This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa File: 60d67551-cf73-33da-9edf-a4d13c922e9c.roa (raw, json) Hash identifier: UU8tkGeLk7MwKtsz7pwLnmNP4jLCuz5BEb39u1VaoFg= Subject key identifier: 42:23:7E:4C:15:C7:F5:20:F7:B4:CA:54:35:C8:66:9D:B5:4C:7D:05 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584C4F6BBF208B890A7E5C07A040 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 397630 IP address blocks: 172.96.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:bf:20:8b:89:0a:7e:5c:07:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=7c2f0922-d7ac-4097-9613-1e47d0361c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:fd:23:23:90:31:9c:7e:5c:d0:49:9f:cd: 05:20:8a:de:22:ab:14:e4:ab:3d:e0:10:32:02:4f: 19:80:be:bd:8b:01:d0:0d:c3:3f:00:47:ee:fc:ba: 5f:02:dd:e5:b7:88:b0:b3:9b:51:3d:20:ec:30:89: 28:87:4e:cb:03:ba:bf:6c:ca:8e:44:08:e4:79:5b: 36:6c:79:f4:30:55:a0:52:1b:cc:19:5c:1d:dd:26: 02:f0:e8:82:4a:f8:99:ac:75:20:fc:a0:7b:56:1b: 02:6f:56:4c:d6:1a:16:4c:9a:88:cb:3a:ce:f3:37: 79:b0:db:fb:11:33:26:40:1e:7c:17:65:f8:e1:cf: dc:bb:80:e4:a3:f4:03:6d:35:5e:b7:58:65:62:02: 9d:9e:2b:3c:5d:a3:4e:5c:4d:f9:a5:d0:89:c0:34: b3:14:a0:ed:2e:11:5f:de:f8:02:bc:b9:c5:85:51: 9e:a9:b1:c8:9c:73:bc:8d:0e:d6:72:a6:f3:c7:97: a5:7e:ec:9f:4d:97:fa:82:56:3b:57:0b:0c:50:62: b3:3f:92:0d:74:f7:27:4a:f2:20:f5:3a:27:87:f8: 88:4e:ef:96:01:77:4b:80:e7:22:2d:27:6e:6b:91: dd:11:c4:65:a3:89:45:b4:29:a5:9c:a3:5c:10:19: 32:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:23:7E:4C:15:C7:F5:20:F7:B4:CA:54:35:C8:66:9D:B5:4C:7D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/60d67551-cf73-33da-9edf-a4d13c922e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:02:23:5a:aa:75:fb:bb:e1:d5:f9:af:6d:39:e2:d4:7e:2c: dd:a7:76:6d:4c:23:00:2e:0e:70:e8:09:7a:2a:12:b6:8f:a8: dd:c8:47:40:5a:c2:2b:37:43:fd:30:12:02:73:89:fb:60:e3: c6:91:19:bd:83:55:c6:57:93:ad:1d:89:45:4f:f3:29:3e:ba: 10:e6:48:c1:93:4e:3f:1d:77:c9:f8:80:84:e9:e2:60:dc:6a: d4:58:79:33:c2:13:88:d0:50:de:22:fa:89:8f:94:20:ec:ec: 9e:ae:bb:ca:d5:35:4d:23:84:98:98:17:fb:d1:f4:8a:68:8b: 08:9e:b0:ef:99:26:30:c8:05:fa:c0:54:02:57:de:11:7d:db: ca:18:bd:e3:8a:c0:a1:14:0b:1c:a3:b4:4c:14:97:13:6e:f1: aa:c4:98:9c:21:79:30:6f:9b:68:b4:f4:85:95:0f:64:aa:08: 36:04:ba:1f:00:bc:41:33:d5:50:75:fb:61:63:73:48:9c:ba: 11:a4:99:ab:73:1d:e7:16:be:12:9a:fb:27:d6:4b:e8:59:31: ee:aa:83:15:ba:6d:0c:3f:40:dd:9f:29:d8:39:ba:27:20:a4: 88:33:42:7f:c3:7c:70:27:8e:b9:51:0c:ee:69:08:06:76:f6: cd:e5:34:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExPa78gi4kKflwHoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk N2MyZjA5MjItZDdhYy00MDk3LTk2MTMtMWU0N2QwMzYxYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5f9IyOQMZx+XNBJn80FIIreIqsU5Ks94BAy Ak8ZgL69iwHQDcM/AEfu/LpfAt3lt4iws5tRPSDsMIkoh07LA7q/bMqORAjkeVs2 bHn0MFWgUhvMGVwd3SYC8OiCSviZrHUg/KB7VhsCb1ZM1hoWTJqIyzrO8zd5sNv7 ETMmQB58F2X44c/cu4Dko/QDbTVet1hlYgKdnis8XaNOXE35pdCJwDSzFKDtLhFf 3vgCvLnFhVGeqbHInHO8jQ7Wcqbzx5elfuyfTZf6glY7VwsMUGKzP5INdPcnSvIg 9Tonh/iITu+WAXdLgOciLSdua5HdEcRlo4lFtCmlnKNcEBkyoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIjfkwVx/Ug97TKVDXIZp21TH0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNjBkNjc1NTEtY2Y3My0z M2RhLTllZGYtYTRkMTNjOTIyZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8CI1qqdfu74dX5r2054tR+LN2ndm1MIwAuDnDoCXoqEraPqN3IR0Ba wis3Q/0wEgJziftg48aRGb2DVcZXk60diUVP8yk+uhDmSMGTTj8dd8n4gITp4mDc atRYeTPCE4jQUN4i+omPlCDs7J6uu8rVNU0jhJiYF/vR9IpoiwiesO+ZJjDIBfrA VAJX3hF928oYveOKwKEUCxyjtEwUlxNu8arEmJwheTBvm2i09IWVD2SqCDYEuh8A vEEz1VB1+2Fjc0icuhGkmatzHecWvhKa+yfWS+hZMe6qgxW6bQw/QN2fKdg5uicg pIgzQn/DfHAnjrlRDO5pCAZ29s3lNDE= -----END CERTIFICATE-----Generated at Mon Jan 19 22:36:26 2026 by rpki-client