This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa File: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (raw, json) Hash identifier: UJXDOHu5VfILyXU7nFmTgRFV1/J5p8FtONukk5uP5VU= Subject key identifier: 11:97:FD:C1:20:45:A8:8C:D6:48:82:0B:71:6C:BF:A0:B3:86:AD:BE Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584C6191408C047A4E6DD3D7F980 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 22641 IP address blocks: 216.169.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:91:40:8c:04:7a:4e:6d:d3:d7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=5c2c962b-b767-41bc-9a6c-ef63be448fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:14:fd:b9:67:08:7b:ed:76:c5:7b:b4:37: 71:ba:3a:df:41:84:fc:39:e6:bd:b2:0b:3d:64:11: 6f:da:05:e4:14:2d:8e:c9:30:28:cc:2e:d3:c1:5d: 8f:bf:74:0f:76:8f:93:4a:49:1a:d2:60:d2:f4:96: 17:e1:51:47:96:b5:4f:5f:48:ac:ab:dd:cf:d1:0d: 5c:42:f1:d8:dd:38:fb:b1:8e:70:e8:21:fd:fa:cd: df:7c:c1:a5:08:81:e9:6e:25:65:af:38:a9:78:42: 3f:05:96:3a:e3:c9:fc:10:6d:b8:fd:54:db:ab:47: 60:63:d7:01:b2:85:f0:b6:93:b7:48:f5:ac:15:e9: 8e:b3:3e:54:3f:08:65:18:d7:57:b7:c1:9b:24:82: ed:83:65:4c:d2:3b:89:39:c4:81:64:17:8c:0d:2c: dc:ae:53:89:23:54:0e:90:78:19:64:a8:e3:9d:00: a6:d2:05:da:d7:a3:c4:87:0b:b4:48:14:99:38:1e: eb:98:b4:0c:17:21:18:72:d0:86:96:e6:26:cd:e8: 79:a3:85:9e:8f:12:05:30:6d:99:eb:d3:99:af:6e: bf:83:25:0a:dd:de:a6:04:d0:a0:2e:f1:23:01:85: 61:6a:eb:4c:9f:69:34:ff:bc:16:e5:8f:7f:ec:d6: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:97:FD:C1:20:45:A8:8C:D6:48:82:0B:71:6C:BF:A0:B3:86:AD:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/4f714fc6-281c-3084-8018-09ef764e7e1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: 216.169.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:52:78:2b:53:59:a8:2c:c2:48:20:6b:af:09:5f:7c:f5:40: 99:98:29:4c:e2:53:5f:bc:58:43:9d:41:55:f9:f7:d5:b2:56: 66:c2:93:2c:ac:c0:ab:d3:36:5b:00:25:5b:99:a9:58:82:d4: c8:c0:28:12:5f:87:4c:5e:d7:1a:8f:91:f4:e3:90:69:39:14: cb:b8:7d:fb:8a:d4:2a:59:66:dc:09:be:7e:9b:bc:42:69:83: d5:bf:5a:13:e3:57:0d:c6:62:2f:ec:1a:47:a0:4b:73:2f:c5: 20:22:09:20:aa:0c:d8:78:94:1e:5b:57:01:fa:11:88:7d:01: 7c:5a:01:8f:c8:b2:68:88:45:14:21:4b:dc:ee:4a:f4:ba:4f: 4d:b2:a9:f1:68:75:72:02:ea:8c:05:f3:ab:7f:4b:ec:b3:e2: a1:71:f3:59:68:e4:32:07:39:11:a8:67:ff:73:48:43:f8:02: d0:6c:2c:39:8a:93:f9:d9:58:ef:d5:52:95:03:67:46:be:dc: 60:d3:85:10:56:aa:09:f3:1a:31:4c:5b:33:07:07:b4:fd:4d: e1:94:60:48:27:5a:60:88:ce:d2:39:bd:f6:16:ba:c2:90:5f: 88:dd:46:9f:9a:a2:0f:eb:ba:56:2e:34:89:41:f2:c6:25:a2: cb:e1:a5:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkUCMBHpObdPX+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk NWMyYzk2MmItYjc2Ny00MWJjLTlhNmMtZWY2M2JlNDQ4ZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rsU/blnCHvtdsV7tDdxujrfQYT8Oea9sgs9 ZBFv2gXkFC2OyTAozC7TwV2Pv3QPdo+TSkka0mDS9JYX4VFHlrVPX0isq93P0Q1c QvHY3Tj7sY5w6CH9+s3ffMGlCIHpbiVlrzipeEI/BZY648n8EG24/VTbq0dgY9cB soXwtpO3SPWsFemOsz5UPwhlGNdXt8GbJILtg2VM0juJOcSBZBeMDSzcrlOJI1QO kHgZZKjjnQCm0gXa16PEhwu0SBSZOB7rmLQMFyEYctCGluYmzeh5o4WejxIFMG2Z 69OZr26/gyUK3d6mBNCgLvEjAYVhautMn2k0/7wW5Y9/7NZO8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGX/cEgRaiM1kiCC3Fsv6Czhq2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvNGY3MTRmYzYtMjgxYy0z MDg0LTgwMTgtMDllZjc2NGU3ZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2KnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhSeCtTWagswkgga68JX3z1QJmYKUziU1+8WEOdQVX599WyVmbCkyys wKvTNlsAJVuZqViC1MjAKBJfh0xe1xqPkfTjkGk5FMu4ffuK1CpZZtwJvn6bvEJp g9W/WhPjVw3GYi/sGkegS3MvxSAiCSCqDNh4lB5bVwH6EYh9AXxaAY/IsmiIRRQh S9zuSvS6T02yqfFodXIC6owF86t/S+yz4qFx81lo5DIHORGoZ/9zSEP4AtBsLDmK k/nZWO/VUpUDZ0a+3GDThRBWqgnzGjFMWzMHB7T9TeGUYEgnWmCIztI5vfYWusKQ X4jdRp+aog/rulYuNIlB8sYlosvhpVA= -----END CERTIFICATE-----Generated at Sat Jan 10 14:26:47 2026 by rpki-client