This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa File: efafb3e1-c5fc-3111-b4db-21000f90654c.roa (raw, json) Hash identifier: 48gPJOrAdTWrGv8wLh2G62FUEwhMUBSOydSTjhCdoi0= Subject key identifier: 00:F8:66:4A:77:F5:81:83:3D:3F:CF:A8:E3:01:83:AA:73:99:19:C9 Certificate issuer: /CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Certificate serial: 010D0C9F4328584C2B20FD7CDF0853A26C9EEF80 Authority key identifier: 7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa Signing time: Sat 13 Dec 2025 02:00:30 +0000 ROA not before: Sat 13 Dec 2025 02:00:30 +0000 ROA not after: Fri 13 Mar 2026 01:00:30 +0000 asID: 401834 IP address blocks: 64.89.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2b:20:fd:7c:df:08:53:a2:6c:9e:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2a1f149-bc0c-4f6c-9fb5-e656515d197b Validity Not Before: Dec 13 02:00:30 2025 GMT Not After : Mar 13 01:00:30 2026 GMT Subject: CN=2b0f69de-ba74-43d9-a8a7-c98621bd364d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:af:b3:14:f4:6a:89:be:6c:46:32:bd:43:19: 50:09:27:13:aa:d7:5a:67:b4:0f:c3:a7:0e:a5:51: d8:37:fc:fa:c4:c3:1a:94:2c:42:7d:66:55:6a:aa: 3b:5e:22:76:56:d2:9e:f9:8a:d1:5b:90:47:80:ec: 1a:05:ae:0b:cd:a1:ff:c4:eb:bc:c6:a1:84:a0:be: de:5d:11:39:42:83:ff:4d:82:e7:a7:cd:f4:30:52: 81:52:18:99:45:b9:af:ab:70:28:23:60:88:95:77: 62:b7:b4:d1:10:17:ea:0b:2d:ae:d2:b9:49:19:5b: 5b:58:ed:5d:55:78:aa:74:b2:0a:62:e6:ae:8f:da: 05:bb:fc:7d:21:88:7b:d3:96:b4:4c:01:1c:00:75: d6:d3:22:d2:02:0e:ee:85:49:5b:b3:8e:a1:5f:51: 07:1a:ad:54:1d:7d:80:0c:eb:88:18:e7:bb:2a:0a: e1:36:e6:11:80:56:63:08:08:d6:10:1c:f4:b0:cc: e8:b4:9a:0d:5e:c4:ee:e9:0b:b1:50:78:9f:db:47: 0b:6d:2b:c3:6b:69:fb:49:6a:43:e4:4b:71:97:af: aa:5a:ed:5f:a9:e5:4d:2a:f7:ff:ae:69:fa:62:15: 41:99:41:c2:b9:e3:cc:96:d8:d0:ee:64:e4:37:c8: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F8:66:4A:77:F5:81:83:3D:3F:CF:A8:E3:01:83:AA:73:99:19:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/efafb3e1-c5fc-3111-b4db-21000f90654c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.crl X509v3 Authority Key Identifier: keyid:7F:BD:4B:2F:5C:42:44:6D:0C:C7:5A:3F:20:EC:C3:76:8C:F5:32:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f2a1f149-bc0c-4f6c-9fb5-e656515d197b.cer sbgp-ipAddrBlock: critical IPv4: 64.89.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:dc:47:a4:06:8e:e9:ff:58:ea:a6:09:a6:2e:0d:b6:18:a9: 05:e8:63:19:0c:35:9a:ed:63:fe:f4:2c:b5:39:37:28:eb:2a: b3:e8:6a:da:6b:3f:cb:eb:da:f1:f3:4d:d2:30:8e:51:ef:82: c3:72:a1:14:96:25:9b:77:0d:37:28:ec:a8:78:d9:83:4c:3d: f0:45:9b:4e:1e:3d:14:12:78:f8:b0:99:f8:8d:32:55:c8:09: a1:4f:87:bc:d7:3e:37:b8:47:57:42:e2:80:ee:2d:bc:1c:6a: ba:74:cb:18:a5:3d:04:c8:a4:07:9d:00:b7:c3:68:8d:42:62: 82:18:21:7a:bc:21:0c:ea:bb:d9:58:dd:87:b9:b7:0e:6a:54: b9:a9:4a:8b:bf:d2:52:24:65:b9:27:3b:53:36:ff:32:38:d5: 2c:54:60:cb:ef:23:1f:df:59:bc:11:de:3a:12:3d:9d:f8:c2: 2e:6f:59:a8:76:19:38:22:28:ad:52:1f:22:5c:19:48:d3:70: ff:85:3c:28:3e:1e:46:c9:08:c1:3e:8b:db:7d:5e:e9:2a:0c: fb:0c:97:79:fc:8e:c3:1a:47:ca:cb:96:9c:12:06:d0:e1:6a: 7d:0f:06:9f:0c:2e:42:20:87:ea:cc:0f:3f:82:73:8b:11:80: 25:85:66:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwrIP183whTomye74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJhMWYxNDktYmMwYy00ZjZjLTlmYjUtZTY1NjUxNWQx OTdiMB4XDTI1MTIxMzAyMDAzMFoXDTI2MDMxMzAxMDAzMFowLzEtMCsGA1UEAxMk MmIwZjY5ZGUtYmE3NC00M2Q5LWE4YTctYzk4NjIxYmQzNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArK+zFPRqib5sRjK9QxlQCScTqtdaZ7QPw6cO pVHYN/z6xMMalCxCfWZVaqo7XiJ2VtKe+YrRW5BHgOwaBa4LzaH/xOu8xqGEoL7e XRE5QoP/TYLnp830MFKBUhiZRbmvq3AoI2CIlXdit7TREBfqCy2u0rlJGVtbWO1d VXiqdLIKYuauj9oFu/x9IYh705a0TAEcAHXW0yLSAg7uhUlbs46hX1EHGq1UHX2A DOuIGOe7KgrhNuYRgFZjCAjWEBz0sMzotJoNXsTu6QuxUHif20cLbSvDa2n7SWpD 5Etxl6+qWu1fqeVNKvf/rmn6YhVBmUHCuePMltjQ7mTkN8hy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAD4Zkp39YGDPT/PqOMBg6pzmRnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mMmEx ZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2NTE1ZDE5N2IvZWZhZmIzZTEtYzVmYy0z MTExLWI0ZGItMjEwMDBmOTA2NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjJhMWYxNDktYmMwYy00ZjZjLTlm YjUtZTY1NjUxNWQxOTdiL2YyYTFmMTQ5LWJjMGMtNGY2Yy05ZmI1LWU2NTY1MTVk MTk3Yi5jcmwwHwYDVR0jBBgwFoAUf71LL1xCRG0Mx1o/IOzDdoz1MtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mMmExZjE0OS1iYzBjLTRmNmMtOWZiNS1lNjU2 NTE1ZDE5N2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQFmQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXcR6QGjun/WOqmCaYuDbYYqQXoYxkMNZrtY/70LLU5NyjrKrPoatpr P8vr2vHzTdIwjlHvgsNyoRSWJZt3DTco7Kh42YNMPfBFm04ePRQSePiwmfiNMlXI CaFPh7zXPje4R1dC4oDuLbwcarp0yxilPQTIpAedALfDaI1CYoIYIXq8IQzqu9lY 3Ye5tw5qVLmpSou/0lIkZbknO1M2/zI41SxUYMvvIx/fWbwR3joSPZ34wi5vWah2 GTgiKK1SHyJcGUjTcP+FPCg+HkbJCME+i9t9XukqDPsMl3n8jsMaR8rLlpwSBtDh an0PBp8MLkIgh+rMDz+Cc4sRgCWFZgU= -----END CERTIFICATE-----Generated at Fri Jan 9 17:50:33 2026 by rpki-client