This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4faa72b3-cf04-37d3-93af-9f9404ee5db9.roa File: 4faa72b3-cf04-37d3-93af-9f9404ee5db9.roa (raw, json) Hash identifier: Kj0A5xpyzso7KQA7VMrmmKcnH5vXkqqbCH0jGlbMpTQ= Subject key identifier: 36:A7:96:EB:E9:87:84:94:48:CA:9B:D3:93:75:56:00:AD:98:DC:BA Certificate issuer: /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Certificate serial: 010D0C9F4328584BEDB5EE4C843B8A53A7EE3B80 Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4faa72b3-cf04-37d3-93af-9f9404ee5db9.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 834 IP address blocks: 206.251.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:ee:4c:84:3b:8a:53:a7:ee:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=b2f67abc-3ac7-47a2-9e22-557f818bd4dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:07:5a:e5:22:32:ae:9f:71:e3:f7:f5:65:f3: 43:d9:cc:b1:7c:aa:d2:f4:48:ce:b3:51:86:cd:90: 93:0c:58:69:dd:ff:fc:f6:d5:7f:ad:31:09:2d:fc: e8:c0:9b:70:61:cf:01:30:5b:bb:58:91:ed:62:c8: a0:85:aa:7d:ea:93:45:3d:ae:3f:cf:20:b4:53:20: a7:66:fb:06:d4:10:41:3f:69:c7:e5:85:35:27:7d: 81:bb:10:62:bb:99:35:53:31:5e:1c:7c:15:dc:b1: bd:d0:65:1b:31:3e:1d:2a:84:08:65:3b:5d:cc:2f: 3e:29:86:34:da:13:59:37:b6:db:b0:28:54:d7:2e: 69:eb:3a:50:e6:9c:85:08:94:b3:f2:d3:ae:b8:42: 61:08:b6:4b:54:2f:d7:cb:56:5b:8f:88:9d:25:ce: a7:f3:5e:d4:30:6e:3e:7f:df:d7:88:9f:20:13:fd: e3:ef:52:c1:7b:08:39:d7:5b:3f:fc:e7:d4:37:17: 15:21:fa:e6:4c:e9:59:47:b1:38:81:06:b3:d1:6c: fa:83:54:89:09:09:f6:2f:ed:38:8a:de:61:5a:aa: 20:5a:3b:b0:a8:03:47:41:7e:26:6a:ba:43:99:33: ff:37:aa:48:f9:f1:09:ba:e9:ee:82:4d:8d:84:c2: a7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A7:96:EB:E9:87:84:94:48:CA:9B:D3:93:75:56:00:AD:98:DC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/4faa72b3-cf04-37d3-93af-9f9404ee5db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl X509v3 Authority Key Identifier: keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer sbgp-ipAddrBlock: critical IPv4: 206.251.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:34:aa:a9:f0:33:c4:92:42:fd:5d:1a:e3:ff:db:af:9c:6b: 31:b9:63:0d:76:22:de:8f:a9:44:28:b2:43:4d:d2:4a:be:d8: d3:81:ab:66:a7:84:6b:9c:9c:d1:0a:73:3d:e6:52:d8:d6:dc: 0c:b8:84:67:d4:7e:35:57:fc:5a:85:8e:99:9a:a1:e6:55:78: b0:e6:98:65:5f:c7:8d:33:aa:a2:6d:a1:27:20:c4:d4:34:fd: a2:07:33:ff:45:30:6c:7f:ab:b9:99:b1:34:7f:09:5e:30:6a: d9:d3:d8:e6:b6:bc:fa:f4:7d:5c:a5:ef:93:dd:07:af:8f:0c: 78:41:20:5b:ab:5c:07:01:b3:62:2a:3c:6b:c0:8b:69:46:9e: c9:67:e5:ca:15:1d:0f:0e:88:47:ed:c6:e6:05:33:ee:d7:65: 53:f6:1e:d0:ab:f0:b7:a3:a2:0e:81:96:e2:57:70:bb:b2:d6: 0a:21:3d:fe:f8:ec:89:af:e8:15:d0:12:8e:19:ae:ef:56:dc: 2a:d3:fc:07:ad:af:56:93:4c:f3:f8:6f:d9:e1:3e:68:7a:e7: 2c:64:8a:c4:7d:32:9f:dd:4a:76:53:5a:22:c6:78:fa:27:fa: f4:9b:ba:16:bc:e1:61:f8:49:6c:d4:f4:7d:19:5c:15:7a:9d: 0b:2b:25:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvtte5MhDuKU6fuO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2Iw Mjc5MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YjJmNjdhYmMtM2FjNy00N2EyLTllMjItNTU3ZjgxOGJkNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgda5SIyrp9x4/f1ZfND2cyxfKrS9EjOs1GG zZCTDFhp3f/89tV/rTEJLfzowJtwYc8BMFu7WJHtYsighap96pNFPa4/zyC0UyCn ZvsG1BBBP2nH5YU1J32BuxBiu5k1UzFeHHwV3LG90GUbMT4dKoQIZTtdzC8+KYY0 2hNZN7bbsChU1y5p6zpQ5pyFCJSz8tOuuEJhCLZLVC/Xy1Zbj4idJc6n817UMG4+ f9/XiJ8gE/3j71LBewg511s//OfUNxcVIfrmTOlZR7E4gQaz0Wz6g1SJCQn2L+04 it5hWqogWjuwqANHQX4marpDmTP/N6pI+fEJuunugk2NhMKnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDanluvph4SUSMqb05N1VgCtmNy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhh MWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvNGZhYTcyYjMtY2YwNC0z N2QzLTkzYWYtOWY5NDA0ZWU1ZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTM4YTFkZGUtYjdmYi00YmZjLTlm M2MtY2Q4NDAwM2IwMjc5L2EzOGExZGRlLWI3ZmItNGJmYy05ZjNjLWNkODQwMDNi MDI3OS5jcmwwHwYDVR0jBBgwFoAUDfE36maClMPXvqaAW70dht0U4YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0 MDAzYjAyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzvsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg0qqnwM8SSQv1dGuP/26+cazG5Yw12It6PqUQoskNN0kq+2NOBq2an hGucnNEKcz3mUtjW3Ay4hGfUfjVX/FqFjpmaoeZVeLDmmGVfx40zqqJtoScgxNQ0 /aIHM/9FMGx/q7mZsTR/CV4watnT2Oa2vPr0fVyl75PdB6+PDHhBIFurXAcBs2Iq PGvAi2lGnsln5coVHQ8OiEftxuYFM+7XZVP2HtCr8Lejog6BluJXcLuy1gohPf74 7Imv6BXQEo4Zru9W3CrT/Aetr1aTTPP4b9nhPmh65yxkisR9Mp/dSnZTWiLGePon +vSbuha84WH4SWzU9H0ZXBV6nQsrJb8= -----END CERTIFICATE-----Generated at Tue Nov 25 09:00:32 2025 by rpki-client