This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa File: 21dc5c75-da72-3528-8d0f-ce3b773d0620.roa (raw, json) Hash identifier: dTAh3ZtUO5ag2jli8xq2GE0L7lzYMDPASbzcAcBrDuo= Subject key identifier: 9A:4B:BE:E4:BA:18:68:B7:34:0D:70:CB:3D:40:1C:F7:5E:38:58:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C215B81E085FAC22D73BD6D20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 25485 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:81:e0:85:fa:c2:2d:73:bd:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=77da49c6-f17f-4fa0-917f-e9be0d76c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:c1:a4:c2:c8:c4:fa:0b:7d:ee:65:3a:8f: 6c:9f:61:c5:7e:c3:56:36:38:b3:c1:ee:a8:51:c8: ed:9a:d5:6c:d5:a6:a9:3f:e5:72:a3:85:11:db:22: 01:fc:0a:d9:ac:88:4d:e9:3c:4b:7b:58:b4:dc:f8: 0d:84:68:15:6f:fd:64:12:5d:82:cf:40:67:c3:92: 1a:69:f5:67:b9:33:42:ad:a4:38:62:98:51:4f:95: cb:e9:6e:71:11:a0:c3:28:b7:c5:2d:6c:8f:9e:0a: de:75:33:6d:fb:56:25:56:f2:62:4d:0d:70:f3:68: 0d:61:8d:48:06:ca:2e:73:2d:19:ab:10:2e:61:12: bc:d1:f2:96:cc:84:c2:6c:a7:55:3f:1b:fe:4d:d4: ab:df:0c:8d:e2:c1:19:a6:9d:17:f1:be:6d:e8:45: c2:83:3b:b2:5b:5e:45:2e:79:35:43:03:7b:01:58: 22:2d:6f:c2:ca:f7:14:c4:af:38:96:1f:cf:f0:1c: 0e:cb:ba:3d:d0:7a:87:c2:92:9b:2c:62:d8:f8:f5: 81:70:3c:05:69:ab:03:d9:72:d8:5e:13:a5:a9:99: f3:a3:8c:ff:4c:b2:cf:17:00:26:bf:6e:16:14:f9: d5:35:fe:85:e6:30:cc:c8:5f:43:d8:5c:3b:f0:19: 20:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4B:BE:E4:BA:18:68:B7:34:0D:70:CB:3D:40:1C:F7:5E:38:58:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:54:f5:4d:6c:12:e8:84:26:f9:6a:0d:17:d3:90:21:28:db: c2:7e:f2:e4:f7:c4:07:37:58:bc:78:5c:c5:e2:08:6d:f8:3f: 7a:7e:dd:dd:8a:2f:52:52:0d:0d:cb:e0:9f:ea:54:0f:76:6a: e8:8d:65:b0:8c:9c:ad:73:98:f0:af:14:f5:8e:f9:15:f1:29: 87:1b:81:e7:95:52:62:e0:2a:0a:ef:4d:05:20:77:dc:92:6d: b2:eb:d4:56:ec:1c:12:79:67:d5:1d:22:2e:2b:48:c7:04:d7: 8a:5d:5b:13:35:10:76:14:3f:f7:d4:c0:7e:cd:ad:05:7f:11: 4c:da:11:29:51:6d:2e:f9:38:71:6a:d1:9b:7a:ee:f9:4b:c6: dc:c4:0b:41:5a:fe:1c:01:50:0c:d2:14:2f:9b:c4:13:42:51: 4d:55:e4:70:05:07:be:79:dc:51:bd:c7:31:2f:7e:b7:1a:a7: 82:9f:54:af:25:5e:6a:12:f6:37:8f:15:66:3a:33:ff:eb:c9: 3b:4c:47:4c:43:ef:9a:e8:46:07:1d:5c:48:77:5e:2e:e4:66: eb:09:6a:08:7e:82:0c:36:12:ce:34:32:d9:35:a3:b0:83:b2: 8a:a5:b3:45:78:5a:02:c8:20:c4:ee:fd:5c:4a:c6:73:18:b2: a6:1d:1b:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW4HghfrCLXO9bSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk NzdkYTQ5YzYtZjE3Zi00ZmEwLTkxN2YtZTliZTBkNzZjMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgobBpMLIxPoLfe5lOo9sn2HFfsNWNjizwe6o UcjtmtVs1aapP+Vyo4UR2yIB/ArZrIhN6TxLe1i03PgNhGgVb/1kEl2Cz0Bnw5Ia afVnuTNCraQ4YphRT5XL6W5xEaDDKLfFLWyPngredTNt+1YlVvJiTQ1w82gNYY1I Bsoucy0ZqxAuYRK80fKWzITCbKdVPxv+TdSr3wyN4sEZpp0X8b5t6EXCgzuyW15F Lnk1QwN7AVgiLW/CyvcUxK84lh/P8BwOy7o90HqHwpKbLGLY+PWBcDwFaasD2XLY XhOlqZnzo4z/TLLPFwAmv24WFPnVNf6F5jDMyF9D2Fw78BkgcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpLvuS6GGi3NA1wyz1AHPdeOFixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFkYzVjNzUtZGE3Mi0z NTI4LThkMGYtY2UzYjc3M2QwNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBU9U1sEuiEJvlqDRfTkCEo28J+8uT3xAc3WLx4XMXiCG34P3p+3d2K L1JSDQ3L4J/qVA92auiNZbCMnK1zmPCvFPWO+RXxKYcbgeeVUmLgKgrvTQUgd9yS bbLr1FbsHBJ5Z9UdIi4rSMcE14pdWxM1EHYUP/fUwH7NrQV/EUzaESlRbS75OHFq 0Zt67vlLxtzEC0Fa/hwBUAzSFC+bxBNCUU1V5HAFB7553FG9xzEvfrcap4KfVK8l XmoS9jePFWY6M//ryTtMR0xD75roRgcdXEh3Xi7kZusJagh+ggw2Es40Mtk1o7CD soqls0V4WgLIIMTu/VxKxnMYsqYdG3E= -----END CERTIFICATE-----Generated at Sun Dec 14 13:53:58 2025 by rpki-client