This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa File: 70158a40-1c67-3cb3-a454-85f651195ef6.roa (raw, json) Hash identifier: kxkWZIkyrWCQ70LoEYm9u/V3JfFta5AwfSUqKTuNLMo= Subject key identifier: AE:81:24:7A:05:94:3D:65:6C:40:FC:70:08:7B:BF:14:B1:AB:6E:F3 Certificate issuer: /CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Certificate serial: 010D0C9F4328584C550119130AAEB41E9BC292C0 Authority key identifier: 92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 397423 IP address blocks: 216.239.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:19:13:0a:ae:b4:1e:9b:c2:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d67d4a84-9f0e-4408-82e7-81c09b7c592d Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=b1c19c64-4afa-4965-a37f-8c7a6c61d754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:40:aa:cf:96:4b:67:4f:01:ad:ed:26:44: 64:93:26:57:8f:7a:93:36:0b:35:5f:36:3f:25:ca: 87:91:ed:8a:1a:70:a5:ca:40:b2:f7:30:ee:9c:8d: 20:40:ce:7d:6e:4c:c5:26:34:16:3f:ed:7a:d7:11: 1d:af:4a:88:2f:bf:59:3c:a8:56:b1:8c:86:f6:d8: c3:92:6a:2a:11:90:31:e0:c5:75:17:92:5b:42:6d: b1:d8:8d:7c:dc:bd:59:b5:4c:3f:93:54:40:2f:1c: 4f:47:65:23:b1:72:42:0a:f0:ee:aa:e7:83:17:6f: 0b:7f:85:90:d6:b8:13:29:40:5a:cf:e7:7c:19:f0: 69:e7:28:cc:95:93:ba:f4:20:7b:ec:a0:54:6b:a5: 27:5a:78:61:e3:d7:d0:17:e9:8c:9c:b4:56:20:b9: 96:1f:98:20:ed:dc:29:fd:de:ce:d7:00:b6:ab:8d: c1:2f:a4:11:42:43:40:75:5c:28:1f:64:9e:b2:5b: 34:85:d8:d8:5c:d5:5b:d2:a7:e0:57:88:79:ac:15: 5b:27:0e:c5:5b:35:01:86:b0:2d:1a:6c:88:be:3e: 8b:f7:b6:d6:74:51:e4:9c:06:ae:41:de:f8:b0:5d: 90:1c:54:fb:0a:a1:96:81:db:8a:08:c1:cb:8d:fd: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:81:24:7A:05:94:3D:65:6C:40:FC:70:08:7B:BF:14:B1:AB:6E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/70158a40-1c67-3cb3-a454-85f651195ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d/d67d4a84-9f0e-4408-82e7-81c09b7c592d.crl X509v3 Authority Key Identifier: keyid:92:F3:D0:75:AF:64:30:7C:7B:4F:EF:33:EC:3A:81:7D:57:4A:8D:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d67d4a84-9f0e-4408-82e7-81c09b7c592d.cer sbgp-ipAddrBlock: critical IPv4: 216.239.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:7c:3f:76:59:9d:36:3f:3f:ac:6f:81:30:5d:5b:60:d6:38: 17:dd:70:65:1c:84:d1:44:f1:c1:e4:f4:16:69:54:e8:8a:be: c1:c6:29:61:ec:9b:4c:b8:48:4c:2a:59:07:c5:1f:3d:df:1b: 25:3a:34:ee:b1:52:aa:02:45:d5:b3:79:bf:a3:dc:d6:5d:95: 78:51:91:02:a0:8c:7f:e2:d7:7a:44:45:3d:fe:a7:fb:ce:f9: 4d:1a:d8:98:41:ff:62:0a:da:88:bc:be:ff:ef:9b:e5:4c:cc: 66:83:96:14:ae:13:43:7f:2e:cc:94:b0:1e:fc:55:99:95:11: 7a:5a:93:93:b4:2f:d7:4f:40:7c:48:7a:f1:5b:2c:3a:42:72: 2f:14:cf:14:df:fa:82:44:57:61:a7:ca:98:db:c2:f4:0c:cc: 6e:48:62:45:5b:0a:c6:36:c0:5c:35:30:ae:97:a8:6d:07:4c: 0b:f3:30:0a:26:ef:29:bc:c6:1b:ae:9d:77:42:3b:19:17:ae: d0:12:01:c6:31:5c:52:45:b1:fd:f9:f2:6b:11:7a:a0:cd:3e: 12:0f:09:ff:a8:47:14:5d:a8:7a:c6:aa:a5:3b:7a:2a:0e:5d: 22:95:60:5e:f6:74:1d:5b:9f:37:ba:a1:84:df:b7:d1:46:8d: 31:f2:05:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVARkTCq60HpvCksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3ZDRhODQtOWYwZS00NDA4LTgyZTctODFjMDliN2M1 OTJkMB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk YjFjMTljNjQtNGFmYS00OTY1LWEzN2YtOGM3YTZjNjFkNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzVAqs+WS2dPAa3tJkRkkyZXj3qTNgs1XzY/ JcqHke2KGnClykCy9zDunI0gQM59bkzFJjQWP+161xEdr0qIL79ZPKhWsYyG9tjD kmoqEZAx4MV1F5JbQm2x2I183L1ZtUw/k1RALxxPR2UjsXJCCvDuqueDF28Lf4WQ 1rgTKUBaz+d8GfBp5yjMlZO69CB77KBUa6UnWnhh49fQF+mMnLRWILmWH5gg7dwp /d7O1wC2q43BL6QRQkNAdVwoH2Sesls0hdjYXNVb0qfgV4h5rBVbJw7FWzUBhrAt GmyIvj6L97bWdFHknAauQd74sF2QHFT7CqGWgduKCMHLjf1A0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6BJHoFlD1lbED8cAh7vxSxq27zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdk NGE4NC05ZjBlLTQ0MDgtODJlNy04MWMwOWI3YzU5MmQvNzAxNThhNDAtMWM2Ny0z Y2IzLWE0NTQtODVmNjUxMTk1ZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDY3ZDRhODQtOWYwZS00NDA4LTgy ZTctODFjMDliN2M1OTJkL2Q2N2Q0YTg0LTlmMGUtNDQwOC04MmU3LTgxYzA5Yjdj NTkyZC5jcmwwHwYDVR0jBBgwFoAUkvPQda9kMHx7T+8z7DqBfVdKjWcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjdkNGE4NC05ZjBlLTQ0MDgtODJlNy04MWMw OWI3YzU5MmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2O9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl8P3ZZnTY/P6xvgTBdW2DWOBfdcGUchNFE8cHk9BZpVOiKvsHGKWHs m0y4SEwqWQfFHz3fGyU6NO6xUqoCRdWzeb+j3NZdlXhRkQKgjH/i13pERT3+p/vO +U0a2JhB/2IK2oi8vv/vm+VMzGaDlhSuE0N/LsyUsB78VZmVEXpak5O0L9dPQHxI evFbLDpCci8UzxTf+oJEV2GnypjbwvQMzG5IYkVbCsY2wFw1MK6XqG0HTAvzMAom 7ym8xhuunXdCOxkXrtASAcYxXFJFsf358msReqDNPhIPCf+oRxRdqHrGqqU7eioO XSKVYF72dB1bnze6oYTft9FGjTHyBRs= -----END CERTIFICATE-----Generated at Fri Jan 9 18:02:01 2026 by rpki-client