This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa File: 470a0d1c-0b52-3d81-807b-734f35cf00ea.roa (raw, json) Hash identifier: ZO9ryaGAToasbpyocHFvoRJR8cHkR1EMPDre/RGm7Ys= Subject key identifier: 3C:B1:67:14:72:65:C4:98:9B:4C:6D:E1:78:94:63:10:4B:3D:06:CF Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584BEDB5CDFF45F85804D31A5540 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 14618 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:cd:ff:45:f8:58:04:d3:1a:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=2fcdc2f3-a165-4cfb-b49f-a1d3e966b017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d7:d4:d1:f8:6f:79:f7:b7:2c:e1:5c:23:e9: 7d:35:8b:b8:09:de:13:4d:d4:cb:25:70:46:bf:e2: 50:24:20:c9:07:66:e8:a2:53:68:d8:0c:4c:86:6f: 97:9d:bd:e1:1f:8e:33:30:e8:6f:05:33:ea:f5:16: 88:01:26:c3:b6:b2:53:b5:50:6d:ba:d3:10:5f:09: cc:61:31:f8:ea:4e:dc:a6:dc:a5:f9:7d:15:87:70: d3:9e:09:92:f9:b8:7b:5a:f3:27:60:15:6b:ed:b9: d0:e5:b9:ec:20:fd:ac:79:9f:9f:56:94:68:79:4b: 2d:ff:a9:ab:1f:db:4c:d7:01:a2:f6:48:a7:0f:fd: 44:d2:0b:6f:9c:82:e0:2c:bb:97:cc:3b:be:ac:f0: ed:87:db:0a:aa:54:ed:98:67:c6:d8:c6:25:77:38: 98:21:17:4f:d0:d7:cf:48:4c:c1:af:ad:0e:c5:89: 22:51:cf:c6:a2:c3:74:96:ea:96:08:8d:50:53:51: c0:5b:f0:df:c1:45:34:e4:a4:b3:a9:ca:64:14:b6: 08:97:9a:db:11:cd:a8:23:a0:7a:a5:85:b9:a3:55: 73:d1:50:09:0a:79:16:5b:54:c1:25:f8:d8:ac:fa: 6d:87:68:40:f4:7c:62:8e:67:39:24:ea:b1:07:72: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B1:67:14:72:65:C4:98:9B:4C:6D:E1:78:94:63:10:4B:3D:06:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/470a0d1c-0b52-3d81-807b-734f35cf00ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:a6:32:40:8e:95:bd:5d:42:59:52:7a:1e:da:b7:1d:b2:97: 02:83:39:3e:85:06:88:d6:83:23:45:7a:87:4e:fc:e5:bb:15: 8f:75:03:8f:65:00:3d:d4:63:b4:82:76:e4:81:12:3a:6c:5e: c8:a0:42:41:52:8f:0b:76:12:35:38:72:c0:de:a1:d8:1f:61: a4:e2:6f:6d:9b:8d:8e:8f:f2:e2:5a:10:d3:da:c8:ce:64:8e: 7a:78:9a:56:f8:f9:ba:98:66:31:5f:73:4b:59:4d:d5:35:85: 14:80:48:c9:43:5d:39:c8:04:54:3e:65:61:ab:55:ec:62:14: 9c:ec:5f:43:5f:49:0f:c8:0f:8a:ca:c4:b3:cc:0a:82:38:a6: 78:a4:90:63:28:3d:48:61:ae:1b:db:1b:9a:d1:2e:1f:3c:13: 26:b4:bf:fa:c6:81:9f:6a:13:33:47:67:d8:1f:c9:0a:ed:cf: a5:76:dc:4e:53:b0:60:c1:a4:da:19:2b:ee:c1:22:17:e8:83: 88:18:27:80:9f:39:f1:d5:41:41:9e:bc:16:29:a2:7a:8a:12: db:00:38:9b:3d:81:87:f7:29:8d:f1:22:27:64:d8:d2:1a:04: af:37:98:9d:d8:d2:d5:8e:36:01:34:0c:de:13:41:5a:ee:dd: 4f:11:b2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttc3/RfhYBNMaVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk MmZjZGMyZjMtYTE2NS00Y2ZiLWI0OWYtYTFkM2U5NjZiMDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtfU0fhvefe3LOFcI+l9NYu4Cd4TTdTLJXBG v+JQJCDJB2boolNo2AxMhm+Xnb3hH44zMOhvBTPq9RaIASbDtrJTtVBtutMQXwnM YTH46k7cptyl+X0Vh3DTngmS+bh7WvMnYBVr7bnQ5bnsIP2seZ+fVpRoeUst/6mr H9tM1wGi9kinD/1E0gtvnILgLLuXzDu+rPDth9sKqlTtmGfG2MYldziYIRdP0NfP SEzBr60OxYkiUc/GosN0luqWCI1QU1HAW/DfwUU05KSzqcpkFLYIl5rbEc2oI6B6 pYW5o1Vz0VAJCnkWW1TBJfjYrPpth2hA9Hxijmc5JOqxB3JWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyxZxRyZcSYm0xt4XiUYxBLPQbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvNDcwYTBkMWMtMGI1Mi0z ZDgxLTgwN2ItNzM0ZjM1Y2YwMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADimMkCOlb1dQllSeh7atx2ylwKDOT6FBojWgyNFeodO/OW7FY91A49l AD3UY7SCduSBEjpsXsigQkFSjwt2EjU4csDeodgfYaTib22bjY6P8uJaENPayM5k jnp4mlb4+bqYZjFfc0tZTdU1hRSASMlDXTnIBFQ+ZWGrVexiFJzsX0NfSQ/ID4rK xLPMCoI4pnikkGMoPUhhrhvbG5rRLh88Eya0v/rGgZ9qEzNHZ9gfyQrtz6V23E5T sGDBpNoZK+7BIhfog4gYJ4CfOfHVQUGevBYponqKEtsAOJs9gYf3KY3xIidk2NIa BK83mJ3Y0tWONgE0DN4TQVru3U8Rsl8= -----END CERTIFICATE-----Generated at Sat Nov 22 21:35:15 2025 by rpki-client