This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa File: 3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json) Hash identifier: 0kmwEEqEK1l33IhyHjB8qibVzojGvfhSEnitKlSkou8= Subject key identifier: 73:24:E6:59:85:30:CB:A9:7E:57:85:C9:3F:1B:76:A7:2E:32:5B:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C751F8A88E352E36B3E5AF780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1f:8a:88:e3:52:e3:6b:3e:5a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=86971681-01ed-4ee1-b898-64fffa69fcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:95:57:c3:5f:cb:11:33:16:3f:e8:c9:88: 62:8b:9a:b6:70:96:4d:cb:38:1c:40:0a:46:2d:1a: b5:ff:71:2e:e8:8a:50:30:f0:28:1a:d2:53:73:18: 1a:6e:3a:df:44:43:57:c1:de:18:45:bd:1c:0e:77: 54:01:5b:46:0f:73:b4:eb:76:cb:fd:e5:31:76:7a: 69:ea:25:0b:e6:e8:73:8c:bf:f3:b0:f0:e9:4a:4d: 2e:73:08:51:1b:bf:6e:bd:24:15:c2:97:8f:62:21: 3b:52:d0:ef:4e:86:20:1e:b8:25:f4:4c:8f:a4:80: e9:cf:33:30:f2:a2:bb:0a:6e:d6:9f:6d:e7:4b:21: b6:61:d2:c0:0b:31:16:c0:9f:b8:db:2d:78:75:39: 7c:c7:b5:02:82:91:8a:54:de:7f:77:f7:0d:58:aa: fb:db:4d:37:09:95:c8:93:d4:c7:32:e0:1e:d4:77: 73:2c:1d:71:08:55:9f:fc:e8:9e:1b:b8:90:e7:ad: e9:1e:34:25:a7:c9:d9:27:50:7e:42:02:b6:4a:03: 6e:39:61:e1:47:a5:be:c5:f9:e6:9e:02:13:ec:c4: 75:09:b7:e6:ad:87:d3:9b:7d:88:72:1e:c3:2d:04: 0b:04:d4:c5:6f:ff:1e:ad:ec:9c:8a:33:ee:de:3a: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:E6:59:85:30:CB:A9:7E:57:85:C9:3F:1B:76:A7:2E:32:5B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:74:98:0e:1e:f9:07:f5:0c:26:fb:4a:dd:da:c1:1c:cd:56: 64:39:ee:12:ae:7d:72:06:b2:58:a5:73:42:e0:0c:8d:62:ab: 6c:1c:06:d3:63:84:a1:78:24:61:e3:82:e6:8f:86:b9:26:65: 68:c8:90:6c:b2:d9:04:24:4f:47:54:32:0a:18:45:96:9d:37: 5c:64:b0:2d:f2:c4:12:be:64:a8:5d:7c:e2:6f:15:8e:ad:96: eb:b0:cc:3c:61:d7:7d:c4:86:bf:56:c2:9a:3b:a5:55:4c:1d: ea:38:4b:ac:77:8d:75:36:51:64:c8:5f:c4:be:d8:a1:85:b0: f1:4b:49:e4:7e:89:28:37:91:cf:a9:43:f6:72:9e:ee:de:4c: 21:a1:49:89:76:2f:38:2d:36:9e:9f:8e:4b:d0:3b:98:d7:1d: 4d:fd:0c:e6:f9:da:89:3c:75:2e:99:9c:88:09:0f:38:c9:71: c9:33:d3:c8:66:17:95:91:e9:19:8a:9f:be:cf:2d:5c:4f:2f: bc:37:d7:0b:71:34:bb:61:df:6e:0e:3f:c2:d4:0a:69:9d:92: 29:11:f7:58:70:f8:44:df:f6:09:29:24:09:f7:c0:95:fe:3a: 4d:17:af:a6:dd:8e:63:6d:33:27:83:54:85:95:3d:75:04:5e: 03:4e:0e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1H4qI41Ljaz5a94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk ODY5NzE2ODEtMDFlZC00ZWUxLWI4OTgtNjRmZmZhNjlmY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEiVV8NfyxEzFj/oyYhii5q2cJZNyzgcQApG LRq1/3Eu6IpQMPAoGtJTcxgabjrfRENXwd4YRb0cDndUAVtGD3O063bL/eUxdnpp 6iUL5uhzjL/zsPDpSk0ucwhRG79uvSQVwpePYiE7UtDvToYgHrgl9EyPpIDpzzMw 8qK7Cm7Wn23nSyG2YdLACzEWwJ+42y14dTl8x7UCgpGKVN5/d/cNWKr72003CZXI k9THMuAe1HdzLB1xCFWf/OieG7iQ563pHjQlp8nZJ1B+QgK2SgNuOWHhR6W+xfnm ngIT7MR1CbfmrYfTm32Ich7DLQQLBNTFb/8ereycijPu3jquLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMk5lmFMMupfleFyT8bdqcuMlv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RlNTZjNTAtMGRmOS0z ZDVjLTgyNDItOGUzZTljNjRlOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR0mA4e+Qf1DCb7St3awRzNVmQ57hKufXIGslilc0LgDI1iq2wcBtNj hKF4JGHjguaPhrkmZWjIkGyy2QQkT0dUMgoYRZadN1xksC3yxBK+ZKhdfOJvFY6t luuwzDxh133Ehr9Wwpo7pVVMHeo4S6x3jXU2UWTIX8S+2KGFsPFLSeR+iSg3kc+p Q/Zynu7eTCGhSYl2LzgtNp6fjkvQO5jXHU39DOb52ok8dS6ZnIgJDzjJcckz08hm F5WR6RmKn77PLVxPL7w31wtxNLth324OP8LUCmmdkikR91hw+ETf9gkpJAn3wJX+ Ok0Xr6bdjmNtMyeDVIWVPXUEXgNODn8= -----END CERTIFICATE-----Generated at Sat Jan 10 22:26:41 2026 by rpki-client