This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c620fd2-61bc-387a-a974-f7d61e9ad2cb.roa File: 3c620fd2-61bc-387a-a974-f7d61e9ad2cb.roa (raw, json) Hash identifier: aaGyg8IhmBF0HwXHKG6QhyWRotMVWiL64KX5get0pHE= Subject key identifier: 86:0C:6D:14:F3:54:28:22:5E:A4:57:FB:90:DE:15:75:98:20:03:BD Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584C2DEB82C3E95EC93D91EBA400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c620fd2-61bc-387a-a974-f7d61e9ad2cb.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 23473 IP address blocks: 216.171.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:82:c3:e9:5e:c9:3d:91:eb:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=1a84d2d0-c081-45d7-abea-bd9e76e27ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:42:98:f0:2d:e5:be:00:8a:0c:ab:ea:24:83: e0:e8:23:e5:6f:0f:ed:37:c0:93:46:35:16:17:29: 2f:09:97:a6:ba:bb:ee:33:f8:4a:15:e8:81:7e:ee: ad:2c:1c:59:44:fe:b4:94:8a:3f:33:70:dd:8e:cc: 85:e6:b2:0a:cb:f3:04:b2:99:82:7f:a2:8a:c4:02: 29:8a:0b:89:cd:d2:a0:1a:ea:1b:33:c2:b4:be:12: 0c:99:35:0c:7e:aa:e7:6d:fd:49:99:51:91:51:f3: 34:a0:f4:59:03:76:a0:62:81:0f:7c:8a:31:8d:dc: fb:61:4a:53:e6:65:f7:6b:8c:40:76:27:09:71:aa: 7c:16:8c:21:db:0f:f0:34:f6:e3:30:e6:65:97:6b: 63:4f:e2:5f:6f:3d:51:a2:36:fc:43:0c:42:1d:2a: 11:53:2f:2c:0a:71:66:7e:d1:3b:e6:de:ae:f6:0a: b5:27:d8:66:be:e6:b4:ff:4a:1a:c9:ac:98:67:99: f1:c9:47:c3:81:08:a2:42:e0:07:e3:07:ad:29:ef: 79:60:1a:a6:00:26:f0:cf:19:9e:ce:2b:1e:1e:ca: 75:e7:72:b0:c0:49:6c:82:db:5a:bb:03:31:62:81: 83:36:8b:98:89:e4:8b:b8:9c:84:d0:ac:e4:3b:2a: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:0C:6D:14:F3:54:28:22:5E:A4:57:FB:90:DE:15:75:98:20:03:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3c620fd2-61bc-387a-a974-f7d61e9ad2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5a:04:26:e1:82:04:a5:e4:42:f8:70:5d:1d:b0:08:48:99: 16:16:31:04:49:5a:71:84:ba:db:16:97:2f:7c:69:0d:04:43: cf:81:15:81:b2:e6:06:21:41:eb:cf:fa:4c:03:24:71:7a:ed: fa:26:90:91:e9:cc:9d:c0:59:d0:f2:11:28:81:9c:19:53:d2: eb:28:52:31:20:87:7d:fb:fb:b9:ce:4d:f8:01:5b:c2:05:60: a5:b0:87:65:ed:db:1d:a9:b5:ae:9a:59:1a:54:64:ed:d3:64: dc:d2:f0:db:be:39:ed:f3:77:ac:68:83:c4:01:68:10:ce:0e: 1a:02:35:af:6f:a1:3e:40:1b:57:ad:dd:aa:8a:49:22:8c:05: 9e:32:7c:38:33:c5:3d:18:79:f0:64:a8:4d:1e:bb:a2:14:d8: 1b:ef:39:58:00:6e:81:17:c4:cf:a5:9c:73:4e:5e:3f:c3:c0: 7c:d4:2b:de:31:ea:e4:59:6f:0d:79:f6:b0:9e:b4:98:c8:cd: 08:86:2e:98:ee:87:a5:98:50:24:cb:ff:c6:4f:b9:20:d5:ae: 44:7f:0a:90:0e:7b:ea:f4:ef:a8:7f:b5:1e:ba:2b:4f:58:b7: 91:13:fe:c8:06:43:ec:7f:21:da:b8:9b:be:fe:d5:11:91:0e: 47:ba:8a:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt64LD6V7JPZHrpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk MWE4NGQyZDAtYzA4MS00NWQ3LWFiZWEtYmQ5ZTc2ZTI3ZWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEKY8C3lvgCKDKvqJIPg6CPlbw/tN8CTRjUW FykvCZemurvuM/hKFeiBfu6tLBxZRP60lIo/M3DdjsyF5rIKy/MEspmCf6KKxAIp iguJzdKgGuobM8K0vhIMmTUMfqrnbf1JmVGRUfM0oPRZA3agYoEPfIoxjdz7YUpT 5mX3a4xAdicJcap8Fowh2w/wNPbjMOZll2tjT+Jfbz1Rojb8QwxCHSoRUy8sCnFm ftE75t6u9gq1J9hmvua0/0oayayYZ5nxyUfDgQiiQuAH4wetKe95YBqmACbwzxme ziseHsp153KwwElsgttauwMxYoGDNouYieSLuJyE0KzkOyoREQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYMbRTzVCgiXqRX+5DeFXWYIAO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2M2MjBmZDItNjFiYy0z ODdhLWE5NzQtZjdkNjFlOWFkMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KsTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZaBCbhggSl5EL4cF0dsAhImRYWMQRJWnGEutsWly98aQ0EQ8+BFYGy 5gYhQevP+kwDJHF67fomkJHpzJ3AWdDyESiBnBlT0usoUjEgh337+7nOTfgBW8IF YKWwh2Xt2x2pta6aWRpUZO3TZNzS8Nu+Oe3zd6xog8QBaBDODhoCNa9voT5AG1et 3aqKSSKMBZ4yfDgzxT0YefBkqE0eu6IU2BvvOVgAboEXxM+lnHNOXj/DwHzUK94x 6uRZbw159rCetJjIzQiGLpjuh6WYUCTL/8ZPuSDVrkR/CpAOe+r076h/tR66K09Y t5ET/sgGQ+x/Idq4m77+1RGRDke6irY= -----END CERTIFICATE-----Generated at Sat Dec 20 06:25:31 2025 by rpki-client