This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa File: b33f9824-1d22-3c11-b98f-82918021c09b.roa (raw, json) Hash identifier: UjfBNmsYhLqkkMj+7z9XQy4GR8Y/E/I2CHtBtBkaYJg= Subject key identifier: 54:03:15:82:B2:15:73:73:A4:19:EB:ED:86:DC:C9:D4:ED:A9:83:65 Certificate issuer: /CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Certificate serial: 010D0C9F4328584C5EC69AD2F15A035ACF974700 Authority key identifier: ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 53429 IP address blocks: 199.68.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:9a:d2:f1:5a:03:5a:cf:97:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28635d6a-8623-4918-823a-dc1ad56ec1bd Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=6eda7c84-eba2-4b3c-8fa8-000d91a85401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c7:8e:63:b1:5a:34:f9:8a:35:bf:3f:13:40: bc:3e:4b:93:b6:04:8e:2a:70:1b:e8:0b:2e:54:2a: 73:94:49:10:b5:d2:7b:ac:15:fa:ee:02:08:bf:3f: 30:63:d6:36:30:b0:1b:c1:3c:bc:49:c7:4b:cf:e6: 71:6a:1a:7e:4b:bd:07:d7:06:08:52:39:8e:4c:05: 4f:44:06:e2:e4:f0:40:5e:3a:46:25:3f:4a:9d:c8: ec:bf:28:68:32:1b:52:3c:cf:24:16:96:a5:ed:1e: 18:67:b6:dd:3e:c6:28:85:a0:fe:50:41:92:9e:44: 53:bd:ef:15:d5:da:d9:4f:93:4f:b4:74:8e:a3:f1: 44:92:d4:8d:b8:41:d3:52:bd:55:1c:42:0c:66:01: 3e:11:7b:44:9f:99:c0:d5:60:61:e4:70:7f:bd:ed: 15:a6:89:5d:04:b4:78:3e:fa:3c:ab:74:a9:c8:4d: 3d:bc:fe:37:22:61:29:6b:ba:7b:72:d7:ef:44:66: 3e:a8:c0:88:03:69:65:9d:bb:2c:94:d5:89:2e:cc: 28:5c:50:70:7d:ce:f4:58:86:ea:bd:f3:ba:9d:b2: dd:5e:e5:9e:c6:ba:3c:99:f3:de:2a:ba:80:a7:36: 03:53:10:29:78:95:11:78:da:9a:e0:bf:7c:f5:65: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:03:15:82:B2:15:73:73:A4:19:EB:ED:86:DC:C9:D4:ED:A9:83:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/b33f9824-1d22-3c11-b98f-82918021c09b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd/28635d6a-8623-4918-823a-dc1ad56ec1bd.crl X509v3 Authority Key Identifier: keyid:ED:8F:C6:46:23:EE:FA:95:EA:3C:2C:29:2D:0C:C2:D0:6D:1E:66:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/28635d6a-8623-4918-823a-dc1ad56ec1bd.cer sbgp-ipAddrBlock: critical IPv4: 199.68.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ec:89:0e:91:5e:ec:3d:4b:86:ca:3b:48:6d:06:f1:45:4b: 03:2a:19:8a:77:b4:72:c3:92:90:f1:a4:1d:c6:0a:f3:b9:d6: 0b:4d:29:94:42:13:59:60:ab:ef:06:3f:0e:a0:67:3d:6a:89: a0:05:56:d3:6e:5b:6a:e6:17:cd:f4:53:76:07:a6:b3:94:f3: c9:91:4b:05:f1:47:35:71:fb:17:c3:8f:79:02:89:a1:49:6c: 5c:e8:51:ea:74:40:09:ac:54:b3:3b:ee:7a:6a:0e:70:b2:ab: 07:9a:73:13:64:23:17:97:9c:44:21:27:92:0d:4f:12:ca:f5: 23:3d:17:80:1f:c2:e1:09:3c:0e:f1:58:af:4f:4c:b5:d9:4e: f4:5e:35:1b:fb:f3:f4:bf:4d:3e:9e:86:b8:14:14:23:e1:36: aa:50:0e:a9:d4:9c:7d:89:da:c9:36:ee:eb:77:74:44:e3:19: 8e:a7:7b:82:e0:1a:5d:31:6e:b0:9b:1c:59:34:32:58:e1:fd: 0a:52:84:03:3b:5b:98:81:2b:79:1a:88:cf:9f:eb:e5:7b:cd: 2e:4c:ef:82:20:47:64:97:34:cc:b5:0f:ef:d9:73:18:16:40: 7a:72:b6:ff:14:f3:1f:b6:5c:83:c8:7b:04:10:d9:d4:f5:6f: 29:13:d3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexprS8VoDWs+XRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg2MzVkNmEtODYyMy00OTE4LTgyM2EtZGMxYWQ1NmVj MWJkMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NmVkYTdjODQtZWJhMi00YjNjLThmYTgtMDAwZDkxYTg1NDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8eOY7FaNPmKNb8/E0C8PkuTtgSOKnAb6Asu VCpzlEkQtdJ7rBX67gIIvz8wY9Y2MLAbwTy8ScdLz+Zxahp+S70H1wYIUjmOTAVP RAbi5PBAXjpGJT9KncjsvyhoMhtSPM8kFpal7R4YZ7bdPsYohaD+UEGSnkRTve8V 1drZT5NPtHSOo/FEktSNuEHTUr1VHEIMZgE+EXtEn5nA1WBh5HB/ve0VpoldBLR4 Pvo8q3SpyE09vP43ImEpa7p7ctfvRGY+qMCIA2llnbsslNWJLswoXFBwfc70WIbq vfO6nbLdXuWexro8mfPeKrqApzYDUxApeJUReNqa4L989WVmWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQDFYKyFXNzpBnr7YbcydTtqYNlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYz NWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFhZDU2ZWMxYmQvYjMzZjk4MjQtMWQyMi0z YzExLWI5OGYtODI5MTgwMjFjMDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjg2MzVkNmEtODYyMy00OTE4LTgy M2EtZGMxYWQ1NmVjMWJkLzI4NjM1ZDZhLTg2MjMtNDkxOC04MjNhLWRjMWFkNTZl YzFiZC5jcmwwHwYDVR0jBBgwFoAU7Y/GRiPu+pXqPCwpLQzC0G0eZtIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yODYzNWQ2YS04NjIzLTQ5MTgtODIzYS1kYzFh ZDU2ZWMxYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3siQ6RXuw9S4bKO0htBvFFSwMqGYp3tHLDkpDxpB3GCvO51gtNKZRC E1lgq+8GPw6gZz1qiaAFVtNuW2rmF830U3YHprOU88mRSwXxRzVx+xfDj3kCiaFJ bFzoUep0QAmsVLM77npqDnCyqweacxNkIxeXnEQhJ5INTxLK9SM9F4AfwuEJPA7x WK9PTLXZTvReNRv78/S/TT6ehrgUFCPhNqpQDqnUnH2J2sk27ut3dETjGY6ne4Lg Gl0xbrCbHFk0Mljh/QpShAM7W5iBK3kaiM+f6+V7zS5M74IgR2SXNMy1D+/ZcxgW QHpytv8U8x+2XIPIewQQ2dT1bykT00Q= -----END CERTIFICATE-----Generated at Sun Jan 11 03:47:43 2026 by rpki-client