This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa File: 3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa (raw, json) Hash identifier: njOKeD6kgAAvNWxWLJsZICILWabYQ5gpxWk5r93127I= Subject key identifier: 5A:53:40:D6:A4:29:42:29:72:E9:96:FB:64:FD:B5:3E:59:5A:96:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BCD9D272D57D2B0CD1F391A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 33660 IP address blocks: 71.199.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9d:27:2d:57:d2:b0:cd:1f:39:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=7ea94423-51be-4d1d-85e8-3673e4e4aee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:16:6a:1b:7b:54:1e:65:e7:43:05:c9:2e: c4:1f:57:24:bd:dd:42:ff:75:ea:39:77:02:9b:93: bb:f0:c0:33:da:7a:a4:fc:d7:f7:33:1e:f7:5c:38: 14:dd:f7:87:9a:5e:3a:2f:10:2c:b4:c2:7f:d8:30: 44:bc:9a:4b:3f:b8:79:56:6a:13:c1:b0:00:fe:a7: 8a:f7:b3:d2:2d:bb:54:b1:2b:b9:a7:4f:fe:a8:ca: 00:b3:19:f6:e7:01:d5:7e:18:9b:fa:c7:64:f2:74: 9a:30:1a:f3:3b:fd:39:79:36:44:b8:a1:6c:7d:3f: 78:ed:a0:6c:7c:58:9d:04:bf:4c:07:4f:c7:e2:2e: 30:18:d1:9c:6f:51:f0:b9:c4:a1:45:7b:25:3f:9e: 63:2d:c7:34:f8:d9:eb:a0:02:69:fb:29:21:06:89: a2:6b:bd:d2:fb:c9:ef:09:7f:da:5a:24:10:85:ba: 88:5a:e0:bf:69:7b:88:d3:cc:5e:07:e3:8e:6a:85: 04:88:cf:5d:5e:bf:37:b9:fb:46:b6:90:27:53:e1: a2:f5:be:85:c1:7d:96:db:40:7f:9e:8b:db:4d:78: cb:34:40:e1:04:dc:9c:09:47:bc:b8:91:2b:d8:32: ef:4d:b3:08:1c:cf:1d:1c:50:22:80:fe:d3:aa:14: b7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:53:40:D6:A4:29:42:29:72:E9:96:FB:64:FD:B5:3E:59:5A:96:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c930b5f-0c58-3a1b-832a-fc8ae7084b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 71.199.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:01:3e:57:b8:27:e9:84:c3:70:78:c3:ef:79:1c:e9:69:b7: f1:0d:4c:55:03:3c:be:88:97:be:01:57:da:ca:b7:e0:fa:30: 65:93:26:f2:24:1e:65:0d:45:0a:40:99:19:4e:a2:92:ae:fb: 59:97:b7:3b:47:58:38:fa:ea:c8:c5:32:72:09:0f:1c:f1:8d: 39:da:d9:08:bc:42:09:9d:05:56:69:bb:61:7d:d7:90:dd:6a: ba:60:52:10:9c:c1:71:8a:5b:37:9d:ca:b7:0e:62:55:30:23: 0a:f8:5f:7b:9e:c9:4f:ba:d0:82:cb:a2:95:8f:01:5b:8a:2e: 8a:0a:42:26:9c:2b:b0:37:d0:bd:60:42:a4:fb:54:64:ec:ff: c2:3e:b2:3a:e2:48:3d:88:17:3a:60:03:81:14:42:79:35:ab: 51:0e:e4:1d:46:28:90:68:f2:bb:04:8e:2d:e9:42:55:b1:71: 7e:80:95:8d:11:b2:59:6f:54:40:14:2f:eb:cb:9c:9e:ce:07: 45:6a:c5:7b:0e:c1:1c:b7:ce:0e:61:aa:f2:84:91:2a:5f:2c: 49:23:87:29:1d:5e:a3:10:e7:c8:69:13:38:46:bc:dd:c0:a9: ad:76:a4:30:9c:1d:ad:80:72:d5:8c:c2:fb:28:64:a1:ea:ec: 50:80:00:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNnSctV9KwzR85GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk N2VhOTQ0MjMtNTFiZS00ZDFkLTg1ZTgtMzY3M2U0ZTRhZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTIWaht7VB5l50MFyS7EH1ckvd1C/3XqOXcC m5O78MAz2nqk/Nf3Mx73XDgU3feHml46LxAstMJ/2DBEvJpLP7h5VmoTwbAA/qeK 97PSLbtUsSu5p0/+qMoAsxn25wHVfhib+sdk8nSaMBrzO/05eTZEuKFsfT947aBs fFidBL9MB0/H4i4wGNGcb1HwucShRXslP55jLcc0+NnroAJp+ykhBomia73S+8nv CX/aWiQQhbqIWuC/aXuI08xeB+OOaoUEiM9dXr83uftGtpAnU+Gi9b6FwX2W20B/ novbTXjLNEDhBNycCUe8uJEr2DLvTbMIHM8dHFAigP7TqhS3WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpTQNakKUIpcumW+2T9tT5ZWpb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5MzBiNWYtMGM1OC0z YTFiLTgzMmEtZmM4YWU3MDg0YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR8cUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkBPle4J+mEw3B4w+95HOlpt/ENTFUDPL6Il74BV9rKt+D6MGWTJvIk HmUNRQpAmRlOopKu+1mXtztHWDj66sjFMnIJDxzxjTna2Qi8QgmdBVZpu2F915Dd arpgUhCcwXGKWzedyrcOYlUwIwr4X3ueyU+60ILLopWPAVuKLooKQiacK7A30L1g QqT7VGTs/8I+sjriSD2IFzpgA4EUQnk1q1EO5B1GKJBo8rsEji3pQlWxcX6AlY0R sllvVEAUL+vLnJ7OB0VqxXsOwRy3zg5hqvKEkSpfLEkjhykdXqMQ58hpEzhGvN3A qa12pDCcHa2ActWMwvsoZKHq7FCAAGw= -----END CERTIFICATE-----Generated at Sat Dec 6 05:01:36 2025 by rpki-client