This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa File: 3c656b6b-cda2-308f-9d04-80808e67e293.roa (raw, json) Hash identifier: U2d81VYLTilSLIOhJIlUt5flQvWKc+VG9v5yWfHGFKg= Subject key identifier: D8:08:E1:BF:7A:F6:32:35:D5:AD:FE:FA:95:B3:88:E2:EE:25:9E:AC Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A803280A0DB115FAE775C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 216.58.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a8:03:28:0a:0d:b1:15:fa:e7:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=f63d3802-db8e-4fed-af7b-99190e6e7bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:3e:2f:5e:de:c4:9e:e8:f3:a5:88:dd:a0: 72:bf:ea:77:da:f3:6e:21:db:a7:49:01:18:4d:05: 9e:07:f3:f2:a4:51:c1:a0:a7:9a:d9:9f:64:b3:fe: 87:6d:09:9a:07:7d:ca:7e:e1:06:8e:d4:71:88:9a: 78:79:70:7c:12:c2:1e:76:54:fa:48:0e:c4:b5:46: 68:2d:df:d9:cd:5d:f0:0f:f9:6a:38:d7:e0:2a:87: 1f:16:b8:c9:df:59:dc:66:48:54:9e:92:26:3d:e7: dc:99:3e:57:6a:4c:17:63:58:91:45:65:31:3e:63: ca:b2:01:40:ba:60:c4:64:2f:65:e6:ff:ee:10:fe: d2:44:09:da:f9:55:4b:df:50:78:b3:91:2a:78:71: fd:31:2c:04:d9:94:f9:12:9e:6f:50:36:52:c6:eb: 77:3b:01:68:d5:6e:44:c4:3b:83:ef:43:d7:ec:03: 61:e8:1c:8d:5b:a4:80:3c:a6:6b:05:35:3f:6d:f4: 88:04:6c:f3:b9:04:dc:df:61:3a:60:75:1a:c3:db: 97:27:a2:09:f9:bc:44:76:00:d4:36:d0:e1:56:d6: e6:bd:4f:fc:4e:d3:25:82:21:57:30:97:d7:7e:2e: e1:8f:d6:03:b1:1e:98:b7:58:a5:14:fd:0a:24:da: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:E1:BF:7A:F6:32:35:D5:AD:FE:FA:95:B3:88:E2:EE:25:9E:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3c656b6b-cda2-308f-9d04-80808e67e293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:66:15:aa:0c:4d:8d:c7:9f:d3:42:51:1d:72:a5:db:0e:13: 83:e0:aa:f6:0f:34:6a:1d:d2:28:b0:64:10:80:84:78:19:bd: 51:aa:bc:3a:4c:2e:8d:2c:41:c3:10:8a:61:28:2c:f0:db:f7: 8d:e1:10:31:a6:11:5c:bb:77:c7:5b:84:c3:0d:b2:ae:4b:8b: 69:4a:50:c7:07:60:61:51:28:89:c5:49:ab:b8:40:c3:43:55: ab:ae:7e:0d:34:d7:b7:8a:98:47:89:b7:40:90:ca:f3:88:2f: 73:be:e9:3c:40:eb:ce:fa:a9:63:f0:f5:be:2e:ca:e4:fc:81: cb:39:43:bc:0b:3a:02:19:6d:13:5a:91:f3:b2:e4:0b:7b:79: 39:bc:bd:50:3b:b9:91:e7:a7:5d:de:49:d3:ca:d0:64:09:b9: 3f:ca:c0:a2:26:43:46:c4:1d:e9:ec:d7:8c:48:4b:17:7b:4b: 8f:00:5a:ef:01:ef:d4:72:7a:55:d4:b4:cb:98:cc:c6:b4:7d: a4:49:bd:b3:6b:b1:a4:33:8e:94:e1:18:47:f2:f7:59:46:3a: 50:1e:94:cf:83:56:d3:c2:2c:15:75:b7:f4:98:b5:2e:53:73: 91:03:39:de:13:bb:9c:c2:5c:5f:0e:9b:d4:9a:28:b6:c4:d5: 52:e1:dd:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFqAMoCg2xFfrndcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk ZjYzZDM4MDItZGI4ZS00ZmVkLWFmN2ItOTkxOTBlNmU3YmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjI+L17exJ7o86WI3aByv+p32vNuIdunSQEY TQWeB/PypFHBoKea2Z9ks/6HbQmaB33KfuEGjtRxiJp4eXB8EsIedlT6SA7EtUZo Ld/ZzV3wD/lqONfgKocfFrjJ31ncZkhUnpImPefcmT5XakwXY1iRRWUxPmPKsgFA umDEZC9l5v/uEP7SRAna+VVL31B4s5EqeHH9MSwE2ZT5Ep5vUDZSxut3OwFo1W5E xDuD70PX7ANh6ByNW6SAPKZrBTU/bfSIBGzzuQTc32E6YHUaw9uXJ6IJ+bxEdgDU NtDhVtbmvU/8TtMlgiFXMJfXfi7hj9YDsR6Yt1ilFP0KJNqQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgI4b969jI11a3++pWziOLuJZ6sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvM2M2NTZiNmItY2RhMi0z MDhmLTlkMDQtODA4MDhlNjdlMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2DrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtmFaoMTY3Hn9NCUR1ypdsOE4PgqvYPNGod0iiwZBCAhHgZvVGqvDpM Lo0sQcMQimEoLPDb943hEDGmEVy7d8dbhMMNsq5Li2lKUMcHYGFRKInFSau4QMND Vauufg0017eKmEeJt0CQyvOIL3O+6TxA6876qWPw9b4uyuT8gcs5Q7wLOgIZbRNa kfOy5At7eTm8vVA7uZHnp13eSdPK0GQJuT/KwKImQ0bEHens14xISxd7S48AWu8B 79RyelXUtMuYzMa0faRJvbNrsaQzjpThGEfy91lGOlAelM+DVtPCLBV1t/SYtS5T c5EDOd4Tu5zCXF8Om9SaKLbE1VLh3dA= -----END CERTIFICATE-----Generated at Sun Jan 25 17:01:13 2026 by rpki-client