This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa File: 971c8edd-06bb-333f-94f5-8b5f3db41453.roa (raw, json) Hash identifier: /oK+Ikoauc1JuttxXRK0dT5RbPPE8DVdQ8uwWeDaY1Q= Subject key identifier: 7B:D9:9C:C3:E4:71:CE:B4:27:B5:90:7E:03:F2:C6:A1:9D:D7:01:E4 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584C5666AEBDCEC64E0DCD1A4280 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa Signing time: Sun 28 Dec 2025 14:00:38 +0000 ROA not before: Sun 28 Dec 2025 14:00:38 +0000 ROA not after: Sat 28 Mar 2026 13:00:38 +0000 asID: 63062 IP address blocks: 67.44.32.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:66:ae:bd:ce:c6:4e:0d:cd:1a:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Dec 28 14:00:38 2025 GMT Not After : Mar 28 13:00:38 2026 GMT Subject: CN=b4f269ca-ecbc-4c04-8775-6a53f75b3a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c3:89:e5:67:e9:a1:2e:be:d9:a7:3e:d9:4a: 71:b5:69:2d:1c:db:12:60:bb:ce:da:d3:67:b9:c5: 7e:0d:23:b6:ad:39:e0:7c:a9:11:0e:95:c1:4a:eb: d7:21:f9:f2:17:98:3f:34:d9:c0:a0:71:c6:b1:60: 99:f5:a7:7d:8e:4f:f1:f5:83:96:67:c6:3c:a9:c1: 6a:9e:8c:d2:fa:f3:5a:6d:67:32:67:c9:d3:ca:b0: 4a:e4:38:2a:8e:b9:04:a6:f5:9c:01:7a:2c:07:2f: 11:17:a6:21:e6:3b:91:6b:66:4b:4b:34:9e:84:db: 09:23:31:0f:49:46:6f:74:2f:19:3c:ef:6e:72:4e: 56:2e:1f:16:87:60:5f:d6:64:c6:f9:1c:13:3b:3e: 8b:61:8a:78:fd:f5:6c:4e:5f:e5:e8:b9:e9:f4:7a: 5b:ea:3b:f1:b7:b9:1a:d9:7d:17:0f:80:8b:f2:95: 62:64:53:5c:36:ae:97:c5:ad:2b:da:63:90:c1:e5: 1c:63:63:27:23:0e:ab:6e:c3:75:2c:d3:77:a3:dd: c8:89:11:d2:c8:79:28:1f:80:bc:bd:b0:ef:a8:90: c0:bc:a9:b1:9e:fd:1c:c9:f0:44:e1:23:37:d2:95: 7d:1e:0f:00:69:0e:ab:0e:15:eb:c4:c1:0c:40:80: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:9C:C3:E4:71:CE:B4:27:B5:90:7E:03:F2:C6:A1:9D:D7:01:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/971c8edd-06bb-333f-94f5-8b5f3db41453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b9:a9:c3:a2:e7:70:d7:4a:b9:75:0b:9d:f0:79:59:fd:a9: 13:22:5d:30:e1:6f:24:30:e3:12:e0:e5:a3:3d:f5:fc:10:ce: 61:08:c4:ea:bf:9a:d0:5f:15:76:f0:d2:5c:3d:0c:d7:87:51: 7c:87:5a:c1:94:e9:b0:91:74:b0:e1:32:ee:da:39:51:e5:39: d1:02:71:ea:09:f9:58:2e:d2:8b:39:09:8f:07:56:3d:85:32: 41:f9:96:e7:ae:6d:36:42:1d:d5:9b:b6:4a:4b:69:00:91:ea: 23:4c:b0:6d:7f:76:6a:5f:2b:3d:05:21:57:4f:93:15:ca:b1: 9b:db:27:1d:04:3e:ab:f1:f3:8d:93:e5:e6:2b:b2:d0:86:c4: df:7d:2c:dd:42:9f:e0:f6:18:98:62:46:cd:a0:53:d9:b4:8f: 89:a4:2d:18:68:d6:63:9f:77:83:26:cc:25:36:d8:14:ea:8d: c6:53:a4:4d:92:da:9a:d8:72:f9:bc:29:e2:94:b4:4e:74:b1: f0:db:d0:af:a2:5a:a9:71:96:bd:ca:54:8b:63:43:26:45:53: f3:73:f6:ba:f4:2b:27:16:19:d2:a9:be:3f:6d:bf:52:ed:8b: 92:db:26:ed:a1:d4:ca:3c:03:e1:0f:a4:3b:0a:74:2e:a2:14: 88:b4:a6:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExWZq69zsZODc0aQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI1MTIyODE0MDAzOFoXDTI2MDMyODEzMDAzOFowLzEtMCsGA1UEAxMk YjRmMjY5Y2EtZWNiYy00YzA0LTg3NzUtNmE1M2Y3NWIzYTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8OJ5WfpoS6+2ac+2UpxtWktHNsSYLvO2tNn ucV+DSO2rTngfKkRDpXBSuvXIfnyF5g/NNnAoHHGsWCZ9ad9jk/x9YOWZ8Y8qcFq nozS+vNabWcyZ8nTyrBK5DgqjrkEpvWcAXosBy8RF6Yh5juRa2ZLSzSehNsJIzEP SUZvdC8ZPO9uck5WLh8Wh2Bf1mTG+RwTOz6LYYp4/fVsTl/l6Lnp9Hpb6jvxt7ka 2X0XD4CL8pViZFNcNq6Xxa0r2mOQweUcY2MnIw6rbsN1LNN3o93IiRHSyHkoH4C8 vbDvqJDAvKmxnv0cyfBE4SM30pV9Hg8AaQ6rDhXrxMEMQICAiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvZnMPkcc60J7WQfgPyxqGd1wHkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvOTcxYzhlZGQtMDZiYi0z MzNmLTk0ZjUtOGI1ZjNkYjQxNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABu5qcOi53DXSrl1C53weVn9qRMiXTDhbyQw4xLg5aM99fwQzmEIxOq/ mtBfFXbw0lw9DNeHUXyHWsGU6bCRdLDhMu7aOVHlOdECceoJ+Vgu0os5CY8HVj2F MkH5lueubTZCHdWbtkpLaQCR6iNMsG1/dmpfKz0FIVdPkxXKsZvbJx0EPqvx842T 5eYrstCGxN99LN1Cn+D2GJhiRs2gU9m0j4mkLRho1mOfd4MmzCU22BTqjcZTpE2S 2prYcvm8KeKUtE50sfDb0K+iWqlxlr3KVItjQyZFU/Nz9rr0KycWGdKpvj9tv1Lt i5LbJu2h1Mo8A+EPpDsKdC6iFIi0pv4= -----END CERTIFICATE-----Generated at Tue Dec 30 10:54:44 2025 by rpki-client