This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa File: 2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa (raw, json) Hash identifier: AGKdsQZXjt8WDdmYJbJMlW3oRWEDvy3zNFPQo0dQzgU= Subject key identifier: 03:A1:43:39:C8:28:51:2B:2A:18:25:F0:FF:28:93:71:F5:47:68:88 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C4CA11D8D6A9C0BE0D8B72240 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa Signing time: Thu 25 Dec 2025 02:00:31 +0000 ROA not before: Thu 25 Dec 2025 02:00:31 +0000 ROA not after: Wed 25 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 64.4.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4c:a1:1d:8d:6a:9c:0b:e0:d8:b7:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 25 02:00:31 2025 GMT Not After : Mar 25 01:00:31 2026 GMT Subject: CN=ae5a5a8b-3c35-4335-84ea-530859487f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d5:20:31:3b:00:71:de:23:6c:a9:ef:88:f1: 49:be:ec:a4:ea:f3:f1:5a:b9:8b:6f:b7:f5:f5:68: fe:eb:be:15:10:26:f7:9a:c8:18:72:f1:85:b8:1b: c4:87:57:bb:94:f8:2f:23:90:94:92:0b:67:ec:50: 44:7e:37:d3:52:de:fe:c8:5e:39:4d:25:74:6b:33: b3:64:94:52:7a:cc:bf:6f:b7:65:10:c5:ee:ce:fb: e4:dc:9d:70:9d:3a:e3:40:9c:22:bb:b5:3e:eb:26: 4a:fb:08:f3:12:35:09:34:72:a8:6b:cc:ce:20:df: ac:f2:6d:19:85:1c:e6:7e:d8:39:e0:6c:5b:ff:c8: c2:26:76:7b:c7:11:05:e7:41:fc:29:fd:59:e9:7d: fc:85:c0:3e:c9:87:cf:3c:e8:00:77:14:04:0e:00: 39:09:4d:d4:39:97:41:d4:b9:ae:57:3e:40:7f:cf: 6f:03:17:46:21:24:c2:35:95:70:e5:0e:1d:b0:4e: 00:06:a6:6c:77:89:74:b0:e6:6f:5a:34:93:f0:14: 4e:73:85:93:67:f1:a6:62:3c:c2:29:4f:dc:3b:38: 4a:ec:66:ba:9a:e2:6e:12:11:ba:ec:87:34:0d:23: bc:6c:7f:a2:bf:62:15:ce:d0:99:48:ee:fe:ed:e9: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A1:43:39:C8:28:51:2B:2A:18:25:F0:FF:28:93:71:F5:47:68:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/2815e2fb-0995-3a2d-84b9-89a8e7eeb66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 64.4.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ac:c5:cc:8c:c4:9b:be:a1:0d:c2:2b:b9:94:21:22:83:7b: ab:d8:39:0e:1d:b5:8e:7d:2d:aa:68:c9:52:09:b8:74:c3:b3: 9d:20:2e:dd:82:df:fe:e5:a1:52:cd:93:c5:9a:4f:dd:02:85: 3f:c8:cc:9e:88:ad:34:48:29:00:c6:75:e4:45:d0:02:89:50: 4d:95:a4:2d:e9:90:c2:19:8c:2d:ea:3f:47:dd:ba:a4:f2:26: 5c:0c:5f:1f:5d:76:69:06:db:04:f7:93:7f:0b:26:cf:d1:4a: de:14:26:6a:49:b9:bf:41:fa:b4:33:91:1c:3f:a9:9e:00:7d: 28:e4:4e:a7:24:f9:2a:64:f8:c0:29:89:1c:26:35:8c:85:2e: 68:32:5a:27:7b:58:cc:ea:a1:e7:c9:fd:d8:92:7b:53:49:31: ca:58:79:be:d8:56:17:c1:38:c8:84:48:cf:5d:4e:d3:5a:da: e0:7f:6a:69:22:fb:4d:79:62:8a:63:20:3f:0f:68:c7:cf:c8: 3c:49:ba:1b:24:96:cf:5c:40:35:ac:8c:41:e2:43:df:2e:4c: ea:1d:6d:8a:6a:f8:e5:27:87:7e:c8:a2:4a:5d:88:34:69:94: d3:26:f1:63:93:07:3b:79:30:79:40:4d:f9:04:65:0f:d3:c7: 5b:fb:aa:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExMoR2NapwL4Ni3IkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIyNTAyMDAzMVoXDTI2MDMyNTAxMDAzMVowLzEtMCsGA1UEAxMk YWU1YTVhOGItM2MzNS00MzM1LTg0ZWEtNTMwODU5NDg3ZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9UgMTsAcd4jbKnviPFJvuyk6vPxWrmLb7f1 9Wj+674VECb3msgYcvGFuBvEh1e7lPgvI5CUkgtn7FBEfjfTUt7+yF45TSV0azOz ZJRSesy/b7dlEMXuzvvk3J1wnTrjQJwiu7U+6yZK+wjzEjUJNHKoa8zOIN+s8m0Z hRzmftg54Gxb/8jCJnZ7xxEF50H8Kf1Z6X38hcA+yYfPPOgAdxQEDgA5CU3UOZdB 1LmuVz5Af89vAxdGISTCNZVw5Q4dsE4ABqZsd4l0sOZvWjST8BROc4WTZ/GmYjzC KU/cOzhK7Ga6muJuEhG67Ic0DSO8bH+iv2IVztCZSO7+7enc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOhQznIKFErKhgl8P8ok3H1R2iIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjgxNWUyZmItMDk5NS0z YTJkLTg0YjktODlhOGU3ZWViNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQATgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKysxcyMxJu+oQ3CK7mUISKDe6vYOQ4dtY59LapoyVIJuHTDs50gLt2C 3/7loVLNk8WaT90ChT/IzJ6IrTRIKQDGdeRF0AKJUE2VpC3pkMIZjC3qP0fduqTy JlwMXx9ddmkG2wT3k38LJs/RSt4UJmpJub9B+rQzkRw/qZ4AfSjkTqck+Spk+MAp iRwmNYyFLmgyWid7WMzqoefJ/diSe1NJMcpYeb7YVhfBOMiESM9dTtNa2uB/amki +015YopjID8PaMfPyDxJuhskls9cQDWsjEHiQ98uTOodbYpq+OUnh37IokpdiDRp lNMm8WOTBzt5MHlATfkEZQ/Tx1v7qgQ= -----END CERTIFICATE-----Generated at Fri Jan 9 18:30:38 2026 by rpki-client