This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa File: 71e4a434-dda3-31de-b234-78167e9e4c57.roa (raw, json) Hash identifier: F1eVuaJPFZG4OxegU/5dUhlER3p+L/YleaPiFok6+cM= Subject key identifier: 83:5C:24:8F:AD:99:F0:82:4E:44:24:F7:F5:29:28:B4:3B:A5:97:83 Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d Certificate serial: 010D0C9F4328584C1A60BEFA487F365AB3BBCA50 Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa Signing time: Sun 07 Dec 2025 02:00:30 +0000 ROA not before: Sun 07 Dec 2025 02:00:30 +0000 ROA not after: Sat 07 Mar 2026 02:00:30 +0000 asID: 13536 IP address blocks: 216.107.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:60:be:fa:48:7f:36:5a:b3:bb:ca:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d Validity Not Before: Dec 7 02:00:30 2025 GMT Not After : Mar 7 02:00:30 2026 GMT Subject: CN=8f815dbc-f1c4-4d68-a490-3f35baf6eab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:c0:d9:64:dd:d2:cc:51:d2:a0:ae:0f:e1: d6:fd:39:86:b1:8d:09:9a:cf:11:cd:d9:bc:eb:04: 78:c5:5c:0c:3e:39:1c:29:4a:69:0e:3c:9d:82:b7: 54:7d:d7:8f:61:2f:2c:0f:0a:b8:16:eb:7c:12:16: 25:f7:18:af:20:ba:77:ea:1a:12:72:4b:b1:ac:5c: 09:88:52:ef:c7:c6:8e:1c:a4:cf:17:72:98:ce:37: 83:a0:8e:2c:5c:8b:33:32:26:9c:0d:88:5f:4f:e1: 57:53:96:bf:61:a8:51:b2:c0:82:30:b6:ef:3c:75: e3:cf:fe:90:be:17:41:0a:a2:92:dc:64:b8:0c:5a: cc:53:68:8f:5e:5b:80:3d:f1:9a:9c:ae:90:8d:a3: 66:14:76:a2:4a:6d:fc:bb:a6:3f:14:bd:be:0b:52: 3a:d6:e1:e4:1f:4e:f9:bb:cd:67:0f:b1:1c:78:4e: fd:1b:7b:9a:1f:ea:9c:75:f7:32:d1:1a:31:22:4d: 40:e0:eb:cc:b9:99:0f:dd:42:88:3e:70:ed:2f:e4: e0:5a:a1:58:1f:e7:7c:72:db:0d:55:54:54:33:a9: 01:aa:6f:7e:a1:0f:bc:1a:4c:e6:fa:00:bd:e2:f6: 0b:45:5c:b1:3f:75:4a:f4:6a:f9:ab:73:2e:a5:f9: e1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:24:8F:AD:99:F0:82:4E:44:24:F7:F5:29:28:B4:3B:A5:97:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/71e4a434-dda3-31de-b234-78167e9e4c57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl X509v3 Authority Key Identifier: keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer sbgp-ipAddrBlock: critical IPv4: 216.107.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a5:83:c6:ae:50:bf:0e:a8:ae:1f:c8:b1:39:bc:88:25:c1: 09:86:c2:d9:5d:69:21:70:ba:a6:d2:40:68:22:8f:96:97:24: 2e:73:57:81:67:2c:e8:3e:d0:a2:1a:14:7d:b7:63:b5:ad:50: 15:cc:b8:5a:51:e3:5c:b5:46:0d:69:0d:a5:82:ce:a2:b8:79: 9c:a8:49:56:31:4d:0c:d1:a2:64:50:a0:72:ad:b0:05:38:88: 94:94:e3:1c:e6:d3:f4:3d:cc:3a:11:8e:f0:32:78:5e:42:24: 6e:cd:99:10:49:8d:67:34:58:90:1e:8c:3d:c8:83:c6:66:8f: 50:22:23:43:aa:e1:c7:47:02:38:00:45:00:cf:91:11:8a:d2: 26:06:a9:e3:c7:46:98:6a:81:6c:5e:a8:89:97:1d:d3:e0:7c: 0a:9f:a3:45:44:7a:dc:a1:c1:2d:79:43:c6:b3:8f:a9:55:e9: 90:59:e7:f2:63:47:02:15:75:45:e2:c3:d8:f0:38:24:d3:d3: 8e:77:a3:0d:05:29:50:0a:af:3d:8b:ec:16:b2:22:50:47:0b: d3:cc:d5:0d:6a:af:fc:51:1a:eb:5e:30:50:6e:34:55:6f:90: 59:95:c9:be:39:21:f3:a4:89:07:b8:42:45:a4:75:7c:6d:5b: 44:34:44:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwaYL76SH82WrO7ylAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM5YTYyMDEtZmU4Yy00OWE0LTk4NWQtNTQ2MzA3NmIz OTdkMB4XDTI1MTIwNzAyMDAzMFoXDTI2MDMwNzAyMDAzMFowLzEtMCsGA1UEAxMk OGY4MTVkYmMtZjFjNC00ZDY4LWE0OTAtM2YzNWJhZjZlYWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPrA2WTd0sxR0qCuD+HW/TmGsY0Jms8Rzdm8 6wR4xVwMPjkcKUppDjydgrdUfdePYS8sDwq4Fut8EhYl9xivILp36hoSckuxrFwJ iFLvx8aOHKTPF3KYzjeDoI4sXIszMiacDYhfT+FXU5a/YahRssCCMLbvPHXjz/6Q vhdBCqKS3GS4DFrMU2iPXluAPfGanK6QjaNmFHaiSm38u6Y/FL2+C1I61uHkH075 u81nD7EceE79G3uaH+qcdfcy0RoxIk1A4OvMuZkP3UKIPnDtL+TgWqFYH+d8ctsN VVRUM6kBqm9+oQ+8Gkzm+gC94vYLRVyxP3VK9Gr5q3MupfnhjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINcJI+tmfCCTkQk9/UpKLQ7pZeDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlh NjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYzMDc2YjM5N2QvNzFlNGE0MzQtZGRhMy0z MWRlLWIyMzQtNzgxNjdlOWU0YzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWM5YTYyMDEtZmU4Yy00OWE0LTk4 NWQtNTQ2MzA3NmIzOTdkL2FjOWE2MjAxLWZlOGMtNDlhNC05ODVkLTU0NjMwNzZi Mzk3ZC5jcmwwHwYDVR0jBBgwFoAUv6Kzddwji/mK9k2cK6vYghgKdFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYzlhNjIwMS1mZThjLTQ5YTQtOTg1ZC01NDYz MDc2YjM5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABalg8auUL8OqK4fyLE5vIglwQmGwtldaSFwuqbSQGgij5aXJC5zV4Fn LOg+0KIaFH23Y7WtUBXMuFpR41y1Rg1pDaWCzqK4eZyoSVYxTQzRomRQoHKtsAU4 iJSU4xzm0/Q9zDoRjvAyeF5CJG7NmRBJjWc0WJAejD3Ig8Zmj1AiI0Oq4cdHAjgA RQDPkRGK0iYGqePHRphqgWxeqImXHdPgfAqfo0VEetyhwS15Q8azj6lV6ZBZ5/Jj RwIVdUXiw9jwOCTT0453ow0FKVAKrz2L7BayIlBHC9PM1Q1qr/xRGuteMFBuNFVv kFmVyb45IfOkiQe4QkWkdXxtW0Q0RBM= -----END CERTIFICATE-----Generated at Sat Dec 20 22:14:39 2025 by rpki-client