This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa File: 2bfa52c4-12bd-3269-86da-c8ff98786228.roa (raw, json) Hash identifier: 6zHkRVeeD1u0T5B1F57IS2S48RfJ4yRdvcSit6v/sNc= Subject key identifier: 58:E1:E7:3B:3F:D9:7A:A8:05:7C:4C:60:2C:79:C6:5F:BB:7F:5A:8E Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584C401143989C0C28184E84F980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 36492 IP address blocks: 136.22.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:43:98:9c:0c:28:18:4e:84:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=d942cf1d-c56d-4881-8410-97d4f2cde1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:20:f5:1c:18:ef:e3:33:18:16:e6:8d:25: 43:90:20:12:f1:d7:04:47:5d:08:fd:82:9c:89:00: c5:51:ff:6a:81:7e:8a:e9:33:87:70:95:52:f7:07: a9:03:36:0c:c8:0e:bb:ad:a3:6c:8a:34:e0:c3:47: 7c:31:3c:7d:25:02:87:74:e8:98:1d:ca:99:b5:78: e8:b6:d7:80:3e:a3:f4:c9:51:88:e2:c8:91:9e:f7: 0e:55:92:cc:b3:63:df:78:df:16:93:79:45:de:55: be:99:15:57:72:c4:49:d3:dd:6d:cd:45:d9:e1:35: a0:35:b7:38:c2:df:c3:a6:48:36:7b:66:7e:40:b0: f3:c0:79:af:19:8e:fe:e7:b2:b8:a6:32:a5:ae:cc: 21:c2:7e:ee:78:65:b4:dd:b1:b1:38:4e:91:40:8a: 87:48:e5:b5:58:aa:e6:e7:58:df:3d:91:0c:64:4b: 2c:93:c5:52:fd:f6:a8:1e:50:62:d4:c4:69:32:d5: 28:df:8c:39:e1:b9:bc:85:84:45:10:e6:cd:63:05: 76:f9:b8:2c:0e:f4:3d:83:a2:91:31:69:15:32:ab: b2:7c:db:fb:6d:be:6b:71:75:e1:81:42:92:56:eb: a7:04:25:59:8a:24:84:8a:7d:1f:ac:6a:4c:80:91: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:E7:3B:3F:D9:7A:A8:05:7C:4C:60:2C:79:C6:5F:BB:7F:5A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2bfa52c4-12bd-3269-86da-c8ff98786228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:79:98:49:19:d9:3e:5f:b9:dc:77:4f:3c:20:22:c2:59:f3: 41:c2:77:57:81:5d:b6:03:8d:05:2c:b5:8c:89:81:1c:90:f2: 25:39:de:16:a1:64:b3:96:a5:c4:97:b3:ae:ea:21:94:ba:dc: 33:ac:ea:75:6c:dc:5c:36:b6:6f:ca:ce:06:af:f1:8d:ab:b5: 44:9b:a4:52:2f:6c:d4:f7:e5:2c:d9:ab:52:c1:b5:b2:7c:f6: 89:5d:6a:6c:72:44:e9:d7:b9:00:90:0b:28:0f:1a:09:a8:5d: 56:19:66:15:42:79:d5:31:f9:ea:f7:1d:7b:a0:1c:b8:bf:55: 82:2f:92:32:12:e7:1d:df:a5:59:bd:34:40:9c:b1:c3:c1:93: 15:e2:e9:d3:19:bb:a6:8a:c4:3a:b9:6e:ff:94:f0:79:49:c9: e4:00:14:23:1b:13:1a:c4:c8:ca:04:6f:34:a2:a6:eb:3a:44: b8:51:d7:2a:e9:f1:8a:e8:aa:8b:45:4a:1b:24:17:b0:1d:91: 05:d2:99:9a:35:5f:7c:bb:42:43:04:72:5d:4a:2f:4c:52:18: f4:8f:d6:ee:3d:f3:c6:ca:fc:0d:9e:6a:e8:a6:27:69:f4:0b: f2:90:7a:5a:ba:87:70:c5:05:f6:c8:28:da:21:7a:79:a3:00: 5e:cd:f3:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEUOYnAwoGE6E+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZDk0MmNmMWQtYzU2ZC00ODgxLTg0MTAtOTdkNGYyY2RlMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hQg9RwY7+MzGBbmjSVDkCAS8dcER10I/YKc iQDFUf9qgX6K6TOHcJVS9wepAzYMyA67raNsijTgw0d8MTx9JQKHdOiYHcqZtXjo tteAPqP0yVGI4siRnvcOVZLMs2PfeN8Wk3lF3lW+mRVXcsRJ091tzUXZ4TWgNbc4 wt/Dpkg2e2Z+QLDzwHmvGY7+57K4pjKlrswhwn7ueGW03bGxOE6RQIqHSOW1WKrm 51jfPZEMZEssk8VS/faoHlBi1MRpMtUo34w54bm8hYRFEObNYwV2+bgsDvQ9g6KR MWkVMquyfNv7bb5rcXXhgUKSVuunBCVZiiSEin0frGpMgJFAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjh5zs/2XqoBXxMYCx5xl+7f1qOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMmJmYTUyYzQtMTJiZC0z MjY5LTg2ZGEtYzhmZjk4Nzg2MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh5mEkZ2T5fudx3TzwgIsJZ80HCd1eBXbYDjQUstYyJgRyQ8iU53hah ZLOWpcSXs67qIZS63DOs6nVs3Fw2tm/Kzgav8Y2rtUSbpFIvbNT35SzZq1LBtbJ8 9oldamxyROnXuQCQCygPGgmoXVYZZhVCedUx+er3HXugHLi/VYIvkjIS5x3fpVm9 NECcscPBkxXi6dMZu6aKxDq5bv+U8HlJyeQAFCMbExrEyMoEbzSipus6RLhR1yrp 8YroqotFShskF7AdkQXSmZo1X3y7QkMEcl1KL0xSGPSP1u4988bK/A2eauimJ2n0 C/KQelq6h3DFBfbIKNohenmjAF7N834= -----END CERTIFICATE-----Generated at Sun Jan 25 16:46:53 2026 by rpki-client