This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa File: deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa (raw, json) Hash identifier: PU4krLNspZW9fGgp8x2COT6YqSXCInOcvKMYljyMpQA= Subject key identifier: 6D:3E:EE:89:A0:25:7E:26:4C:A1:46:50:F3:6E:51:53:87:37:D8:0F Certificate issuer: /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Certificate serial: 010D0C9F4328584C40110CBC688F4A72D601B000 Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 23028 IP address blocks: 216.31.33.0/24 maxlen: 24 216.31.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:0c:bc:68:8f:4a:72:d6:01:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=25dc2250-a4e4-4ce9-860a-f9e8305686a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:31:e8:94:a6:5b:fd:50:88:9e:d2:45:2a: 93:37:a2:5f:c7:26:55:87:61:f4:57:a7:9f:b2:44: 23:3b:f6:40:e4:cd:fc:e8:44:03:5e:a7:39:33:90: 47:68:ad:c1:9d:10:25:dd:12:c1:ed:b0:98:64:35: 01:b4:84:28:3d:71:52:7d:b0:cf:a5:2e:df:e1:d6: 53:88:c1:83:17:c3:46:2d:51:fc:d4:5f:31:ef:6f: d1:07:3a:48:a2:02:a4:85:36:d6:6f:c1:42:e2:cc: 76:77:35:f1:98:c8:47:de:25:28:04:e1:ab:b0:f8: 64:53:9a:dc:14:e0:7f:45:16:0a:98:96:1d:32:2a: 22:2a:f6:e8:3d:8e:db:51:f0:64:fb:2d:10:e1:4f: df:f8:15:d4:88:c6:8b:1e:b3:d3:56:08:ee:a8:60: 88:33:ec:54:ac:59:22:02:4d:14:74:d9:e1:a0:63: 3b:44:32:d1:2c:08:41:6d:e2:4f:e6:56:c2:37:7d: 5f:f1:b9:4a:06:04:41:fb:76:19:e1:a8:14:d2:ab: 50:20:cd:29:03:6f:e6:ad:03:f7:6c:2a:82:48:c9: 85:88:12:6e:71:88:96:1a:20:ef:9a:10:b0:bc:bf: 8a:89:1d:d0:36:66:92:f9:ba:9e:e2:63:17:33:f9: 40:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3E:EE:89:A0:25:7E:26:4C:A1:46:50:F3:6E:51:53:87:37:D8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/deb6fb94-6e53-3c64-92b3-0b44571a1cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl X509v3 Authority Key Identifier: keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer sbgp-ipAddrBlock: critical IPv4: 216.31.33.0-216.31.35.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:03:67:aa:50:3e:47:d4:88:55:92:29:99:96:b5:05:ec:ef: a7:92:60:ba:07:3b:ef:59:8d:fc:d7:42:f8:fb:6d:40:43:aa: ac:02:22:3b:06:8b:f9:c8:65:99:48:0f:36:9b:7f:35:12:ca: b3:ef:47:c8:9b:29:a3:14:ec:dd:e7:ea:7e:7d:91:a2:26:f7: ce:0a:be:3b:6a:1d:c1:08:17:1a:14:71:55:73:fd:29:bb:96: d0:94:4c:6e:c4:e3:b0:ac:23:ab:75:e3:2a:4f:33:70:0a:55: ef:ed:81:bd:58:c2:4e:15:ea:b6:21:6d:e6:df:d4:dc:e8:37: f1:32:fe:12:58:2b:27:65:d7:7a:f4:ce:4f:c6:6a:de:08:15: 17:94:e4:85:ba:54:e4:1e:6b:12:41:3c:bb:c4:99:b8:7e:0f: fb:86:cd:1a:be:30:ef:ef:56:98:e8:5a:e0:64:d1:b9:c5:e4: a1:d0:7f:d8:e8:a1:db:9c:34:ff:c1:1e:d2:cf:e9:92:d3:66: 1a:0e:27:1b:fb:69:51:a4:5d:eb:2a:7d:29:17:00:49:0d:85: d1:bb:55:00:66:5c:72:ff:e9:36:f1:b4:99:22:ba:9e:0d:87: 28:a5:0f:1f:5f:62:35:df:1c:7c:ca:25:74:51:ea:ca:73:58: b8:55:64:17 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWExAEQy8aI9KctYBsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz MDVhMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk MjVkYzIyNTAtYTRlNC00Y2U5LTg2MGEtZjllODMwNTY4NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1J8x6JSmW/1QiJ7SRSqTN6JfxyZVh2H0V6ef skQjO/ZA5M386EQDXqc5M5BHaK3BnRAl3RLB7bCYZDUBtIQoPXFSfbDPpS7f4dZT iMGDF8NGLVH81F8x72/RBzpIogKkhTbWb8FC4sx2dzXxmMhH3iUoBOGrsPhkU5rc FOB/RRYKmJYdMioiKvboPY7bUfBk+y0Q4U/f+BXUiMaLHrPTVgjuqGCIM+xUrFki Ak0UdNnhoGM7RDLRLAhBbeJP5lbCN31f8blKBgRB+3YZ4agU0qtQIM0pA2/mrQP3 bCqCSMmFiBJucYiWGiDvmhCwvL+KiR3QNmaS+bqe4mMXM/lAwQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFG0+7omgJX4mTKFGUPNuUVOHN9gPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5 MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvZGViNmZiOTQtNmU1My0z YzY0LTkyYjMtMGI0NDU3MWExY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1 NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl MGMwZTMwNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYHyED BALYHyAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJwNnqlA+R9SIVZIpmZa1Bezvp5Jgugc771mN/NdC+Ptt QEOqrAIiOwaL+chlmUgPNpt/NRLKs+9HyJspoxTs3efqfn2Roib3zgq+O2odwQgX GhRxVXP9KbuW0JRMbsTjsKwjq3XjKk8zcApV7+2BvVjCThXqtiFt5t/U3Og38TL+ ElgrJ2XXevTOT8Zq3ggVF5TkhbpU5B5rEkE8u8SZuH4P+4bNGr4w7+9WmOha4GTR ucXkodB/2Oih25w0/8Ee0s/pktNmGg4nG/tpUaRd6yp9KRcASQ2F0btVAGZccv/p NvG0mSK6ng2HKKUPH19iNd8cfMoldFHqynNYuFVkFw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:07 2025 by rpki-client