This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa File: 67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa (raw, json) Hash identifier: nI6rtEseUHYaox6alUsAklWOA7j+txRqHs6cS2mOn8w= Subject key identifier: 56:83:C6:FD:68:8A:09:F4:0D:A5:A2:A2:E7:5C:C3:81:29:D9:DD:7B Certificate issuer: /CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Certificate serial: 010D0C9F4328584C22308CBB5D5683DAC1C8FD00 Authority key identifier: 6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa Signing time: Tue 09 Dec 2025 21:09:57 +0000 ROA not before: Tue 09 Dec 2025 21:09:57 +0000 ROA not after: Mon 09 Mar 2026 20:09:57 +0000 asID: 23224 IP address blocks: 24.235.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:30:8c:bb:5d:56:83:da:c1:c8:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4 Validity Not Before: Dec 9 21:09:57 2025 GMT Not After : Mar 9 20:09:57 2026 GMT Subject: CN=cd0411b9-9f05-4eb3-b821-b6c4bfe07e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:a7:7a:3d:a1:bb:fb:c2:dc:73:48:9f:3b: 2a:df:d8:2b:51:e4:1a:9c:16:65:50:a6:53:97:a9: 7b:30:c7:63:f3:e0:76:01:1e:5b:4b:ab:64:73:9d: 84:d6:57:68:1a:f9:b0:52:d9:4f:d4:c5:61:62:5e: 45:4d:7d:44:8a:77:64:2a:6f:59:87:3a:e3:51:25: 82:24:0e:5c:93:7b:74:72:75:63:14:6f:24:31:c1: 24:bc:f5:04:f2:15:39:b6:c2:d2:17:7e:ea:49:40: 16:96:52:81:af:9e:9f:bd:1c:10:08:99:9d:91:09: 59:e9:9e:60:b9:cb:8e:2a:ef:64:58:88:d4:75:d1: c7:6c:eb:bb:72:3b:d0:4b:42:d3:47:d3:15:43:d6: b2:ff:2c:8d:04:76:7f:16:16:f7:14:84:08:5e:6e: 34:be:84:09:13:1e:97:c5:e8:1a:df:7e:ea:6e:86: a0:88:99:1d:5b:7f:48:c5:fe:03:c3:5c:9d:40:a7: ae:ee:75:ed:3f:ca:d8:d3:c4:cd:a4:4d:85:5e:e8: 7f:79:dd:00:63:43:3f:cb:32:56:5b:d0:46:51:28: 92:e1:d7:16:0a:0c:9d:3d:f7:e6:41:5c:83:37:9b: 58:39:65:c4:35:8a:ef:52:37:2f:5b:af:33:19:99: df:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:83:C6:FD:68:8A:09:F4:0D:A5:A2:A2:E7:5C:C3:81:29:D9:DD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/67cdff41-fc01-3d79-b730-5cd50c46a5ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.crl X509v3 Authority Key Identifier: keyid:6E:3B:85:52:29:A3:ED:24:2C:27:6C:71:CF:7C:3D:E5:2A:93:EE:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db4d7d9b-d72d-4484-a2e5-e6ef1f44dab4.cer sbgp-ipAddrBlock: critical IPv4: 24.235.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e0:01:1d:2f:bb:03:6e:73:ee:84:22:a5:f6:ac:11:d1:b1: ef:dd:74:17:25:d8:4c:05:e9:dc:bb:13:e9:6b:71:b2:6b:81: e0:7f:89:fa:dd:82:bc:b5:fc:84:7b:54:1c:4a:e2:e6:62:4a: 00:ec:bc:83:57:11:43:a1:d9:d3:25:a4:cf:7e:a3:5e:ab:44: 4f:be:28:d9:d2:1f:5d:24:51:3b:92:e6:e4:69:05:cb:a3:31: 4e:39:c9:2c:ac:7e:d4:ca:0e:78:07:22:09:36:fb:7a:ec:a5: 7e:b0:96:a4:3c:11:5b:fb:0a:64:16:47:00:de:50:8c:f4:10: 81:28:e0:80:a4:fc:55:5f:62:3e:cf:f4:39:2b:a7:ba:08:12: 9e:48:af:a3:6e:5a:0b:9a:48:c5:87:4e:1d:54:e0:79:da:c7: 3a:25:f0:95:f2:e5:52:a6:16:b2:8d:f3:0a:9f:36:f9:e2:1b: 51:e8:1d:ec:84:6e:ee:6f:4d:b0:31:b4:a5:eb:aa:c6:2d:9f: c9:3e:4f:5c:0f:5c:b7:61:5e:92:27:d7:f0:fa:b8:0d:a8:85: ca:20:77:d2:97:d7:54:a8:51:c6:ad:31:84:e6:a6:bd:7e:f7: c0:22:01:1a:12:49:d5:bf:3d:83:f9:ff:9b:13:4f:72:ec:e3: 30:3a:82:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiMIy7XVaD2sHI/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDdkOWItZDcyZC00NDg0LWEyZTUtZTZlZjFmNDRk YWI0MB4XDTI1MTIwOTIxMDk1N1oXDTI2MDMwOTIwMDk1N1owLzEtMCsGA1UEAxMk Y2QwNDExYjktOWYwNS00ZWIzLWI4MjEtYjZjNGJmZTA3ZTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVinej2hu/vC3HNInzsq39grUeQanBZlUKZT l6l7MMdj8+B2AR5bS6tkc52E1ldoGvmwUtlP1MVhYl5FTX1EindkKm9ZhzrjUSWC JA5ck3t0cnVjFG8kMcEkvPUE8hU5tsLSF37qSUAWllKBr56fvRwQCJmdkQlZ6Z5g ucuOKu9kWIjUddHHbOu7cjvQS0LTR9MVQ9ay/yyNBHZ/Fhb3FIQIXm40voQJEx6X xega337qboagiJkdW39Ixf4Dw1ydQKeu7nXtP8rY08TNpE2FXuh/ed0AY0M/yzJW W9BGUSiS4dcWCgydPffmQVyDN5tYOWXENYrvUjcvW68zGZnfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaDxv1oign0DaWioudcw4Ep2d17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRk N2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVmMWY0NGRhYjQvNjdjZGZmNDEtZmMwMS0z ZDc5LWI3MzAtNWNkNTBjNDZhNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGI0ZDdkOWItZDcyZC00NDg0LWEy ZTUtZTZlZjFmNDRkYWI0L2RiNGQ3ZDliLWQ3MmQtNDQ4NC1hMmU1LWU2ZWYxZjQ0 ZGFiNC5jcmwwHwYDVR0jBBgwFoAUbjuFUimj7SQsJ2xxz3w95SqT7kkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjRkN2Q5Yi1kNzJkLTQ0ODQtYTJlNS1lNmVm MWY0NGRhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGOsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3gAR0vuwNuc+6EIqX2rBHRse/ddBcl2EwF6dy7E+lrcbJrgeB/ifrd gry1/IR7VBxK4uZiSgDsvINXEUOh2dMlpM9+o16rRE++KNnSH10kUTuS5uRpBcuj MU45ySysftTKDngHIgk2+3rspX6wlqQ8EVv7CmQWRwDeUIz0EIEo4ICk/FVfYj7P 9Dkrp7oIEp5Ir6NuWguaSMWHTh1U4Hnaxzol8JXy5VKmFrKN8wqfNvniG1HoHeyE bu5vTbAxtKXrqsYtn8k+T1wPXLdhXpIn1/D6uA2ohcogd9KX11SoUcatMYTmpr1+ 98AiARoSSdW/PYP5/5sTT3Ls4zA6gts= -----END CERTIFICATE-----Generated at Fri Dec 19 23:35:21 2025 by rpki-client