This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa File: db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa (raw, json) Hash identifier: zKEQxQ2ZVG0PQ8v8VMcB6cPUit2ElKvjeNayVvgysyQ= Subject key identifier: A5:FE:D4:BE:8A:42:F6:09:20:35:9B:31:5A:C8:29:A8:44:35:03:6B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584C3EABB7DDEDF265A465955640 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 11090 IP address blocks: 216.152.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:b7:dd:ed:f2:65:a4:65:95:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=18d2715d-1218-48b4-9ed5-fb299bc49a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:66:94:5a:ce:7d:d0:d2:46:33:4c:0f:b9:fe: 9c:61:4b:ae:3a:ed:cf:fb:dd:c9:2b:b5:75:4d:da: d7:29:3d:59:29:0b:d4:b3:61:4b:0a:69:29:51:0e: 5c:f5:a7:01:6f:90:e5:ae:51:f5:ee:6b:6d:71:5a: 2b:2d:fb:06:84:e6:4d:00:bf:56:54:b5:40:e9:1a: 00:de:12:11:f9:d0:4d:89:3b:f6:35:ff:13:17:3a: c5:2a:25:f6:8e:22:ea:50:39:52:b9:e6:51:d4:46: 89:d7:66:27:9a:d3:b6:b8:c6:20:c2:52:7f:43:1d: ba:c8:a1:54:e4:08:73:e5:02:e2:0e:ae:fb:d2:ac: a0:d6:15:f7:1d:a8:5c:33:3a:91:41:2c:cd:a6:ca: 7c:fc:c6:36:f4:0c:f4:0e:3a:95:83:fc:13:61:89: b1:79:a4:99:de:dc:28:f2:9b:c8:1f:63:b6:07:e6: f5:e2:87:62:c6:08:b0:6f:12:5c:72:11:ff:18:aa: 7b:38:39:4f:62:9f:be:1e:6d:b8:b7:71:94:06:c1: 70:87:88:a2:da:9e:1c:61:fb:3f:55:f2:ed:9f:cf: d2:e3:56:1e:3d:5f:f6:d4:48:1a:13:00:bd:0a:3a: ad:df:d4:97:4b:db:90:0b:db:2f:65:f5:9b:6b:83: 55:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:D4:BE:8A:42:F6:09:20:35:9B:31:5A:C8:29:A8:44:35:03:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/db0ab3f4-f2ab-3406-bced-67589b9e0b8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 216.152.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3e:4e:d1:2f:d6:ba:52:ae:52:aa:3d:b9:95:b3:37:59:33: ae:d7:71:7b:c4:86:8a:4e:c3:02:1e:38:34:94:8b:1b:8a:17: b8:18:a9:b5:f4:02:49:50:84:36:e1:70:2d:8f:13:85:1b:8e: 34:5d:35:3e:4e:ef:71:49:59:d3:d8:d6:34:b4:e7:69:63:4b: 02:c7:85:1b:af:57:d9:60:e9:d2:65:97:ba:53:16:1f:75:66: a2:f7:33:21:02:33:83:0a:c5:d4:30:2b:da:e5:77:50:81:13: a3:62:cd:d2:4e:00:af:10:9e:c4:aa:18:8d:39:ab:3f:e3:a6: 37:1a:31:02:44:69:55:ec:75:1d:bd:8b:e0:8d:82:34:36:55: b3:70:46:15:4a:6b:1c:17:bb:15:27:25:65:a0:70:f3:8f:94: f1:be:0d:e2:f8:9f:31:90:81:17:51:e6:0c:d7:0a:d7:50:05: 46:c7:e9:76:88:dc:18:48:ad:0d:40:c4:84:56:cb:2d:fc:30: 91:f3:b7:c0:4b:57:f8:0a:e1:2b:2e:e0:05:75:ba:a5:9b:63: 7c:29:dc:f5:e3:5c:30:3f:1b:77:59:14:38:b4:df:fa:cf:cf: 93:7b:03:99:b2:76:23:9f:e9:fc:dc:d9:09:6f:44:5d:84:10: a2:ee:74:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q7fd7fJlpGWVVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk MThkMjcxNWQtMTIxOC00OGI0LTllZDUtZmIyOTliYzQ5YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2aUWs590NJGM0wPuf6cYUuuOu3P+93JK7V1 TdrXKT1ZKQvUs2FLCmkpUQ5c9acBb5DlrlH17mttcVorLfsGhOZNAL9WVLVA6RoA 3hIR+dBNiTv2Nf8TFzrFKiX2jiLqUDlSueZR1EaJ12YnmtO2uMYgwlJ/Qx26yKFU 5Ahz5QLiDq770qyg1hX3HahcMzqRQSzNpsp8/MY29Az0DjqVg/wTYYmxeaSZ3two 8pvIH2O2B+b14odixgiwbxJcchH/GKp7ODlPYp++Hm24t3GUBsFwh4ii2p4cYfs/ VfLtn8/S41YePV/21EgaEwC9Cjqt39SXS9uQC9svZfWba4NVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX+1L6KQvYJIDWbMVrIKahENQNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZGIwYWIzZjQtZjJhYi0z NDA2LWJjZWQtNjc1ODliOWUwYjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2Ji4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg+TtEv1rpSrlKqPbmVszdZM67XcXvEhopOwwIeODSUixuKF7gYqbX0 AklQhDbhcC2PE4UbjjRdNT5O73FJWdPY1jS052ljSwLHhRuvV9lg6dJll7pTFh91 ZqL3MyECM4MKxdQwK9rld1CBE6NizdJOAK8QnsSqGI05qz/jpjcaMQJEaVXsdR29 i+CNgjQ2VbNwRhVKaxwXuxUnJWWgcPOPlPG+DeL4nzGQgRdR5gzXCtdQBUbH6XaI 3BhIrQ1AxIRWyy38MJHzt8BLV/gK4Ssu4AV1uqWbY3wp3PXjXDA/G3dZFDi03/rP z5N7A5mydiOf6fzc2QlvRF2EEKLudBw= -----END CERTIFICATE-----Generated at Sun Dec 21 20:32:57 2025 by rpki-client