This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa File: 433a0255-ffa3-385b-91f5-1418051da1ff.roa (raw, json) Hash identifier: aJ00+tuTbDATBMRj7FKmlhK2YKFiM7pQcqCLBsYkNJw= Subject key identifier: A3:78:7A:BA:79:8F:69:AA:FD:C4:FB:49:E2:01:AC:8E:00:48:26:02 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0DD47EE302478ABD34500 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 36619 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:dd:47:ee:30:24:78:ab:d3:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=f31c1035-2e08-49f6-ab17-308e5ccc42b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:b8:b2:65:70:69:bb:a9:a1:52:82:51:4f: 80:68:88:3b:7c:bf:9b:00:f9:54:60:40:40:90:86: 22:54:b7:d7:e7:16:ee:49:4e:16:b8:be:54:2b:d3: 77:e4:db:b8:6f:d7:47:26:5c:b4:ca:de:d5:f9:4e: 02:ca:fb:57:43:80:1b:9f:4e:d7:9e:9f:e1:d0:e8: d2:63:6a:99:58:81:bd:86:b8:bc:d8:4e:a7:cd:fc: e2:cd:d9:50:73:16:8c:9c:f2:de:82:15:df:16:7f: d4:cc:87:ef:28:66:1b:d4:ba:02:ab:98:0b:4f:7b: 7e:3c:31:7f:ce:b5:c8:3f:22:8e:4a:94:d5:b9:c8: 6f:f8:6f:fa:22:91:92:1a:86:99:21:33:17:ea:b9: b1:72:1c:be:aa:c9:b3:af:c3:f2:ca:cd:b1:43:af: 21:6f:24:47:58:c6:6b:dd:4c:db:53:d8:ca:4a:02: be:7d:b9:5d:89:d0:76:24:cb:b3:18:29:3f:59:08: b6:f9:bf:0a:9f:b5:1e:93:98:71:17:a2:8c:fd:29: 37:e1:4b:7e:98:0f:92:a3:3b:f0:0d:6b:63:25:b4: 6f:bf:6c:ff:94:5c:a5:cc:0a:dc:fa:45:93:89:07: a1:41:c8:a8:fe:74:69:dd:41:c4:5c:aa:ed:a0:a1: 68:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:78:7A:BA:79:8F:69:AA:FD:C4:FB:49:E2:01:AC:8E:00:48:26:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/433a0255-ffa3-385b-91f5-1418051da1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:10:f4:f9:95:e6:a8:c0:e4:86:1b:9e:ad:db:5d:a5:64:97: 5f:d9:45:ef:27:bc:c8:b3:04:2d:50:ee:74:4d:94:66:dd:c4: 0e:6f:c4:6e:31:04:8e:48:db:4e:cb:35:da:0e:3d:ee:80:e7: 88:26:27:0e:b1:59:c2:52:e5:7a:7e:1f:6d:5e:4d:b7:5f:78: f8:dc:d6:06:52:37:be:0e:1f:19:b7:33:59:57:80:eb:92:44: 51:ab:e7:ef:d3:86:d5:b4:12:e2:cb:09:06:50:34:db:21:ab: 4d:d0:23:55:2b:e3:68:74:53:35:4d:b7:9f:5b:7b:25:09:94: fb:00:ad:38:9d:97:cc:b8:ba:b2:ae:39:3a:e8:1d:ad:ac:f5: 5f:8b:e7:24:bd:da:00:42:48:47:48:57:17:ef:dc:32:5b:64: 7c:f1:1a:c4:65:e8:cf:c2:9b:0e:e7:7e:09:96:d2:72:30:1a: 25:e2:c8:07:58:fd:03:8e:f6:68:2d:b5:f7:d2:5e:d7:fb:82: 19:41:24:fb:1e:cd:e1:9b:81:ee:2f:47:06:af:c3:fd:90:d4: 84:57:4a:6f:2f:65:c7:54:74:7c:0c:61:91:6c:e8:c8:bc:79: 32:f1:1c:99:83:c8:84:4e:e2:15:9d:1e:17:d2:d8:c1:5d:1b: 9d:6d:c0:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwN1H7jAkeKvTRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjMxYzEwMzUtMmUwOC00OWY2LWFiMTctMzA4ZTVjY2M0MmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyve4smVwabupoVKCUU+AaIg7fL+bAPlUYEBA kIYiVLfX5xbuSU4WuL5UK9N35Nu4b9dHJly0yt7V+U4CyvtXQ4Abn07Xnp/h0OjS Y2qZWIG9hri82E6nzfzizdlQcxaMnPLeghXfFn/UzIfvKGYb1LoCq5gLT3t+PDF/ zrXIPyKOSpTVuchv+G/6IpGSGoaZITMX6rmxchy+qsmzr8Pyys2xQ68hbyRHWMZr 3UzbU9jKSgK+fbldidB2JMuzGCk/WQi2+b8Kn7Uek5hxF6KM/Sk34Ut+mA+Sozvw DWtjJbRvv2z/lFylzArc+kWTiQehQcio/nRp3UHEXKrtoKFoXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKN4erp5j2mq/cT7SeIBrI4ASCYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDMzYTAyNTUtZmZhMy0z ODViLTkxZjUtMTQxODA1MWRhMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB2EPT5leaowOSGG56t212lZJdf2UXvJ7zIswQtUO50TZRm3cQOb8Ru MQSOSNtOyzXaDj3ugOeIJicOsVnCUuV6fh9tXk23X3j43NYGUje+Dh8ZtzNZV4Dr kkRRq+fv04bVtBLiywkGUDTbIatN0CNVK+NodFM1TbefW3slCZT7AK04nZfMuLqy rjk66B2trPVfi+ckvdoAQkhHSFcX79wyW2R88RrEZejPwpsO534JltJyMBol4sgH WP0DjvZoLbX30l7X+4IZQST7Hs3hm4HuL0cGr8P9kNSEV0pvL2XHVHR8DGGRbOjI vHky8RyZg8iETuIVnR4X0tjBXRudbcC2 -----END CERTIFICATE-----Generated at Sun Dec 14 11:49:15 2025 by rpki-client