This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa File: 916e3eba-989b-3327-9cfa-2307267e8513.roa (raw, json) Hash identifier: 0S0UlEPf0vcg5j2v9UJs7603lZ636f55aVwww/peQ6o= Subject key identifier: 20:96:DF:7B:D8:02:ED:D7:06:CB:74:8B:91:B0:14:23:B5:AF:7B:5C Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584C3EAB9EDC47D7A58F07877880 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 11404 IP address blocks: 209.236.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:9e:dc:47:d7:a5:8f:07:87:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=148dd970-83f7-43ab-9d9d-2051b5b23125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f2:77:aa:9e:f6:86:f4:ac:35:76:39:b0:b6: 2e:33:7a:9d:2f:7a:1b:b6:c5:25:78:24:3a:d1:e0: d2:58:2b:89:5d:3e:d1:ec:88:93:e2:78:92:59:81: 6e:80:dd:b8:5d:6c:9a:d4:c4:53:24:75:cd:c6:44: 62:ac:8e:47:61:52:95:ec:2f:6d:b1:c4:19:2d:97: 10:32:cd:c2:5b:1d:0e:c6:9a:8b:78:12:40:87:3d: e9:8e:bd:6e:f5:61:b7:ad:de:38:90:c6:58:3b:c2: 5e:14:d8:23:71:55:c5:d2:78:4e:21:e2:53:b6:10: 72:39:4a:9d:46:5b:6e:68:c2:7c:81:9b:dc:fd:d9: 34:b3:9c:a8:3b:62:fe:20:c7:99:e7:e7:53:67:b4: 30:15:0d:b7:78:1b:ad:f6:6b:d9:1b:17:96:9d:df: da:1e:62:f2:e1:fc:8c:06:06:de:ec:50:a1:7f:0d: 7b:80:49:95:d6:86:74:6f:f0:a7:0d:68:f8:3b:ef: cc:b1:14:da:22:f3:c3:f2:aa:ec:5a:7a:d0:06:0f: ab:d8:dc:81:3f:c4:c1:ce:27:52:07:36:c6:6b:22: 42:cb:a1:47:ab:e9:86:ca:df:98:75:5c:cc:65:ee: c8:aa:5c:03:96:a6:a1:44:96:ff:d3:35:bb:1d:4a: ef:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:DF:7B:D8:02:ED:D7:06:CB:74:8B:91:B0:14:23:B5:AF:7B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/916e3eba-989b-3327-9cfa-2307267e8513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c3:9a:51:b4:01:56:a9:10:ab:dc:6b:a5:19:e8:c3:7d:bd: 5e:0b:fb:dc:02:7e:7f:37:3d:06:91:93:cc:d9:55:64:f8:b3: e4:f6:bc:b3:c1:64:9c:32:f4:39:5a:95:90:9a:39:fd:a5:f5: 88:88:f0:98:7f:2b:9a:81:60:3f:fe:8b:1c:ff:02:72:fa:81: b3:dc:e3:18:21:2e:c5:16:ff:4e:62:33:55:8a:e7:64:8f:1b: d1:47:1f:b5:e9:fc:d2:89:51:f0:a4:31:60:c6:45:5a:77:19: 90:0c:d8:3b:a7:81:88:5a:eb:e1:9b:17:d0:8e:8b:0b:9a:fd: 20:9e:60:e3:16:7c:ea:31:7e:d0:30:31:d5:6f:3a:a7:f0:cc: 50:3b:83:54:ff:37:73:ad:72:0d:e5:98:51:e3:c0:7c:60:6f: 8b:57:f1:43:26:20:c8:e4:e3:85:56:92:38:08:17:4f:b6:38: 3c:d1:a1:22:fe:d2:5c:4d:12:25:42:9b:34:28:11:8f:71:c7: 06:2c:c6:21:82:7c:d9:86:a4:06:3a:4b:d5:1b:2e:3a:d2:4d: 7c:a4:56:bc:6a:f4:4f:a5:cc:51:7e:27:c4:43:66:77:13:b4: 3a:d0:cc:5d:1c:b6:ac:64:40:2a:81:1b:b4:00:5e:ea:06:3a: db:47:12:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q57cR9eljweHeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk MTQ4ZGQ5NzAtODNmNy00M2FiLTlkOWQtMjA1MWI1YjIzMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJ3qp72hvSsNXY5sLYuM3qdL3obtsUleCQ6 0eDSWCuJXT7R7IiT4niSWYFugN24XWya1MRTJHXNxkRirI5HYVKV7C9tscQZLZcQ Ms3CWx0OxpqLeBJAhz3pjr1u9WG3rd44kMZYO8JeFNgjcVXF0nhOIeJTthByOUqd RltuaMJ8gZvc/dk0s5yoO2L+IMeZ5+dTZ7QwFQ23eBut9mvZGxeWnd/aHmLy4fyM Bgbe7FChfw17gEmV1oZ0b/CnDWj4O+/MsRTaIvPD8qrsWnrQBg+r2NyBP8TBzidS BzbGayJCy6FHq+mGyt+YdVzMZe7IqlwDlqahRJb/0zW7HUrvNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCW33vYAu3XBst0i5GwFCO1r3tcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvOTE2ZTNlYmEtOTg5Yi0z MzI3LTljZmEtMjMwNzI2N2U4NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbDmlG0AVapEKvca6UZ6MN9vV4L+9wCfn83PQaRk8zZVWT4s+T2vLPB ZJwy9DlalZCaOf2l9YiI8Jh/K5qBYD/+ixz/AnL6gbPc4xghLsUW/05iM1WK52SP G9FHH7Xp/NKJUfCkMWDGRVp3GZAM2DungYha6+GbF9COiwua/SCeYOMWfOoxftAw MdVvOqfwzFA7g1T/N3Otcg3lmFHjwHxgb4tX8UMmIMjk44VWkjgIF0+2ODzRoSL+ 0lxNEiVCmzQoEY9xxwYsxiGCfNmGpAY6S9UbLjrSTXykVrxq9E+lzFF+J8RDZncT tDrQzF0ctqxkQCqBG7QAXuoGOttHElo= -----END CERTIFICATE-----Generated at Sat Dec 20 09:34:09 2025 by rpki-client