This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa File: 9632c414-89db-304c-bf1d-7e66cbea85d4.roa (raw, json) Hash identifier: knfd041jcfEHL5DxlrTqDk5KeiWbNvu8ewkqoTkqEgg= Subject key identifier: AC:30:61:9E:2F:77:7B:23:BD:75:E7:FF:AE:10:02:96:F7:A9:74:9A Certificate issuer: /CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Certificate serial: 010D0C9F4328584C34E679837869D55D103B0680 Authority key identifier: 7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa Signing time: Tue 16 Dec 2025 14:00:38 +0000 ROA not before: Tue 16 Dec 2025 14:00:38 +0000 ROA not after: Mon 16 Mar 2026 13:00:38 +0000 asID: 16509 IP address blocks: 68.71.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:34:e6:79:83:78:69:d5:5d:10:3b:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1dc90d-3e71-4350-84b3-963e65e8abde Validity Not Before: Dec 16 14:00:38 2025 GMT Not After : Mar 16 13:00:38 2026 GMT Subject: CN=fd020a92-7125-4ee3-92e1-a5167664e3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:58:1d:21:7e:ae:40:d7:e5:0b:5d:93:08: 3e:d0:72:a8:2e:e9:b2:3e:75:97:54:df:75:83:a7: b6:40:db:13:1e:ac:9c:38:a3:3a:56:88:b7:cf:68: 4c:aa:79:da:4b:9d:c1:be:29:88:73:78:49:1f:db: e1:ac:97:41:e3:d3:67:99:4a:f3:d3:8c:89:4c:6f: 1f:ee:46:2d:1d:e6:04:9e:5a:70:27:d9:d7:d0:5e: 92:18:96:f0:fa:81:1b:8d:f4:91:be:82:e0:cf:b8: af:ac:aa:12:8d:42:c4:72:39:1d:d8:37:29:82:e8: df:3b:e3:2f:6b:05:e1:fc:d7:0f:3a:9a:94:f0:c7: 7e:81:f6:dc:aa:f6:45:85:de:d1:57:c1:30:b5:83: eb:c6:0e:49:d3:1c:49:b9:ed:82:dd:4a:50:7e:ca: 0d:55:01:fd:f2:0e:bc:1d:b1:8d:dc:be:88:cd:33: c5:c4:e7:96:dc:10:85:73:84:81:00:6a:7d:40:7f: 34:c0:6d:3d:10:30:0d:59:02:f9:21:e8:2a:be:48: a8:43:0e:d3:68:dc:e4:ca:47:44:32:3a:40:9a:c1: ea:a7:8a:dc:ee:bc:7e:d5:11:f5:93:51:7c:a3:34: 60:a3:7e:44:36:fa:86:a8:a5:e7:2f:9c:75:c0:8e: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:30:61:9E:2F:77:7B:23:BD:75:E7:FF:AE:10:02:96:F7:A9:74:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/9632c414-89db-304c-bf1d-7e66cbea85d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde/4c1dc90d-3e71-4350-84b3-963e65e8abde.crl X509v3 Authority Key Identifier: keyid:7D:21:ED:DD:8F:E0:41:D2:CB:94:00:C8:D6:5B:4A:55:C6:97:B0:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4c1dc90d-3e71-4350-84b3-963e65e8abde.cer sbgp-ipAddrBlock: critical IPv4: 68.71.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0a:4a:5b:48:41:fd:33:26:d1:21:65:5f:39:28:a5:c9:de: 8a:a0:eb:da:54:a6:85:6a:50:e2:19:9b:32:e9:f2:87:5a:a0: 90:0b:78:3c:4a:4c:6a:d5:db:f4:57:71:94:5e:15:92:3f:9f: 43:b7:49:ee:59:2d:8a:9d:88:bc:c9:b2:c3:25:a0:49:6b:e3: 36:b4:be:26:cf:6f:af:f3:8d:07:4a:e2:83:44:fe:41:be:d9: 1c:f4:2f:22:5c:a9:4c:df:aa:c4:7c:dd:a7:a3:d4:0e:1c:1c: d2:42:c2:77:2d:73:ce:f0:a8:9f:42:70:8b:b9:a1:6a:b6:6a: 91:68:a4:4f:9f:d3:69:6d:4c:c0:9a:42:da:7e:64:76:0e:2c: 69:5a:56:6d:ae:81:e1:5d:5d:3b:56:28:52:3d:0b:7c:10:9a: 3e:65:5f:79:27:e9:6e:47:41:51:46:c5:f4:fd:1d:49:d0:04: 9a:6d:7d:e8:7d:f9:8e:cf:ae:28:32:9e:bc:7f:c4:a9:6b:cd: ad:e3:b9:7c:c6:a1:4b:30:28:4f:0b:7e:49:f7:de:c4:23:3e: d6:03:e9:92:ed:e8:c1:8d:b0:cb:5c:35:16:d6:74:48:22:ea: c9:dc:b6:6b:f7:41:90:d7:13:07:fd:c9:14:b1:e0:1c:a8:f1: 68:55:99:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw05nmDeGnVXRA7BoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZGM5MGQtM2U3MS00MzUwLTg0YjMtOTYzZTY1ZThh YmRlMB4XDTI1MTIxNjE0MDAzOFoXDTI2MDMxNjEzMDAzOFowLzEtMCsGA1UEAxMk ZmQwMjBhOTItNzEyNS00ZWUzLTkyZTEtYTUxNjc2NjRlM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycNYHSF+rkDX5Qtdkwg+0HKoLumyPnWXVN91 g6e2QNsTHqycOKM6Voi3z2hMqnnaS53BvimIc3hJH9vhrJdB49NnmUrz04yJTG8f 7kYtHeYEnlpwJ9nX0F6SGJbw+oEbjfSRvoLgz7ivrKoSjULEcjkd2DcpgujfO+Mv awXh/NcPOpqU8Md+gfbcqvZFhd7RV8EwtYPrxg5J0xxJue2C3UpQfsoNVQH98g68 HbGN3L6IzTPFxOeW3BCFc4SBAGp9QH80wG09EDANWQL5IegqvkioQw7TaNzkykdE MjpAmsHqp4rc7rx+1RH1k1F8ozRgo35ENvqGqKXnL5x1wI7iuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwwYZ4vd3sjvXXn/64QApb3qXSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80YzFk YzkwZC0zZTcxLTQzNTAtODRiMy05NjNlNjVlOGFiZGUvOTYzMmM0MTQtODlkYi0z MDRjLWJmMWQtN2U2NmNiZWE4NWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGMxZGM5MGQtM2U3MS00MzUwLTg0 YjMtOTYzZTY1ZThhYmRlLzRjMWRjOTBkLTNlNzEtNDM1MC04NGIzLTk2M2U2NWU4 YWJkZS5jcmwwHwYDVR0jBBgwFoAUfSHt3Y/gQdLLlADI1ltKVcaXsBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80YzFkYzkwZC0zZTcxLTQzNTAtODRiMy05NjNl NjVlOGFiZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAREfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0KSltIQf0zJtEhZV85KKXJ3oqg69pUpoVqUOIZmzLp8odaoJALeDxK TGrV2/RXcZReFZI/n0O3Se5ZLYqdiLzJssMloElr4za0vibPb6/zjQdK4oNE/kG+ 2Rz0LyJcqUzfqsR83aej1A4cHNJCwnctc87wqJ9CcIu5oWq2apFopE+f02ltTMCa Qtp+ZHYOLGlaVm2ugeFdXTtWKFI9C3wQmj5lX3kn6W5HQVFGxfT9HUnQBJptfeh9 +Y7Prigynrx/xKlrza3juXzGoUswKE8Lfkn33sQjPtYD6ZLt6MGNsMtcNRbWdEgi 6snctmv3QZDXEwf9yRSx4Byo8WhVmTY= -----END CERTIFICATE-----Generated at Sat Dec 20 20:24:44 2025 by rpki-client