This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa File: 2e712cbf-a526-3fa2-94d8-52657449f5ef.roa (raw, json) Hash identifier: VhcZwRCgn2R8Q2Dz7+gojBV7DxjBuzIUnlgu+/dVRvc= Subject key identifier: CD:05:9E:81:FE:6D:18:0A:87:93:23:C2:A7:5E:30:BE:29:54:4D:5A Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584C2DEBBACE997372DA1B0B91C0 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 394500 IP address blocks: 208.96.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:ba:ce:99:73:72:da:1b:0b:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=e5b62e24-adf5-409f-8e8e-60ce82a5691a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:52:a4:d4:72:af:ed:0e:16:d1:b0:9d:f5: 62:37:76:08:e2:50:53:5d:f0:09:dc:d2:6f:b6:26: d2:31:82:1e:23:df:fa:6b:6b:99:c7:62:72:a5:f4: 23:82:ea:43:a2:bb:b0:9d:e6:6d:47:b7:8d:35:d4: ee:2c:27:86:3a:de:d3:2a:bb:f3:f1:dd:f5:3c:57: 05:56:bb:8e:8c:99:cd:53:27:5b:2e:df:21:8a:82: f7:58:25:5d:22:87:b6:a8:7a:e3:c4:2e:cd:75:3f: 25:ed:3a:32:a6:34:98:d1:f5:95:48:58:79:eb:ca: 74:dc:b5:97:51:70:0c:2b:10:fb:76:41:79:6e:f0: eb:3c:6f:47:7d:fb:e3:06:8f:5b:dd:12:6e:32:8c: 19:6e:9d:cd:de:08:b2:2b:5e:1b:b2:b4:2d:62:9c: c3:67:cc:c4:62:cc:27:e0:01:dc:39:1b:43:fe:61: 62:64:20:4c:0d:9c:9e:00:a2:5d:9f:7f:1f:e5:fc: 2c:7d:89:9b:b2:86:00:6d:53:8c:72:85:55:90:8a: d7:91:62:3a:7a:b5:67:59:6a:44:fa:5a:38:13:3d: bc:e1:b1:66:d9:3e:43:66:bc:cf:84:eb:01:50:f9: 23:f8:40:e4:27:86:1b:45:cd:99:22:f9:bc:8f:f1: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:05:9E:81:FE:6D:18:0A:87:93:23:C2:A7:5E:30:BE:29:54:4D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:29:11:b7:6d:6b:d5:14:16:a9:40:5b:43:f7:9d:60:75:ef: 95:35:41:92:3e:ea:76:ba:e5:53:15:5e:21:4b:c6:23:0a:a7: d1:f4:d6:90:3f:66:ab:96:b3:d2:fc:c2:93:62:48:24:5f:8a: 83:81:f4:78:f5:6c:b9:77:f3:40:a1:53:7b:29:5a:37:57:3f: c3:74:17:40:f8:d8:6e:f9:96:ee:f0:52:62:99:3d:07:f2:7e: ff:ea:28:7d:c1:f4:f6:05:00:c2:3d:2d:0b:88:11:28:f6:fb: 39:f0:5f:05:42:f9:64:5e:79:e2:08:9b:55:05:08:40:b5:84: 97:12:40:e7:40:b6:b2:09:0f:36:a4:0f:07:c7:11:48:23:97: 65:53:61:ff:7a:1d:3b:69:59:ea:df:35:6c:56:24:77:e7:a7: 7e:d0:b8:8c:a2:25:b8:80:ee:c1:6b:7e:a2:9b:f1:22:fd:9e: c8:8c:68:5e:dd:6f:20:d2:12:51:3d:75:d4:c3:eb:5a:43:d6: 27:1d:37:22:ef:81:db:dc:25:4a:1b:7f:e8:f4:60:5c:eb:b9: 94:d0:73:93:db:11:dd:c1:88:c2:70:e0:40:37:b1:21:27:d9: 47:81:d8:9e:9d:47:0c:f7:b4:37:c7:3b:6d:68:5c:17:a9:60: 30:7d:74:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt67rOmXNy2hsLkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk ZTViNjJlMjQtYWRmNS00MDlmLThlOGUtNjBjZTgyYTU2OTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfBSpNRyr+0OFtGwnfViN3YI4lBTXfAJ3NJv tibSMYIeI9/6a2uZx2JypfQjgupDoruwneZtR7eNNdTuLCeGOt7TKrvz8d31PFcF VruOjJnNUydbLt8hioL3WCVdIoe2qHrjxC7NdT8l7ToypjSY0fWVSFh568p03LWX UXAMKxD7dkF5bvDrPG9HffvjBo9b3RJuMowZbp3N3giyK14bsrQtYpzDZ8zEYswn 4AHcORtD/mFiZCBMDZyeAKJdn38f5fwsfYmbsoYAbVOMcoVVkIrXkWI6erVnWWpE +lo4Ez284bFm2T5DZrzPhOsBUPkj+EDkJ4YbRc2ZIvm8j/HERQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0FnoH+bRgKh5MjwqdeML4pVE1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMmU3MTJjYmYtYTUyNi0z ZmEyLTk0ZDgtNTI2NTc0NDlmNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEpEbdta9UUFqlAW0P3nWB175U1QZI+6na65VMVXiFLxiMKp9H01pA/ ZquWs9L8wpNiSCRfioOB9Hj1bLl380ChU3spWjdXP8N0F0D42G75lu7wUmKZPQfy fv/qKH3B9PYFAMI9LQuIESj2+znwXwVC+WReeeIIm1UFCEC1hJcSQOdAtrIJDzak DwfHEUgjl2VTYf96HTtpWerfNWxWJHfnp37QuIyiJbiA7sFrfqKb8SL9nsiMaF7d byDSElE9ddTD61pD1icdNyLvgdvcJUobf+j0YFzruZTQc5PbEd3BiMJw4EA3sSEn 2UeB2J6dRwz3tDfHO21oXBepYDB9dB8= -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:59 2025 by rpki-client