This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa File: ffaf012d-2e1a-3583-938a-62a834478f3d.roa (raw, json) Hash identifier: 8Q/GgwUbQFVoOq0AhTlamwhssxzxOcShKspJORQM7Pc= Subject key identifier: A0:23:3E:B5:B8:56:F8:84:02:59:6F:74:48:3D:BA:7A:60:81:BA:EC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C4E069B846F834B230C3E6DA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 36625 IP address blocks: 216.168.228.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:9b:84:6f:83:4b:23:0c:3e:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=491516c3-5351-4150-85d5-0c228b3227a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:ea:e3:c4:63:73:6f:fa:36:a7:28:c4:9e: 77:72:95:0a:e0:8e:97:e9:6f:14:eb:a3:84:88:50: 68:46:9c:85:f4:81:57:06:be:c4:6a:c0:83:d7:a0: b1:e2:0e:c1:c5:d8:ad:57:d2:b7:5e:bb:f7:a7:50: a0:5e:62:f3:ae:4c:72:85:52:01:46:8f:b8:5c:9d: e1:81:d0:7a:3f:76:c5:d9:a6:94:39:05:f9:24:1c: 54:3b:e1:98:8d:3f:a3:a9:0b:a1:13:a3:c6:ea:0b: ae:18:1e:08:48:88:aa:cf:c4:5b:a5:98:79:8c:c6: fe:1b:53:c8:3e:df:d0:fc:40:eb:6c:7e:7f:11:68: 3c:58:04:20:6b:f8:10:06:96:7a:2d:c0:3d:49:fd: 5f:d9:98:db:91:9c:89:c2:78:d0:0e:8a:02:24:5d: dc:17:01:a3:3c:b0:06:95:79:90:ae:54:96:f8:a0: ae:db:50:9e:5e:64:4f:8a:1c:76:44:15:e8:8c:eb: ab:2f:64:53:26:01:78:e0:30:2a:10:77:f3:5a:51: d1:6a:c6:a4:df:3e:79:24:f9:a4:b2:bb:de:ae:9e: 9a:57:ae:f6:87:d6:87:75:43:f7:93:20:dc:26:b6: ca:fe:33:fc:72:5f:12:0a:48:9e:81:c5:1b:a3:33: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:23:3E:B5:B8:56:F8:84:02:59:6F:74:48:3D:BA:7A:60:81:BA:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ffaf012d-2e1a-3583-938a-62a834478f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.168.228.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:36:4d:ea:27:a5:66:1b:50:51:9a:4b:1d:f3:5a:26:51:82: 22:b4:ad:50:db:46:fe:ef:6a:dd:8f:4d:f0:3b:b0:df:48:88: fa:29:ac:16:b4:64:2f:d7:cb:8f:16:83:32:8e:e5:8f:c0:f3: 88:1c:5f:91:3c:06:86:9b:e7:d4:94:86:da:a9:91:f6:53:f1: af:93:1d:d9:fc:7f:83:75:6b:77:58:00:71:f8:23:a3:e5:b0: 08:46:52:19:d9:fe:8d:40:ab:29:bc:91:15:2d:56:39:66:a9: 4b:42:39:89:eb:c4:dd:42:fd:fc:f0:b4:fc:f6:e7:ed:50:10: e0:29:c8:74:6f:fd:76:4c:c8:2a:78:0f:30:c0:7e:c0:45:1e: a7:ce:b0:65:9b:cb:d0:a0:4e:cf:b4:62:21:40:9a:99:dc:6d: 62:5b:9f:ef:9b:7e:20:2b:cc:67:9a:df:20:37:5c:2e:14:c4: e0:e0:3b:dc:0a:e2:d5:ae:b6:f0:6c:cc:5a:08:fc:75:18:fb: 5f:a0:7c:cb:6c:4b:dc:41:4e:c8:69:42:0a:ed:57:fc:f8:03: d7:80:6a:43:7b:f3:40:d8:8f:87:aa:d3:20:60:d2:6a:80:99: 1e:82:5e:b9:3c:b2:12:c2:92:40:47:9d:64:24:1f:96:3e:67: a8:96:28:d4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExOBpuEb4NLIww+baAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk NDkxNTE2YzMtNTM1MS00MTUwLTg1ZDUtMGMyMjhiMzIyN2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6nq48Rjc2/6NqcoxJ53cpUK4I6X6W8U66OE iFBoRpyF9IFXBr7EasCD16Cx4g7BxditV9K3Xrv3p1CgXmLzrkxyhVIBRo+4XJ3h gdB6P3bF2aaUOQX5JBxUO+GYjT+jqQuhE6PG6guuGB4ISIiqz8RbpZh5jMb+G1PI Pt/Q/EDrbH5/EWg8WAQga/gQBpZ6LcA9Sf1f2ZjbkZyJwnjQDooCJF3cFwGjPLAG lXmQrlSW+KCu21CeXmRPihx2RBXojOurL2RTJgF44DAqEHfzWlHRasak3z55JPmk srverp6aV672h9aHdUP3kyDcJrbK/jP8cl8SCkiegcUbozOHOwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKAjPrW4VviEAllvdEg9unpggbrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZmZhZjAxMmQtMmUxYS0z NTgzLTkzOGEtNjJhODM0NDc4ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAaNk3qJ6VmG1BRmksd81omUYIitK1Q20b+72rdj03wO7DfSIj6KawW tGQv18uPFoMyjuWPwPOIHF+RPAaGm+fUlIbaqZH2U/Gvkx3Z/H+DdWt3WABx+COj 5bAIRlIZ2f6NQKspvJEVLVY5ZqlLQjmJ68TdQv388LT89uftUBDgKch0b/12TMgq eA8wwH7ARR6nzrBlm8vQoE7PtGIhQJqZ3G1iW5/vm34gK8xnmt8gN1wuFMTg4Dvc CuLVrrbwbMxaCPx1GPtfoHzLbEvcQU7IaUIK7Vf8+APXgGpDe/NA2I+HqtMgYNJq gJkegl65PLISwpJAR51kJB+WPmeolijU -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:48 2025 by rpki-client