This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa File: 58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa (raw, json) Hash identifier: hMg/F/Fmz2zfdOoyK3OJY8aKRCe8srRHKGmXCFYGDAc= Subject key identifier: 97:5D:37:5D:9C:F2:B0:D1:52:21:A9:FB:A3:C0:49:B0:3E:0E:66:88 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBFED71073F059AB8002C0 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 65.22.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:fe:d7:10:73:f0:59:ab:80:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=06e1a495-da09-4d0d-9cf5-447f305bf1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:62:0e:2a:37:cb:01:d6:cb:06:da:fb:ce: 3c:97:dc:ba:9c:a7:33:66:34:0a:0a:27:c8:c5:c9: c6:79:1e:cb:94:c6:bf:e4:e0:ef:bb:9b:41:ce:51: 1f:48:8d:e9:40:ba:06:e6:75:21:a4:34:f3:6b:d2: bd:25:e9:d2:fb:73:f0:88:c6:36:b6:72:2b:ba:bb: 37:2a:44:b7:a2:cf:9d:5f:c8:e5:05:1b:bc:1f:6d: 01:7b:53:c3:f0:e7:0f:e4:71:48:a7:c7:db:82:4f: 55:74:6b:44:6a:7f:a3:f1:75:a7:6d:75:7c:f4:4d: d5:90:f9:49:ec:02:fb:17:d4:20:5a:5d:30:90:fe: 1c:3c:7a:f2:82:1b:80:ce:4f:8f:41:04:fe:b1:da: ef:d6:01:25:b6:27:ca:eb:c0:f2:71:0b:85:83:f7: a3:55:dd:fb:59:fe:54:3c:64:eb:8f:20:08:91:33: 7b:5f:5e:9f:9d:fa:e9:6e:c1:c2:47:54:10:09:ae: 14:1d:fa:8d:ca:bb:e0:de:d5:0a:b3:a0:fb:bf:27: 36:e7:ad:d8:b8:33:ef:d9:35:d3:39:ff:fb:8e:2a: e5:1f:55:67:f3:8d:fd:c8:3f:dc:d7:db:a2:e6:cd: cb:fb:fe:a1:04:32:bb:f0:b3:d5:46:ab:41:22:7f: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5D:37:5D:9C:F2:B0:D1:52:21:A9:FB:A3:C0:49:B0:3E:0E:66:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/58de1b0e-f3b4-37d3-9832-c396e79b1baf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c2:8b:21:3c:b2:13:df:ce:cf:b2:9c:cf:e9:bb:e6:7e:95: 9b:15:c1:ab:23:81:32:f3:6d:1c:9f:a1:dc:22:3d:9e:9d:ce: d8:56:49:87:59:6e:35:89:9e:80:e3:92:d5:09:fa:ac:d7:8e: df:d7:3d:fb:58:0f:43:31:27:b7:5c:bf:1b:9b:8e:d3:dd:e4: a6:d5:4f:64:11:6a:ff:05:97:85:9c:84:ec:34:40:74:09:be: ae:3e:84:d1:37:28:67:89:42:55:20:4e:aa:82:1e:de:d8:a1: 7b:b4:be:24:72:1d:d4:59:1e:c4:99:98:79:fe:f6:78:42:f1: 1c:0b:e5:85:b9:a6:52:d1:02:2a:29:31:23:4f:13:c8:a3:86: a1:fc:5e:28:79:1e:c5:14:80:64:46:3f:82:9e:bd:30:a2:bc: 83:f9:db:54:5f:67:7f:12:37:f5:c2:c7:5b:50:6e:76:05:07: ca:b0:70:18:83:d1:64:9f:ad:a1:ad:f3:6e:8c:65:af:dd:7b: 06:65:09:e6:07:40:ba:f2:8f:7b:a0:5b:81:fd:58:dc:75:79: 65:18:67:7e:84:85:ff:4b:f6:84:53:cd:6c:61:58:89:d9:0b: 1f:a4:6e:8c:6d:d1:b5:83:97:3f:4d:41:39:67:fa:3c:b3:d6: 74:9c:a3:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2/7XEHPwWauAAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk MDZlMWE0OTUtZGEwOS00ZDBkLTljZjUtNDQ3ZjMwNWJmMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cFiDio3ywHWywba+848l9y6nKczZjQKCifI xcnGeR7LlMa/5ODvu5tBzlEfSI3pQLoG5nUhpDTza9K9JenS+3PwiMY2tnIrurs3 KkS3os+dX8jlBRu8H20Be1PD8OcP5HFIp8fbgk9VdGtEan+j8XWnbXV89E3VkPlJ 7AL7F9QgWl0wkP4cPHryghuAzk+PQQT+sdrv1gEltifK68DycQuFg/ejVd37Wf5U PGTrjyAIkTN7X16fnfrpbsHCR1QQCa4UHfqNyrvg3tUKs6D7vyc2563YuDPv2TXT Of/7jirlH1Vn8439yD/c19ui5s3L+/6hBDK78LPVRqtBIn8afQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJddN12c8rDRUiGp+6PASbA+DmaIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNThkZTFiMGUtZjNiNC0z N2QzLTk4MzItYzM5NmU3OWIxYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRarMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3CiyE8shPfzs+ynM/pu+Z+lZsVwasjgTLzbRyfodwiPZ6dzthWSYdZ bjWJnoDjktUJ+qzXjt/XPftYD0MxJ7dcvxubjtPd5KbVT2QRav8Fl4WchOw0QHQJ vq4+hNE3KGeJQlUgTqqCHt7YoXu0viRyHdRZHsSZmHn+9nhC8RwL5YW5plLRAiop MSNPE8ijhqH8Xih5HsUUgGRGP4KevTCivIP521RfZ38SN/XCx1tQbnYFB8qwcBiD 0WSfraGt826MZa/dewZlCeYHQLryj3ugW4H9WNx1eWUYZ36Ehf9L9oRTzWxhWInZ Cx+kboxt0bWDlz9NQTln+jyz1nSco7c= -----END CERTIFICATE-----Generated at Sun Dec 21 21:11:39 2025 by rpki-client