This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa File: 28cd1696-6e61-304c-aa2b-d656c095d37c.roa (raw, json) Hash identifier: /EKVE28/tOvpDVvGqh90AarjUZ+6VYVm/3jnmEJ6dpM= Subject key identifier: BA:1A:32:A0:70:03:86:77:43:35:00:3A:7C:24:31:AB:D2:89:1D:A4 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584C6258DF90A80F5E0C39B47DA0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa Signing time: Thu 01 Jan 2026 20:42:55 +0000 ROA not before: Thu 01 Jan 2026 20:42:55 +0000 ROA not after: Wed 01 Apr 2026 19:42:55 +0000 asID: 20473 IP address blocks: 66.253.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:62:58:df:90:a8:0f:5e:0c:39:b4:7d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Jan 1 20:42:55 2026 GMT Not After : Apr 1 19:42:55 2026 GMT Subject: CN=e84d95b6-90e4-485c-b56d-28b2b8f358dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:2c:26:73:07:d2:19:0f:5a:e1:a0:8d:ac: 20:ab:c4:20:bf:2c:01:6c:14:39:1b:ff:a8:3d:32: 4d:a1:39:c0:94:88:49:ea:a0:89:eb:31:f5:9b:70: 41:36:65:30:0e:b5:bd:f1:0d:95:3d:aa:0a:f8:22: 0b:f2:93:7a:ee:51:b4:b3:cb:45:6f:79:49:ea:22: 20:e4:0d:9f:28:3f:d7:61:b6:ae:f0:42:11:c6:b6: 60:37:fc:0f:d0:1d:a3:13:0e:14:64:80:15:65:a8: d9:a5:17:d0:14:ea:86:8b:bc:f5:be:40:b5:88:1c: 53:e4:72:7b:b8:a3:c1:5d:c9:fa:9f:90:59:4c:b3: b1:fe:72:ed:fa:ed:8b:1d:65:f6:88:32:5e:a8:51: c4:16:5d:92:29:35:cc:3c:1f:1c:db:8e:b4:34:14: 7b:71:9c:32:0f:f4:68:fa:d3:a1:a5:fb:05:60:67: f3:17:b8:97:00:0b:f4:c1:fe:f4:7d:b5:29:f2:c3: 34:8f:e0:cb:d9:85:63:7e:6a:38:f7:1d:c6:9a:a1: 89:27:09:08:e7:8c:70:f6:73:f1:67:d4:32:d9:8a: fe:3a:8c:84:fe:eb:9b:56:dc:cf:3a:5d:b0:f2:f7: d6:c0:0b:39:16:50:b5:1a:f0:8b:12:7e:c2:99:55: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1A:32:A0:70:03:86:77:43:35:00:3A:7C:24:31:AB:D2:89:1D:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/28cd1696-6e61-304c-aa2b-d656c095d37c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 66.253.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:ba:27:5d:72:89:db:23:0c:10:4e:1f:e3:77:3b:d5:6d:ad: 4f:f7:a7:94:66:fc:64:64:b8:2d:1b:56:41:1a:8b:40:8b:8f: 7f:f3:49:41:86:df:eb:62:f6:2c:cd:ee:c9:85:e2:22:2e:f1: 6f:38:b2:70:6e:cd:d5:be:c0:0d:9a:8e:c2:e9:73:4f:48:38: 9c:e8:57:11:b0:58:bc:5b:96:da:43:be:ea:82:c2:f8:0b:c9: 3e:1f:09:c5:79:d8:70:bf:08:15:55:b9:4d:59:1a:92:b4:6d: 38:0c:7a:27:0a:52:d5:3d:dd:51:96:b8:e9:c4:22:c1:a8:e5: 68:fa:47:0b:35:4a:9f:db:d1:be:d5:aa:69:26:a7:da:48:61: 63:b4:43:68:83:25:78:eb:a4:07:7d:a8:4c:4c:22:ae:e9:9d: b8:51:ab:4c:5e:34:4b:29:42:54:a4:3d:b3:53:25:11:31:35: db:d5:20:dc:db:3e:e8:f7:27:17:fe:c6:5a:e1:1d:e3:3c:70: c3:14:63:f8:ab:1b:7b:14:54:18:4b:db:05:ba:40:c9:cf:0f: e2:9d:91:61:0f:e0:a7:1e:39:78:27:f9:a9:93:cf:db:98:ac: 49:f5:37:c3:0f:03:9e:59:4c:fd:d3:92:52:72:67:3c:50:96: ce:4b:b9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExiWN+QqA9eDDm0faAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDEwMTIwNDI1NVoXDTI2MDQwMTE5NDI1NVowLzEtMCsGA1UEAxMk ZTg0ZDk1YjYtOTBlNC00ODVjLWI1NmQtMjhiMmI4ZjM1OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzosJnMH0hkPWuGgjawgq8QgvywBbBQ5G/+o PTJNoTnAlIhJ6qCJ6zH1m3BBNmUwDrW98Q2VPaoK+CIL8pN67lG0s8tFb3lJ6iIg 5A2fKD/XYbau8EIRxrZgN/wP0B2jEw4UZIAVZajZpRfQFOqGi7z1vkC1iBxT5HJ7 uKPBXcn6n5BZTLOx/nLt+u2LHWX2iDJeqFHEFl2SKTXMPB8c2460NBR7cZwyD/Ro +tOhpfsFYGfzF7iXAAv0wf70fbUp8sM0j+DL2YVjfmo49x3GmqGJJwkI54xw9nPx Z9Qy2Yr+OoyE/uubVtzPOl2w8vfWwAs5FlC1GvCLEn7CmVWw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoaMqBwA4Z3QzUAOnwkMavSiR2kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMjhjZDE2OTYtNmU2MS0z MDRjLWFhMmItZDY1NmMwOTVkMzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK26J11yidsjDBBOH+N3O9VtrU/3p5Rm/GRkuC0bVkEai0CLj3/zSUGG 3+ti9izN7smF4iIu8W84snBuzdW+wA2ajsLpc09IOJzoVxGwWLxbltpDvuqCwvgL yT4fCcV52HC/CBVVuU1ZGpK0bTgMeicKUtU93VGWuOnEIsGo5Wj6Rws1Sp/b0b7V qmkmp9pIYWO0Q2iDJXjrpAd9qExMIq7pnbhRq0xeNEspQlSkPbNTJRExNdvVINzb Puj3Jxf+xlrhHeM8cMMUY/irG3sUVBhL2wW6QMnPD+KdkWEP4KceOXgn+amTz9uY rEn1N8MPA55ZTP3TklJyZzxQls5Lucg= -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:44 2026 by rpki-client