This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa File: 2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa (raw, json) Hash identifier: VNgfNRky+m83UBGfXzkGUr0qqyMddiKtPcV2rPNZYWA= Subject key identifier: F7:4E:BD:13:AF:5B:C2:78:C0:D6:90:BF:71:1C:0C:94:BE:5E:81:C8 Certificate issuer: /CN=792c5c41-497a-4325-83ea-87d8b3dfdae9 Certificate serial: 010D0C9F4328584BEAEB2699EDAD20E1CE5C6F80 Authority key identifier: 7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 397412 IP address blocks: 64.110.128.0/21 maxlen: 24 98.96.0.0/17 maxlen: 24 136.244.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:26:99:ed:ad:20:e1:ce:5c:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=792c5c41-497a-4325-83ea-87d8b3dfdae9 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=2f23469d-4f24-4544-a2ef-066d6834a80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fc:62:af:66:bb:0f:fd:83:1a:22:52:0c:0e: b3:84:ec:92:24:29:8d:10:68:0c:6f:f4:40:aa:72: 4a:b5:6a:a0:fc:c0:3b:c9:44:3b:8c:4e:e7:34:3c: 74:85:69:ca:65:74:83:b6:e7:8b:84:f9:9c:5a:e6: 99:9d:de:65:e4:5a:7e:35:52:32:60:64:66:5c:39: 59:bc:82:6d:6c:87:fe:b7:89:8f:b3:28:34:e9:07: 68:10:77:8b:37:52:d0:bc:a3:0b:09:2b:01:f8:d8: 56:77:e3:b4:23:6e:da:4a:42:2e:05:85:7e:91:7e: b2:7a:d4:ac:c2:b1:45:3f:0b:ff:64:69:15:a0:c7: 79:71:0f:00:9b:a7:12:67:66:07:f6:79:3c:44:00: c0:ab:f9:30:03:39:bf:d9:3a:70:7b:e2:a2:de:40: 76:fe:94:4e:88:2e:3c:c0:55:25:5a:47:63:7e:db: cd:1a:5f:5b:55:f0:9c:64:f9:5d:71:27:f3:d6:1e: 7e:c1:4c:c0:5e:75:b4:6d:6b:ce:dc:49:c9:84:85: 81:36:cd:46:59:cb:4b:f2:43:a2:94:9a:e6:d1:2a: a8:63:2d:e5:64:4a:fd:ba:ce:0f:01:bc:1b:cd:db: e3:ad:64:1c:eb:72:99:26:5c:cb:f7:29:bf:51:a9: 6e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4E:BD:13:AF:5B:C2:78:C0:D6:90:BF:71:1C:0C:94:BE:5E:81:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl X509v3 Authority Key Identifier: keyid:7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer sbgp-ipAddrBlock: critical IPv4: 64.110.128.0/21 98.96.0.0/17 136.244.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:1c:c4:f1:fe:5c:b7:2a:67:63:9c:04:12:fc:9f:95:76:0a: dd:fc:0f:22:f1:6d:d1:1f:92:a3:d1:63:79:d1:c3:fb:f8:b5: df:a9:e3:5e:e5:4d:bd:69:f2:a6:e2:46:7b:81:22:21:be:fe: ec:e5:48:38:8e:85:02:b3:90:00:b6:7e:fe:76:04:dd:ff:e9: 32:f1:ac:99:07:f7:37:da:99:73:44:ca:de:6b:19:2e:5f:a7: 1f:a8:ad:dd:f4:97:60:ef:5b:c4:f2:e4:66:88:82:e1:8c:fc: a8:da:cc:69:f1:0b:90:94:66:c6:fe:38:5a:ab:be:06:62:2f: 82:c2:fb:06:3a:0b:a6:89:7b:69:2d:3d:04:80:89:12:1e:e2: 0d:61:10:5c:6a:4c:8b:16:49:14:81:55:26:0a:5d:fd:07:32: 1e:9a:8b:ad:96:fe:86:76:38:cd:13:4f:91:03:55:24:4b:15: 1d:a1:78:a5:aa:e6:c1:01:99:c1:8c:7b:08:35:c4:b8:75:a5: 77:1c:18:88:c8:d4:aa:84:cf:bb:25:e8:d4:6b:99:d3:0d:0c: b4:c4:57:16:37:3c:81:66:fa:8a:2b:c9:21:95:6f:1f:be:29: 28:92:96:66:b2:a2:30:fd:bf:2b:18:fc:65:fe:c2:63:52:ce: 20:0c:16:25 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEvq6yaZ7a0g4c5cb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzkyYzVjNDEtNDk3YS00MzI1LTgzZWEtODdkOGIzZGZk YWU5MB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk MmYyMzQ2OWQtNGYyNC00NTQ0LWEyZWYtMDY2ZDY4MzRhODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfxir2a7D/2DGiJSDA6zhOySJCmNEGgMb/RA qnJKtWqg/MA7yUQ7jE7nNDx0hWnKZXSDtueLhPmcWuaZnd5l5Fp+NVIyYGRmXDlZ vIJtbIf+t4mPsyg06QdoEHeLN1LQvKMLCSsB+NhWd+O0I27aSkIuBYV+kX6yetSs wrFFPwv/ZGkVoMd5cQ8Am6cSZ2YH9nk8RADAq/kwAzm/2Tpwe+Ki3kB2/pROiC48 wFUlWkdjftvNGl9bVfCcZPldcSfz1h5+wUzAXnW0bWvO3EnJhIWBNs1GWctL8kOi lJrm0SqoYy3lZEr9us4PAbwbzdvjrWQc63KZJlzL9ym/UaluNQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPdOvROvW8J4wNaQv3EcDJS+XoHIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJj NWM0MS00OTdhLTQzMjUtODNlYS04N2Q4YjNkZmRhZTkvMjk1OWMxNTgtYzljNy0z NDhjLTlkMzYtYmIyYjgwYzliMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzkyYzVjNDEtNDk3YS00MzI1LTgz ZWEtODdkOGIzZGZkYWU5Lzc5MmM1YzQxLTQ5N2EtNDMyNS04M2VhLTg3ZDhiM2Rm ZGFlOS5jcmwwHwYDVR0jBBgwFoAUfXQlQZo4IJN/YM8yn1vWuOW2MZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJjNWM0MS00OTdhLTQzMjUtODNlYS04N2Q4 YjNkZmRhZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG6AAwQH YmAAAwQGiPQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADAcxPH+XLcqZ2OcBBL8n5V2Ct38DyLxbdEfkqPR Y3nRw/v4td+p417lTb1p8qbiRnuBIiG+/uzlSDiOhQKzkAC2fv52BN3/6TLxrJkH 9zfamXNEyt5rGS5fpx+ord30l2DvW8Ty5GaIguGM/KjazGnxC5CUZsb+OFqrvgZi L4LC+wY6C6aJe2ktPQSAiRIe4g1hEFxqTIsWSRSBVSYKXf0HMh6ai62W/oZ2OM0T T5EDVSRLFR2heKWq5sEBmcGMewg1xLh1pXccGIjI1KqEz7sl6NRrmdMNDLTEVxY3 PIFm+oorySGVbx++KSiSlmayojD9vysY/GX+wmNSziAMFiU= -----END CERTIFICATE-----Generated at Tue Nov 25 20:54:02 2025 by rpki-client