This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa File: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json) Hash identifier: pftjlTcg9VDVETw0ohUvJhU8RFG+k7EU8vIuyBFkv0k= Subject key identifier: C8:C4:84:2D:98:C6:5B:E9:FD:CA:F5:31:23:12:CB:AC:5F:7A:C1:B7 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584BE555C4805AF2AA34AFE9B440 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 11702 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:c4:80:5a:f2:aa:34:af:e9:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=1e25b438-6006-496a-9645-474a18c27fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:9d:c8:dc:03:3b:86:04:b2:80:29:59:9a: 8c:d0:3a:e7:b5:74:43:a6:aa:0d:04:04:2d:62:24: df:ca:5d:19:56:4a:ab:85:5c:aa:de:5e:c5:87:93: cf:8b:73:c8:7f:cd:9e:03:8f:28:ed:39:23:56:a5: 7f:b0:88:99:14:95:ce:68:73:09:cc:77:fb:d9:9b: 93:74:6a:76:53:71:70:48:71:02:7e:a0:7f:4d:c0: 4f:19:fb:3f:3a:8f:3e:12:e3:5b:c4:d0:98:96:7f: 92:a4:f5:3e:9d:ae:bd:99:85:fd:1b:05:31:4b:be: 9b:6e:92:4b:77:00:b4:77:e6:bb:0b:fc:14:03:a9: 13:26:b3:c4:99:f0:6e:7a:4d:83:e2:d9:89:fa:98: 2f:9f:cf:05:45:b0:08:4c:8f:f2:33:62:2a:a2:7c: c5:32:3f:7e:6e:03:c5:96:28:da:dd:d8:c1:29:5c: 93:8c:cc:07:a1:f5:cd:da:e8:d4:4f:f7:ff:00:ce: 09:5c:4d:54:59:b8:00:21:3f:78:a2:25:f5:18:2c: ff:64:1e:6d:56:2e:ba:be:d6:af:de:79:97:f0:ef: 41:ff:3d:2f:b0:c1:d0:d8:f7:9e:ce:0a:f9:46:64: 2b:d9:16:3b:a7:ef:a6:7a:aa:11:39:57:9a:c3:0d: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C4:84:2D:98:C6:5B:E9:FD:CA:F5:31:23:12:CB:AC:5F:7A:C1:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:65:38:19:52:03:f3:f8:8f:94:87:d2:d3:83:88:14:f6:ba: 7f:35:a9:b6:28:aa:14:9a:19:21:ab:98:9c:42:bf:cc:05:7d: c7:61:28:bb:e4:20:2e:15:c9:25:62:3f:41:69:f1:26:74:f7: 86:64:92:c8:0d:14:64:b3:81:c3:6a:f3:62:25:8f:6d:ba:82: 3e:26:02:82:76:ce:91:a3:6a:07:b2:60:a9:7d:5c:4f:53:2d: 10:3c:75:7c:28:5d:6c:9a:26:d9:f0:10:5f:3a:12:7b:47:39: 7c:8f:5a:3d:9d:c8:54:34:0d:65:18:8d:9c:a1:f1:62:d7:9c: e5:5d:ad:3e:90:b0:8e:fd:08:52:8e:9e:35:7b:68:fb:98:ae: 7a:01:1c:e6:41:91:34:83:83:8f:9b:61:c7:14:8e:cd:a5:c9: e3:72:b4:0c:0f:1e:f3:d0:58:ba:2c:ce:00:2b:5d:cc:7b:45: ca:7e:d7:3d:e5:dc:f3:12:68:75:dd:5e:d8:f2:c5:76:84:56: a2:62:05:ea:4d:90:81:44:a1:10:84:29:05:4b:a3:6c:d1:82: cb:c6:bd:03:06:ef:59:11:0a:52:d8:dd:2f:8b:73:11:50:2d: 51:ce:5d:ab:8c:72:72:50:b7:17:ea:09:8e:69:a6:06:31:b3: 88:93:30:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVcSAWvKqNK/ptEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk MWUyNWI0MzgtNjAwNi00OTZhLTk2NDUtNDc0YTE4YzI3ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkmdyNwDO4YEsoApWZqM0DrntXRDpqoNBAQt YiTfyl0ZVkqrhVyq3l7Fh5PPi3PIf82eA48o7TkjVqV/sIiZFJXOaHMJzHf72ZuT dGp2U3FwSHECfqB/TcBPGfs/Oo8+EuNbxNCYln+SpPU+na69mYX9GwUxS76bbpJL dwC0d+a7C/wUA6kTJrPEmfBuek2D4tmJ+pgvn88FRbAITI/yM2IqonzFMj9+bgPF lija3djBKVyTjMwHofXN2ujUT/f/AM4JXE1UWbgAIT94oiX1GCz/ZB5tVi66vtav 3nmX8O9B/z0vsMHQ2Peezgr5RmQr2RY7p++meqoROVeaww0TswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjEhC2Yxlvp/cr1MSMSy6xfesG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWUyODUzNzYtZGZjNC0z MmRiLTlhMWMtY2ZhYzllOTYxZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJlOBlSA/P4j5SH0tODiBT2un81qbYoqhSaGSGrmJxCv8wFfcdhKLvk IC4VySViP0Fp8SZ094ZkksgNFGSzgcNq82Ilj226gj4mAoJ2zpGjageyYKl9XE9T LRA8dXwoXWyaJtnwEF86EntHOXyPWj2dyFQ0DWUYjZyh8WLXnOVdrT6QsI79CFKO njV7aPuYrnoBHOZBkTSDg4+bYccUjs2lyeNytAwPHvPQWLoszgArXcx7Rcp+1z3l 3PMSaHXdXtjyxXaEVqJiBepNkIFEoRCEKQVLo2zRgsvGvQMG71kRClLY3S+LcxFQ LVHOXauMcnJQtxfqCY5ppgYxs4iTMC8= -----END CERTIFICATE-----Generated at Sat Dec 6 00:00:22 2025 by rpki-client