This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa File: 3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa (raw, json) Hash identifier: jaDCRNRpdVrBmRG1FsbBSqvICL6SRwxtk30TIFzvv9E= Subject key identifier: DA:45:AB:8D:54:A2:8A:44:B6:D5:F3:B4:E6:E9:1F:18:3D:90:47:8F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0D1E961E2583702D3DA40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396542 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:d1:e9:61:e2:58:37:02:d3:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=c5966d36-3db5-46f0-910d-fb23813423f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ac:d9:29:22:f0:a8:b3:0c:8d:28:81:c8:83: 61:c2:49:d7:05:2c:22:9d:d7:20:a2:1a:45:21:81: c9:aa:75:5f:95:e6:0c:c6:cc:4a:34:3d:57:56:c0: 0b:2e:dd:58:90:ff:25:03:20:f0:f0:c6:1f:80:70: ed:3c:17:fc:1f:f3:18:6d:62:ed:e2:1e:76:6d:30: e3:73:63:b6:55:47:59:9b:f9:0f:e8:a6:eb:52:2d: ff:33:e9:ac:24:df:8a:7d:72:d0:f9:df:97:ff:97: 39:52:18:7f:39:f8:c6:b4:8a:65:bb:3c:15:c4:38: b8:37:07:d1:3d:2b:bd:0d:d7:7a:67:99:8d:26:74: 9b:a7:40:d1:ec:eb:70:ef:4c:1f:96:a9:31:19:db: 12:e8:28:cc:89:46:59:2a:45:6b:21:dd:28:d8:c8: 51:8a:76:82:1e:4e:7c:c3:61:9b:00:0c:55:3c:bf: 49:ec:01:97:fc:94:c0:cd:8a:a7:68:c6:d2:7b:de: e7:29:4f:39:02:d8:c5:3a:bc:55:c0:e3:88:6f:c7: 3e:e0:ce:8f:94:e3:e1:6c:f8:19:37:97:b8:58:6c: b5:8a:0f:b3:a5:87:09:9e:16:8d:01:89:8f:e8:38: 7a:af:8c:90:6c:37:a1:07:c4:9f:1d:a8:69:3e:f2: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:45:AB:8D:54:A2:8A:44:B6:D5:F3:B4:E6:E9:1F:18:3D:90:47:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/3ce0ffa6-2acc-3a1e-be14-e9a787f85f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8f:c1:79:c5:33:22:65:e5:3c:bc:58:ab:cd:1a:0d:20:4c: ca:52:cb:6c:e2:15:29:8b:29:8f:e5:e3:cd:35:9f:cd:c1:bc: e1:62:52:5a:40:63:18:4d:01:1f:10:6d:3b:2e:e5:20:1d:1b: 05:f7:2e:c6:c8:a1:ca:ba:b1:ab:51:7e:f1:c3:f0:df:87:b4: 5e:25:33:a7:1e:6a:fc:c8:6a:b4:a9:88:3f:15:ef:52:d2:a9: 96:86:a2:28:5f:3f:e1:d8:44:11:07:ac:ca:07:af:74:95:eb: 95:61:7f:c0:02:ed:bc:84:9b:31:ff:1c:bc:e0:75:0e:f1:d4: 2d:cb:30:33:09:f2:a7:96:49:ca:c3:b8:0a:be:ea:d0:3c:67: 7e:64:69:c7:f8:b8:6b:d8:83:11:f4:f7:e5:e8:d4:be:f9:6c: e3:73:f3:38:25:56:bd:a7:f6:e4:5b:bb:85:16:a0:eb:f6:32: 99:e5:e8:89:c0:a9:a5:46:9d:95:21:ae:dc:cd:6a:22:46:15: ec:f1:5a:a4:02:83:b2:0b:0b:0f:8d:eb:9f:06:6c:e1:2c:d1: 77:1b:15:06:85:4d:30:33:c8:1f:c8:6c:db:10:12:1d:ca:a2: ce:19:9d:ec:11:e3:3a:4e:9b:73:44:51:77:a8:09:4b:e1:17: 8c:6c:dc:95 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwNHpYeJYNwLT2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk YzU5NjZkMzYtM2RiNS00NmYwLTkxMGQtZmIyMzgxMzQyM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqzZKSLwqLMMjSiByINhwknXBSwindcgohpF IYHJqnVfleYMxsxKND1XVsALLt1YkP8lAyDw8MYfgHDtPBf8H/MYbWLt4h52bTDj c2O2VUdZm/kP6KbrUi3/M+msJN+KfXLQ+d+X/5c5Uhh/OfjGtIpluzwVxDi4NwfR PSu9Ddd6Z5mNJnSbp0DR7Otw70wflqkxGdsS6CjMiUZZKkVrId0o2MhRinaCHk58 w2GbAAxVPL9J7AGX/JTAzYqnaMbSe97nKU85AtjFOrxVwOOIb8c+4M6PlOPhbPgZ N5e4WGy1ig+zpYcJnhaNAYmP6Dh6r4yQbDehB8SfHahpPvJNoQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNpFq41UoopEttXztObpHxg9kEePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvM2NlMGZmYTYtMmFjYy0z YTFlLWJlMTQtZTlhNzg3Zjg1ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB8j8F5xTMiZeU8vFirzRoNIEzKUsts4hUpiymP5ePNNZ/NwbzhYlJa QGMYTQEfEG07LuUgHRsF9y7GyKHKurGrUX7xw/Dfh7ReJTOnHmr8yGq0qYg/Fe9S 0qmWhqIoXz/h2EQRB6zKB690leuVYX/AAu28hJsx/xy84HUO8dQtyzAzCfKnlknK w7gKvurQPGd+ZGnH+Lhr2IMR9Pfl6NS++Wzjc/M4JVa9p/bkW7uFFqDr9jKZ5eiJ wKmlRp2VIa7czWoiRhXs8VqkAoOyCwsPjeufBmzhLNF3GxUGhU0wM8gfyGzbEBId yqLOGZ3sEeM6TptzRFF3qAlL4ReMbNyV -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:38 2025 by rpki-client