This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa File: 50ea20c8-093a-3fe4-83f4-d17728e47031.roa (raw, json) Hash identifier: 05nzOgjSRuMJVCexK8Ymx3Je/lgWu9DyNYpVnhdF2Gc= Subject key identifier: 6A:8B:98:1F:BF:07:32:64:F3:CD:22:AA:3E:E9:21:68:A1:C7:26:E5 Certificate issuer: /CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e Certificate serial: 010D0C9F4328584BD5FB13E5292C2F172F531520 Authority key identifier: 4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 395254 IP address blocks: 199.9.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:13:e5:29:2c:2f:17:2f:53:15:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ef50a44-841d-4e54-ae13-fdc6f6c7440e Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=7c08f4e8-769b-47ff-a9ac-b5e29aa64af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:3e:e2:15:c2:c7:e6:8d:ac:8a:d6:d4:f4: f5:e1:a6:2d:13:23:e7:e1:21:91:a0:08:1b:02:03: ba:e5:3e:c9:d2:b2:9a:1c:4b:20:44:b4:00:07:a4: b9:6b:37:e5:12:f7:ed:22:85:3a:e6:c9:d6:39:42: ff:12:ef:5c:cf:ea:5f:92:95:05:79:d3:36:56:f9: 0e:91:92:33:55:98:00:74:87:a8:51:be:a3:c6:3c: a5:9c:ce:1f:ed:17:cb:00:be:96:b1:0f:ec:e2:6a: 17:24:b3:b1:7e:a8:01:5a:f7:f3:85:e5:a9:a4:5d: 4e:7c:14:ab:25:bd:3e:29:b0:6b:56:ab:cb:06:9a: ce:67:89:1e:0a:63:f7:05:2d:f6:24:d4:6b:0a:e9: b4:99:ab:e9:f7:21:ee:19:71:a3:cb:c5:a3:72:5a: 96:3f:82:7a:b1:c9:61:d6:16:ba:c1:22:c5:9a:30: fe:bb:7d:2d:09:32:c3:15:60:6c:58:55:f5:0b:7b: c8:0b:86:6c:09:a3:3c:4d:59:74:a5:d7:19:58:36: 7f:b8:ce:4d:28:79:37:f8:74:4f:58:7b:2d:c6:e3: 18:9b:83:6b:7d:48:14:d1:f2:63:32:0a:6a:2f:92: 93:3e:f2:14:b5:12:31:2a:6c:43:a6:e8:b8:ab:c0: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8B:98:1F:BF:07:32:64:F3:CD:22:AA:3E:E9:21:68:A1:C7:26:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/50ea20c8-093a-3fe4-83f4-d17728e47031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.crl X509v3 Authority Key Identifier: keyid:4D:D8:93:C6:7F:98:4F:8C:8C:FF:4F:AE:AD:DB:76:3A:AE:C5:E6:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7ef50a44-841d-4e54-ae13-fdc6f6c7440e.cer sbgp-ipAddrBlock: critical IPv4: 199.9.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:27:5e:f5:45:a4:7c:e8:a3:03:62:3a:88:28:d5:a9:a1:46: 65:29:a3:19:29:d3:c8:7a:c3:4b:cd:79:dc:c4:5a:95:ee:a3: 29:60:c4:33:11:28:be:1b:93:71:82:22:23:1e:51:1f:45:de: ff:b5:18:2d:d2:c6:6a:93:69:2f:0f:e2:df:12:91:9f:42:3f: d5:fc:0b:ad:71:12:b2:09:d7:ae:4e:e6:78:60:96:d1:a1:a2: 5f:04:49:36:94:74:2f:e1:58:fa:21:81:ea:2f:7d:12:7a:69: eb:0a:fb:79:0d:d1:02:ea:b9:e9:d7:32:fd:0e:05:a3:ea:a6: b0:eb:48:c9:c3:38:f7:ce:83:c0:08:5c:63:65:d1:ca:e5:45: 26:e4:8c:2d:ca:90:28:b1:c1:c1:87:bc:ee:33:74:ac:dc:5c: 4c:c6:6d:2c:8b:29:f1:c8:86:02:82:d8:18:66:31:08:b4:fb: dc:29:d2:1c:e1:3a:be:25:42:aa:88:fa:58:f6:25:0b:89:1c: 3a:9c:d8:84:39:79:55:d7:50:43:b9:0d:80:5f:c5:e5:7c:b7: 0c:ed:35:a3:e2:18:44:ef:ad:13:f8:29:ab:45:59:68:06:b5: 1c:a3:2c:24:84:20:5e:4a:f3:3f:2a:82:38:bc:d5:8e:6d:29: f8:c5:6b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+xPlKSwvFy9TFSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2VmNTBhNDQtODQxZC00ZTU0LWFlMTMtZmRjNmY2Yzc0 NDBlMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk N2MwOGY0ZTgtNzY5Yi00N2ZmLWE5YWMtYjVlMjlhYTY0YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJg+4hXCx+aNrIrW1PT14aYtEyPn4SGRoAgb AgO65T7J0rKaHEsgRLQAB6S5azflEvftIoU65snWOUL/Eu9cz+pfkpUFedM2VvkO kZIzVZgAdIeoUb6jxjylnM4f7RfLAL6WsQ/s4moXJLOxfqgBWvfzheWppF1OfBSr Jb0+KbBrVqvLBprOZ4keCmP3BS32JNRrCum0mavp9yHuGXGjy8WjclqWP4J6sclh 1ha6wSLFmjD+u30tCTLDFWBsWFX1C3vIC4ZsCaM8TVl0pdcZWDZ/uM5NKHk3+HRP WHstxuMYm4NrfUgU0fJjMgpqL5KTPvIUtRIxKmxDpui4q8DMTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqLmB+/BzJk880iqj7pIWihxyblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZWY1 MGE0NC04NDFkLTRlNTQtYWUxMy1mZGM2ZjZjNzQ0MGUvNTBlYTIwYzgtMDkzYS0z ZmU0LTgzZjQtZDE3NzI4ZTQ3MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2VmNTBhNDQtODQxZC00ZTU0LWFl MTMtZmRjNmY2Yzc0NDBlLzdlZjUwYTQ0LTg0MWQtNGU1NC1hZTEzLWZkYzZmNmM3 NDQwZS5jcmwwHwYDVR0jBBgwFoAUTdiTxn+YT4yM/0+urdt2Oq7F5p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZWY1MGE0NC04NDFkLTRlNTQtYWUxMy1mZGM2 ZjZjNzQ0MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACknXvVFpHzoowNiOogo1amhRmUpoxkp08h6w0vNedzEWpXuoylgxDMR KL4bk3GCIiMeUR9F3v+1GC3SxmqTaS8P4t8SkZ9CP9X8C61xErIJ165O5nhgltGh ol8ESTaUdC/hWPohgeovfRJ6aesK+3kN0QLquenXMv0OBaPqprDrSMnDOPfOg8AI XGNl0crlRSbkjC3KkCixwcGHvO4zdKzcXEzGbSyLKfHIhgKC2BhmMQi0+9wp0hzh Or4lQqqI+lj2JQuJHDqc2IQ5eVXXUEO5DYBfxeV8twztNaPiGETvrRP4KatFWWgG tRyjLCSEIF5K8z8qgji81Y5tKfjFazA= -----END CERTIFICATE-----Generated at Tue Nov 25 09:13:02 2025 by rpki-client