This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa File: 28f16384-eb96-3fc5-961a-187be7f3b5a2.roa (raw, json) Hash identifier: dzruW42eCGpqfXroZJ6JdbSzzu68X5kndpA3iYuIv8Y= Subject key identifier: 96:80:8D:37:95:E7:07:9A:8D:8C:05:16:84:CD:8F:F9:90:CF:60:D5 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584C6B56AEE5B5758C17E8B1F615 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa Signing time: Mon 05 Jan 2026 02:00:31 +0000 ROA not before: Mon 05 Jan 2026 02:00:31 +0000 ROA not after: Sun 05 Apr 2026 01:00:31 +0000 asID: 22781 IP address blocks: 216.131.64.0/22 maxlen: 22 216.131.69.0/24 maxlen: 24 216.131.70.0/23 maxlen: 23 216.131.90.0/23 maxlen: 23 216.131.92.0/22 maxlen: 22 216.131.96.0/21 maxlen: 21 216.131.113.0/24 maxlen: 24 216.131.115.0/24 maxlen: 24 216.131.119.0/24 maxlen: 24 216.131.122.0/23 maxlen: 23 216.131.124.0/22 maxlen: 22 216.169.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6b:56:ae:e5:b5:75:8c:17:e8:b1:f6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Jan 5 02:00:31 2026 GMT Not After : Apr 5 01:00:31 2026 GMT Subject: CN=c36d2146-d656-4302-b82f-aede691dbb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fb:bf:49:f1:87:a5:96:e5:c9:9f:0a:30:09: 5b:7a:4d:f6:63:28:16:62:01:68:db:9c:fb:b7:d5: a6:ec:0b:49:b6:5b:34:4a:9b:49:d6:f0:68:4d:18: 30:ec:68:30:4e:a3:5c:2b:01:6a:c1:5f:dd:fa:7d: 2b:4c:c1:86:f7:02:50:92:9f:5d:45:93:7b:10:36: d6:27:4a:b5:46:e3:f3:50:a0:da:dd:ff:e2:c3:f5: a7:19:db:ef:3d:19:25:bc:1b:a4:f7:2d:77:1a:2b: 32:ed:8e:fb:f0:a6:7d:ad:dd:3c:b9:33:d0:73:53: 0f:8e:10:90:32:5b:b7:e2:04:fe:0c:7f:b3:37:5f: 02:61:06:d9:61:0b:17:04:08:bf:a6:a4:23:4c:b7: f5:07:71:3a:f7:8d:f2:27:0c:08:98:4f:48:f6:fd: c3:a9:cb:07:e6:7b:b8:29:37:86:d0:fa:41:7d:9e: 3a:e3:b4:c1:4c:ae:9e:24:cf:7c:f6:10:b9:1c:e6: 38:73:75:04:27:cb:ef:67:5e:b8:e2:9e:78:6f:0e: 96:3d:a4:17:d4:13:f3:ee:65:85:66:fa:16:46:46: 78:da:bb:2f:4a:28:05:78:69:41:ed:25:16:a5:66: 68:51:97:67:6b:dd:e0:87:20:4c:f0:83:59:39:f3: 66:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:80:8D:37:95:E7:07:9A:8D:8C:05:16:84:CD:8F:F9:90:CF:60:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/28f16384-eb96-3fc5-961a-187be7f3b5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 216.131.64.0/22 216.131.69.0-216.131.71.255 216.131.90.0-216.131.103.255 216.131.113.0/24 216.131.115.0/24 216.131.119.0/24 216.131.122.0-216.131.127.255 216.169.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f0:fa:cd:f7:28:96:f1:f6:35:60:ec:f2:67:ce:6f:01:c3: 89:97:a2:7a:31:4f:93:81:32:2b:6d:c2:2d:0b:45:f7:5d:8a: 9a:f4:9b:5f:b1:34:b1:26:03:3d:4a:93:fd:d4:78:41:a2:a4: c2:4d:5b:a8:3d:7e:47:c1:8b:c5:f5:ee:fa:e9:24:c3:0f:f3: 74:ac:f5:ce:ca:f7:c7:5f:ea:d9:09:ae:e4:42:0d:03:26:a0: b2:e2:ac:1f:b8:29:d7:68:ac:33:6a:15:33:4b:6f:38:6a:d4: 9b:b9:21:e2:03:2a:31:cd:29:72:81:5d:05:ac:09:53:3f:e7: 85:8b:61:06:ac:16:3a:6a:a2:d6:10:91:1a:61:f3:ba:b1:31: e8:3a:9b:59:4a:da:e0:8b:88:8a:ac:b7:6d:ac:b3:c5:12:de: a7:60:0e:94:c5:4b:c8:23:9b:c8:68:0c:ec:22:5a:16:cb:c0: db:69:6d:3b:97:22:30:bd:b2:f8:e6:f9:3a:80:61:78:1f:c1: ff:d0:78:58:f6:4c:42:41:88:fb:a4:67:a1:c1:48:ce:ef:65: c3:f2:4f:c8:83:ba:37:be:ad:1c:8f:6d:52:5b:33:4f:d2:1f: 35:f8:c8:35:ca:d5:f5:f7:0a:75:12:a5:e8:fb:c8:9a:63:11: 83:61:f5:a1 -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWExrVq7ltXWMF+ix9hUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDEwNTAyMDAzMVoXDTI2MDQwNTAxMDAzMVowLzEtMCsGA1UEAxMk YzM2ZDIxNDYtZDY1Ni00MzAyLWI4MmYtYWVkZTY5MWRiYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/u/SfGHpZblyZ8KMAlbek32YygWYgFo25z7 t9Wm7AtJtls0SptJ1vBoTRgw7GgwTqNcKwFqwV/d+n0rTMGG9wJQkp9dRZN7EDbW J0q1RuPzUKDa3f/iw/WnGdvvPRklvBuk9y13Gisy7Y778KZ9rd08uTPQc1MPjhCQ Mlu34gT+DH+zN18CYQbZYQsXBAi/pqQjTLf1B3E6943yJwwImE9I9v3DqcsH5nu4 KTeG0PpBfZ4647TBTK6eJM989hC5HOY4c3UEJ8vvZ1644p54bw6WPaQX1BPz7mWF ZvoWRkZ42rsvSigFeGlB7SUWpWZoUZdna93ghyBM8INZOfNmlwIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFJaAjTeV5weajYwFFoTNj/mQz2DVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjhmMTYzODQtZWI5Ni0z ZmM1LTk2MWEtMTg3YmU3ZjNiNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQC2INAMAwD BADYg0UDBAPYg0AwDAMEAdiDWgMEA9iDYAMEANiDcQMEANiDcwMEANiDdzAMAwQB 2IN6AwQH2IMAAwQC2KmAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABzw+s33KJbx9jVg7PJnzm8Bw4mXonox T5OBMittwi0LRfddipr0m1+xNLEmAz1Kk/3UeEGipMJNW6g9fkfBi8X17vrpJMMP 83Ss9c7K98df6tkJruRCDQMmoLLirB+4KddorDNqFTNLbzhq1Ju5IeIDKjHNKXKB XQWsCVM/54WLYQasFjpqotYQkRph87qxMeg6m1lK2uCLiIqst22ss8US3qdgDpTF S8gjm8hoDOwiWhbLwNtpbTuXIjC9svjm+TqAYXgfwf/QeFj2TEJBiPukZ6HBSM7v ZcPyT8iDuje+rRyPbVJbM0/SHzX4yDXK1fX3CnUSpej7yJpjEYNh9aE= -----END CERTIFICATE-----Generated at Wed Jan 21 08:59:31 2026 by rpki-client