This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa File: ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa (raw, json) Hash identifier: xbXh+ThMH1YJYtompxgG1VMV8tyY1kmge2k9NDQ47Dk= Subject key identifier: DF:12:C2:59:5F:F2:45:3C:7F:A3:1C:40:48:08:F0:06:83:5C:A3:46 Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584BCD9B05CAA1A22E5F43EF22C0 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 10439 IP address blocks: 216.98.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:05:ca:a1:a2:2e:5f:43:ef:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=290b5fdc-30e3-41e0-b382-41ef51998f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5d:8d:44:1b:f5:49:71:51:0e:51:32:57:45: 72:8e:95:cb:d1:f4:a2:d0:c8:0b:85:a9:9b:04:5b: 38:1e:4a:c0:58:75:92:d5:39:87:37:96:6a:56:24: af:cd:1e:f5:4c:f3:5a:8f:1e:58:26:aa:eb:56:8d: ce:7d:5c:5f:81:54:44:01:41:00:a6:83:81:47:cd: 0c:bf:88:7a:26:ab:60:ce:55:2b:7d:b0:c7:11:be: 1f:a9:9d:de:68:72:0d:b5:ea:e0:6e:5c:dc:9a:da: 4f:10:98:81:3b:c7:64:b9:b8:af:49:85:a3:03:85: e4:c0:9b:c7:b1:7d:93:d1:94:50:f1:6c:92:6c:d1: fe:79:ab:b8:c4:7b:e4:3a:5b:2c:44:98:2b:6f:dd: 8a:1a:e7:d8:39:07:fd:9d:24:72:9f:87:4f:ae:e9: c9:20:98:48:dd:72:f7:c1:55:e1:5e:d5:ee:94:96: 0c:cf:e8:cd:85:ab:f3:24:0b:5a:4a:89:64:da:52: e2:46:f3:41:72:b2:69:1f:0f:38:a8:6a:1f:fc:8b: 12:b2:a6:26:0f:02:45:06:77:ef:92:9d:7e:0b:cf: 7f:1f:d5:2a:0c:5b:7a:ad:56:46:01:15:8b:ea:78: 80:1e:b7:c4:5c:86:d7:b2:30:a0:82:ab:9a:80:1e: 09:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:C2:59:5F:F2:45:3C:7F:A3:1C:40:48:08:F0:06:83:5C:A3:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 216.98.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:10:98:ad:8b:c1:3a:a2:c4:53:c4:02:ce:dc:a3:bf:7c:cc: fc:13:dd:95:91:33:ab:32:73:67:31:cb:04:fd:ff:48:6e:49: 40:83:a9:1d:d7:82:50:e9:53:da:4d:b8:43:da:5a:c4:12:ac: 66:35:83:a9:3a:5a:5a:60:3b:bd:35:b1:27:f7:a1:01:49:c0: fa:21:e6:a6:36:da:2c:7a:01:64:5a:80:c3:0d:28:37:88:f6: 8b:9c:85:08:36:32:6a:28:13:69:5e:b6:c0:09:4a:d0:81:48: 5a:2d:cd:4f:c8:58:38:4e:57:15:c9:fa:25:da:17:45:b8:7e: 88:25:d9:ae:c2:bd:7f:c0:af:68:92:28:f3:3a:72:71:65:ea: de:bf:dc:ae:55:24:13:66:bc:e2:62:45:65:57:5f:68:6d:76: bd:43:a9:35:46:34:d7:de:98:c8:df:44:60:43:ad:03:cc:c4: 72:94:60:02:10:70:1f:17:55:eb:90:83:03:83:13:df:ff:f9: 56:24:09:3f:c5:75:14:e3:24:4f:3c:54:53:17:3b:de:0d:be: 02:bb:b9:01:25:d8:cb:ae:4d:43:9a:9a:63:19:ad:58:67:84: 21:8b:6f:31:e7:29:b4:26:ad:88:a7:ee:c8:61:3c:fb:00:38: d9:36:b0:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwXKoaIuX0PvIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjkwYjVmZGMtMzBlMy00MWUwLWIzODItNDFlZjUxOTk4ZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF2NRBv1SXFRDlEyV0VyjpXL0fSi0MgLhamb BFs4HkrAWHWS1TmHN5ZqViSvzR71TPNajx5YJqrrVo3OfVxfgVREAUEApoOBR80M v4h6JqtgzlUrfbDHEb4fqZ3eaHINtergblzcmtpPEJiBO8dkubivSYWjA4XkwJvH sX2T0ZRQ8WySbNH+eau4xHvkOlssRJgrb92KGufYOQf9nSRyn4dPrunJIJhI3XL3 wVXhXtXulJYMz+jNhavzJAtaSolk2lLiRvNBcrJpHw84qGof/IsSsqYmDwJFBnfv kp1+C89/H9UqDFt6rVZGARWL6niAHrfEXIbXsjCggquagB4JrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8Swllf8kU8f6McQEgI8AaDXKNGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvZWM3ZmY2MzctNDgxZC0z ZGFlLWJmY2YtMzg2ZmEwNmIxYTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2GKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALsQmK2LwTqixFPEAs7co798zPwT3ZWRM6syc2cxywT9/0huSUCDqR3X glDpU9pNuEPaWsQSrGY1g6k6WlpgO701sSf3oQFJwPoh5qY22ix6AWRagMMNKDeI 9ouchQg2MmooE2letsAJStCBSFotzU/IWDhOVxXJ+iXaF0W4fogl2a7CvX/Ar2iS KPM6cnFl6t6/3K5VJBNmvOJiRWVXX2htdr1DqTVGNNfemMjfRGBDrQPMxHKUYAIQ cB8XVeuQgwODE9//+VYkCT/FdRTjJE88VFMXO94NvgK7uQEl2MuuTUOammMZrVhn hCGLbzHnKbQmrYin7shhPPsAONk2sMw= -----END CERTIFICATE-----Generated at Sat Nov 29 22:27:51 2025 by rpki-client