This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cd89ddc-a350-39a3-9606-877c0f803588.roa File: 3cd89ddc-a350-39a3-9606-877c0f803588.roa (raw, json) Hash identifier: n4wXq7Sl8tfUf/UB3dCF7e0FDP8Rq2Yw+1TYjqBMYDs= Subject key identifier: BF:77:36:F0:F4:42:5C:6C:E9:2B:96:9F:65:EA:9D:E2:C5:9B:86:B8 Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44 Certificate serial: 010D0C9F4328584BC2705AD20E1B2F2D9F6D9020 Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cd89ddc-a350-39a3-9606-877c0f803588.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 36522 IP address blocks: 70.28.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:5a:d2:0e:1b:2f:2d:9f:6d:90:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=a1cdaee4-192a-4b43-a0fe-15d17708ed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:2d:57:aa:6a:f1:3f:13:1e:f8:e1:8e:51: bf:c1:8a:83:b9:70:8a:be:1b:a0:e5:30:87:da:12: 1f:10:19:b5:04:98:49:ae:69:c0:4a:48:c6:52:b5: 68:37:08:72:96:76:42:52:2f:d6:9c:1a:c9:49:ab: 3e:44:fe:d4:d8:ce:ff:1f:2a:9c:c7:3f:ab:4a:eb: 70:6a:a6:db:90:cd:24:34:bb:b2:bb:d3:01:72:3f: 66:cc:80:20:c9:60:16:10:b4:f9:41:ea:38:ed:0f: b2:91:58:01:aa:3e:f8:ee:88:67:17:be:64:9d:38: 6e:02:76:6c:bf:28:8c:80:87:41:a1:7a:a5:ed:e6: cc:f8:69:9a:de:1b:ea:56:a0:a4:26:ba:01:32:e4: d7:7f:32:cd:52:eb:57:45:b8:cd:de:4d:75:64:f3: 8f:d0:bc:c1:7c:3d:29:c8:2a:75:e3:d8:44:ef:35: e8:60:9c:10:d1:59:77:a9:10:4a:95:9f:ca:b1:e1: 9e:2f:a0:01:54:95:d8:92:07:cf:f6:8b:1e:42:a0: 51:4b:ef:4c:0f:50:93:91:98:35:63:03:e0:48:ee: 2b:4a:8a:43:e0:b7:9f:48:b3:e7:b7:56:c0:82:ff: 63:d8:fe:df:be:bb:ea:0e:bf:18:ad:e9:6b:00:08: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:77:36:F0:F4:42:5C:6C:E9:2B:96:9F:65:EA:9D:E2:C5:9B:86:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/3cd89ddc-a350-39a3-9606-877c0f803588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl X509v3 Authority Key Identifier: keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer sbgp-ipAddrBlock: critical IPv4: 70.28.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c1:39:7d:16:5f:4f:ba:4e:fe:97:fe:85:4e:3a:71:64:e3: 4a:42:52:37:cc:c0:6d:98:fa:a9:3d:7d:c4:53:5e:4b:d6:2f: 03:72:40:ac:61:06:65:1f:26:d9:be:c9:e4:39:0d:d9:b5:f5: ec:d9:c7:e0:f6:77:27:42:23:bb:f9:e4:40:ad:d7:65:5b:de: 73:8f:78:06:9d:65:f8:b2:23:ca:66:45:c5:92:42:61:d8:cc: 56:ef:c1:56:67:e8:c2:98:b0:7f:da:d5:6e:d2:65:3b:35:7c: 85:e1:c6:cc:2a:5c:5d:07:bd:63:39:e0:0c:bd:62:3e:84:c0: 9e:47:23:f5:f1:ab:8d:d0:ab:bb:c5:77:d2:15:67:24:a6:26: 88:a4:b0:8c:1b:6a:ab:f7:cd:a4:2b:e3:5a:9d:d2:70:b3:7a: 4a:1f:c2:de:e2:a0:ff:32:e0:5a:1b:8c:94:e5:8d:9b:2b:aa: de:1b:ed:c0:c8:18:65:66:aa:c9:54:f3:73:f1:b5:dc:af:a7: af:d8:43:46:21:2a:72:d1:06:d2:16:cd:b7:d9:98:00:9b:95: 63:79:ec:30:bb:a8:5f:59:69:ef:5f:ab:62:18:09:81:ed:d5: 05:48:5c:37:07:62:7d:dc:f0:32:3b:d3:e1:e0:95:09:25:be: 32:be:5c:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcFrSDhsvLZ9tkCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0 YjQ0MB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk YTFjZGFlZTQtMTkyYS00YjQzLWEwZmUtMTVkMTc3MDhlZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c0tV6pq8T8THvjhjlG/wYqDuXCKvhug5TCH 2hIfEBm1BJhJrmnASkjGUrVoNwhylnZCUi/WnBrJSas+RP7U2M7/Hyqcxz+rSutw aqbbkM0kNLuyu9MBcj9mzIAgyWAWELT5Qeo47Q+ykVgBqj747ohnF75knThuAnZs vyiMgIdBoXql7ebM+Gma3hvqVqCkJroBMuTXfzLNUutXRbjN3k11ZPOP0LzBfD0p yCp149hE7zXoYJwQ0Vl3qRBKlZ/KseGeL6ABVJXYkgfP9oseQqBRS+9MD1CTkZg1 YwPgSO4rSopD4LefSLPnt1bAgv9j2P7fvrvqDr8YrelrAAjwrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL93NvD0Qlxs6SuWn2XqneLFm4a4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvM2NkODlkZGMtYTM1MC0z OWEzLTk2MDYtODc3YzBmODAzNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5 NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARhyBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErBOX0WX0+6Tv6X/oVOOnFk40pCUjfMwG2Y+qk9fcRTXkvWLwNyQKxh BmUfJtm+yeQ5Ddm19ezZx+D2dydCI7v55ECt12Vb3nOPeAadZfiyI8pmRcWSQmHY zFbvwVZn6MKYsH/a1W7SZTs1fIXhxswqXF0HvWM54Ay9Yj6EwJ5HI/Xxq43Qq7vF d9IVZySmJoiksIwbaqv3zaQr41qd0nCzekofwt7ioP8y4FobjJTljZsrqt4b7cDI GGVmqslU83Pxtdyvp6/YQ0YhKnLRBtIWzbfZmACblWN57DC7qF9Zae9fq2IYCYHt 1QVIXDcHYn3c8DI70+HglQklvjK+XMk= -----END CERTIFICATE-----Generated at Tue Nov 25 11:38:49 2025 by rpki-client