This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa File: 609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa (raw, json) Hash identifier: HVNzoCxLdfshd01+d9KmKvk5+xMFwZI+n/vAEsHMjzY= Subject key identifier: 12:D7:FC:89:A8:62:73:7B:6A:B2:1E:5B:83:C9:F7:B8:E8:1C:8A:09 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584C4441069B16184758C6715500 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa Signing time: Mon 22 Dec 2025 02:00:32 +0000 ROA not before: Mon 22 Dec 2025 02:00:32 +0000 ROA not after: Sun 22 Mar 2026 01:00:32 +0000 asID: 394002 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:41:06:9b:16:18:47:58:c6:71:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Dec 22 02:00:32 2025 GMT Not After : Mar 22 01:00:32 2026 GMT Subject: CN=7f27e847-a359-4c3a-ba59-8ec3b560c2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:f2:ec:c4:1c:a0:c4:44:fe:8c:1a:1a:c0: db:72:99:33:95:21:5c:95:cf:8e:4f:e0:db:d8:22: ac:33:7c:1c:c4:68:c4:44:0e:de:ce:73:aa:05:ca: 73:ea:8d:d1:ae:ea:4a:dd:15:3a:a6:28:f2:ea:81: aa:d9:a8:01:12:aa:75:53:d4:5c:5b:09:3a:66:91: 34:6b:cd:d7:c8:16:c3:46:a6:b9:77:5e:e9:19:e7: 52:c6:38:8f:b4:2f:14:8d:01:fe:9b:fb:1e:2f:8a: 97:09:3e:bb:66:da:58:63:a1:f3:2e:59:b2:11:51: ba:61:d3:15:a9:05:7c:fa:d1:ad:83:7d:7b:cf:1f: 16:dd:00:ac:be:31:f4:e1:cf:8c:2a:c5:da:bd:ea: 48:11:fd:8a:38:58:09:4b:37:5b:d0:ba:cc:5e:d8: e2:be:30:72:c1:e3:00:3f:ce:8b:ef:02:ba:05:98: 0d:8e:25:54:f1:55:d4:71:39:ec:ec:fa:f7:01:db: 15:4c:c7:f0:b9:16:da:da:02:44:b5:18:b5:dd:18: 93:a6:8a:e1:c3:c9:4d:69:ba:b6:4e:c0:92:ba:1b: c4:55:2b:b2:24:96:77:44:a0:5f:89:2b:1f:73:0c: f7:31:55:45:be:e0:59:5d:11:f9:64:6b:e1:c6:39: 19:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:FC:89:A8:62:73:7B:6A:B2:1E:5B:83:C9:F7:B8:E8:1C:8A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/609ec1e0-408b-3bfd-976b-3d0ccbd2931b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8f:31:e3:60:75:14:14:3e:85:cc:bc:24:a7:f4:ad:db:e4: 62:ec:8f:c8:14:6e:90:ac:4d:c2:1d:23:dd:f3:6d:f4:a6:0e: 96:78:1c:31:aa:fc:52:82:fc:51:97:15:b0:ba:38:aa:09:55: 07:59:8a:63:f8:0f:45:87:2a:ab:3e:79:f0:09:0d:e3:f9:34: 22:a3:89:84:f0:29:11:de:23:03:03:89:8a:f3:2d:f4:8b:3b: 9c:19:e7:1b:6f:e4:e8:28:7c:9d:54:b5:f5:54:87:aa:b9:8a: 67:67:2a:74:ff:fb:ba:15:09:35:95:c1:5c:85:8b:cf:be:b0: e8:68:e4:48:61:84:67:f1:6f:21:cb:80:c0:78:33:9e:33:04: 2f:fb:94:55:eb:88:8c:10:d2:e3:1e:b9:2f:c3:b2:47:02:7d: 70:ea:ee:5c:d2:43:70:c2:df:ff:33:a3:45:2f:87:c7:45:0c: 0f:ce:04:8b:17:93:5b:ce:e0:b4:ad:70:9f:3f:9d:23:72:39: 0a:6d:6f:0c:70:c1:ef:3d:62:7f:ce:aa:4c:5a:65:86:b0:54: 2f:2a:a7:e4:22:20:cb:0a:34:1d:3a:c4:22:5d:9c:0b:fd:ce: c3:99:2d:40:7b:0a:c0:e4:d2:a4:44:b5:03:53:0e:1e:44:d9: 6f:05:48:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExEQQabFhhHWMZxVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk N2YyN2U4NDctYTM1OS00YzNhLWJhNTktOGVjM2I1NjBjMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCjy7MQcoMRE/owaGsDbcpkzlSFclc+OT+Db 2CKsM3wcxGjERA7eznOqBcpz6o3RrupK3RU6pijy6oGq2agBEqp1U9RcWwk6ZpE0 a83XyBbDRqa5d17pGedSxjiPtC8UjQH+m/seL4qXCT67ZtpYY6HzLlmyEVG6YdMV qQV8+tGtg317zx8W3QCsvjH04c+MKsXavepIEf2KOFgJSzdb0LrMXtjivjByweMA P86L7wK6BZgNjiVU8VXUcTns7Pr3AdsVTMfwuRba2gJEtRi13RiTporhw8lNabq2 TsCSuhvEVSuyJJZ3RKBfiSsfcwz3MVVFvuBZXRH5ZGvhxjkZ5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLX/ImoYnN7arIeW4PJ97joHIoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvNjA5ZWMxZTAtNDA4Yi0z YmZkLTk3NmItM2QwY2NiZDI5MzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECPMeNgdRQUPoXMvCSn9K3b5GLsj8gUbpCsTcIdI93zbfSmDpZ4HDGq /FKC/FGXFbC6OKoJVQdZimP4D0WHKqs+efAJDeP5NCKjiYTwKRHeIwMDiYrzLfSL O5wZ5xtv5OgofJ1UtfVUh6q5imdnKnT/+7oVCTWVwVyFi8++sOho5EhhhGfxbyHL gMB4M54zBC/7lFXriIwQ0uMeuS/DskcCfXDq7lzSQ3DC3/8zo0Uvh8dFDA/OBIsX k1vO4LStcJ8/nSNyOQptbwxwwe89Yn/OqkxaZYawVC8qp+QiIMsKNB06xCJdnAv9 zsOZLUB7CsDk0qREtQNTDh5E2W8FSGc= -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:36 2025 by rpki-client