This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa File: ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa (raw, json) Hash identifier: kgDWcVJpl8hIjRgdPJONg9o/EIDVoQK30G/EBcKijac= Subject key identifier: 68:FD:35:7C:C4:0D:32:F7:91:D9:5D:68:66:D5:77:CB:64:1D:81:A3 Certificate issuer: /CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Certificate serial: 010D0C9F4328584BC53AFF2105BC4BD2A58AB940 Authority key identifier: C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 397287 IP address blocks: 72.21.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3a:ff:21:05:bc:4b:d2:a5:8a:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be3aeb5-b99c-47c1-984f-7f6b2621da46 Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=c14c3e6d-9129-47eb-b7a8-1df63601fa0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:86:1b:1d:f4:cd:10:15:e8:71:1c:61:72:56: 1c:f2:1d:8e:35:c4:99:20:ff:6c:4b:36:76:ee:f6: 94:44:1c:42:39:39:e8:06:58:e1:8d:fa:78:c2:b0: b5:60:4d:87:30:b2:24:a1:c2:6b:66:ec:1b:9e:8c: ea:81:ce:23:11:59:87:22:87:9c:4c:58:73:24:ef: 13:df:31:2a:a6:89:73:10:3e:2e:6b:ac:58:dd:e9: d7:d4:72:22:2b:72:5f:11:e0:16:d5:24:55:dd:8b: 8d:88:88:1f:8a:ac:a4:98:f6:39:41:0e:27:e3:7e: bf:ab:44:e3:6a:4f:d0:fa:f2:e8:0c:d3:d2:c9:17: 1c:94:49:de:98:46:a0:6f:b8:87:82:5f:23:01:b5: d7:75:99:46:f0:24:ba:ac:7d:8b:4a:70:78:1b:9c: 8c:59:02:b4:df:14:4f:ac:87:11:81:00:0f:8e:ca: 13:9d:80:98:aa:51:9b:64:b5:89:d9:51:bf:a4:ad: 18:80:44:69:b9:9d:a3:69:83:e2:3f:96:be:bc:35: a8:98:f7:1a:1f:61:5f:0b:14:09:aa:ca:2c:6c:48: 84:88:9a:c8:31:23:8c:a9:97:7d:aa:f7:fc:1b:2e: 71:3e:b2:28:9a:af:e1:08:42:3b:29:51:41:f9:a4: 06:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:35:7C:C4:0D:32:F7:91:D9:5D:68:66:D5:77:CB:64:1D:81:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/ca7a5fe9-608d-3970-8ae9-c116ae955da7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46/4be3aeb5-b99c-47c1-984f-7f6b2621da46.crl X509v3 Authority Key Identifier: keyid:C5:82:C3:C0:D3:9F:A5:3A:EF:63:32:1D:DF:27:B1:F9:D8:5A:3A:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4be3aeb5-b99c-47c1-984f-7f6b2621da46.cer sbgp-ipAddrBlock: critical IPv4: 72.21.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:28:88:a0:9d:f0:34:50:ea:04:31:f9:6e:8f:6b:e9:74:d6: 2f:ed:b0:96:3d:f8:6a:4e:40:49:e2:44:18:8e:72:a9:c2:00: 49:ce:29:02:e9:ca:72:8b:55:54:60:39:d2:e4:30:6b:42:4d: 18:77:2c:72:df:ad:ab:3c:21:04:ac:70:cf:8a:92:40:53:cf: 20:9b:98:40:01:1f:01:e1:d6:3f:bf:57:b2:cd:78:df:ff:58: 35:9d:8c:00:bf:45:9a:ab:fa:94:5e:12:e0:ce:0d:31:72:a1: b4:b0:c2:85:19:b8:53:3b:76:f3:82:84:82:fd:4a:2b:f6:c3: c6:7a:91:2c:10:31:27:a7:b3:93:e2:4a:e2:d9:ce:96:b3:5e: 7d:8a:4e:92:52:18:b7:8f:0b:3f:e5:0d:e6:a6:56:ba:98:94: 6b:5e:72:3e:bd:5e:da:ff:9b:34:56:46:1a:35:d1:e0:c2:a6: d9:d8:fb:78:5d:dd:41:5f:54:75:3b:2c:85:9b:e0:23:ab:ce: 6f:76:9f:f6:88:c4:09:84:ea:81:62:86:87:2a:5c:77:8f:31: 04:43:16:28:6d:f0:c3:13:74:53:c8:c1:1a:74:97:8f:f9:c3: 35:81:48:c0:dd:54:d3:4d:1b:92:78:e8:9b:b4:5a:c2:fa:a0: 99:86:42:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOv8hBbxL0qWKuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJlM2FlYjUtYjk5Yy00N2MxLTk4NGYtN2Y2YjI2MjFk YTQ2MB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk YzE0YzNlNmQtOTEyOS00N2ViLWI3YTgtMWRmNjM2MDFmYTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYYbHfTNEBXocRxhclYc8h2ONcSZIP9sSzZ2 7vaURBxCOTnoBljhjfp4wrC1YE2HMLIkocJrZuwbnozqgc4jEVmHIoecTFhzJO8T 3zEqpolzED4ua6xY3enX1HIiK3JfEeAW1SRV3YuNiIgfiqykmPY5QQ4n436/q0Tj ak/Q+vLoDNPSyRcclEnemEagb7iHgl8jAbXXdZlG8CS6rH2LSnB4G5yMWQK03xRP rIcRgQAPjsoTnYCYqlGbZLWJ2VG/pK0YgERpuZ2jaYPiP5a+vDWomPcaH2FfCxQJ qsosbEiEiJrIMSOMqZd9qvf8Gy5xPrIomq/hCEI7KVFB+aQGQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGj9NXzEDTL3kdldaGbVd8tkHYGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YmUz YWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZiMjYyMWRhNDYvY2E3YTVmZTktNjA4ZC0z OTcwLThhZTktYzExNmFlOTU1ZGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGJlM2FlYjUtYjk5Yy00N2MxLTk4 NGYtN2Y2YjI2MjFkYTQ2LzRiZTNhZWI1LWI5OWMtNDdjMS05ODRmLTdmNmIyNjIx ZGE0Ni5jcmwwHwYDVR0jBBgwFoAUxYLDwNOfpTrvYzId3yex+dhaOgQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YmUzYWViNS1iOTljLTQ3YzEtOTg0Zi03ZjZi MjYyMWRhNDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0oiKCd8DRQ6gQx+W6Pa+l01i/tsJY9+GpOQEniRBiOcqnCAEnOKQLp ynKLVVRgOdLkMGtCTRh3LHLfras8IQSscM+KkkBTzyCbmEABHwHh1j+/V7LNeN// WDWdjAC/RZqr+pReEuDODTFyobSwwoUZuFM7dvOChIL9Siv2w8Z6kSwQMSens5Pi SuLZzpazXn2KTpJSGLePCz/lDeamVrqYlGtecj69Xtr/mzRWRho10eDCptnY+3hd 3UFfVHU7LIWb4COrzm92n/aIxAmE6oFihocqXHePMQRDFiht8MMTdFPIwRp0l4/5 wzWBSMDdVNNNG5J46Ju0WsL6oJmGQrY= -----END CERTIFICATE-----Generated at Fri Dec 5 01:46:15 2025 by rpki-client