This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa File: cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa (raw, json) Hash identifier: qC0/JD/8DfUPuz+x457o79TDhospdI0zYdM9Ql9lruU= Subject key identifier: 0D:3B:98:C6:6C:4D:49:E5:8B:EE:5F:B9:FA:6F:1B:94:5F:67:52:34 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584BFD10AD79531990C8E568C200 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 202888 IP address blocks: 174.136.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:ad:79:53:19:90:c8:e5:68:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=eeccf2ea-6f65-45b9-80a4-95f83b35ca3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:30:5d:c6:f0:4d:d1:d2:2b:e1:de:2d:64: 5f:c8:33:73:8c:e9:f2:c6:94:cf:e4:a4:69:a4:8a: 5d:a0:c8:97:46:6d:ba:69:3d:eb:af:a4:3a:b5:70: 01:c5:c8:77:48:9e:5f:b3:32:b2:ac:d0:8a:6a:70: 50:2e:2b:e3:b2:01:6b:45:ff:77:24:bc:1b:c3:d4: 5b:43:04:29:5f:a5:c7:26:34:88:36:a6:a0:5e:97: b7:f5:2b:8e:88:69:bb:fd:11:19:6e:12:be:65:31: 01:3c:1a:c1:bc:03:23:15:11:cb:9f:f1:d5:24:92: c5:26:78:4e:b5:a2:b8:1c:97:b8:c7:67:3b:aa:14: cf:bc:3c:3f:21:46:df:40:31:fe:c1:77:fd:29:97: bc:02:54:1b:ad:7f:04:0f:71:20:9b:61:67:dc:8c: e1:81:a8:07:70:0d:4e:a0:52:86:32:ac:6b:3c:59: ba:fa:59:0e:7b:0f:7f:7b:e9:fd:59:44:06:26:17: b5:fc:e1:84:a3:a3:45:99:0f:2c:b9:ff:2e:e5:eb: fa:82:b9:db:29:06:9e:3d:10:20:11:8f:5c:02:1a: 97:37:ce:4b:ff:73:dd:cc:f3:19:04:c5:a7:0f:b2: c3:d6:93:f0:0e:54:a5:7e:56:79:24:07:93:ce:81: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:3B:98:C6:6C:4D:49:E5:8B:EE:5F:B9:FA:6F:1B:94:5F:67:52:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/cb32ce69-be48-34e5-9f90-6a5afb8fa903.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:9c:be:e8:d5:3e:f1:c0:b4:b3:3d:e5:88:c4:71:e9:c0:4c: 8b:d3:05:42:7d:8a:c6:2d:4c:85:66:1e:4b:46:5b:45:d9:cb: 48:c7:7e:d9:34:94:3a:ca:6f:18:06:23:4b:a2:64:91:c7:69: de:76:1c:f2:bb:98:67:87:f4:0b:af:5e:2d:87:a2:8e:d8:d7: 31:ea:2f:9e:af:db:48:59:c1:67:d9:4a:96:2c:b2:b8:fe:7c: 44:ba:ac:a4:de:0a:66:dd:13:f0:f2:24:6b:9e:7e:bc:f5:21: 11:5f:ac:ed:28:29:ff:c1:8e:f3:41:de:c5:07:ee:58:f6:d0: e0:b5:9f:96:dc:ee:03:2c:ac:bd:5a:4c:63:73:ef:69:68:c9: 20:95:1d:ac:74:5f:36:fc:40:9f:d1:9f:43:34:52:8f:af:3b: 82:43:f9:fd:4d:8e:16:11:a1:bd:8a:11:a7:c6:8f:09:6d:0f: 45:11:c1:cc:4c:f3:72:08:ef:0c:d4:93:34:00:82:8a:5d:43: a8:ff:cd:df:3d:51:42:73:ae:a8:ae:89:15:be:3e:1f:1a:44: 95:20:b4:1a:03:9a:11:30:8f:ff:34:d4:40:9e:aa:53:53:bf: f7:d9:74:ec:52:89:ca:d9:bb:4b:74:33:22:1d:c9:2f:37:37: 9c:f4:d4:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EK15UxmQyOVowgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk ZWVjY2YyZWEtNmY2NS00NWI5LTgwYTQtOTVmODNiMzVjYTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1cwXcbwTdHSK+HeLWRfyDNzjOnyxpTP5KRp pIpdoMiXRm26aT3rr6Q6tXABxch3SJ5fszKyrNCKanBQLivjsgFrRf93JLwbw9Rb QwQpX6XHJjSINqagXpe39SuOiGm7/REZbhK+ZTEBPBrBvAMjFRHLn/HVJJLFJnhO taK4HJe4x2c7qhTPvDw/IUbfQDH+wXf9KZe8AlQbrX8ED3Egm2Fn3IzhgagHcA1O oFKGMqxrPFm6+lkOew9/e+n9WUQGJhe1/OGEo6NFmQ8suf8u5ev6grnbKQaePRAg EY9cAhqXN85L/3PdzPMZBMWnD7LD1pPwDlSlflZ5JAeTzoGefQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA07mMZsTUnli+5fufpvG5RfZ1I0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvY2IzMmNlNjktYmU0OC0z NGU1LTlmOTAtNmE1YWZiOGZhOTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKcvujVPvHAtLM95YjEcenATIvTBUJ9isYtTIVmHktGW0XZy0jHftk0 lDrKbxgGI0uiZJHHad52HPK7mGeH9AuvXi2Hoo7Y1zHqL56v20hZwWfZSpYssrj+ fES6rKTeCmbdE/DyJGuefrz1IRFfrO0oKf/BjvNB3sUH7lj20OC1n5bc7gMsrL1a TGNz72loySCVHax0Xzb8QJ/Rn0M0Uo+vO4JD+f1NjhYRob2KEafGjwltD0URwcxM 83II7wzUkzQAgopdQ6j/zd89UUJzrqiuiRW+Ph8aRJUgtBoDmhEwj/801ECeqlNT v/fZdOxSicrZu0t0MyIdyS83N5z01Pw= -----END CERTIFICATE-----Generated at Tue Dec 16 06:03:23 2025 by rpki-client