This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa File: fc936a75-72c0-395c-a61c-d20afdd52258.roa (raw, json) Hash identifier: PwPHNPZ94kzRkyQvlRvwquxOtSuleGaYIoXAjvBMyJc= Subject key identifier: 3A:F8:B3:9D:02:91:2C:B1:45:1A:7D:67:D6:4E:90:09:40:7A:D1:EA Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584C1A60C2C99248BC09924AE080 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 398420 IP address blocks: 216.246.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:c2:c9:92:48:bc:09:92:4a:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=0601c326-49d5-4a3d-b994-53f2b2a1ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:83:85:c4:4b:03:91:a8:b8:9f:55:c8:cb: 51:33:5f:68:09:8a:54:49:96:a1:da:0a:90:c5:42: 27:c0:9f:37:e0:77:d9:6b:21:f6:52:ac:21:e0:e3: d0:fa:cf:11:4d:32:ec:b2:a7:d3:e1:ca:f5:ef:ab: 52:54:dc:43:7a:ae:d4:bb:a5:02:c9:c2:3f:c1:66: 91:76:eb:c0:06:aa:74:88:3a:aa:74:16:54:10:6e: 0c:87:03:70:8e:69:94:79:ba:54:f0:92:ad:6c:b3: 6b:eb:98:29:bf:45:4f:2c:d2:5e:f6:e5:8c:ae:9a: 40:21:b4:d5:10:32:1d:32:0f:69:52:ce:96:87:18: d1:fe:ff:74:4f:73:ef:1f:56:45:9c:c7:1d:b6:d0: a7:51:84:b7:66:f9:48:41:c4:fd:7b:0d:d0:6a:c4: 29:6d:7c:03:c5:0b:69:24:23:56:a4:11:8d:a0:a6: a0:cc:53:31:8d:48:90:49:81:06:fd:56:0c:0e:53: d5:07:6c:99:46:37:5e:40:c3:c0:59:f8:b8:44:ba: 7e:92:7a:3e:ca:e8:77:a4:0e:77:2d:32:60:34:ea: 0f:4a:22:d8:08:10:bc:5c:3e:5a:c7:d6:6e:77:9a: c4:3f:c7:c8:23:df:56:cd:98:c1:cd:98:80:35:e9: ca:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:B3:9D:02:91:2C:B1:45:1A:7D:67:D6:4E:90:09:40:7A:D1:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b7:57:65:e1:c1:1f:eb:ab:d0:2d:29:c2:de:dd:82:36:b3: 95:da:1a:d5:d1:6e:b6:53:15:0e:c0:4a:a6:24:29:2a:f1:f3: bc:b0:e8:88:2d:ac:12:8e:da:1e:3f:8c:1a:95:09:51:58:4d: 7f:c2:bb:fd:8e:60:2e:a8:fe:68:65:c6:11:e4:da:b9:de:d9: 5f:e6:e7:24:9a:8c:64:cd:da:d4:c3:6a:a4:fc:38:cf:69:3a: c1:91:cc:52:31:c4:3e:1e:d9:4d:4c:e0:07:c8:fb:df:5b:33: e7:79:f7:ff:fe:13:56:ed:91:a0:da:88:60:23:bf:1b:21:35: 80:a5:57:56:44:1f:d4:b6:d9:70:89:28:b8:4d:b9:11:e0:96: 10:48:87:9d:26:f4:32:24:fb:3d:22:64:65:17:a3:53:27:0f: 94:b3:7b:05:75:17:85:6b:d6:31:b1:7b:bd:08:46:39:cc:fb: 75:37:36:3b:21:3a:29:38:6f:4b:02:75:df:18:4e:7a:68:5a: 4a:c7:e0:70:74:0b:fa:15:78:4c:4f:14:e7:60:27:bd:0f:25: da:ae:70:fc:8c:ff:b0:c0:29:45:b4:00:6f:53:09:02:f3:c3: 68:62:64:f1:e7:93:59:fc:56:a5:34:67:0f:1b:76:69:84:a0: d6:a2:3b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYMLJkki8CZJK4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk MDYwMWMzMjYtNDlkNS00YTNkLWI5OTQtNTNmMmIyYTFhZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcmDhcRLA5GouJ9VyMtRM19oCYpUSZah2gqQ xUInwJ834HfZayH2Uqwh4OPQ+s8RTTLssqfT4cr176tSVNxDeq7Uu6UCycI/wWaR duvABqp0iDqqdBZUEG4MhwNwjmmUebpU8JKtbLNr65gpv0VPLNJe9uWMrppAIbTV EDIdMg9pUs6WhxjR/v90T3PvH1ZFnMcdttCnUYS3ZvlIQcT9ew3QasQpbXwDxQtp JCNWpBGNoKagzFMxjUiQSYEG/VYMDlPVB2yZRjdeQMPAWfi4RLp+kno+yuh3pA53 LTJgNOoPSiLYCBC8XD5ax9Zud5rEP8fII99WzZjBzZiANenKswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr4s50CkSyxRRp9Z9ZOkAlAetHqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvZmM5MzZhNzUtNzJjMC0z OTVjLWE2MWMtZDIwYWZkZDUyMjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS3V2XhwR/rq9AtKcLe3YI2s5XaGtXRbrZTFQ7ASqYkKSrx87yw6Igt rBKO2h4/jBqVCVFYTX/Cu/2OYC6o/mhlxhHk2rne2V/m5ySajGTN2tTDaqT8OM9p OsGRzFIxxD4e2U1M4AfI+99bM+d59//+E1btkaDaiGAjvxshNYClV1ZEH9S22XCJ KLhNuRHglhBIh50m9DIk+z0iZGUXo1MnD5SzewV1F4Vr1jGxe70IRjnM+3U3Njsh Oik4b0sCdd8YTnpoWkrH4HB0C/oVeExPFOdgJ70PJdqucPyM/7DAKUW0AG9TCQLz w2hiZPHnk1n8VqU0Zw8bdmmEoNaiO+k= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:43 2025 by rpki-client