This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa File: 2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa (raw, json) Hash identifier: ONaywzFJnpcnaIbhbNeZnlYlQTRZLe0xol7I3SrdAMg= Subject key identifier: B7:8C:3B:48:EF:6F:9C:A3:89:8B:A0:8D:BD:96:6B:4F:75:0E:A3:0A Certificate issuer: /CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Certificate serial: 010D0C9F4328584C21AFB7A03031F70B373B6D98 Authority key identifier: 68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa Signing time: Tue 09 Dec 2025 16:50:22 +0000 ROA not before: Tue 09 Dec 2025 16:50:22 +0000 ROA not after: Mon 09 Mar 2026 15:50:22 +0000 asID: 398479 IP address blocks: 66.118.8.0/22 maxlen: 24 162.253.208.0/22 maxlen: 24 199.46.120.0/22 maxlen: 24 2605:e3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:af:b7:a0:30:31:f7:0b:37:3b:6d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0 Validity Not Before: Dec 9 16:50:22 2025 GMT Not After : Mar 9 15:50:22 2026 GMT Subject: CN=ebb38791-7eb3-4fb3-af9b-f9e099b403b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:b6:48:66:3c:8c:29:29:d7:99:62:36:3f: 40:0c:c2:83:a2:b9:2a:2c:9a:2f:d3:fb:f5:09:00: 30:cc:cb:91:09:df:6a:30:be:11:4b:53:3f:2a:b0: 80:d1:4d:62:3b:1f:de:a6:3c:a1:76:bd:72:14:1f: 8d:27:8c:49:9b:15:0f:88:cb:20:3d:65:a6:36:db: 18:bd:cf:09:59:3c:7c:0f:7e:b1:f3:0c:c1:f4:15: 95:62:6e:53:ec:f5:5f:1e:65:81:ff:65:48:94:03: b1:83:6a:8b:58:b7:2a:8b:df:eb:f6:3b:ec:93:94: 5b:78:29:aa:9d:17:c9:f6:16:ec:16:71:22:bc:71: 91:7b:15:2a:f0:9e:cd:61:7b:82:80:96:48:5e:38: 34:3f:00:6c:eb:2a:f5:89:8c:87:9f:6f:17:45:6a: 6e:6a:b8:ce:d9:0c:6e:37:84:c7:c9:7a:1f:f6:6c: cb:7d:b5:ba:5f:95:f3:8c:88:51:f6:c8:bd:e8:0a: af:01:91:b6:d6:15:d3:c2:87:c9:4a:73:ad:68:d4: c7:e7:59:95:bd:19:c0:96:8c:f9:01:e4:cc:06:7b: a5:08:64:bd:99:b0:31:35:fe:46:26:1f:1c:f2:de: e4:e1:90:4b:d1:aa:95:46:af:52:b2:58:3d:0a:c0: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8C:3B:48:EF:6F:9C:A3:89:8B:A0:8D:BD:96:6B:4F:75:0E:A3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/2fdc2e62-cbc2-34e6-a8a3-d03e46438f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.crl X509v3 Authority Key Identifier: keyid:68:0C:3E:64:98:6C:59:FC:C6:FB:4F:C2:65:48:47:2D:A1:96:54:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/28d4ded2-fb2f-47bc-b9cd-c45c9e120ff0.cer sbgp-ipAddrBlock: critical IPv4: 66.118.8.0/22 162.253.208.0/22 199.46.120.0/22 IPv6: 2605:e3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2c:28:63:e6:7c:87:34:51:0c:e0:03:86:b1:8a:aa:29:88: 5a:07:99:ae:86:71:ed:c0:bc:54:4c:fc:24:18:90:b3:06:9b: 35:97:59:6e:28:8d:e2:41:c4:84:50:04:a8:47:6a:a6:f7:2a: 1a:1b:7a:69:7c:ea:07:c9:1d:25:c3:db:eb:c5:cf:ea:27:cd: 9f:c4:6a:40:7d:f7:38:e6:25:55:81:e0:07:cc:df:93:70:3f: 03:06:60:75:ed:80:63:01:54:74:d1:8e:0e:ff:60:4e:bc:0c: 00:ff:75:88:4b:53:f7:8d:38:e8:87:d3:ac:c3:21:13:e6:d6: 19:95:da:a6:4d:44:9b:41:e9:bc:0e:3f:56:d3:40:d5:96:37: d3:dd:7b:3b:d9:38:40:54:7b:b6:52:2c:0a:44:bd:7d:d7:f8: 9d:5e:e7:ca:e1:ca:8c:57:c9:69:ac:9e:f3:31:3e:f3:65:74: a1:b3:82:ac:1b:e7:0a:23:39:7f:8f:b2:ac:14:b3:54:a6:76: 09:4d:8d:65:9a:f0:23:6a:76:1f:cf:69:2c:5c:64:a4:c8:6c: 09:bd:0c:86:87:64:f8:85:22:9f:e6:05:56:1c:cc:7a:8d:a0: b5:c0:cd:cd:6d:03:89:8f:b4:c4:b5:3f:bd:61:a2:cb:2a:63: 3d:c2:19:9d -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEwhr7egMDH3Czc7bZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhkNGRlZDItZmIyZi00N2JjLWI5Y2QtYzQ1YzllMTIw ZmYwMB4XDTI1MTIwOTE2NTAyMloXDTI2MDMwOTE1NTAyMlowLzEtMCsGA1UEAxMk ZWJiMzg3OTEtN2ViMy00ZmIzLWFmOWItZjllMDk5YjQwM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPS2SGY8jCkp15liNj9ADMKDorkqLJov0/v1 CQAwzMuRCd9qML4RS1M/KrCA0U1iOx/epjyhdr1yFB+NJ4xJmxUPiMsgPWWmNtsY vc8JWTx8D36x8wzB9BWVYm5T7PVfHmWB/2VIlAOxg2qLWLcqi9/r9jvsk5RbeCmq nRfJ9hbsFnEivHGRexUq8J7NYXuCgJZIXjg0PwBs6yr1iYyHn28XRWpuarjO2Qxu N4THyXof9mzLfbW6X5XzjIhR9si96AqvAZG21hXTwofJSnOtaNTH51mVvRnAloz5 AeTMBnulCGS9mbAxNf5GJh8c8t7k4ZBL0aqVRq9Sslg9CsCqvwIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFLeMO0jvb5yjiYugjb2Wa091DqMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0 ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVjOWUxMjBmZjAvMmZkYzJlNjItY2JjMi0z NGU2LWE4YTMtZDAzZTQ2NDM4Zjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjhkNGRlZDItZmIyZi00N2JjLWI5 Y2QtYzQ1YzllMTIwZmYwLzI4ZDRkZWQyLWZiMmYtNDdiYy1iOWNkLWM0NWM5ZTEy MGZmMC5jcmwwHwYDVR0jBBgwFoAUaAw+ZJhsWfzG+0/CZUhHLaGWVHEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOGQ0ZGVkMi1mYjJmLTQ3YmMtYjljZC1jNDVj OWUxMjBmZjAuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCQnYIAwQC ov3QAwQCxy54MA0EAgACMAcDBQAmBePAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAssKGPmfIc0UQzgA4ax iqopiFoHma6Gce3AvFRM/CQYkLMGmzWXWW4ojeJBxIRQBKhHaqb3Khobeml86gfJ HSXD2+vFz+onzZ/EakB99zjmJVWB4AfM35NwPwMGYHXtgGMBVHTRjg7/YE68DAD/ dYhLU/eNOOiH06zDIRPm1hmV2qZNRJtB6bwOP1bTQNWWN9PdezvZOEBUe7ZSLApE vX3X+J1e58rhyoxXyWmsnvMxPvNldKGzgqwb5wojOX+PsqwUs1SmdglNjWWa8CNq dh/PaSxcZKTIbAm9DIaHZPiFIp/mBVYczHqNoLXAzc1tA4mPtMS1P71hossqYz3C GZ0= -----END CERTIFICATE-----Generated at Sat Dec 20 01:10:52 2025 by rpki-client