This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: Ed9YD+dXGWfvAYGbuR6QBxViNjxgRMxqDy4I97Iawj8= Subject key identifier: 6A:A9:A6:0C:A1:6D:77:F5:4A:7E:03:8D:7D:27:66:04:63:01:22:46 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584C4B3BD99D13539EE716142C00 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Wed 24 Dec 2025 14:00:40 +0000 ROA not before: Wed 24 Dec 2025 14:00:40 +0000 ROA not after: Tue 24 Mar 2026 13:00:40 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:d9:9d:13:53:9e:e7:16:14:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Dec 24 14:00:40 2025 GMT Not After : Mar 24 13:00:40 2026 GMT Subject: CN=fc6106d3-9eec-4565-93e7-328d6cf1986a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:98:61:94:0f:39:88:f7:71:9c:36:fe:c4: de:27:cc:f3:11:fd:b9:8a:63:4c:6f:a0:c3:62:31: 72:b4:47:04:e8:45:90:5f:72:b7:02:c6:1c:0f:95: c9:e4:55:ee:22:91:2a:47:28:2b:72:9a:fa:2a:6e: 91:04:42:37:8b:10:11:c5:19:fc:ab:21:b8:cc:26: fc:7b:89:cd:bf:ac:6f:73:e1:d8:62:75:c8:cb:22: 03:b0:42:11:9b:b2:8f:20:4c:38:40:6f:38:51:e5: c3:4f:0d:2d:87:6a:3e:f2:db:45:b7:8f:f3:68:52: 7b:27:eb:0e:46:89:44:0f:82:76:f5:e6:9e:12:10: 9a:36:59:19:de:11:47:0e:7b:4f:7b:38:ef:70:f8: 22:a2:c4:9d:e8:d9:03:2e:0e:64:77:dd:c1:ed:3a: 2d:e5:fe:f8:11:79:3c:64:33:24:cf:16:36:fd:45: 7c:56:ad:a1:7c:be:80:92:16:5d:b8:83:04:bc:89: b2:ae:fc:57:2a:48:ec:b6:53:97:80:c0:20:b8:50: 5f:c3:e0:f1:ce:5a:5e:92:f0:97:5d:7e:93:ea:04: de:d7:52:5f:98:99:89:1a:a6:53:c3:56:b5:3e:17: e8:2d:b8:33:ea:32:c0:f4:12:46:32:27:29:5f:a3: a2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A9:A6:0C:A1:6D:77:F5:4A:7E:03:8D:7D:27:66:04:63:01:22:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:cb:bf:8b:1f:6c:00:08:05:ac:f5:e3:17:32:b1:1e:1c:40: 68:94:4d:ef:aa:78:b3:b4:ab:63:30:cb:2c:0c:a5:a1:00:7c: 0f:c4:97:b3:ef:ea:8e:66:88:78:a7:2f:af:d5:24:de:69:0d: 5a:0d:80:de:a9:45:0b:9c:7f:b9:f3:78:e8:06:a9:bd:1c:35: 74:c0:33:a1:72:cb:da:12:e8:06:1f:79:a9:be:6f:27:2e:68: 04:e1:7f:d3:ad:1e:70:9f:7a:4d:52:de:d2:68:08:7c:46:fe: 75:0a:86:d6:65:7f:61:6e:b7:cf:7c:7e:5b:da:40:a8:26:2a: 36:a4:0c:28:cc:20:0a:22:9f:2b:fd:d4:31:09:7d:9a:65:e7: 8a:55:48:f0:7d:db:a5:bf:48:6a:8c:7f:e7:a6:da:4d:24:e3: ad:c4:63:8c:68:71:62:68:ac:b7:70:c5:cc:63:3d:91:2e:6c: a6:77:b7:3d:1c:66:3d:1c:05:1f:8c:d6:94:01:37:93:7e:8d: 7c:03:c8:02:33:53:a6:31:2e:5b:b9:c6:ad:ab:ff:aa:a7:43: f6:ba:f2:ba:58:ca:da:89:62:9f:99:2f:e6:e9:6e:8c:b1:8f: 31:6e:39:53:8d:6e:79:26:17:fa:f1:da:8d:84:2f:ae:e4:7d: cd:57:c7:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLO9mdE1Oe5xYULAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI1MTIyNDE0MDA0MFoXDTI2MDMyNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmM2MTA2ZDMtOWVlYy00NTY1LTkzZTctMzI4ZDZjZjE5ODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1iYYZQPOYj3cZw2/sTeJ8zzEf25imNMb6DD YjFytEcE6EWQX3K3AsYcD5XJ5FXuIpEqRygrcpr6Km6RBEI3ixARxRn8qyG4zCb8 e4nNv6xvc+HYYnXIyyIDsEIRm7KPIEw4QG84UeXDTw0th2o+8ttFt4/zaFJ7J+sO RolED4J29eaeEhCaNlkZ3hFHDntPezjvcPgiosSd6NkDLg5kd93B7Tot5f74EXk8 ZDMkzxY2/UV8Vq2hfL6AkhZduIMEvImyrvxXKkjstlOXgMAguFBfw+DxzlpekvCX XX6T6gTe11JfmJmJGqZTw1a1PhfoLbgz6jLA9BJGMicpX6OiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqppgyhbXf1Sn4DjX0nZgRjASJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3Lv4sfbAAIBaz14xcysR4cQGiUTe+qeLO0q2MwyywMpaEAfA/El7Pv 6o5miHinL6/VJN5pDVoNgN6pRQucf7nzeOgGqb0cNXTAM6Fyy9oS6AYfeam+bycu aAThf9OtHnCfek1S3tJoCHxG/nUKhtZlf2Fut898flvaQKgmKjakDCjMIAoinyv9 1DEJfZpl54pVSPB926W/SGqMf+em2k0k463EY4xocWJorLdwxcxjPZEubKZ3tz0c Zj0cBR+M1pQBN5N+jXwDyAIzU6YxLlu5xq2r/6qnQ/a68rpYytqJYp+ZL+bpboyx jzFuOVONbnkmF/rx2o2EL67kfc1Xxxo= -----END CERTIFICATE-----Generated at Sun Dec 28 20:15:33 2025 by rpki-client