This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa File: affea73b-0180-3ae1-b688-f6f004b73e14.roa (raw, json) Hash identifier: Zb2nzSX4sNFEbOJqHXWF6T1Q2s/g/EAvWxROX9nFR/c= Subject key identifier: 83:46:D8:CF:32:31:BC:AF:64:65:90:FB:90:5E:E5:A0:DC:B6:B4:BC Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0F94FB5FC25D08F413B00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396593 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:f9:4f:b5:fc:25:d0:8f:41:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=8bea6de4-1fc7-465c-a787-3d9b87de2158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:dc:91:ba:f5:4a:fd:d2:25:75:44:ab:7e: d3:47:28:db:1e:0c:59:9f:30:5e:f4:76:a3:80:1c: 54:3f:76:e7:fb:62:9d:b9:50:78:7a:d1:e7:e7:14: 75:80:89:18:95:cc:2b:65:71:a1:e6:b4:9d:1a:cd: 55:6f:18:bb:a4:c0:00:e5:3c:bc:1a:bf:6c:fd:81: d4:ec:6d:87:f7:b8:7f:ad:e6:b7:2b:c2:3f:71:06: 96:6d:3a:03:a7:96:7e:c3:c5:ea:8e:74:37:a0:d9: 33:d0:4f:2c:ae:e7:e8:92:f0:5b:d9:28:bb:9c:78: 5f:3a:b7:63:e9:b4:3a:9e:5b:2d:ba:da:5d:f6:b9: 91:c7:8b:2a:71:62:c1:a2:ea:ba:d6:12:49:65:83: e2:50:0d:02:e0:cd:29:e5:3d:7d:ab:4f:5d:b7:86: 8b:e2:26:75:c5:55:49:63:80:b9:dd:44:85:eb:39: 4d:05:18:f6:d3:eb:bd:af:18:50:72:92:50:3d:7a: 7c:8b:48:a5:dc:53:0a:00:4d:a9:28:2a:7d:4e:fd: ae:9e:bb:2c:62:65:3d:33:a7:d5:a8:34:4a:f9:98: aa:4c:e2:20:8b:bb:ef:e4:d4:b8:b2:34:44:fe:1c: d2:7f:94:b7:e9:f8:1b:90:2a:03:a1:9f:2e:97:21: f0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:D8:CF:32:31:BC:AF:64:65:90:FB:90:5E:E5:A0:DC:B6:B4:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/affea73b-0180-3ae1-b688-f6f004b73e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:cb:9b:e0:47:3e:eb:82:8b:b3:c9:20:6f:3d:d0:a9:8f:91: 9c:fc:83:4e:66:a2:8b:ad:ed:a0:e8:0b:4e:b7:3c:95:df:a6: 0e:3d:76:d7:a8:32:04:3e:d3:c5:fb:d2:18:fe:ed:bb:d5:c1: 79:20:17:95:89:1d:59:52:34:51:ce:9f:1f:9b:54:13:45:91: 54:82:99:3e:37:6e:a8:bf:23:7e:ab:c2:59:2a:c4:f2:a3:aa: 1c:84:e3:46:fb:55:94:1b:c6:b4:3c:96:d8:92:5b:0c:d4:15: a6:2f:aa:16:39:a6:74:b5:d4:23:85:d8:d6:ff:39:16:56:75: 06:59:02:d3:c2:f0:87:95:76:27:4f:ad:35:31:8f:27:86:a9: 22:25:9f:2e:33:bf:ab:df:39:2d:3d:19:d3:c9:af:ef:73:d1: 3e:d4:3b:76:33:f5:00:e4:c4:98:37:da:ac:c8:4e:38:66:b8: 6f:fe:94:b8:e5:cc:6d:28:fa:b6:0d:fd:63:43:93:dc:2c:d0: 8f:a7:60:07:e9:af:05:ce:57:7d:2e:58:fd:65:05:ea:6e:1f: 80:1d:a7:f5:d3:6f:f6:83:41:fd:eb:80:8d:b8:93:7f:e5:f3: 08:d3:23:da:fa:2a:95:a6:2e:36:4e:04:af:3e:1b:c6:0c:b6: a1:41:1e:b4 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwPlPtfwl0I9BOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk OGJlYTZkZTQtMWZjNy00NjVjLWE3ODctM2Q5Yjg3ZGUyMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYXckbr1Sv3SJXVEq37TRyjbHgxZnzBe9Haj gBxUP3bn+2KduVB4etHn5xR1gIkYlcwrZXGh5rSdGs1Vbxi7pMAA5Ty8Gr9s/YHU 7G2H97h/rea3K8I/cQaWbToDp5Z+w8XqjnQ3oNkz0E8srufokvBb2Si7nHhfOrdj 6bQ6nlstutpd9rmRx4sqcWLBouq61hJJZYPiUA0C4M0p5T19q09dt4aL4iZ1xVVJ Y4C53USF6zlNBRj20+u9rxhQcpJQPXp8i0il3FMKAE2pKCp9Tv2unrssYmU9M6fV qDRK+ZiqTOIgi7vv5NS4sjRE/hzSf5S36fgbkCoDoZ8ulyHw7wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFING2M8yMbyvZGWQ+5Be5aDctrS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYWZmZWE3M2ItMDE4MC0z YWUxLWI2ODgtZjZmMDA0YjczZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBDy5vgRz7rgouzySBvPdCpj5Gc/INOZqKLre2g6AtOtzyV36YOPXbX qDIEPtPF+9IY/u271cF5IBeViR1ZUjRRzp8fm1QTRZFUgpk+N26ovyN+q8JZKsTy o6ochONG+1WUG8a0PJbYklsM1BWmL6oWOaZ0tdQjhdjW/zkWVnUGWQLTwvCHlXYn T601MY8nhqkiJZ8uM7+r3zktPRnTya/vc9E+1Dt2M/UA5MSYN9qsyE44Zrhv/pS4 5cxtKPq2Df1jQ5PcLNCPp2AH6a8Fzld9Llj9ZQXqbh+AHaf102/2g0H964CNuJN/ 5fMI0yPa+iqVpi42TgSvPhvGDLahQR60 -----END CERTIFICATE-----Generated at Sun Dec 14 11:47:47 2025 by rpki-client