This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86dfc20-804c-37ab-9b3c-9b26135e3a17.roa File: e86dfc20-804c-37ab-9b3c-9b26135e3a17.roa (raw, json) Hash identifier: /MdumSZHhD+Pjs7USjq4nD8JQ0VJEKN0pasoP83DV4w= Subject key identifier: 48:98:2B:6C:5D:5B:78:84:DA:61:CD:C1:5E:F9:4D:28:40:3C:D4:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C33812D4E325E454E0E5D9590 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86dfc20-804c-37ab-9b3c-9b26135e3a17.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 33491 IP address blocks: 71.57.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:2d:4e:32:5e:45:4e:0e:5d:95:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=d8d2b384-67dc-40e7-807a-97658c4b51d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:b0:21:ab:fd:b6:66:54:d3:a7:fc:39:2b: bf:10:95:89:5d:37:47:ce:06:54:52:16:bb:48:7d: 20:b4:e6:8f:77:66:0a:27:1d:83:04:c1:c3:e4:e4: d6:d1:da:48:10:3b:fc:70:6a:47:df:fc:50:9d:ce: f0:e8:8e:59:75:62:a6:29:ee:c8:9c:a9:d8:2e:dc: 5c:32:c0:cf:38:6b:64:df:f4:2f:02:e3:86:6d:f8: 1b:28:f2:e7:05:fe:fb:86:54:a7:6f:56:46:5d:ca: 0b:66:2d:e4:75:15:fd:80:15:06:dd:34:4b:a0:0c: 0b:ee:29:89:fa:44:1b:9c:2d:7e:60:79:af:3a:6f: cc:80:11:c2:49:fa:8d:b6:71:c4:d6:a5:79:01:2b: 34:fd:35:03:de:48:96:89:d6:0e:5f:3e:d9:8c:98: f9:f0:f4:4e:fd:ad:71:ff:46:cd:65:43:b6:f1:a7: a4:af:33:e6:f5:47:27:b6:61:2c:f0:71:78:b5:b3: 44:4b:84:8d:42:f8:8a:a1:a4:ff:0e:e8:aa:64:9b: e8:52:97:6e:a5:e7:5a:78:0e:58:7f:a5:be:e2:5a: a0:58:41:bf:9f:f9:ad:7e:16:5a:42:da:8f:97:2a: ca:b5:59:05:25:07:b6:cb:be:66:77:ef:dd:b0:31: 2c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:98:2B:6C:5D:5B:78:84:DA:61:CD:C1:5E:F9:4D:28:40:3C:D4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e86dfc20-804c-37ab-9b3c-9b26135e3a17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.57.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e1:c2:e6:fb:c1:db:79:2e:40:83:e0:af:c9:9e:f4:4e:c9: 2f:50:0e:10:79:01:80:ec:9b:6a:f4:b0:d9:72:c6:95:f6:d6: 54:b5:b0:76:4c:ba:e2:30:32:6a:31:9c:82:63:03:d5:04:01: a2:55:38:18:da:9a:35:5b:d3:8c:66:f1:bf:30:7f:86:dc:f9: d1:5c:43:ef:ad:48:e5:1d:9a:af:a2:78:94:9f:af:1d:ef:bc: c5:14:d1:99:1c:22:9b:20:9b:2f:89:44:9c:d4:da:c3:05:ec: 00:23:98:23:93:cb:ac:70:70:63:b5:7c:e5:b7:85:7c:f0:85: 89:69:7c:f4:64:a3:2b:59:54:58:71:4b:98:54:a4:c3:cf:31: 6a:40:27:d3:1a:2f:df:aa:1d:98:56:56:e0:d9:6f:dd:f7:22: 12:9a:61:fe:a1:35:f6:95:a1:ae:fc:77:88:f6:fd:4b:8c:46: af:49:3a:26:a4:4a:83:18:8f:49:1a:61:bc:5b:4b:9d:29:85: 44:c2:12:cd:64:d5:a5:24:f5:d2:a4:cf:37:dc:63:a5:7c:f8: ed:69:d4:b8:02:9f:57:82:5b:d1:58:b6:6a:46:29:b7:c4:c8: 44:cb:89:0c:da:97:63:c5:f5:f4:fa:f0:48:6f:e1:5c:e1:6a: de:19:06:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgS1OMl5FTg5dlZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk ZDhkMmIzODQtNjdkYy00MGU3LTgwN2EtOTc2NThjNGI1MWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPuwIav9tmZU06f8OSu/EJWJXTdHzgZUUha7 SH0gtOaPd2YKJx2DBMHD5OTW0dpIEDv8cGpH3/xQnc7w6I5ZdWKmKe7InKnYLtxc MsDPOGtk3/QvAuOGbfgbKPLnBf77hlSnb1ZGXcoLZi3kdRX9gBUG3TRLoAwL7imJ +kQbnC1+YHmvOm/MgBHCSfqNtnHE1qV5ASs0/TUD3kiWidYOXz7ZjJj58PRO/a1x /0bNZUO28aekrzPm9UcntmEs8HF4tbNES4SNQviKoaT/DuiqZJvoUpdupedaeA5Y f6W+4lqgWEG/n/mtfhZaQtqPlyrKtVkFJQe2y75md+/dsDEs9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiYK2xdW3iE2mHNwV75TShAPNSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTg2ZGZjMjAtODA0Yy0z N2FiLTliM2MtOWIyNjEzNWUzYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARzkDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnhwub7wdt5LkCD4K/JnvROyS9QDhB5AYDsm2r0sNlyxpX21lS1sHZM uuIwMmoxnIJjA9UEAaJVOBjamjVb04xm8b8wf4bc+dFcQ++tSOUdmq+ieJSfrx3v vMUU0ZkcIpsgmy+JRJzU2sMF7AAjmCOTy6xwcGO1fOW3hXzwhYlpfPRkoytZVFhx S5hUpMPPMWpAJ9MaL9+qHZhWVuDZb933IhKaYf6hNfaVoa78d4j2/UuMRq9JOiak SoMYj0kaYbxbS50phUTCEs1k1aUk9dKkzzfcY6V8+O1p1LgCn1eCW9FYtmpGKbfE yETLiQzal2PF9fT68Ehv4Vzhat4ZBl8= -----END CERTIFICATE-----Generated at Sat Dec 20 04:39:43 2025 by rpki-client