This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa File: 489befd5-0a00-341e-967c-ec49a0a2b329.roa (raw, json) Hash identifier: rsdfrdAqQO/hoq4587R3BpwLtGlquBHE27Be/GqfP28= Subject key identifier: 1F:E8:00:9D:34:3B:08:25:83:C3:2C:2C:C0:FD:53:08:46:56:D6:DB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C725211EFD021AAA3DEE75380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:52:11:ef:d0:21:aa:a3:de:e7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=f4f5e90d-4bc6-465c-9e33-ea69081ba920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:85:53:65:78:c5:73:cc:1f:60:9e:37:6d:be: 5d:f8:52:89:dd:5e:b6:09:70:79:07:85:1e:b0:db: 0c:e0:a1:db:d0:80:64:7f:58:29:51:2e:52:5e:8f: a8:69:b4:bc:45:93:e1:cd:58:a2:c3:d8:c3:61:4a: 01:16:fc:d5:13:a4:d0:63:50:18:23:c0:cf:cd:0c: a0:b5:26:b1:26:ec:00:90:93:5f:dc:df:c7:b4:0d: 1e:e5:c4:19:2f:d6:83:e4:be:4e:5f:ac:1b:57:ed: 40:d0:b1:2e:1d:bb:74:c3:8d:2f:d0:b1:89:50:25: ec:0d:51:ee:9c:bb:79:1b:08:98:ad:c7:05:ac:5f: 07:be:9c:7a:d9:30:f7:ef:3b:2a:39:41:d6:d1:88: 32:bd:8b:2c:9e:d8:18:67:9f:79:9f:05:53:ed:d2: dc:ba:3e:e7:82:31:05:89:3a:21:21:7f:66:4f:64: 82:12:cc:1e:e5:14:1a:0a:c5:45:7e:3c:82:57:4d: 06:a4:d2:e5:6c:9d:41:a7:4e:cc:85:5f:f8:8b:01: 71:26:cb:11:c7:42:64:d9:ce:38:fa:88:7b:0a:4a: 49:a0:bb:fb:6f:93:37:b9:8e:6d:75:4e:e7:29:68: 66:bd:77:2b:6a:9e:c9:d4:f8:ea:77:cd:d9:97:2e: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E8:00:9D:34:3B:08:25:83:C3:2C:2C:C0:FD:53:08:46:56:D6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:cb:31:fe:fc:8e:78:2c:01:b6:c5:27:1a:7f:d1:cb:d6:68: 09:b1:9a:5c:5e:b5:1e:4a:98:6f:f8:59:63:1c:46:13:37:82: 21:12:8b:dc:26:e0:fe:87:f8:df:50:05:38:cd:be:8c:71:56: 22:43:b4:c1:67:43:9a:97:12:45:a9:f6:78:ee:13:ae:92:cd: 07:84:63:e7:ba:b8:bb:f7:d2:f1:37:b5:f4:79:9a:b7:d5:0d: 96:ba:2f:25:07:a8:79:ee:ef:b5:14:0e:0d:ce:26:89:ac:46: d1:d9:7d:d4:df:21:06:e7:50:62:94:cc:a7:91:0a:15:fb:bd: e2:50:65:a7:29:01:f2:30:e7:f3:66:53:bf:a8:a8:a1:c4:bc: 9b:4f:45:f3:d8:7b:39:cb:4e:86:d9:b3:59:dd:89:f0:32:de: 15:7b:e4:f5:4f:ae:95:54:ed:6c:16:2a:e9:c4:bd:6f:92:1c: 8f:c7:8e:d3:18:62:96:45:ce:43:d5:50:54:c3:fb:1d:f9:b2: 8f:5a:ae:ad:5b:fd:b6:73:93:fb:12:b2:80:c2:a5:b2:5d:9c: 59:66:71:41:48:b0:97:be:1e:76:af:b0:54:f7:1e:5e:fe:7a: 38:4f:53:72:bb:db:cb:93:e5:67:fa:1d:64:f1:98:27:8d:1a: bc:ba:e5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExyUhHv0CGqo97nU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk ZjRmNWU5MGQtNGJjNi00NjVjLTllMzMtZWE2OTA4MWJhOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4VTZXjFc8wfYJ43bb5d+FKJ3V62CXB5B4Ue sNsM4KHb0IBkf1gpUS5SXo+oabS8RZPhzViiw9jDYUoBFvzVE6TQY1AYI8DPzQyg tSaxJuwAkJNf3N/HtA0e5cQZL9aD5L5OX6wbV+1A0LEuHbt0w40v0LGJUCXsDVHu nLt5GwiYrccFrF8Hvpx62TD37zsqOUHW0YgyvYssntgYZ595nwVT7dLcuj7ngjEF iTohIX9mT2SCEswe5RQaCsVFfjyCV00GpNLlbJ1Bp07MhV/4iwFxJssRx0Jk2c44 +oh7CkpJoLv7b5M3uY5tdU7nKWhmvXcrap7J1Pjqd83Zly49cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/oAJ00Owglg8MsLMD9UwhGVtbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDg5YmVmZDUtMGEwMC0z NDFlLTk2N2MtZWM0OWEwYTJiMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXLMf78jngsAbbFJxp/0cvWaAmxmlxetR5KmG/4WWMcRhM3giESi9wm 4P6H+N9QBTjNvoxxViJDtMFnQ5qXEkWp9njuE66SzQeEY+e6uLv30vE3tfR5mrfV DZa6LyUHqHnu77UUDg3OJomsRtHZfdTfIQbnUGKUzKeRChX7veJQZacpAfIw5/Nm U7+oqKHEvJtPRfPYeznLTobZs1ndifAy3hV75PVPrpVU7WwWKunEvW+SHI/HjtMY YpZFzkPVUFTD+x35so9arq1b/bZzk/sSsoDCpbJdnFlmcUFIsJe+HnavsFT3Hl7+ ejhPU3K728uT5Wf6HWTxmCeNGry65VA= -----END CERTIFICATE-----Generated at Sat Jan 10 22:25:59 2026 by rpki-client