This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa File: afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa (raw, json) Hash identifier: ECcFyxVzPRutcWuqU9RP94D1sAfl6fFbqMgO60Ko69o= Subject key identifier: C2:D8:42:63:38:FA:11:B6:7F:0C:20:1F:94:67:7C:51:E8:FE:85:21 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C1E90FBA47F2476DBCCC1D5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 22909 IP address blocks: 68.57.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:90:fb:a4:7f:24:76:db:cc:c1:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=6e3c1f35-286a-4d02-ab79-1b3a79862803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ff:51:e9:d8:4c:ab:86:8a:84:b9:ba:34:fa: 76:bc:c0:02:5d:00:f0:81:dd:ea:5b:70:8a:9d:c0: 7f:24:ae:63:17:09:e3:76:22:95:0e:d3:91:3c:17: c4:b1:0c:96:a3:3c:e4:a7:fa:20:87:3b:b7:e1:6a: 8d:f4:ed:49:9c:96:fd:e3:3b:20:07:c6:88:dd:98: 2c:18:82:99:fc:a6:d0:9e:7e:5b:bd:17:42:a8:01: f6:13:3f:57:91:9f:e7:17:87:f9:e6:d8:f8:09:78: ee:82:77:29:43:e1:d2:86:cb:05:56:20:c8:61:aa: fc:63:21:6c:8d:10:59:3d:60:a1:53:a7:15:67:2b: fe:68:39:eb:c7:ae:cf:b5:28:7a:dc:ea:cb:8b:62: 61:5b:5d:1c:0e:e8:9d:58:f5:36:86:cf:23:90:ae: ce:f8:79:8b:47:6a:d9:ea:b7:9b:9e:ad:2d:5e:bb: c8:4e:f5:97:12:fd:94:79:57:cc:11:66:ec:f6:c5: b6:2f:67:b4:08:c0:f4:55:73:b8:ea:b6:4a:ec:72: 63:86:d3:7d:87:4e:b1:f4:af:44:5d:7c:27:46:4b: 4e:93:ad:5e:1f:d0:8c:72:b2:3f:f1:b5:7d:6f:33: 45:a5:e5:9b:2f:7f:05:a6:fa:4e:8a:c1:d6:97:19: 6a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:42:63:38:FA:11:B6:7F:0C:20:1F:94:67:7C:51:E8:FE:85:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afb72d5b-3f1b-37db-8141-fa6d8a54971e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.57.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3f:eb:55:90:cb:77:45:e7:53:ca:f3:59:74:13:e6:61:03: bb:3b:3f:95:d6:ef:fd:5c:0c:3a:00:16:1e:b9:ba:d9:40:44: 04:70:1b:74:a7:be:22:fa:1c:39:1a:bc:48:e5:b6:5c:62:08: f7:6c:56:d7:85:f6:84:0e:cc:39:fb:d7:d8:29:1f:53:16:3d: 7a:66:c6:90:47:26:f9:36:be:da:17:83:9d:89:d3:a3:fd:c4: b5:a3:74:4d:56:91:b0:d3:fb:af:f0:e2:a6:0b:83:95:3e:54: b6:96:0e:26:75:07:c6:16:d8:b2:75:b3:d8:af:25:03:35:76: ad:0a:ac:0c:20:5b:37:0a:5e:34:d5:69:35:5d:f8:34:53:53: 02:8b:63:2e:54:a9:57:37:23:91:2d:f6:94:5e:b3:e0:f8:af: ef:1f:72:8d:7b:f3:97:b6:c0:b8:9b:e1:4f:fc:64:50:62:b9: 8d:5d:e9:4e:13:c3:61:32:19:62:81:36:60:9b:ec:ff:6b:a3: 52:57:33:67:50:b7:58:58:b3:74:d2:4c:1c:1b:6a:bc:af:38: 34:ba:36:2a:5c:8b:a1:5a:7f:a8:ee:59:00:12:fe:e3:f8:3b: 7f:b6:08:d0:93:41:3e:89:b6:57:9d:83:cd:5d:f7:bb:fc:ca: 4b:0f:2d:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekPukfyR228zB1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NmUzYzFmMzUtMjg2YS00ZDAyLWFiNzktMWIzYTc5ODYyODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P9R6dhMq4aKhLm6NPp2vMACXQDwgd3qW3CK ncB/JK5jFwnjdiKVDtORPBfEsQyWozzkp/oghzu34WqN9O1JnJb94zsgB8aI3Zgs GIKZ/KbQnn5bvRdCqAH2Ez9XkZ/nF4f55tj4CXjugncpQ+HShssFViDIYar8YyFs jRBZPWChU6cVZyv+aDnrx67PtSh63OrLi2JhW10cDuidWPU2hs8jkK7O+HmLR2rZ 6rebnq0tXrvITvWXEv2UeVfMEWbs9sW2L2e0CMD0VXO46rZK7HJjhtN9h06x9K9E XXwnRktOk61eH9CMcrI/8bV9bzNFpeWbL38FpvpOisHWlxlqUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLYQmM4+hG2fwwgH5RnfFHo/oUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZiNzJkNWItM2YxYi0z N2RiLTgxNDEtZmE2ZDhhNTQ5NzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU/61WQy3dF51PK81l0E+ZhA7s7P5XW7/1cDDoAFh65utlARARwG3Sn viL6HDkavEjltlxiCPdsVteF9oQOzDn719gpH1MWPXpmxpBHJvk2vtoXg52J06P9 xLWjdE1WkbDT+6/w4qYLg5U+VLaWDiZ1B8YW2LJ1s9ivJQM1dq0KrAwgWzcKXjTV aTVd+DRTUwKLYy5UqVc3I5Et9pRes+D4r+8fco1785e2wLib4U/8ZFBiuY1d6U4T w2EyGWKBNmCb7P9ro1JXM2dQt1hYs3TSTBwbaryvODS6Nipci6Faf6juWQAS/uP4 O3+2CNCTQT6Jtledg81d97v8yksPLew= -----END CERTIFICATE-----Generated at Tue Jan 20 18:39:36 2026 by rpki-client