64.112.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:55:21:e2:94:e6:26:ca:3f:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=c7cef79f-420b-428d-b2dd-394f16d6add7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:bc:4f:32:52:5b:8a:e8:bc:a8:bd:ae:1b: d4:3d:b2:8a:50:61:4e:41:09:29:6c:8e:f1:f6:de: da:c4:43:b5:5a:99:8c:5f:ba:2a:30:b8:c6:29:58: 45:cc:ff:14:d3:53:ee:d5:8c:fe:87:ae:37:aa:be: 55:7b:f7:90:fa:4a:96:1a:78:3c:0a:2d:6c:f7:da: 3e:de:b9:ef:3b:b0:4f:ad:f7:93:7b:86:8a:a7:35: 14:d7:e7:23:b0:0e:1b:76:dc:31:64:71:22:35:85: 03:0f:a9:95:a0:61:f6:40:a7:44:51:49:f5:d7:de: ec:10:ea:5c:94:72:40:9a:d6:e4:cd:21:e4:4c:9d: 09:c4:30:e4:21:7e:c2:14:c1:78:27:cd:11:96:a4: e3:9b:f7:cf:ea:e4:fd:09:00:31:3a:54:04:7e:92: d2:56:5f:8d:8d:0a:5e:bf:10:45:ea:11:ed:9f:33: cf:7c:60:1f:b4:4a:21:ce:cc:0a:dd:88:0d:a5:4c: df:b1:20:b4:26:6e:eb:e4:36:20:13:c7:76:95:57: 23:28:96:19:58:4c:3c:29:7a:6e:23:eb:f1:45:2e: 0e:ac:89:62:2e:71:49:74:8f:20:c4:16:28:e7:4a: c9:54:c1:a6:88:b0:6f:34:af:15:97:9b:28:ac:1f: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:7D:E1:47:34:DD:B7:05:F0:21:65:A2:BF:D4:CB:FF:2C:A6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/905a33b2-a747-3537-9cda-de429490b8f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:10:cd:8a:9d:6c:0b:44:37:be:18:0e:cf:e9:19:e1:5e:94: 34:fc:08:61:65:00:81:f2:29:8f:ec:4d:7d:13:fd:2c:d2:a6: 84:d2:c3:2a:7a:fb:10:35:ad:47:41:74:66:14:ce:33:0c:bf: 2a:88:8a:54:10:50:64:4d:ab:11:1c:f0:8b:a0:e1:75:42:48: 8b:72:a8:ba:06:1b:4a:38:aa:51:f4:bd:67:52:95:27:e3:81: 0f:cb:f7:97:6e:f6:26:21:dd:d2:5b:6d:6f:9d:6a:30:5e:99: ec:a3:e6:ee:9e:7e:29:62:44:b3:a5:04:46:69:04:a5:3a:3c: 07:79:5c:6e:5e:9a:2a:ac:1e:42:29:e9:6d:2f:e9:c0:d3:db: 78:47:44:34:01:23:6b:99:37:67:7d:e5:e2:71:99:34:f7:6c: ad:e2:c6:2d:39:5d:a6:87:11:1e:a9:a6:ba:9e:27:c6:ea:14: ff:75:44:b9:bb:31:8f:5a:f9:d0:ac:57:d1:ec:ef:84:34:9a: 4e:db:2b:db:7b:f6:83:cc:65:24:e5:24:89:5c:f3:5b:7d:06: 3b:7f:97:c3:8f:d2:bd:cf:69:37:4f:18:3e:a9:45:a7:e1:ea: 84:fe:18:fe:7d:18:51:44:74:52:40:f3:c7:82:b5:87:74:8e: 41:dc:8c:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdlUh4pTmJso/aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk YzdjZWY3OWYtNDIwYi00MjhkLWIyZGQtMzk0ZjE2ZDZhZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ+8TzJSW4rovKi9rhvUPbKKUGFOQQkpbI7x 9t7axEO1WpmMX7oqMLjGKVhFzP8U01Pu1Yz+h643qr5Ve/eQ+kqWGng8Ci1s99o+ 3rnvO7BPrfeTe4aKpzUU1+cjsA4bdtwxZHEiNYUDD6mVoGH2QKdEUUn1197sEOpc lHJAmtbkzSHkTJ0JxDDkIX7CFMF4J80RlqTjm/fP6uT9CQAxOlQEfpLSVl+NjQpe vxBF6hHtnzPPfGAftEohzswK3YgNpUzfsSC0Jm7r5DYgE8d2lVcjKJYZWEw8KXpu I+vxRS4OrIliLnFJdI8gxBYo50rJVMGmiLBvNK8Vl5sorB/z2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYhfeFHNN23BfAhZaK/1Mv/LKbzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTA1YTMzYjItYTc0Ny0z NTM3LTljZGEtZGU0Mjk0OTBiOGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4QzYqdbAtEN74YDs/pGeFelDT8CGFlAIHyKY/sTX0T/SzSpoTSwyp6 +xA1rUdBdGYUzjMMvyqIilQQUGRNqxEc8Iug4XVCSItyqLoGG0o4qlH0vWdSlSfj gQ/L95du9iYh3dJbbW+dajBemeyj5u6efiliRLOlBEZpBKU6PAd5XG5emiqsHkIp 6W0v6cDT23hHRDQBI2uZN2d95eJxmTT3bK3ixi05XaaHER6pprqeJ8bqFP91RLm7 MY9a+dCsV9Hs74Q0mk7bK9t79oPMZSTlJIlc81t9Bjt/l8OP0r3PaTdPGD6pRafh 6oT+GP59GFFEdFJA88eCtYd0jkHcjOo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:04:33 2026 by rpki-client