This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
File: 3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier: lZr+nZvN9tQ6fduQCcr1p6uuZy+PrfZMb6bNj0ukkLw=
Subject key identifier: 99:0F:C5:BF:BF:C8:C2:08:3B:26:27:DC:5B:06:FE:F0:02:68:1D:A9
Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial: 3C47FDB60E22D49ABF605ADCAA9AE36D20494F93
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
Signing time: Wed 24 Dec 2025 16:30:49 +0000
ROA not before: Wed 24 Dec 2025 16:25:49 +0000
ROA not after: Wed 23 Dec 2026 16:30:49 +0000
asID: 20473
IP address blocks: 216.211.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:47:fd:b6:0e:22:d4:9a:bf:60:5a:dc:aa:9a:e3:6d:20:49:4f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Validity
Not Before: Dec 24 16:25:49 2025 GMT
Not After : Dec 23 16:30:49 2026 GMT
Subject: CN=990FC5BFBFC8C2083B2627DC5B06FEF002681DA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:95:5f:06:01:13:1a:b5:a1:1f:d8:a1:ef:f6:
47:fa:5a:81:55:94:c4:e8:49:c2:e0:b2:03:cc:c4:
43:2f:13:32:f3:b9:45:f4:2c:6d:8d:40:33:59:9d:
6b:a5:76:44:19:c8:f8:a7:f0:6b:77:4f:54:ae:9b:
23:df:b2:a2:53:d3:5f:c0:ee:01:09:d4:5f:76:40:
f2:bf:24:35:b5:42:a8:f2:ff:68:0f:7c:55:75:da:
9b:b6:47:74:99:69:28:b2:2a:f6:19:59:88:ca:5c:
9b:e1:66:5e:99:d7:47:b9:03:b3:26:74:c0:b1:d8:
c8:33:29:eb:f3:8b:45:bd:75:7d:e3:29:fd:ee:0b:
0e:86:69:f8:82:02:76:a4:78:f3:36:5a:58:44:87:
c5:05:b9:ec:05:f1:ca:e1:7b:02:e6:06:45:5c:e6:
32:cc:f1:26:ea:64:e1:8e:b3:d5:d4:07:50:df:04:
41:19:a1:b6:14:89:44:8d:fc:71:54:57:8a:3c:00:
b5:0e:a3:fb:e5:2d:f3:26:37:80:50:8b:09:17:40:
18:79:6a:5c:2e:0c:73:d7:40:68:15:40:4b:74:24:
bd:d4:80:7b:40:c5:d2:71:9f:2e:9c:f0:bd:18:f5:
65:83:ea:cf:86:98:9a:d8:13:b2:46:62:e6:75:1d:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0F:C5:BF:BF:C8:C2:08:3B:26:27:DC:5B:06:FE:F0:02:68:1D:A9
X509v3 Authority Key Identifier:
keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3231362e3231312e3230382e302f32322d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.211.208.0/22
Signature Algorithm: sha256WithRSAEncryption
95:ac:92:7b:51:3d:8e:d3:db:00:72:e7:50:0a:80:c7:62:67:
06:50:6e:ec:19:46:0c:aa:44:7a:5d:2b:7a:4f:45:01:7f:ce:
61:94:71:3f:91:87:d3:34:ae:11:d5:05:f1:7d:08:56:67:af:
93:fb:03:f0:c1:ca:43:7b:97:a4:12:26:6f:9a:0f:bf:ce:8f:
d5:e2:dd:33:e9:fb:38:ea:27:93:93:db:36:57:5c:ca:26:55:
0b:13:d5:43:19:4b:04:3f:c7:61:7a:c8:a0:32:55:1b:75:23:
77:73:e2:34:1d:30:ce:ad:1a:1e:7f:72:7f:1a:c6:66:08:1a:
e8:db:98:88:1d:52:28:1e:cb:1b:d1:11:7c:1d:fd:88:e5:af:
6a:14:98:be:a5:a6:52:96:78:d3:0a:bc:7a:c5:f6:4b:75:26:
80:5f:e8:d2:2c:97:81:6b:5e:dd:11:d7:27:4b:1a:61:c6:2d:
b4:58:93:ed:98:36:2f:40:28:04:a5:ec:0a:f2:bd:1e:92:97:
4e:c2:19:d2:52:a6:9a:cc:b0:58:f1:87:cb:8b:5b:ff:f0:7d:
d8:77:70:95:8b:03:87:ea:ec:3c:f4:1e:a5:ad:c0:b0:59:f5:
a7:5f:5b:c2:cd:11:3e:41:70:63:34:7d:97:b5:ed:2e:d4:37:
75:7f:11:7e
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPEf9tg4i1Jq/YFrcqprjbSBJT5MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl
YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjUxMjI0MTYyNTQ5WhcNMjYxMjIzMTYzMDQ5
WjAzMTEwLwYDVQQDEyg5OTBGQzVCRkJGQzhDMjA4M0IyNjI3REM1QjA2RkVGMDAy
NjgxREE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JVfBgETGrWh
H9ih7/ZH+lqBVZTE6EnC4LIDzMRDLxMy87lF9CxtjUAzWZ1rpXZEGcj4p/Brd09U
rpsj37KiU9NfwO4BCdRfdkDyvyQ1tUKo8v9oD3xVddqbtkd0mWkosir2GVmIylyb
4WZemddHuQOzJnTAsdjIMynr84tFvXV94yn97gsOhmn4ggJ2pHjzNlpYRIfFBbns
BfHK4XsC5gZFXOYyzPEm6mThjrPV1AdQ3wRBGaG2FIlEjfxxVFeKPAC1DqP75S3z
JjeAUIsJF0AYeWpcLgxz10BoFUBLdCS91IB7QMXScZ8unPC9GPVlg+rPhpia2BOy
RmLmdR0hqQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJkPxb+/yMIIOyYn3FsG/vAC
aB2pMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv
MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1
ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj
NjFiNDI2NTFkNi8wLzMyMzEzNjJlMzIzMTMxMmUzMjMwMzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2NPQMA0GCSqGSIb3DQEB
CwUAA4IBAQCVrJJ7UT2O09sAcudQCoDHYmcGUG7sGUYMqkR6XSt6T0UBf85hlHE/
kYfTNK4R1QXxfQhWZ6+T+wPwwcpDe5ekEiZvmg+/zo/V4t0z6fs46ieTk9s2V1zK
JlULE9VDGUsEP8dhesigMlUbdSN3c+I0HTDOrRoef3J/GsZmCBro25iIHVIoHssb
0RF8Hf2I5a9qFJi+paZSlnjTCrx6xfZLdSaAX+jSLJeBa17dEdcnSxphxi20WJPt
mDYvQCgEpewK8r0ekpdOwhnSUqaazLBY8YfLi1v/8H3Yd3CViwOH6uw89B6lrcCw
WfWnX1vCzRE+QXBjNH2Xte0u1Dd1fxF+
-----END CERTIFICATE-----
Generated at Wed Dec 24 18:05:11 2025 by rpki-client