This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa File: 3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa (raw, json) Hash identifier: dJhftazjUtu7PJ2XUuYvp6lj/dO1W3sCQOtiGQF6e4k= Subject key identifier: A5:1E:AE:AB:13:09:FA:2C:32:A4:4C:28:9E:B5:63:31:4C:06:C9:A7 Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Certificate serial: 010D0C9F4328584C1630E78BC9CAFF9EF294A540 Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 54004 IP address blocks: 216.83.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e7:8b:c9:ca:ff:9e:f2:94:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8 Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=6f0d7422-4245-4727-8ccd-617c298d9b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:41:33:85:11:ec:85:db:ac:ad:a5:cc:30:75: 64:aa:c7:d0:5e:86:8d:dc:08:4a:e4:8a:f5:56:f9: 76:93:4e:a6:94:6a:a1:7f:b9:da:b9:4c:fb:f0:46: c2:24:77:56:c4:11:80:c1:e2:41:b0:d0:f2:b8:16: 32:9f:c6:a6:29:19:24:f3:0f:b0:d3:88:a3:3f:9f: ca:f9:ba:ba:04:8b:cf:f8:82:db:95:79:c9:37:00: 14:53:56:64:9b:d3:2d:91:40:c3:73:35:7f:ab:0d: 97:b8:37:64:03:7d:9b:5a:79:59:cb:2f:e8:03:73: cd:61:69:69:7c:81:17:9a:61:ce:40:ae:d7:a6:e1: 4c:2f:c3:df:6c:e9:0c:cb:19:94:b4:ca:ac:b2:66: 2a:c4:91:2b:61:48:ff:98:e6:d8:ab:a5:3a:d9:1b: a3:14:e6:18:0e:b4:88:98:1b:b8:e0:1a:df:5c:9c: 8b:c0:c8:78:ea:31:4d:5d:44:7b:b6:22:25:89:ac: c3:3d:52:f7:bf:f8:99:e1:5c:83:66:ad:42:32:07: 62:93:15:fa:75:a1:c0:84:91:ae:d7:2d:4f:e7:a7: be:58:4e:43:0b:3d:a3:03:66:f4:02:95:fa:14:39: d2:5c:26:ac:89:a0:86:a6:eb:3d:11:b5:cc:e4:84: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1E:AE:AB:13:09:FA:2C:32:A4:4C:28:9E:B5:63:31:4C:06:C9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/3405defc-6a0c-3fba-9a02-73cbbe0d11f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl X509v3 Authority Key Identifier: keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer sbgp-ipAddrBlock: critical IPv4: 216.83.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:36:2d:cc:91:1d:d0:df:27:4d:80:d4:c8:71:e3:2a:d1:c6: 13:c6:44:34:eb:6b:98:e4:e7:34:b8:ee:1c:6c:48:3a:0c:2e: ed:99:23:35:34:8f:02:98:f7:7e:44:a2:98:e0:02:ca:1a:4e: 7a:ba:5b:c1:a1:a0:a3:2e:10:38:3c:6d:06:99:48:75:ec:9b: 71:c8:91:61:40:45:36:51:d6:0e:02:5d:ef:37:8a:9e:2f:a3: c6:80:84:a6:93:c1:43:ac:6f:2c:b1:4c:77:d9:50:46:30:30: cd:30:ac:12:05:a0:f7:6c:ce:cb:fd:76:76:6d:a0:c2:fd:d1: 80:1a:9f:de:6c:64:6b:a0:91:f4:8e:4e:a8:bc:0c:f9:8d:11: 89:e8:0b:32:52:6b:1c:4d:48:8e:db:93:0e:fb:93:55:e5:0c: 7c:ef:f8:5a:62:19:e4:b9:60:f9:1a:8d:5e:3a:c6:d0:94:b1: d1:c3:2c:48:b2:0c:56:82:ee:3c:df:3c:d9:d3:6e:a2:c7:97: 1e:32:ad:47:0e:59:51:7a:65:4f:6b:04:f5:08:71:f0:cb:50: bb:76:1f:05:b5:a8:bb:a3:de:80:aa:21:dd:07:bf:da:db:46: 64:89:23:ed:b9:36:70:e7:9e:02:6a:a1:bf:d2:d2:ae:3b:b5: 4d:9a:48:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMOeLycr/nvKUpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1 MGU4MB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk NmYwZDc0MjItNDI0NS00NzI3LThjY2QtNjE3YzI5OGQ5YjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEEzhRHshdusraXMMHVkqsfQXoaN3AhK5Ir1 Vvl2k06mlGqhf7nauUz78EbCJHdWxBGAweJBsNDyuBYyn8amKRkk8w+w04ijP5/K +bq6BIvP+ILblXnJNwAUU1Zkm9MtkUDDczV/qw2XuDdkA32bWnlZyy/oA3PNYWlp fIEXmmHOQK7XpuFML8PfbOkMyxmUtMqssmYqxJErYUj/mObYq6U62RujFOYYDrSI mBu44BrfXJyLwMh46jFNXUR7tiIliazDPVL3v/iZ4VyDZq1CMgdikxX6daHAhJGu 1y1P56e+WE5DCz2jA2b0ApX6FDnSXCasiaCGpus9EbXM5IR8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUerqsTCfosMqRMKJ61YzFMBsmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0 NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvMzQwNWRlZmMtNmEwYy0z ZmJhLTlhMDItNzNjYmJlMGQxMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3 NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2FMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA2LcyRHdDfJ02A1Mhx4yrRxhPGRDTra5jk5zS47hxsSDoMLu2ZIzU0 jwKY935EopjgAsoaTnq6W8GhoKMuEDg8bQaZSHXsm3HIkWFARTZR1g4CXe83ip4v o8aAhKaTwUOsbyyxTHfZUEYwMM0wrBIFoPdszsv9dnZtoML90YAan95sZGugkfSO Tqi8DPmNEYnoCzJSaxxNSI7bkw77k1XlDHzv+FpiGeS5YPkajV46xtCUsdHDLEiy DFaC7jzfPNnTbqLHlx4yrUcOWVF6ZU9rBPUIcfDLULt2HwW1qLuj3oCqId0Hv9rb RmSJI+25NnDnngJqob/S0q47tU2aSAU= -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:47 2025 by rpki-client