This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa File: dd636bfe-abf4-32bf-87a0-eafa6275305f.roa (raw, json) Hash identifier: +qYoBY3A+XHN9OGgFRerlWmIywwVwcRK/rjSrpfAwr0= Subject key identifier: 06:F2:26:9E:A0:0F:1D:30:C3:3C:F4:7F:8A:88:0E:FF:0D:40:A0:5F Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584C3BE12A3DF76545E46E5EBF80 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 154049 IP address blocks: 216.75.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2a:3d:f7:65:45:e4:6e:5e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=0acf6b6c-3765-40f0-97e3-9962eb4c7fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c3:1b:13:76:18:b9:16:23:18:61:b7:cc:8d: 52:30:10:85:f4:50:14:57:b9:c9:bf:b5:34:96:32: 62:05:19:6a:85:05:fb:d0:24:bf:4f:26:2f:14:3c: 57:9f:38:fc:f1:33:d4:4a:55:66:53:87:19:08:04: e4:6f:8c:23:32:96:3b:f2:40:06:78:f4:e4:86:80: 91:1b:7b:51:4a:38:3f:b2:e5:93:04:1a:73:a1:9d: c3:bf:53:15:77:7d:1e:38:1c:1e:86:22:b1:98:bd: cc:4a:cb:67:c8:d9:8c:52:a8:92:3f:e8:2d:6b:ac: 0c:9e:c7:2e:53:42:e1:ad:fd:c1:d5:0b:1a:0c:3a: 5c:ec:94:09:1a:c1:bb:09:05:df:05:ef:29:9d:b5: 39:c2:c3:57:0f:52:67:59:a2:4d:ea:0d:d0:47:87: ac:74:3c:ce:fb:3c:c7:52:a7:bb:d6:5f:7f:75:20: 4d:b9:29:a0:dc:3a:55:da:72:f7:ba:de:2e:6a:36: bd:16:89:e7:2a:c3:d4:57:e2:e9:79:ef:a9:97:d3: 45:6a:e9:c2:73:47:38:24:26:75:01:6d:3d:5f:8f: 6b:f8:de:34:b9:90:7b:c3:f1:6b:d3:64:13:bd:b4: 2c:65:c4:9c:13:92:f8:a4:0b:3c:16:16:ea:d5:b1: 48:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:26:9E:A0:0F:1D:30:C3:3C:F4:7F:8A:88:0E:FF:0D:40:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/dd636bfe-abf4-32bf-87a0-eafa6275305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:98:76:d9:b1:02:82:cf:b2:35:1f:ee:e1:24:97:a0:d9:f0: ff:ff:48:d9:fa:94:e6:e4:47:83:20:0e:25:a4:0a:9b:42:a9: 9f:a0:ea:67:19:7c:c2:68:47:46:c5:e6:3f:12:6f:3f:8f:5a: 76:b9:df:82:69:00:5c:81:2d:b9:57:64:11:30:45:d4:9c:e4: 7f:d9:64:ae:f2:27:27:53:07:cb:b8:20:3e:9a:4a:a0:ee:c9: c3:35:90:51:39:6f:81:1f:51:90:cc:26:56:ab:53:7f:96:10: 53:58:d0:0f:4e:66:80:22:30:cf:0f:ad:f4:94:c1:dd:1a:e7: 2a:ba:66:63:23:ba:10:2b:f8:f3:04:21:e3:63:4d:dd:98:e5: 65:12:20:34:f9:bc:e8:73:b3:b1:33:ce:a0:43:25:3f:f4:be: 4a:80:a3:1a:eb:cb:44:99:16:c4:bf:5c:78:08:52:39:65:c4: ea:5a:9c:04:12:49:5c:c1:1f:ca:a5:8e:05:ad:d5:bf:12:34: 67:4f:22:ff:db:c7:35:9e:41:ac:f9:f2:d3:b7:e2:a3:61:b8: 68:27:32:bd:e3:7c:90:a4:7d:c3:2f:1a:79:00:03:c4:0a:35: 99:ab:38:bc:bf:a5:50:1a:59:5d:98:e0:1e:2b:52:8b:ff:f9: 44:a1:0c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74So992VF5G5ev4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MGFjZjZiNmMtMzc2NS00MGYwLTk3ZTMtOTk2MmViNGM3ZmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58MbE3YYuRYjGGG3zI1SMBCF9FAUV7nJv7U0 ljJiBRlqhQX70CS/TyYvFDxXnzj88TPUSlVmU4cZCATkb4wjMpY78kAGePTkhoCR G3tRSjg/suWTBBpzoZ3Dv1MVd30eOBwehiKxmL3MSstnyNmMUqiSP+gta6wMnscu U0Lhrf3B1QsaDDpc7JQJGsG7CQXfBe8pnbU5wsNXD1JnWaJN6g3QR4esdDzO+zzH Uqe71l9/dSBNuSmg3DpV2nL3ut4uaja9FonnKsPUV+Lpee+pl9NFaunCc0c4JCZ1 AW09X49r+N40uZB7w/Fr02QTvbQsZcScE5L4pAs8Fhbq1bFI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbyJp6gDx0wwzz0f4qIDv8NQKBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvZGQ2MzZiZmUtYWJmNC0z MmJmLTg3YTAtZWFmYTYyNzUzMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiYdtmxAoLPsjUf7uEkl6DZ8P//SNn6lObkR4MgDiWkCptCqZ+g6mcZ fMJoR0bF5j8Sbz+PWna534JpAFyBLblXZBEwRdSc5H/ZZK7yJydTB8u4ID6aSqDu ycM1kFE5b4EfUZDMJlarU3+WEFNY0A9OZoAiMM8PrfSUwd0a5yq6ZmMjuhAr+PME IeNjTd2Y5WUSIDT5vOhzs7EzzqBDJT/0vkqAoxrry0SZFsS/XHgIUjllxOpanAQS SVzBH8qljgWt1b8SNGdPIv/bxzWeQaz58tO34qNhuGgnMr3jfJCkfcMvGnkAA8QK NZmrOLy/pVAaWV2Y4B4rUov/+UShDP0= -----END CERTIFICATE-----Generated at Fri Jan 9 23:49:35 2026 by rpki-client