This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa File: aed98eff-e4f0-38df-8a36-3576a3282f4d.roa (raw, json) Hash identifier: u+KNzk5AQv6+SyXGx+rjz5HeExNg3KYg7VwR5/jkSeg= Subject key identifier: F6:45:AD:9A:AF:5B:80:4C:AE:02:D0:3E:47:F0:3F:72:70:79:D4:93 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0CB280E55C57C631D99B0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 397206 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:cb:28:0e:55:c5:7c:63:1d:99:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=7cdf6885-0984-40cd-bd5d-025c7926abcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:8b:bd:de:f0:5e:80:92:bd:28:d6:21:c8: 93:7d:f9:dc:fd:18:1b:16:2c:7c:81:75:b8:db:d0: 22:bc:fe:6f:72:cc:4a:85:5e:e7:d9:2c:96:48:07: de:d5:b2:91:b7:bb:ca:28:77:9f:98:db:1b:ac:9d: bb:28:d3:39:64:fb:d6:83:3f:aa:08:91:e0:0b:61: 6c:c2:53:02:0b:d1:74:d9:eb:05:6d:c6:55:e4:57: 29:a8:57:dc:f5:7f:4d:7b:e6:4e:72:bd:76:c3:0f: 3b:dc:82:4b:47:73:a1:94:f7:89:8a:88:ec:1d:8d: a7:61:ba:26:11:e2:e3:ec:08:e7:d0:8a:67:7c:46: c8:36:df:8d:59:39:af:4e:6a:5b:f5:12:5d:84:f1: 13:92:05:30:3e:ce:56:93:0a:99:ed:42:f1:2e:cc: 2d:15:71:7c:c4:1e:45:44:2f:7c:78:ce:c5:63:6f: 21:35:16:96:09:43:9e:ab:7d:44:c8:ef:e5:0e:95: ff:85:9c:10:fc:11:a9:c8:cc:bc:84:56:28:3e:e7: dc:04:ed:b3:b7:5b:3e:16:30:8e:f6:8a:de:d1:14: 24:8a:ad:a4:30:a4:d4:e3:fd:6b:0b:35:77:9e:52: c4:b6:16:1d:b2:9a:5c:ff:18:86:6b:a3:30:c6:51: f9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:AD:9A:AF:5B:80:4C:AE:02:D0:3E:47:F0:3F:72:70:79:D4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/aed98eff-e4f0-38df-8a36-3576a3282f4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c3:b2:b1:10:21:9d:09:52:bb:1d:61:99:23:db:8d:f1:8f: e9:c2:2d:a7:de:69:55:f0:c5:74:2d:83:95:d1:78:14:47:52: 58:16:9a:68:ce:c9:af:32:d5:0f:b0:1a:63:40:0b:22:2d:d0: 68:09:9e:71:f5:b3:30:a0:ee:23:11:14:8b:d8:9d:1e:12:5c: 7a:5c:ef:7f:2f:73:d5:5a:24:ea:58:47:79:6f:73:33:f4:6c: 85:6a:30:c5:7d:2c:fe:02:7c:91:cb:68:4c:84:1d:3c:d9:8a: 74:fc:7a:cf:75:81:c9:f9:10:92:9d:0d:41:69:9c:d6:36:33: 7d:4d:19:0f:a9:9b:6d:ee:2d:62:32:b1:a6:ca:e0:95:f2:c8: 37:cd:d4:36:93:48:74:29:e7:50:76:52:79:90:4e:c0:fe:eb: d6:60:ce:fc:12:45:e9:27:c4:0c:1a:ce:48:66:db:8f:b6:27: 88:a5:86:60:55:1c:95:a4:c1:9e:9a:82:d7:eb:09:0d:bb:a4: 1b:05:8f:40:a6:4a:4e:7c:05:23:69:d9:43:94:50:3c:62:97: 10:84:12:3c:2f:fb:72:2d:6d:1f:9b:bc:f2:92:2d:7e:a4:a3: 78:d1:03:7e:12:ed:0a:92:21:f6:80:43:c8:ec:cb:0e:c5:c6: 6d:9c:f0:16 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwMsoDlXFfGMdmbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk N2NkZjY4ODUtMDk4NC00MGNkLWJkNWQtMDI1Yzc5MjZhYmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1qLvd7wXoCSvSjWIciTffnc/RgbFix8gXW4 29AivP5vcsxKhV7n2SyWSAfe1bKRt7vKKHefmNsbrJ27KNM5ZPvWgz+qCJHgC2Fs wlMCC9F02esFbcZV5FcpqFfc9X9Ne+ZOcr12ww873IJLR3OhlPeJiojsHY2nYbom EeLj7Ajn0IpnfEbINt+NWTmvTmpb9RJdhPETkgUwPs5WkwqZ7ULxLswtFXF8xB5F RC98eM7FY28hNRaWCUOeq31EyO/lDpX/hZwQ/BGpyMy8hFYoPufcBO2zt1s+FjCO 9ore0RQkiq2kMKTU4/1rCzV3nlLEthYdsppc/xiGa6MwxlH5ZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPZFrZqvW4BMrgLQPkfwP3JwedSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWVkOThlZmYtZTRmMC0z OGRmLThhMzYtMzU3NmEzMjgyZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxw7KxECGdCVK7HWGZI9uN8Y/pwi2n3mlV8MV0LYOV0XgUR1JYFppo zsmvMtUPsBpjQAsiLdBoCZ5x9bMwoO4jERSL2J0eElx6XO9/L3PVWiTqWEd5b3Mz 9GyFajDFfSz+AnyRy2hMhB082Yp0/HrPdYHJ+RCSnQ1BaZzWNjN9TRkPqZtt7i1i MrGmyuCV8sg3zdQ2k0h0KedQdlJ5kE7A/uvWYM78EkXpJ8QMGs5IZtuPtieIpYZg VRyVpMGemoLX6wkNu6QbBY9ApkpOfAUjadlDlFA8YpcQhBI8L/tyLW0fm7zyki1+ pKN40QN+Eu0KkiH2gEPI7MsOxcZtnPAW -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:41 2025 by rpki-client