This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa File: 3cb5c865-56bc-36bb-9781-6328ac6934e4.roa (raw, json) Hash identifier: 9vS8iQH2Qwmj2qWNq4lDAWQSD7BU/esxDqZ9uKEPebE= Subject key identifier: D9:7F:9D:D8:C2:E3:FA:E8:91:43:7C:BE:EF:8E:8A:73:44:9C:B7:71 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBCC21E73DD388E6B1CA40 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 65.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:cc:21:e7:3d:d3:88:e6:b1:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=1c5b38da-e3da-41b6-a77e-63c12c80fd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2c:27:55:18:a2:2e:ca:c3:d3:59:18:9e:b7: b0:9a:d5:c3:2d:c9:80:92:61:f3:e6:a4:77:50:c7: b4:a6:2a:f7:ca:e4:c7:a7:64:81:7c:17:ed:49:cf: 7b:41:5f:40:11:98:3a:2b:da:39:ed:86:53:8c:95: 30:40:03:c1:ce:f8:4e:b0:ec:df:a0:75:2e:96:68: 61:0c:f5:86:89:0d:02:fd:a3:2c:98:85:dc:5b:fc: 86:7f:34:5f:9a:62:a4:b7:dc:be:ba:7d:36:d8:3f: 7b:14:05:61:c8:d9:a3:34:38:b6:59:8f:02:8f:11: 11:55:f7:c0:b0:3f:43:2e:04:f8:dd:1e:ce:10:4a: a4:b0:55:87:2f:37:76:ab:79:9a:cb:01:2b:0e:9f: 3d:20:bd:18:eb:17:29:36:24:89:82:f0:8c:fe:75: 79:dd:2c:bf:58:fd:12:80:de:05:dc:e5:8a:b9:86: 9a:f2:22:4e:12:95:17:ed:04:74:0c:f0:66:2d:de: b3:0a:08:28:03:5d:a2:2c:95:7c:4f:17:85:90:e0: fa:b4:ea:6d:03:9f:b3:f6:a6:af:49:b6:72:3a:31: cb:0c:41:ce:ce:b3:e2:8f:73:fb:0a:b7:ad:94:df: 09:95:d0:9e:53:b2:63:44:b9:f0:41:77:7c:7f:46: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7F:9D:D8:C2:E3:FA:E8:91:43:7C:BE:EF:8E:8A:73:44:9C:B7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/3cb5c865-56bc-36bb-9781-6328ac6934e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:e3:28:08:83:9c:90:31:26:0f:89:f4:40:ca:d9:46:80:3d: 3e:98:8a:db:74:8e:1b:6d:f5:17:14:77:5e:f2:19:95:16:17: 49:e1:28:7f:de:44:51:11:44:00:3a:08:83:03:de:29:58:fe: d7:4b:04:2a:0e:2a:d7:db:07:17:db:82:9c:ae:8b:00:c3:8b: 4b:89:2c:b1:34:3e:1f:2f:a0:b0:eb:b2:4a:cf:ab:a1:24:7a: 32:60:c9:5e:8a:07:1c:73:07:c7:a9:49:59:e0:45:16:0d:12: 77:b6:2f:79:81:86:39:3d:62:c3:01:8b:c1:02:b6:1c:ad:9e: 64:ed:e7:78:72:15:4d:cf:41:80:70:ad:6f:9d:a1:05:e3:1e: 97:cd:4c:94:a6:8e:cc:c2:11:dc:64:80:b0:ce:c5:53:2c:2f: 39:6a:85:25:e6:19:79:36:2a:2c:0d:91:3c:82:15:79:65:21: 33:43:bc:02:00:83:90:19:80:13:46:b6:b2:b2:28:32:63:22: fe:b2:4f:fa:25:a2:7d:ce:86:d2:8b:a1:40:38:b2:f1:d8:73: 69:82:6e:e5:2d:7b:be:6c:96:b3:33:fb:2c:a1:6b:47:82:31: 01:5b:1c:50:a1:30:69:bb:78:d0:95:7d:f7:58:50:d2:5b:ca: 49:35:c7:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28wh5z3TiOaxykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MWM1YjM4ZGEtZTNkYS00MWI2LWE3N2UtNjNjMTJjODBmZDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiwnVRiiLsrD01kYnrewmtXDLcmAkmHz5qR3 UMe0pir3yuTHp2SBfBftSc97QV9AEZg6K9o57YZTjJUwQAPBzvhOsOzfoHUulmhh DPWGiQ0C/aMsmIXcW/yGfzRfmmKkt9y+un022D97FAVhyNmjNDi2WY8CjxERVffA sD9DLgT43R7OEEqksFWHLzd2q3maywErDp89IL0Y6xcpNiSJgvCM/nV53Sy/WP0S gN4F3OWKuYaa8iJOEpUX7QR0DPBmLd6zCggoA12iLJV8TxeFkOD6tOptA5+z9qav SbZyOjHLDEHOzrPij3P7CretlN8JldCeU7JjRLnwQXd8f0ZflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNl/ndjC4/rokUN8vu+OinNEnLdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvM2NiNWM4NjUtNTZiYy0z NmJiLTk3ODEtNjMyOGFjNjkzNGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHjKAiDnJAxJg+J9EDK2UaAPT6Yitt0jhtt9RcUd17yGZUWF0nhKH/e RFERRAA6CIMD3ilY/tdLBCoOKtfbBxfbgpyuiwDDi0uJLLE0Ph8voLDrskrPq6Ek ejJgyV6KBxxzB8epSVngRRYNEne2L3mBhjk9YsMBi8ECthytnmTt53hyFU3PQYBw rW+doQXjHpfNTJSmjszCEdxkgLDOxVMsLzlqhSXmGXk2KiwNkTyCFXllITNDvAIA g5AZgBNGtrKyKDJjIv6yT/olon3OhtKLoUA4svHYc2mCbuUte75slrMz+yyha0eC MQFbHFChMGm7eNCVffdYUNJbykk1xwc= -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:41 2025 by rpki-client