This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa File: bf24e998-f4cb-3166-9844-bebff8d2d03a.roa (raw, json) Hash identifier: xjeCgTxsUKm3IHJxxXHTlco2EJyNCey3AMO5tBOfFro= Subject key identifier: 29:84:7D:42:CD:0F:FA:D4:BA:79:B2:91:D7:1F:16:27:66:71:17:F5 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C444100F8049A6EB8B29A4700 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 207266 IP address blocks: 65.22.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:00:f8:04:9a:6e:b8:b2:9a:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=704726e3-dc74-4062-a012-b24633e21190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:e8:a3:bb:82:64:32:e2:9a:27:2c:26:20: 0b:5d:30:53:10:f6:2d:f7:c4:b9:50:a7:96:2b:84: 63:1d:1e:1a:af:d7:a4:7b:3a:b1:10:6b:79:51:f7: 54:6f:01:8f:b1:4c:e5:e3:e5:ed:1e:8b:ad:74:c6: 99:c7:4d:64:4f:ea:53:d4:0b:9b:1e:19:dd:34:ac: 21:fb:5d:a6:90:4e:10:97:ff:a0:f7:77:15:a8:9d: e9:f5:64:a0:75:b9:30:1e:e2:87:04:af:19:73:e2: 53:c6:82:05:f5:cd:5a:0d:d8:cc:34:14:30:f4:c1: e0:ed:52:87:9e:2a:cd:c3:fb:e6:05:b5:43:db:b6: 5b:cd:50:87:e7:00:e4:0b:18:f8:d7:91:d8:f5:00: 1b:f9:af:d2:e6:81:f7:3c:a6:0a:0f:2a:75:18:66: 96:d4:9c:be:3f:b9:53:8e:3a:c3:fd:99:67:ab:e0: f8:02:6a:ce:04:24:82:48:c2:ef:bf:7a:de:e2:a4: bf:41:b1:6b:3d:30:e8:1a:01:c0:13:75:68:92:30: fd:56:f6:a9:ed:45:47:9e:18:e1:0d:0e:86:5f:48: a1:1e:f7:1e:92:35:0c:0d:f0:64:33:09:e6:ab:a7: fb:3e:aa:6d:1b:c8:79:70:f4:8e:54:ae:0a:5d:a2: 6f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:7D:42:CD:0F:FA:D4:BA:79:B2:91:D7:1F:16:27:66:71:17:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/bf24e998-f4cb-3166-9844-bebff8d2d03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:78:88:4d:68:a7:18:37:fd:e0:d1:53:d0:99:5b:33:1c:87: 87:9e:73:40:65:80:f1:e6:45:01:3f:34:60:60:a0:8f:59:c4: bf:ed:1b:44:2c:d8:c7:df:46:9f:b0:f3:6f:b7:76:79:46:dd: 38:b0:02:a8:28:e8:a2:1c:cf:93:c4:c6:b0:f7:c4:13:99:a6: e8:c8:37:c5:0f:1c:91:aa:dd:de:d2:15:1e:53:30:20:28:9a: 11:8c:8e:51:bc:3f:c5:bc:c8:c9:2c:05:b2:4c:d7:f7:34:0a: c0:ec:17:9b:8b:10:77:51:f6:d3:6b:9f:bf:fc:a8:66:de:c5: 30:fe:df:c9:d3:ff:62:14:65:97:44:22:6b:69:98:de:64:2f: 5e:2b:19:f2:14:75:85:06:d1:48:ec:76:17:3e:9b:a5:1b:cb: da:63:c5:c8:28:10:42:67:28:5b:db:29:1c:24:d3:94:5c:2a: ec:8a:a2:29:6d:c2:69:0d:c3:28:64:2e:13:27:9b:a3:a5:8f: bb:3f:35:de:b8:61:49:16:1c:9a:2e:b6:a9:5f:bc:eb:36:31: 25:86:bc:7b:0d:c3:3c:04:72:a8:c6:c9:30:c3:4a:50:31:7a: 3c:75:bf:72:a8:8a:97:ab:e8:45:6f:71:a5:80:36:3d:3b:3a: dd:b8:0b:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQQD4BJpuuLKaRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk NzA0NzI2ZTMtZGM3NC00MDYyLWEwMTItYjI0NjMzZTIxMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxnoo7uCZDLimicsJiALXTBTEPYt98S5UKeW K4RjHR4ar9ekezqxEGt5UfdUbwGPsUzl4+XtHoutdMaZx01kT+pT1AubHhndNKwh +12mkE4Ql/+g93cVqJ3p9WSgdbkwHuKHBK8Zc+JTxoIF9c1aDdjMNBQw9MHg7VKH nirNw/vmBbVD27ZbzVCH5wDkCxj415HY9QAb+a/S5oH3PKYKDyp1GGaW1Jy+P7lT jjrD/Zlnq+D4AmrOBCSCSMLvv3re4qS/QbFrPTDoGgHAE3VokjD9Vvap7UVHnhjh DQ6GX0ihHvcekjUMDfBkMwnmq6f7PqptG8h5cPSOVK4KXaJvwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmEfULND/rUunmykdcfFidmcRf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvYmYyNGU5OTgtZjRjYi0z MTY2LTk4NDQtYmViZmY4ZDJkMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJ4iE1opxg3/eDRU9CZWzMch4eec0BlgPHmRQE/NGBgoI9ZxL/tG0Qs 2MffRp+w82+3dnlG3TiwAqgo6KIcz5PExrD3xBOZpujIN8UPHJGq3d7SFR5TMCAo mhGMjlG8P8W8yMksBbJM1/c0CsDsF5uLEHdR9tNrn7/8qGbexTD+38nT/2IUZZdE ImtpmN5kL14rGfIUdYUG0Ujsdhc+m6Uby9pjxcgoEEJnKFvbKRwk05RcKuyKoilt wmkNwyhkLhMnm6Olj7s/Nd64YUkWHJoutqlfvOs2MSWGvHsNwzwEcqjGyTDDSlAx ejx1v3Koiper6EVvcaWANj07Ot24C7U= -----END CERTIFICATE-----Generated at Sun Jan 25 23:35:49 2026 by rpki-client