This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa File: aec344a8-4f5c-3241-ae81-d26a1958ad45.roa (raw, json) Hash identifier: 69ghH20rNhRHO7XDkeXtz87nmcBlcVMNN9I/TMIzJVc= Subject key identifier: EC:70:55:84:F1:0D:41:B9:84:95:85:7F:2A:A1:AE:5C:23:3E:78:89 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584C48717ED2CA7E83197DCBD880 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa Signing time: Tue 23 Dec 2025 14:00:39 +0000 ROA not before: Tue 23 Dec 2025 14:00:39 +0000 ROA not after: Mon 23 Mar 2026 13:00:39 +0000 asID: 36492 IP address blocks: 64.9.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:71:7e:d2:ca:7e:83:19:7d:cb:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Dec 23 14:00:39 2025 GMT Not After : Mar 23 13:00:39 2026 GMT Subject: CN=f32a637e-dae1-4de8-b21b-1d2ccd6ce758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:8e:83:c0:be:00:36:08:1b:3d:5c:44:4c: b1:c3:91:4f:c6:70:29:55:fe:4f:e0:3f:39:27:d5: bc:35:25:ae:dc:3c:75:b4:60:0b:e9:85:27:57:3c: 19:b1:fa:54:fb:28:3d:06:26:e8:75:e0:2f:ca:7d: 85:6a:c6:b3:53:0a:24:40:bd:be:3c:01:cf:5f:d8: bb:71:17:0b:69:9d:1d:34:c5:6a:74:5c:e9:74:e6: 43:35:ad:8e:fa:af:7b:9f:83:67:dc:2f:91:42:b6: 0a:8f:30:6e:cc:63:57:4c:b8:12:93:1a:03:92:a7: 8a:a2:42:1c:de:4c:81:14:bc:fb:16:ce:16:41:4d: 14:84:8b:7b:12:ab:ec:0b:82:12:a3:72:33:0a:43: 9e:3d:ba:a4:f3:df:9c:0e:d7:cc:5d:59:12:00:af: ea:c3:ed:77:5d:98:a6:e9:1b:39:10:84:c8:8c:17: 6e:74:d5:77:56:51:c0:11:74:89:40:75:e3:6e:ae: 78:31:bc:5e:7c:76:6e:92:a0:2b:fa:0e:76:14:c4: 9f:20:88:60:bb:91:41:59:f2:f7:64:a1:ea:48:98: 1f:0b:6d:90:ab:b3:e6:c1:ee:ad:e5:18:20:e9:05: 26:3a:9c:ef:04:5e:f1:7c:21:93:d9:5f:90:ca:5a: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:70:55:84:F1:0D:41:B9:84:95:85:7F:2A:A1:AE:5C:23:3E:78:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/aec344a8-4f5c-3241-ae81-d26a1958ad45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:48:35:62:83:8f:33:52:3a:f8:e9:83:ac:44:53:19:27:9b: bb:65:83:51:4e:a6:e6:07:c4:af:ba:6e:f4:01:48:53:5f:f0: f3:89:2f:d7:46:d9:41:fd:6a:bf:d5:90:94:6c:f7:97:dc:fa: 66:70:2e:58:f2:25:47:b1:78:38:a8:9c:b6:92:7a:b8:db:5d: 14:d9:8e:11:89:82:c9:58:d4:e7:0c:04:e0:71:f4:38:aa:68: 51:cc:c6:a2:65:2a:fa:36:b0:c1:f6:62:02:e1:ec:a0:06:30: 3a:84:15:98:dc:b7:d8:90:76:bf:39:9e:9f:0f:f2:74:48:6f: d9:da:72:92:80:b4:a0:de:f4:82:05:05:fc:c5:bc:26:00:79: 21:80:61:52:5a:78:28:78:64:48:a9:6b:4a:95:60:2d:65:e4: 0c:2d:89:2c:ff:a5:ad:cd:db:2b:98:1b:98:8d:78:57:be:56: e0:cd:5e:d6:23:0b:e6:86:f3:2c:22:a0:99:9a:f8:55:e4:f9: 4e:68:7b:a4:c4:5c:57:5e:4f:5e:65:c4:46:16:74:c0:26:38: 92:c3:ac:34:49:f8:26:75:a5:f1:f6:e6:8a:f4:72:40:f7:92: 8d:7b:59:59:f6:6d:98:d4:28:0b:66:e6:40:b8:33:f9:c7:f1: 7f:21:42:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExIcX7Syn6DGX3L2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MTIyMzE0MDAzOVoXDTI2MDMyMzEzMDAzOVowLzEtMCsGA1UEAxMk ZjMyYTYzN2UtZGFlMS00ZGU4LWIyMWItMWQyY2NkNmNlNzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg+Og8C+ADYIGz1cREyxw5FPxnApVf5P4D85 J9W8NSWu3Dx1tGAL6YUnVzwZsfpU+yg9BibodeAvyn2FasazUwokQL2+PAHPX9i7 cRcLaZ0dNMVqdFzpdOZDNa2O+q97n4Nn3C+RQrYKjzBuzGNXTLgSkxoDkqeKokIc 3kyBFLz7Fs4WQU0UhIt7EqvsC4ISo3IzCkOePbqk89+cDtfMXVkSAK/qw+13XZim 6Rs5EITIjBdudNV3VlHAEXSJQHXjbq54MbxefHZukqAr+g52FMSfIIhgu5FBWfL3 ZKHqSJgfC22Qq7Pmwe6t5Rgg6QUmOpzvBF7xfCGT2V+QylqFSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxwVYTxDUG5hJWFfyqhrlwjPniJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYWVjMzQ0YTgtNGY1Yy0z MjQxLWFlODEtZDI2YTE5NThhZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxINWKDjzNSOvjpg6xEUxknm7tlg1FOpuYHxK+6bvQBSFNf8POJL9dG 2UH9ar/VkJRs95fc+mZwLljyJUexeDionLaSerjbXRTZjhGJgslY1OcMBOBx9Diq aFHMxqJlKvo2sMH2YgLh7KAGMDqEFZjct9iQdr85np8P8nRIb9nacpKAtKDe9IIF BfzFvCYAeSGAYVJaeCh4ZEipa0qVYC1l5AwtiSz/pa3N2yuYG5iNeFe+VuDNXtYj C+aG8ywioJma+FXk+U5oe6TEXFdeT15lxEYWdMAmOJLDrDRJ+CZ1pfH25or0ckD3 ko17WVn2bZjUKAtm5kC4M/nH8X8hQis= -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:28 2026 by rpki-client