This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa File: ce3af1c7-43c9-367b-a21d-717aaaf44463.roa (raw, json) Hash identifier: zuA8/9r7YFkbd4dBS2MkkKLHhSyjuoekN2PlzrmT9KE= Subject key identifier: 16:D1:6B:45:0D:C0:97:57:F8:A3:D7:53:AD:7E:74:3D:6D:28:88:E0 Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494 Certificate serial: 010D0C9F4328584C3EABD2410704E32456D872E8 Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 7029 IP address blocks: 209.236.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:d2:41:07:04:e3:24:56:d8:72:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=d710cbb3-a3f9-435b-8060-387684d8210d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b3:d3:fc:30:6d:69:7b:02:75:e2:62:fd:4d: 57:d8:d7:21:df:fd:d3:5e:84:91:83:60:84:be:be: 1f:36:13:1d:d9:5c:63:f9:f2:88:35:f6:d0:54:c7: d9:c4:94:a1:eb:ea:05:b3:27:cd:4e:e5:c1:79:17: a9:b3:21:84:aa:00:b3:3b:ce:3b:4f:f9:6e:79:08: ee:75:b4:b9:90:11:62:42:c9:97:c6:12:13:64:54: bd:68:d1:19:54:c9:cf:2c:6d:71:aa:ee:43:74:f0: f7:b5:c4:36:ce:40:3e:93:3f:ed:6c:31:12:c1:62: 3e:e8:c5:52:41:fc:7e:75:70:35:b4:12:e2:0a:a4: 69:85:21:f7:89:d8:05:98:6f:d1:96:d1:27:9c:37: 37:5f:25:b6:bf:25:d9:26:93:48:85:4b:01:ac:ff: e5:87:11:ef:8c:11:b3:09:c2:b6:99:c1:c1:06:80: f5:1c:5b:9b:d9:73:68:20:13:3c:da:b8:6b:63:f5: d5:de:87:31:2a:a4:e2:fb:53:76:97:fb:24:87:8c: a0:7e:8b:7c:7d:3b:0d:7c:e7:5b:6f:12:25:5a:c6: 98:aa:5f:1d:f8:d0:04:b1:29:3f:84:3a:91:68:6c: 77:d7:d0:22:d4:9a:a5:0d:0a:41:98:f1:fa:6a:d9: ce:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D1:6B:45:0D:C0:97:57:F8:A3:D7:53:AD:7E:74:3D:6D:28:88:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/ce3af1c7-43c9-367b-a21d-717aaaf44463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl X509v3 Authority Key Identifier: keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer sbgp-ipAddrBlock: critical IPv4: 209.236.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e2:68:2c:7f:ca:b9:72:fa:a0:c7:6f:ea:d6:f8:ba:63:49: b4:09:49:07:52:fc:d5:b1:e7:4e:c5:11:e2:0d:98:aa:98:b8: ef:e1:78:46:5d:0b:a3:3d:81:34:b6:2c:f9:22:01:55:1b:5a: 0c:08:b6:49:c4:50:d1:7f:15:b3:66:96:38:c4:30:b5:f5:6b: 13:0a:15:8b:eb:a8:6f:c9:42:a0:4d:47:d2:24:55:02:00:43: d3:da:a3:80:71:5b:a2:39:04:c0:e6:6d:2a:44:19:85:be:1d: 30:a8:3d:96:c8:eb:5b:5d:26:8e:73:2b:d2:9e:52:60:37:eb: e9:36:12:09:99:d1:bd:09:ca:da:09:1e:91:22:6c:cf:ca:a3: 64:fb:bf:ee:b7:5c:c5:58:14:5d:13:33:96:f7:62:1e:df:9f: 18:84:83:4a:6e:4e:50:0e:a3:c3:06:ca:9a:1f:05:57:05:f8: 67:e7:2f:3a:b4:99:f7:ae:f3:ac:66:19:b9:3c:82:2a:4c:2e: 09:55:ab:c0:59:fa:dc:c8:d5:6b:93:c3:33:c8:85:83:b2:92: 34:8a:22:8b:35:43:58:ba:94:f3:74:29:48:38:3b:88:e9:87: 1e:88:07:fa:d9:07:cf:40:e7:7e:a0:b4:e5:9a:e4:7c:ae:4c: 87:dd:e4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q9JBBwTjJFbYcugwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0 NDk0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDcxMGNiYjMtYTNmOS00MzViLTgwNjAtMzg3Njg0ZDgyMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbPT/DBtaXsCdeJi/U1X2Nch3/3TXoSRg2CE vr4fNhMd2Vxj+fKINfbQVMfZxJSh6+oFsyfNTuXBeRepsyGEqgCzO847T/lueQju dbS5kBFiQsmXxhITZFS9aNEZVMnPLG1xqu5DdPD3tcQ2zkA+kz/tbDESwWI+6MVS Qfx+dXA1tBLiCqRphSH3idgFmG/RltEnnDc3XyW2vyXZJpNIhUsBrP/lhxHvjBGz CcK2mcHBBoD1HFub2XNoIBM82rhrY/XV3ocxKqTi+1N2l/skh4ygfot8fTsNfOdb bxIlWsaYql8d+NAEsSk/hDqRaGx319Ai1JqlDQpBmPH6atnODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbRa0UNwJdX+KPXU61+dD1tKIjgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1 NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvY2UzYWYxYzctNDNjOS0z NjdiLWEyMWQtNzE3YWFhZjQ0NDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ez/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfiaCx/yrly+qDHb+rW+LpjSbQJSQdS/NWx507FEeINmKqYuO/heEZd C6M9gTS2LPkiAVUbWgwItknEUNF/FbNmljjEMLX1axMKFYvrqG/JQqBNR9IkVQIA Q9Pao4BxW6I5BMDmbSpEGYW+HTCoPZbI61tdJo5zK9KeUmA36+k2EgmZ0b0JytoJ HpEibM/Ko2T7v+63XMVYFF0TM5b3Yh7fnxiEg0puTlAOo8MGypofBVcF+GfnLzq0 mfeu86xmGbk8gipMLglVq8BZ+tzI1WuTwzPIhYOykjSKIos1Q1i6lPN0KUg4O4jp hx6IB/rZB89A536gtOWa5HyuTIfd5GE= -----END CERTIFICATE-----Generated at Sat Dec 20 14:41:24 2025 by rpki-client