This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa File: 2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa (raw, json) Hash identifier: z1aGxBnDA3jmMmK1cM0jfJMKRtnFzXDDhI2psUHTY2o= Subject key identifier: 68:0C:76:B5:86:F9:1C:2F:82:22:7D:98:71:06:85:0F:22:E2:81:20 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BF85BD66FE4687CFEC2DDD700 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa Signing time: Mon 24 Nov 2025 21:33:13 +0000 ROA not before: Mon 24 Nov 2025 21:33:13 +0000 ROA not after: Sun 22 Feb 2026 21:33:13 +0000 asID: 395886 IP address blocks: 207.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:5b:d6:6f:e4:68:7c:fe:c2:dd:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 24 21:33:13 2025 GMT Not After : Feb 22 21:33:13 2026 GMT Subject: CN=46776a2f-9263-41ec-a46a-b860cd4624fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:19:65:2c:ec:86:56:dc:dc:5b:76:92:6e: 10:c0:32:bd:a1:a8:06:de:cc:9c:a0:6c:06:6f:5d: 23:84:ab:75:eb:12:d8:38:bd:68:3d:50:50:1d:e6: 53:64:89:f7:a7:02:e6:7f:c8:2e:dc:91:eb:7f:3d: e2:c7:74:7b:7f:dc:31:56:99:68:cd:ca:9c:67:68: a4:ad:61:9d:e2:4b:37:b4:b2:6c:09:0a:91:a2:e6: ae:d9:17:6c:f6:b0:61:81:e6:d6:30:eb:26:ae:a2: dc:bc:d6:c8:73:ec:90:ef:ef:f1:f7:35:00:40:32: ef:20:c6:54:2b:cf:e1:da:6b:bf:e5:75:80:40:60: 23:d8:cb:9b:ea:c0:d8:8b:7f:b4:f7:97:a5:e3:1a: 95:e7:ce:05:b1:0d:f9:2b:a1:0f:c1:47:c9:1a:7a: a1:fc:b8:c0:99:39:91:e9:73:ba:d5:e6:83:72:52: fb:30:9a:7a:f4:23:9a:54:78:12:e0:d7:2c:57:7f: 0a:04:a7:63:cd:8b:31:56:b6:2f:71:5e:26:f6:2c: ac:ba:5b:ff:42:28:41:d4:df:13:6b:84:39:7c:09: c4:7e:59:81:66:4b:5d:2b:b2:ff:1b:91:58:96:a7: 8e:98:46:03:60:46:45:cf:4c:c0:ab:fb:ed:c0:b1: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0C:76:B5:86:F9:1C:2F:82:22:7D:98:71:06:85:0F:22:E2:81:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e6c3e6a-0c4e-377f-8283-9a3e2321d554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 207.56.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:b6:6c:16:0d:3a:8d:62:34:2d:32:30:11:0e:c7:75:72:68: b4:3e:8a:b8:d5:fa:5d:47:01:37:22:30:9f:3d:b3:37:00:91: f2:06:25:11:6c:b7:76:38:9a:13:04:f3:dc:7c:4a:0c:18:05: 0f:69:5f:3f:64:c7:39:30:95:82:07:f7:a6:5b:69:18:c2:35: f9:f5:7d:43:e8:ff:46:53:61:63:d3:c4:26:73:4e:5e:33:03: 07:4d:22:fc:3b:09:18:a2:4f:66:70:be:16:c7:00:93:66:9b: bc:2a:15:74:38:6c:e4:d3:1e:f9:b4:28:76:e9:56:78:cc:29: ad:3d:b0:18:9b:02:5c:f0:ef:5b:ef:9e:96:57:c5:f8:69:34: 46:a1:d1:c7:b7:78:13:21:6d:57:9a:c0:8b:c6:f5:08:0b:20: 4b:83:5e:a7:12:78:68:68:29:d9:96:8b:4a:dc:30:d3:12:72: 8d:e2:cf:06:4b:55:9b:ef:07:9a:16:e7:9d:4e:1d:0e:87:a7: 38:f1:6e:dc:78:af:92:a4:bc:56:18:b9:b4:74:57:ee:c9:05: ec:9a:db:53:d2:c5:89:7b:b4:be:96:a8:34:1c:c9:23:80:f3: 93:9a:c6:ae:db:ab:5e:da:bb:f7:e3:e9:b0:62:1a:7f:80:73: e0:94:19:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv4W9Zv5Gh8/sLd1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyNDIxMzMxM1oXDTI2MDIyMjIxMzMxM1owLzEtMCsGA1UEAxMk NDY3NzZhMmYtOTI2My00MWVjLWE0NmEtYjg2MGNkNDYyNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIkZZSzshlbc3Ft2km4QwDK9oagG3sycoGwG b10jhKt16xLYOL1oPVBQHeZTZIn3pwLmf8gu3JHrfz3ix3R7f9wxVplozcqcZ2ik rWGd4ks3tLJsCQqRouau2Rds9rBhgebWMOsmrqLcvNbIc+yQ7+/x9zUAQDLvIMZU K8/h2mu/5XWAQGAj2Mub6sDYi3+095el4xqV584FsQ35K6EPwUfJGnqh/LjAmTmR 6XO61eaDclL7MJp69COaVHgS4NcsV38KBKdjzYsxVrYvcV4m9iysulv/QihB1N8T a4Q5fAnEflmBZktdK7L/G5FYlqeOmEYDYEZFz0zAq/vtwLHHPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgMdrWG+RwvgiJ9mHEGhQ8i4oEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmU2YzNlNmEtMGM0ZS0z NzdmLTgyODMtOWEzZTIzMjFkNTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzzjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALS2bBYNOo1iNC0yMBEOx3VyaLQ+irjV+l1HATciMJ89szcAkfIGJRFs t3Y4mhME89x8SgwYBQ9pXz9kxzkwlYIH96ZbaRjCNfn1fUPo/0ZTYWPTxCZzTl4z AwdNIvw7CRiiT2ZwvhbHAJNmm7wqFXQ4bOTTHvm0KHbpVnjMKa09sBibAlzw71vv npZXxfhpNEah0ce3eBMhbVeawIvG9QgLIEuDXqcSeGhoKdmWi0rcMNMSco3izwZL VZvvB5oW551OHQ6Hpzjxbtx4r5KkvFYYubR0V+7JBeya21PSxYl7tL6WqDQcySOA 85Oaxq7bq17au/fj6bBiGn+Ac+CUGQ8= -----END CERTIFICATE-----Generated at Tue Nov 25 08:59:23 2025 by rpki-client