This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa File: af3b7bb0-e922-3bf4-9766-0847af16df6b.roa (raw, json) Hash identifier: HKAwQQOyMxaN5dMWjUeEJXuPuq2sp4oieRuJYoLe0xw= Subject key identifier: 3D:68:C5:06:D3:71:99:A4:34:4E:D6:F3:0C:8F:B4:24:6D:6F:49:B0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C72516744147BAA4C4B2F9980 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa Signing time: Wed 07 Jan 2026 14:00:39 +0000 ROA not before: Wed 07 Jan 2026 14:00:39 +0000 ROA not after: Tue 07 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:72:51:67:44:14:7b:aa:4c:4b:2f:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 7 14:00:39 2026 GMT Not After : Apr 7 13:00:39 2026 GMT Subject: CN=de73128d-5aeb-44a5-bc6f-b4f9c97e8f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0d:98:09:85:77:17:01:4a:08:1d:d3:dd:9c: 8c:32:3f:b4:a2:72:0b:f1:ee:31:39:4d:12:e4:f9: 4c:56:2e:43:56:76:80:ff:54:0b:3d:8f:55:20:2c: 89:fa:58:b5:48:6b:11:1f:58:3e:bb:6a:46:b0:9f: 6b:08:81:83:71:cc:39:9b:a6:b3:72:7c:6c:eb:59: 57:67:9f:0f:2d:4a:dc:89:14:85:72:75:01:45:5a: 0e:d1:96:30:08:c6:b0:f5:d2:0f:65:b1:91:05:25: bf:79:92:29:42:aa:98:bc:bc:d3:c5:76:b8:5d:04: 53:5d:4e:22:54:93:1a:38:e5:75:12:1c:9d:97:d4: 59:19:0e:ff:1b:2c:3b:26:b4:3b:a1:32:87:5e:e7: fd:51:0d:44:43:41:17:b2:cb:fe:51:fa:3b:08:bf: 59:5f:e9:76:c8:81:2e:8c:79:66:9b:05:86:73:d7: 24:4f:ad:83:36:60:ca:45:a4:c6:b8:46:db:85:6f: c1:2b:a3:0f:1e:cc:f4:78:45:30:20:74:be:77:94: 8a:62:8d:6e:4f:ed:91:31:08:12:69:c7:7e:d5:57: c0:25:30:f3:bb:25:54:79:1b:3e:e7:3f:b7:ba:75: be:95:31:00:54:b6:a5:0d:96:77:8a:7e:36:6e:d7: e3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:68:C5:06:D3:71:99:A4:34:4E:D6:F3:0C:8F:B4:24:6D:6F:49:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fa:28:a6:fa:62:88:5d:ad:7d:8e:5d:69:fa:be:dd:00:ab: 69:26:9d:34:58:25:8e:75:99:4f:b0:a3:0b:21:96:5c:8f:39: 23:1e:5b:24:5a:07:42:b3:52:34:61:17:3c:8c:0e:1f:7d:a8: 99:26:45:6c:26:4b:50:58:52:69:18:ed:77:f0:92:d4:4e:1b: d7:70:ec:87:ab:b3:54:4a:6b:5f:4a:97:df:a6:89:de:b2:5e: 2c:c2:0c:87:a2:b7:a1:a9:c5:06:d2:b4:17:24:6e:fb:b7:b2: cf:f5:e4:12:ef:d9:37:c7:1e:48:72:11:14:2f:f4:48:89:5c: fa:13:84:eb:c0:0f:53:04:c9:58:3e:4b:50:14:1d:f1:e3:05: 7f:21:59:9b:b2:0c:c0:5c:61:47:ec:67:36:e7:c9:11:55:ff: e5:96:f6:fc:ac:f0:a8:fc:ad:aa:34:44:a8:12:b1:d4:81:db: ec:30:6b:a5:9e:67:10:43:82:87:b3:fa:54:ed:5b:ff:fd:ad: 15:f0:ac:c3:34:a6:1b:29:6c:d1:69:20:22:7f:b7:f4:b4:75: 23:af:1e:10:a0:ef:1a:ca:e9:bf:6f:a0:ba:c1:eb:bc:20:48: 97:63:32:4a:c5:88:f2:0c:6c:04:6d:ab:d9:b5:07:2d:2b:2d: 40:f4:c5:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExyUWdEFHuqTEsvmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwNzE0MDAzOVoXDTI2MDQwNzEzMDAzOVowLzEtMCsGA1UEAxMk ZGU3MzEyOGQtNWFlYi00NGE1LWJjNmYtYjRmOWM5N2U4ZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw2YCYV3FwFKCB3T3ZyMMj+0onIL8e4xOU0S 5PlMVi5DVnaA/1QLPY9VICyJ+li1SGsRH1g+u2pGsJ9rCIGDccw5m6azcnxs61lX Z58PLUrciRSFcnUBRVoO0ZYwCMaw9dIPZbGRBSW/eZIpQqqYvLzTxXa4XQRTXU4i VJMaOOV1Ehydl9RZGQ7/Gyw7JrQ7oTKHXuf9UQ1EQ0EXssv+Ufo7CL9ZX+l2yIEu jHlmmwWGc9ckT62DNmDKRaTGuEbbhW/BK6MPHsz0eEUwIHS+d5SKYo1uT+2RMQgS acd+1VfAJTDzuyVUeRs+5z+3unW+lTEAVLalDZZ3in42btfjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1oxQbTcZmkNE7W8wyPtCRtb0mwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWYzYjdiYjAtZTkyMi0z YmY0LTk3NjYtMDg0N2FmMTZkZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj6KKb6YohdrX2OXWn6vt0Aq2kmnTRYJY51mU+wowshllyPOSMeWyRa B0KzUjRhFzyMDh99qJkmRWwmS1BYUmkY7XfwktROG9dw7Iers1RKa19Kl9+mid6y XizCDIeit6GpxQbStBckbvu3ss/15BLv2TfHHkhyERQv9EiJXPoThOvAD1MEyVg+ S1AUHfHjBX8hWZuyDMBcYUfsZzbnyRFV/+WW9vys8Kj8rao0RKgSsdSB2+wwa6We ZxBDgoez+lTtW//9rRXwrMM0phspbNFpICJ/t/S0dSOvHhCg7xrK6b9voLrB67wg SJdjMkrFiPIMbARtq9m1By0rLUD0xcA= -----END CERTIFICATE-----Generated at Sun Jan 11 08:22:04 2026 by rpki-client