This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa File: 3447dc73-c5f7-3def-a446-a22e233a8da2.roa (raw, json) Hash identifier: okNtgrSXzy97f954JWqWNZ7XjOLp7Mk9PzennlVhKw4= Subject key identifier: B3:E7:85:93:B3:E8:C0:E8:6E:30:63:47:B9:48:98:D1:2E:A8:39:45 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584C5BC0621250CE4389AEC45680 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa Signing time: Tue 30 Dec 2025 12:00:50 +0000 ROA not before: Tue 30 Dec 2025 12:00:50 +0000 ROA not after: Mon 30 Mar 2026 11:00:50 +0000 asID: 214432 IP address blocks: 50.2.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:c0:62:12:50:ce:43:89:ae:c4:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Dec 30 12:00:50 2025 GMT Not After : Mar 30 11:00:50 2026 GMT Subject: CN=87d46fea-4df8-45a3-baa3-8c87bb07aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:ba:ac:00:d5:56:7e:04:ae:da:0e:dd:5d: f1:16:93:eb:bb:f9:28:d2:72:8f:e4:81:1b:59:63: c6:74:67:6a:90:57:77:3f:40:5f:9c:ce:c3:d1:2f: 12:2c:60:76:de:99:49:e4:b8:56:7b:9d:1d:3f:b7: 2d:04:80:af:23:42:08:a0:4f:65:1a:9c:ab:14:ec: 62:aa:c4:a9:9a:19:32:6d:4a:3c:ca:da:22:ad:24: e0:0a:be:94:15:56:55:8a:99:19:39:5a:3b:3c:d8: f2:5a:dc:c3:23:19:ef:ff:88:58:dd:93:88:0d:bb: ba:60:5b:7f:15:9e:2a:b0:b1:2d:1a:2a:d7:07:1a: 74:16:c9:8e:31:78:85:71:e0:60:14:69:be:cf:a5: 09:ec:80:66:56:bc:1d:8d:7b:1f:88:d8:f4:a8:0f: 5f:5b:b3:39:65:48:24:4f:3f:81:62:b4:e5:f5:56: 46:c4:34:60:76:63:d3:57:1e:76:e8:cd:fa:22:71: b3:1d:86:27:c3:d0:7e:5a:74:99:33:7b:a1:c4:34: 34:13:57:03:13:6e:ce:c0:59:85:56:21:15:60:7f: 2d:1b:ce:57:45:0c:c4:4b:61:d9:d3:6b:f6:ed:6f: 29:61:e3:16:55:a1:f2:ae:03:ff:f6:0d:0a:d1:48: c1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E7:85:93:B3:E8:C0:E8:6E:30:63:47:B9:48:98:D1:2E:A8:39:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3447dc73-c5f7-3def-a446-a22e233a8da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 50.2.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:83:be:08:1d:37:dc:a8:92:dc:22:7c:5f:26:09:a3:02:da: bc:88:40:86:65:ae:74:91:5f:fb:71:0d:36:9f:50:95:79:92: f4:21:28:2b:30:d8:93:0f:d9:2e:a4:e1:17:2f:37:a7:31:2f: 1f:35:08:de:27:ac:9c:43:37:40:fc:99:ff:8f:95:9d:75:f4: 1e:97:e3:d9:64:9f:2d:79:eb:72:b8:f5:ea:27:04:73:fe:b6: bf:74:57:35:42:e1:d3:2b:36:e2:c0:01:2c:79:90:1a:0f:16: 70:3d:e6:d3:3e:8e:65:91:84:3b:55:50:8b:3d:26:60:93:37: b1:31:dc:f3:f9:70:6c:93:0a:f9:4a:1c:53:f3:fb:d1:1b:50: ba:d5:f4:06:24:3d:40:4c:5d:a9:2f:d0:e5:df:6e:bf:b8:55: 2d:55:38:23:fc:d2:ba:19:79:e4:60:14:d0:b1:90:90:b9:37: 37:b1:1b:ce:a5:9b:92:9e:ca:b5:04:51:b1:fd:1d:06:03:99: d3:7e:b0:05:b4:23:13:c3:68:4f:c2:71:f8:6a:a9:2a:0f:49: 2d:0b:4e:6f:51:ec:44:20:a2:5d:60:28:92:8b:68:50:9c:ac: f9:23:0d:7a:cf:36:2f:b6:79:f3:ef:c2:a5:56:5d:92:b1:4f: c4:e0:f2:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExbwGISUM5Dia7EVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MTIzMDEyMDA1MFoXDTI2MDMzMDExMDA1MFowLzEtMCsGA1UEAxMk ODdkNDZmZWEtNGRmOC00NWEzLWJhYTMtOGM4N2JiMDdhZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxy6rADVVn4ErtoO3V3xFpPru/ko0nKP5IEb WWPGdGdqkFd3P0BfnM7D0S8SLGB23plJ5LhWe50dP7ctBICvI0IIoE9lGpyrFOxi qsSpmhkybUo8ytoirSTgCr6UFVZVipkZOVo7PNjyWtzDIxnv/4hY3ZOIDbu6YFt/ FZ4qsLEtGirXBxp0FsmOMXiFceBgFGm+z6UJ7IBmVrwdjXsfiNj0qA9fW7M5ZUgk Tz+BYrTl9VZGxDRgdmPTVx526M36InGzHYYnw9B+WnSZM3uhxDQ0E1cDE27OwFmF ViEVYH8tG85XRQzES2HZ02v27W8pYeMWVaHyrgP/9g0K0UjBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPnhZOz6MDobjBjR7lImNEuqDlFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzQ0N2RjNzMtYzVmNy0z ZGVmLWE0NDYtYTIyZTIzM2E4ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeDvggdN9yoktwifF8mCaMC2ryIQIZlrnSRX/txDTafUJV5kvQhKCsw 2JMP2S6k4RcvN6cxLx81CN4nrJxDN0D8mf+PlZ119B6X49lkny1563K49eonBHP+ tr90VzVC4dMrNuLAASx5kBoPFnA95tM+jmWRhDtVUIs9JmCTN7Ex3PP5cGyTCvlK HFPz+9EbULrV9AYkPUBMXakv0OXfbr+4VS1VOCP80roZeeRgFNCxkJC5NzexG86l m5KeyrUEUbH9HQYDmdN+sAW0IxPDaE/CcfhqqSoPSS0LTm9R7EQgol1gKJKLaFCc rPkjDXrPNi+2efPvwqVWXZKxT8Tg8vQ= -----END CERTIFICATE-----Generated at Fri Jan 9 18:14:37 2026 by rpki-client