This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa File: e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa (raw, json) Hash identifier: QiIkyA3kDXSL/skXbP06WXiYpfA/ATi6r1pIEJ3ZVQo= Subject key identifier: 21:7D:24:5A:0B:38:2E:C9:E5:21:23:97:D9:96:1C:0A:09:58:8B:50 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584C2856383117EC430B82DE4F00 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 54196 IP address blocks: 209.211.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:38:31:17:ec:43:0b:82:de:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=16c38625-8d82-4027-8ee3-84043f8df43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b5:bb:d9:26:fd:8d:ca:7a:ef:24:32:a3:71: 24:94:c6:72:4d:fa:78:a9:a5:a7:61:21:84:ca:a0: 8e:2c:d1:72:2f:39:84:2f:49:91:28:43:31:20:59: ef:79:9b:fc:af:80:2c:db:2e:8f:d3:14:ff:ab:3c: 6b:b2:33:6c:e5:eb:cd:e6:44:2a:65:54:9c:38:2a: 84:1d:40:ac:3a:51:04:46:d4:b0:bf:2a:87:e8:6e: 52:8a:ad:81:a0:6b:6d:5d:3d:3d:7b:33:98:32:df: 08:64:fe:9e:6a:2c:87:3a:0c:7d:54:d5:d2:e1:bd: 70:c5:cf:aa:8a:60:cd:e6:cc:d8:ff:ef:ac:3e:11: 85:ec:91:72:12:51:72:90:c2:8f:75:4f:6b:3b:de: 4d:eb:c5:23:b7:3a:5c:85:c3:0f:9e:7e:ab:b3:12: d7:48:b1:b4:2e:86:b9:35:ac:f5:9e:40:ec:54:a7: b2:7b:14:c2:5f:7e:fe:f5:fb:11:69:5f:82:f5:1e: fb:db:fd:f9:58:22:da:7f:7f:31:1f:b3:ff:b5:5a: bc:67:d6:60:28:19:7d:cd:87:26:e9:bd:10:04:ca: f6:c5:6e:4b:5b:70:e5:87:74:c1:da:05:39:fc:f0: 29:dc:73:57:34:6b:04:7c:ac:f6:33:1b:bd:9b:f8: e3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7D:24:5A:0B:38:2E:C9:E5:21:23:97:D9:96:1C:0A:09:58:8B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e89af54f-c2c4-33af-9b3f-df8464bb9ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:34:fd:cf:e0:72:a9:7a:d9:cf:56:9f:45:ac:17:db:9d:5c: 53:3b:29:80:62:ad:0d:98:61:70:7b:29:ac:5d:53:43:20:03: 6b:25:03:ea:68:2f:65:8f:1d:99:8b:ab:21:ba:4a:42:07:87: 92:c5:61:62:a6:ab:46:a8:d1:1f:95:42:83:e1:d4:b7:25:29: d5:41:f9:92:4a:80:33:f0:93:11:52:d9:49:27:61:72:a8:cb: c8:ef:cd:fd:dc:b1:c4:81:f6:b1:11:35:82:56:e3:a6:c8:e0: 76:7d:fb:9e:df:82:4e:f9:3a:90:d3:d6:cc:ce:5d:7c:72:90: eb:37:b5:e6:89:f3:a2:57:92:bb:9f:3c:62:43:c6:6d:56:07: c0:37:7e:4b:a1:49:56:2f:58:af:6f:9c:54:fe:aa:2b:03:d3: 19:71:d4:89:9a:e7:35:cb:ba:a0:77:83:5e:ee:1d:66:9f:f5: 67:ac:af:e9:8b:0f:42:84:62:5d:b1:6c:d7:06:12:32:8e:01: 12:4b:c9:97:c9:de:f1:24:4f:d9:95:69:b2:a4:df:05:13:c5: f9:d0:2c:5c:da:0a:56:3e:06:6b:b9:20:28:fd:cc:4b:d5:6a: 80:d8:db:77:d7:f5:eb:6f:97:f5:d8:2c:91:33:2f:74:3e:f9: 21:a2:63:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVjgxF+xDC4LeTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk MTZjMzg2MjUtOGQ4Mi00MDI3LThlZTMtODQwNDNmOGRmNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07W72Sb9jcp67yQyo3EklMZyTfp4qaWnYSGE yqCOLNFyLzmEL0mRKEMxIFnveZv8r4As2y6P0xT/qzxrsjNs5evN5kQqZVScOCqE HUCsOlEERtSwvyqH6G5Siq2BoGttXT09ezOYMt8IZP6eaiyHOgx9VNXS4b1wxc+q imDN5szY/++sPhGF7JFyElFykMKPdU9rO95N68UjtzpchcMPnn6rsxLXSLG0Loa5 Naz1nkDsVKeyexTCX37+9fsRaV+C9R772/35WCLaf38xH7P/tVq8Z9ZgKBl9zYcm 6b0QBMr2xW5LW3Dlh3TB2gU5/PAp3HNXNGsEfKz2Mxu9m/jjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF9JFoLOC7J5SEjl9mWHAoJWItQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTg5YWY1NGYtYzJjNC0z M2FmLTliM2YtZGY4NDY0YmI5ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEw0/c/gcql62c9Wn0WsF9udXFM7KYBirQ2YYXB7KaxdU0MgA2slA+po L2WPHZmLqyG6SkIHh5LFYWKmq0ao0R+VQoPh1LclKdVB+ZJKgDPwkxFS2UknYXKo y8jvzf3cscSB9rERNYJW46bI4HZ9+57fgk75OpDT1szOXXxykOs3teaJ86JXkruf PGJDxm1WB8A3fkuhSVYvWK9vnFT+qisD0xlx1Ima5zXLuqB3g17uHWaf9Wesr+mL D0KEYl2xbNcGEjKOARJLyZfJ3vEkT9mVabKk3wUTxfnQLFzaClY+Bmu5ICj9zEvV aoDY23fX9etvl/XYLJEzL3Q++SGiY8M= -----END CERTIFICATE-----Generated at Sat Dec 20 19:02:46 2025 by rpki-client