This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa File: 0c63918d-8469-3f06-8f4a-6a786f9c4338.roa (raw, json) Hash identifier: JCDqazTvsMH9Gs5NLEJkuqFHIMOeMP/JSWmCPs1lwQk= Subject key identifier: 08:38:6C:CB:1D:ED:D4:44:42:84:DE:D3:43:E1:27:32:49:A8:85:67 Certificate issuer: /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Certificate serial: 010D0C9F4328584C5F8A11E61EA989AF20033080 Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa Signing time: Wed 31 Dec 2025 20:34:37 +0000 ROA not before: Wed 31 Dec 2025 20:34:37 +0000 ROA not after: Tue 31 Mar 2026 19:34:37 +0000 asID: 62943 IP address blocks: 67.221.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5f:8a:11:e6:1e:a9:89:af:20:03:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2 Validity Not Before: Dec 31 20:34:37 2025 GMT Not After : Mar 31 19:34:37 2026 GMT Subject: CN=378fc3ef-6a9e-4e8a-a475-f66345f02697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:bc:05:09:61:38:f4:f3:7c:7e:b8:53:3d: 48:cd:03:9a:b8:ab:d5:74:2c:a6:7a:2b:60:2e:9f: 8d:b0:33:f5:48:a9:87:87:63:50:de:60:ac:d7:b5: 61:7b:2b:56:37:c5:34:31:ae:13:96:46:3b:b4:0b: 06:2f:a6:6e:01:15:fc:cb:2b:b7:2f:3c:55:8a:00: 6b:4b:ae:38:72:84:7b:2a:e2:98:af:5d:12:1a:2c: c1:4e:67:bc:a0:82:e2:0b:97:eb:05:4f:15:9a:d8: aa:07:36:2d:f8:0b:41:ee:25:e4:d3:79:51:4f:fd: a3:cb:21:93:73:d4:af:42:36:97:6b:dc:34:c8:e7: e3:6c:c9:57:df:74:18:9e:88:9b:73:32:c7:e1:67: ce:eb:08:de:aa:b4:0a:b9:10:bd:7c:57:09:04:05: 7f:ac:72:de:46:91:3c:f6:02:5f:72:c4:c1:53:a9: c8:1f:4c:21:91:5f:20:8e:c5:04:45:62:11:64:48: 98:91:dd:16:5c:ac:cb:99:f2:d7:47:4f:84:ce:6f: ac:07:16:0c:f8:c7:49:bf:de:1b:4e:04:f0:07:00: 6b:b9:f5:ad:92:47:a5:2f:6f:f8:06:2c:1f:f6:cd: be:b1:5f:58:2f:f8:f1:cb:3f:68:9e:c4:82:69:c6: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:38:6C:CB:1D:ED:D4:44:42:84:DE:D3:43:E1:27:32:49:A8:85:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/0c63918d-8469-3f06-8f4a-6a786f9c4338.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl X509v3 Authority Key Identifier: keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer sbgp-ipAddrBlock: critical IPv4: 67.221.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5b:fb:ca:43:a9:c5:e0:0e:0a:47:ca:7a:08:3c:f9:b8:37: da:84:c4:f3:2a:16:0d:9c:4c:74:0a:b4:1b:31:23:4e:30:f2: ab:4a:0f:09:5d:e5:25:16:25:ca:86:ff:89:2a:46:2c:4a:55: 69:2c:64:e4:b1:92:54:de:af:ed:43:6b:a7:04:0a:65:9a:d4: 54:7c:0d:5f:44:3c:31:1b:d3:7f:1f:67:7d:ee:68:ab:12:74: 86:27:3f:c6:24:4f:04:61:ee:04:56:8b:28:a5:97:67:32:ee: 76:0a:c2:ea:d5:86:0f:47:5e:31:aa:84:84:de:d5:a3:c5:c2: 00:8d:51:71:13:56:2a:1d:66:eb:3d:a9:d6:e7:9f:32:9b:fb: db:fc:6a:5a:a9:f6:fc:a3:93:d3:11:ee:1e:76:f8:34:ac:41: 15:a2:c8:d3:9c:ed:4d:1b:e8:7c:4d:36:32:13:d2:61:1b:c7: ba:7b:c3:cc:a0:7e:cd:a9:31:e7:d7:10:6d:70:41:02:8d:5e: 9f:a7:82:13:c1:f9:63:fc:bc:d2:1d:d6:dd:bc:96:42:5d:f9: d2:7b:9b:bb:45:82:db:06:a1:9d:70:eb:36:c5:9f:e5:50:66: 12:30:c2:d4:86:f4:a8:da:72:29:bc:44:6b:f9:07:48:7c:e1: a3:04:f1:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExfihHmHqmJryADMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdlNDM1N2UtMTcwZi00ZmI5LTg4NDktM2M4NDI1N2Yy YWQyMB4XDTI1MTIzMTIwMzQzN1oXDTI2MDMzMTE5MzQzN1owLzEtMCsGA1UEAxMk Mzc4ZmMzZWYtNmE5ZS00ZThhLWE0NzUtZjY2MzQ1ZjAyNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKS8BQlhOPTzfH64Uz1IzQOauKvVdCymeitg Lp+NsDP1SKmHh2NQ3mCs17VheytWN8U0Ma4TlkY7tAsGL6ZuARX8yyu3LzxVigBr S644coR7KuKYr10SGizBTme8oILiC5frBU8VmtiqBzYt+AtB7iXk03lRT/2jyyGT c9SvQjaXa9w0yOfjbMlX33QYnoibczLH4WfO6wjeqrQKuRC9fFcJBAV/rHLeRpE8 9gJfcsTBU6nIH0whkV8gjsUERWIRZEiYkd0WXKzLmfLXR0+Ezm+sBxYM+MdJv94b TgTwBwBrufWtkkelL2/4Biwf9s2+sV9YL/jxyz9onsSCacaSCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg4bMsd7dREQoTe00PhJzJJqIVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0 MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0MjU3ZjJhZDIvMGM2MzkxOGQtODQ2OS0z ZjA2LThmNGEtNmE3ODZmOWM0MzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjdlNDM1N2UtMTcwZi00ZmI5LTg4 NDktM2M4NDI1N2YyYWQyL2I3ZTQzNTdlLTE3MGYtNGZiOS04ODQ5LTNjODQyNTdm MmFkMi5jcmwwHwYDVR0jBBgwFoAUqvQvX1cKAqH2YCqWDn5tkZT8Nh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iN2U0MzU3ZS0xNzBmLTRmYjktODg0OS0zYzg0 MjU3ZjJhZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ93ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5b+8pDqcXgDgpHynoIPPm4N9qExPMqFg2cTHQKtBsxI04w8qtKDwld 5SUWJcqG/4kqRixKVWksZOSxklTer+1Da6cECmWa1FR8DV9EPDEb038fZ33uaKsS dIYnP8YkTwRh7gRWiyill2cy7nYKwurVhg9HXjGqhITe1aPFwgCNUXETViodZus9 qdbnnzKb+9v8alqp9vyjk9MR7h52+DSsQRWiyNOc7U0b6HxNNjIT0mEbx7p7w8yg fs2pMefXEG1wQQKNXp+nghPB+WP8vNId1t28lkJd+dJ7m7tFgtsGoZ1w6zbFn+VQ ZhIwwtSG9Kjacim8RGv5B0h84aME8Ww= -----END CERTIFICATE-----Generated at Sun Jan 11 03:58:24 2026 by rpki-client