This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa File: 0a60cc02-6602-3558-b54d-5d7605932b07.roa (raw, json) Hash identifier: Z2K4pUdbtkdZUfDEg893hZFU5Sn9b6ThrrWwelsSLZ0= Subject key identifier: 59:E1:57:9A:36:C7:42:84:E8:05:B8:3D:AC:00:BD:1B:E4:8D:A6:46 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584C597E7A0754F7A3B8F6479900 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa Signing time: Mon 29 Dec 2025 16:36:25 +0000 ROA not before: Mon 29 Dec 2025 16:36:25 +0000 ROA not after: Sun 29 Mar 2026 15:36:25 +0000 asID: 400298 IP address blocks: 216.75.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:7e:7a:07:54:f7:a3:b8:f6:47:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Dec 29 16:36:25 2025 GMT Not After : Mar 29 15:36:25 2026 GMT Subject: CN=ae84c76d-fdbf-43ca-839c-b46131c72c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:99:98:81:7d:30:2e:98:03:ee:1d:36:15: 67:c5:56:0c:c6:ef:af:38:92:79:72:0f:0c:5d:14: db:eb:94:b5:09:c4:cc:77:c3:ff:fa:76:3d:7b:93: ad:66:e2:05:cb:36:96:40:ae:a2:00:3e:b2:3e:bb: e6:e9:0c:73:e3:52:53:5f:eb:a7:ee:d7:17:65:a3: 88:d7:bb:af:9b:f0:b2:74:90:af:37:0e:e4:2f:96: a2:54:fc:0b:80:5a:9b:f8:90:dc:57:cb:f9:df:7e: da:48:33:0b:95:42:fc:3d:f7:c7:25:d9:8b:e4:fb: 8e:99:c1:bf:b7:ec:7c:3b:da:28:85:75:20:92:2f: 47:59:40:3d:24:0c:c9:4e:7f:4c:29:39:55:ae:f5: 8c:53:59:31:0b:be:9d:77:48:8b:ac:54:f2:ed:96: 31:39:79:ac:3b:25:75:1f:da:ea:20:11:40:c2:05: 95:4b:6d:bf:e9:dd:15:5f:55:35:aa:d3:f5:05:27: e0:cd:fe:65:df:9f:3b:76:be:33:40:19:3b:ae:2d: bd:cd:60:fe:31:8a:02:f4:a9:9d:90:05:1a:65:b4: fd:ea:cf:05:9b:90:ee:90:77:b4:9a:56:a4:98:64: 36:9f:e4:0b:04:44:66:e5:6c:b2:38:49:d9:a2:57: f7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:57:9A:36:C7:42:84:E8:05:B8:3D:AC:00:BD:1B:E4:8D:A6:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/0a60cc02-6602-3558-b54d-5d7605932b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fa:3f:0d:02:ff:7e:22:0d:dd:e8:d1:28:49:1a:22:85:d1: 58:b8:74:5b:8c:b9:7f:9b:29:c7:8d:02:bb:a6:9a:a4:3a:1e: c5:43:8e:bf:90:34:88:de:cc:ef:6d:a3:87:3b:6d:f5:db:5b: c6:52:7c:ba:48:4c:67:73:77:8b:80:3a:87:46:b8:dc:5b:f4: ca:bc:5c:da:c2:28:e6:91:35:0f:55:4e:61:65:57:c1:15:84: 82:99:a7:50:79:da:69:d3:d2:4d:b5:3a:29:8e:a9:80:2f:e8: de:20:49:e6:46:d3:be:c6:4c:e7:c0:72:06:ee:d2:00:69:75: bc:44:72:73:0d:ec:0a:6f:2a:d6:47:04:a3:ee:66:06:c3:1f: d3:ba:a9:fe:89:61:03:89:a2:52:10:c2:75:53:11:d5:47:22: 85:d3:77:73:91:f0:bd:0b:4e:30:6b:51:9f:33:da:4b:c5:eb: 40:86:ef:bb:9f:0d:5a:67:f0:21:3c:03:bc:5d:33:1e:10:85: 4a:c2:ae:fa:9c:e1:b8:ce:3d:17:62:7e:ec:ef:6d:d2:b6:01: 4a:aa:ed:42:f2:2f:4f:4e:0e:8f:dc:d3:ea:94:0b:6c:3a:be: 89:5c:32:73:c6:f9:f2:c0:7e:87:21:0c:0f:13:35:09:95:00: 47:03:bd:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExZfnoHVPejuPZHmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTIyOTE2MzYyNVoXDTI2MDMyOTE1MzYyNVowLzEtMCsGA1UEAxMk YWU4NGM3NmQtZmRiZi00M2NhLTgzOWMtYjQ2MTMxYzcyYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3yZmIF9MC6YA+4dNhVnxVYMxu+vOJJ5cg8M XRTb65S1CcTMd8P/+nY9e5OtZuIFyzaWQK6iAD6yPrvm6Qxz41JTX+un7tcXZaOI 17uvm/CydJCvNw7kL5aiVPwLgFqb+JDcV8v5337aSDMLlUL8PffHJdmL5PuOmcG/ t+x8O9oohXUgki9HWUA9JAzJTn9MKTlVrvWMU1kxC76dd0iLrFTy7ZYxOXmsOyV1 H9rqIBFAwgWVS22/6d0VX1U1qtP1BSfgzf5l3587dr4zQBk7ri29zWD+MYoC9Kmd kAUaZbT96s8Fm5DukHe0mlakmGQ2n+QLBERm5WyyOEnZolf3RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnhV5o2x0KE6AW4PawAvRvkjaZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvMGE2MGNjMDItNjYwMi0z NTU4LWI1NGQtNWQ3NjA1OTMyYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb6Pw0C/34iDd3o0ShJGiKF0Vi4dFuMuX+bKceNArummqQ6HsVDjr+Q NIjezO9to4c7bfXbW8ZSfLpITGdzd4uAOodGuNxb9Mq8XNrCKOaRNQ9VTmFlV8EV hIKZp1B52mnT0k21OimOqYAv6N4gSeZG077GTOfAcgbu0gBpdbxEcnMN7ApvKtZH BKPuZgbDH9O6qf6JYQOJolIQwnVTEdVHIoXTd3OR8L0LTjBrUZ8z2kvF60CG77uf DVpn8CE8A7xdMx4QhUrCrvqc4bjOPRdifuzvbdK2AUqq7ULyL09ODo/c0+qUC2w6 volcMnPG+fLAfochDA8TNQmVAEcDvZY= -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:54 2026 by rpki-client