This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa File: dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa (raw, json) Hash identifier: jgAQ3GA93N1Mzary6d1OuIDF4r5LEf4D80jMQuAdcJc= Subject key identifier: 10:21:F0:50:62:7E:2D:C5:18:61:6E:BA:B1:8D:A8:94:56:5C:F4:B6 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584C45A7EAE27BB554503F967C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 15169 IP address blocks: 216.58.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a7:ea:e2:7b:b5:54:50:3f:96:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=cfd86c70-f86f-4104-b652-0ad0d9b8d41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:03:67:8f:9d:38:6d:98:15:3c:dd:0a:f1:de: 0e:0f:1b:0b:b3:ac:62:85:cb:43:59:3c:9a:5f:9b: 89:e3:0d:b0:6a:7f:37:58:36:0c:0d:66:7b:5e:80: eb:9d:4b:c8:58:ca:36:cb:47:48:00:96:8d:e9:df: 01:84:68:0e:1e:1f:56:04:c0:cb:d8:b6:09:20:14: c0:9b:35:bb:f4:52:46:ab:65:62:5a:2b:95:5a:40: 49:3b:fb:8a:ae:22:96:47:20:85:7f:cc:56:c0:f1: 47:d5:db:f6:55:60:a4:88:72:5b:0c:df:4f:b3:13: 33:3a:33:88:10:0d:a4:a1:8f:11:47:e3:a4:ab:6d: 34:16:60:b7:92:a2:41:9c:d1:92:c0:bd:c1:53:f0: 6b:a6:2b:5b:66:f4:9a:9a:03:30:e9:b7:32:5c:c1: de:4c:a0:52:9a:35:da:70:16:0a:ac:86:78:92:44: e2:cb:e3:c2:59:89:26:d0:92:21:9d:6c:59:0d:35: 77:8c:63:43:62:d1:71:6c:cd:ac:2c:bb:85:bf:0c: 0f:d0:13:5f:1d:da:f7:e6:13:01:f9:7b:18:2b:e3: d5:3f:09:d2:fe:d6:43:0e:d1:d4:a1:7e:71:eb:53: 3a:63:b2:d7:11:92:d9:de:2d:dc:3a:5f:e5:2b:35: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:21:F0:50:62:7E:2D:C5:18:61:6E:BA:B1:8D:A8:94:56:5C:F4:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dff0fcf6-3e94-3def-9e77-27e00efd6b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 216.58.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:97:3a:28:27:2a:eb:10:51:cb:12:be:7e:78:71:9e:ed:db: 95:7f:94:24:00:48:80:04:af:a3:0a:0f:e5:54:46:50:52:c1: e2:ec:7c:5e:f2:bd:79:88:7f:1e:f7:27:1a:5c:c9:44:d7:f0: 3c:da:77:b5:9d:92:2b:e7:06:51:6f:6d:f9:65:02:9f:03:55: 4f:57:d3:d1:27:11:68:1a:a5:b9:9f:29:cd:35:ff:ec:6f:3c: 9f:88:c3:0b:ce:ec:bd:99:27:64:48:f2:af:24:06:87:5f:a8: 69:35:e9:7e:39:07:c0:83:a4:56:b2:b4:d1:f4:16:71:6b:74: 37:b1:ad:67:22:8e:08:ab:4e:88:75:d7:a3:77:3c:5e:f5:63: cb:d7:1c:3f:e1:cf:63:af:f9:91:bc:ce:be:86:2e:e3:23:7f: b8:cd:95:c2:5d:62:d1:3b:a0:c1:0d:84:d4:71:60:08:78:e2: 01:7f:ec:79:b9:6a:6f:98:70:72:22:04:5e:c9:d5:84:b6:35: 4f:b3:83:18:fb:09:40:93:33:24:0e:b2:36:ef:70:f6:00:1d: 4b:4c:45:59:d4:42:5b:6c:84:1c:35:0e:c4:b9:c2:27:04:8c: 16:07:c5:49:d6:3d:eb:da:c1:a0:d6:e6:bb:91:b8:63:5f:05: ef:dd:fb:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFp+rie7VUUD+WfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk Y2ZkODZjNzAtZjg2Zi00MTA0LWI2NTItMGFkMGQ5YjhkNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gNnj504bZgVPN0K8d4ODxsLs6xihctDWTya X5uJ4w2wan83WDYMDWZ7XoDrnUvIWMo2y0dIAJaN6d8BhGgOHh9WBMDL2LYJIBTA mzW79FJGq2ViWiuVWkBJO/uKriKWRyCFf8xWwPFH1dv2VWCkiHJbDN9PsxMzOjOI EA2koY8RR+Okq200FmC3kqJBnNGSwL3BU/BrpitbZvSamgMw6bcyXMHeTKBSmjXa cBYKrIZ4kkTiy+PCWYkm0JIhnWxZDTV3jGNDYtFxbM2sLLuFvwwP0BNfHdr35hMB +XsYK+PVPwnS/tZDDtHUoX5x61M6Y7LXEZLZ3i3cOl/lKzU3JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAh8FBifi3FGGFuurGNqJRWXPS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZGZmMGZjZjYtM2U5NC0z ZGVmLTllNzctMjdlMDBlZmQ2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DreMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECXOignKusQUcsSvn54cZ7t25V/lCQASIAEr6MKD+VURlBSweLsfF7y vXmIfx73JxpcyUTX8Dzad7WdkivnBlFvbfllAp8DVU9X09EnEWgapbmfKc01/+xv PJ+IwwvO7L2ZJ2RI8q8kBodfqGk16X45B8CDpFaytNH0FnFrdDexrWcijgirToh1 16N3PF71Y8vXHD/hz2Ov+ZG8zr6GLuMjf7jNlcJdYtE7oMENhNRxYAh44gF/7Hm5 am+YcHIiBF7J1YS2NU+zgxj7CUCTMyQOsjbvcPYAHUtMRVnUQltshBw1DsS5wicE jBYHxUnWPevawaDW5ruRuGNfBe/d+4Q= -----END CERTIFICATE-----Generated at Sun Jan 25 22:34:23 2026 by rpki-client