This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa File: 36e54ae1-0dad-36c9-85d3-8d41fa168234.roa (raw, json) Hash identifier: NStwjnjaTDetssia/ioiUIDaU8RZv8D/ZV+joRv9e0Y= Subject key identifier: C8:A1:E2:9B:0A:AF:DE:B2:C6:BE:91:D4:6D:AA:7E:96:E5:D0:78:62 Certificate issuer: /CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Certificate serial: 010D0C9F4328584C5EC6B5969031114E9547BF80 Authority key identifier: 64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 395412 IP address blocks: 204.8.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:b5:96:90:31:11:4e:95:47:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88bfa348-1db4-4c2b-8cd7-df6655cb7023 Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=d6b25e74-8228-4ec7-b20f-23e32a6532bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6e:78:03:ee:8c:56:10:b1:37:77:5f:9d:f1: 96:0e:00:65:e0:cf:a8:ee:1f:6f:30:9b:09:1f:87: c7:6e:59:bf:8a:58:c5:92:c3:d1:91:56:2a:07:40: 9c:a5:ad:4c:f8:cf:b2:b4:e6:3a:61:c8:e9:05:85: c2:04:6a:f8:50:9b:00:90:d0:55:5a:b5:ae:b7:24: 61:63:01:2b:53:99:ae:c8:c4:52:24:b2:f3:4c:97: dc:91:fb:f8:f2:12:4b:76:c8:a9:99:9d:d2:19:27: 70:8b:47:51:a6:cb:91:35:1e:29:71:80:e1:76:c9: c6:71:95:08:11:73:41:d8:fb:be:85:1a:35:96:c7: e1:97:8c:08:bd:fc:e8:96:7a:bc:72:cc:0c:d8:ad: 37:80:a3:b9:da:98:93:77:18:fc:1a:85:03:05:6e: 55:62:f5:f0:8e:8a:ee:b9:fe:46:71:e2:21:47:11: d4:c9:52:9e:01:99:b6:f4:12:6e:d1:45:a6:f6:8f: 5b:66:24:5f:f8:f3:00:cf:8d:f6:2e:58:77:1d:16: 30:e0:5a:2d:5c:85:6f:ef:16:53:5d:d6:20:14:ca: db:e4:81:f6:31:56:48:25:3d:df:66:ff:81:09:64: 10:67:62:1b:df:48:e6:d9:72:49:ee:dd:76:8f:96: a5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:E2:9B:0A:AF:DE:B2:C6:BE:91:D4:6D:AA:7E:96:E5:D0:78:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/36e54ae1-0dad-36c9-85d3-8d41fa168234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023/88bfa348-1db4-4c2b-8cd7-df6655cb7023.crl X509v3 Authority Key Identifier: keyid:64:73:BC:A6:EA:35:23:F8:50:FB:98:8D:F3:07:70:7A:51:41:59:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/88bfa348-1db4-4c2b-8cd7-df6655cb7023.cer sbgp-ipAddrBlock: critical IPv4: 204.8.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:16:fc:b3:89:f0:68:6d:15:44:6a:78:2b:bf:ff:91:db:79: 68:c4:48:a5:f5:99:eb:cd:4f:48:b4:38:d6:00:f3:30:aa:78: d7:50:d0:ec:84:99:0e:9e:95:6e:67:5c:91:7d:45:49:0e:5c: d8:ae:0b:db:d6:08:18:8a:b6:71:c4:b6:80:08:50:a8:ba:60: 2c:60:d1:6a:dc:fe:f3:9f:f8:68:db:a3:97:d9:cc:55:81:cf: d2:9d:c4:b9:47:37:c7:2e:14:2d:64:6c:e8:5d:bf:c4:2c:4e: f6:72:eb:48:35:5d:8f:68:1d:f5:00:a7:10:70:16:68:5e:8f: a4:2d:ac:60:82:4e:75:1a:be:a5:8d:2f:c0:3e:72:ac:46:b5: 25:77:44:b8:f9:e1:ab:1e:8b:11:24:9f:2e:d6:ac:ce:c6:bc: e7:73:31:b2:c4:68:2a:69:5f:5d:15:e5:42:21:d7:f6:66:74: 31:dc:c2:61:02:63:b9:6f:b9:eb:8c:a1:29:74:d6:7b:39:e1: 2a:db:3b:ef:67:7a:25:4a:2b:6b:0b:0b:7a:f0:9e:4e:5a:e2: 49:5e:9c:c6:ec:56:77:5a:ad:7e:73:85:58:7e:62:1d:2f:6d: bc:79:00:e3:dd:db:1b:be:0b:72:46:71:12:4a:55:3b:ba:88: 54:50:e4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexrWWkDERTpVHv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhiZmEzNDgtMWRiNC00YzJiLThjZDctZGY2NjU1Y2I3 MDIzMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk ZDZiMjVlNzQtODIyOC00ZWM3LWIyMGYtMjNlMzJhNjUzMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG54A+6MVhCxN3dfnfGWDgBl4M+o7h9vMJsJ H4fHblm/iljFksPRkVYqB0Ccpa1M+M+ytOY6YcjpBYXCBGr4UJsAkNBVWrWutyRh YwErU5muyMRSJLLzTJfckfv48hJLdsipmZ3SGSdwi0dRpsuRNR4pcYDhdsnGcZUI EXNB2Pu+hRo1lsfhl4wIvfzolnq8cswM2K03gKO52piTdxj8GoUDBW5VYvXwjoru uf5GceIhRxHUyVKeAZm29BJu0UWm9o9bZiRf+PMAz432Llh3HRYw4FotXIVv7xZT XdYgFMrb5IH2MVZIJT3fZv+BCWQQZ2Ib30jm2XJJ7t12j5alHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMih4psKr96yxr6R1G2qfpbl0HhiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84OGJm YTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2NTVjYjcwMjMvMzZlNTRhZTEtMGRhZC0z NmM5LTg1ZDMtOGQ0MWZhMTY4MjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODhiZmEzNDgtMWRiNC00YzJiLThj ZDctZGY2NjU1Y2I3MDIzLzg4YmZhMzQ4LTFkYjQtNGMyYi04Y2Q3LWRmNjY1NWNi NzAyMy5jcmwwHwYDVR0jBBgwFoAUZHO8puo1I/hQ+5iN8wdwelFBWXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84OGJmYTM0OC0xZGI0LTRjMmItOGNkNy1kZjY2 NTVjYjcwMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAjqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8W/LOJ8GhtFURqeCu//5HbeWjESKX1mevNT0i0ONYA8zCqeNdQ0OyE mQ6elW5nXJF9RUkOXNiuC9vWCBiKtnHEtoAIUKi6YCxg0Wrc/vOf+Gjbo5fZzFWB z9KdxLlHN8cuFC1kbOhdv8QsTvZy60g1XY9oHfUApxBwFmhej6QtrGCCTnUavqWN L8A+cqxGtSV3RLj54aseixEkny7WrM7GvOdzMbLEaCppX10V5UIh1/ZmdDHcwmEC Y7lvueuMoSl01ns54SrbO+9neiVKK2sLC3rwnk5a4klenMbsVndarX5zhVh+Yh0v bbx5AOPd2xu+C3JGcRJKVTu6iFRQ5Lc= -----END CERTIFICATE-----Generated at Sat Jan 10 14:08:06 2026 by rpki-client