This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa File: b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa (raw, json) Hash identifier: 304EgBYPsOQVISggDVKT0MerAZ2tpf9UcpzPB4xUk2k= Subject key identifier: 38:A1:A7:1B:05:21:5B:51:4C:89:76:DE:1C:71:F2:9E:60:D4:1A:09 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0CBD1C5BAB5E40FE82200 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396561 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:cb:d1:c5:ba:b5:e4:0f:e8:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=ca6f7730-df35-41d8-ab29-59a1963a8e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:88:6f:f4:bb:4d:22:74:c5:db:f7:9e:82:66: b6:38:4c:f5:eb:8a:29:ba:88:81:25:04:8f:89:e9: d8:4c:82:9f:17:5f:9b:d8:2a:3f:b0:54:7f:84:ad: bf:d9:59:c5:77:42:15:7c:dd:bc:56:34:4b:67:dd: fc:da:ec:93:c3:ab:b5:9b:dd:05:71:01:dc:1b:7b: 0d:89:54:30:3c:6f:38:a0:c5:f4:d9:cd:c5:08:4f: 98:ac:83:4a:7a:78:55:62:ad:9b:8e:73:83:8e:80: 37:54:19:0f:9d:9a:09:8c:03:c3:d3:5d:28:6e:63: 8d:10:94:2e:b6:c4:bf:93:99:25:77:f1:bd:1b:1f: a3:ad:3c:ba:d9:6c:bb:89:2b:17:c6:a0:b7:6a:75: f2:8a:9f:10:3b:62:91:28:31:7d:fe:78:68:18:85: a0:e4:ef:f7:8f:d6:2a:a1:59:13:07:ab:b1:1c:54: 42:98:c0:bf:5d:32:5d:8e:7e:a0:52:06:a1:f5:25: 1d:e8:7c:e4:f5:bc:4b:a4:ab:15:a6:5b:c8:0c:30: 19:df:cc:2a:7f:4d:b0:9b:71:5d:b1:9a:5c:c4:26: 1e:6e:5c:a5:d5:1e:5d:cb:bc:57:42:6d:af:af:a7: 00:bb:12:c5:29:af:d6:c6:32:fe:88:e1:74:73:5e: ce:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A1:A7:1B:05:21:5B:51:4C:89:76:DE:1C:71:F2:9E:60:D4:1A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b0a3aa4d-25d1-3d71-a596-608aff0a0dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:3e:b6:eb:1d:5a:e4:1b:07:d4:8d:ad:4a:e9:d4:cc:0e:86: 80:14:6b:df:0b:61:91:71:cd:3d:03:00:0d:21:aa:b2:91:bc: 7a:14:bb:0e:40:7c:88:b4:30:c1:49:c9:a1:60:d3:39:2b:52: 23:af:10:fa:36:10:2d:1d:38:50:d0:35:93:9a:d3:b7:54:6b: 90:91:65:30:a6:fd:c5:6e:07:9a:b2:a1:11:84:f9:fa:94:bb: f0:da:a2:4a:51:05:cb:17:bc:3a:98:cb:c6:1e:e6:71:37:33: 2d:80:82:4e:2a:b7:32:3f:95:3c:36:70:ee:ce:c3:87:57:0e: 02:03:9e:58:58:98:95:69:19:89:4f:f9:28:20:d2:82:46:01: 0f:ee:f8:60:03:3d:cb:94:34:db:61:ab:2f:a0:64:d5:50:2d: 81:5e:f3:bb:0b:b8:63:d9:7e:8e:b5:aa:1d:95:bd:41:b6:31: f4:db:0b:58:0c:59:55:c1:2d:22:b4:13:3c:08:c9:ee:b4:b0: 29:0e:be:d9:7f:1b:6d:4a:ee:e0:a5:1e:f0:4f:cf:19:44:3b: 43:4c:36:2f:41:9d:f2:87:85:28:4e:84:82:e3:84:40:bc:af: 1e:44:54:77:a0:4a:96:80:10:3d:4d:36:aa:74:77:e0:68:d0: 83:d1:43:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwMvRxbq15A/oIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk Y2E2Zjc3MzAtZGYzNS00MWQ4LWFiMjktNTlhMTk2M2E4ZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoohv9LtNInTF2/eegma2OEz164opuoiBJQSP ienYTIKfF1+b2Co/sFR/hK2/2VnFd0IVfN28VjRLZ9382uyTw6u1m90FcQHcG3sN iVQwPG84oMX02c3FCE+YrINKenhVYq2bjnODjoA3VBkPnZoJjAPD010obmONEJQu tsS/k5kld/G9Gx+jrTy62Wy7iSsXxqC3anXyip8QO2KRKDF9/nhoGIWg5O/3j9Yq oVkTB6uxHFRCmMC/XTJdjn6gUgah9SUd6Hzk9bxLpKsVplvIDDAZ38wqf02wm3Fd sZpcxCYeblyl1R5dy7xXQm2vr6cAuxLFKa/WxjL+iOF0c17OdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDihpxsFIVtRTIl23hxx8p5g1BoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYjBhM2FhNGQtMjVkMS0z ZDcxLWE1OTYtNjA4YWZmMGEwZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBvPrbrHVrkGwfUja1K6dTMDoaAFGvfC2GRcc09AwANIaqykbx6FLsO QHyItDDBScmhYNM5K1IjrxD6NhAtHThQ0DWTmtO3VGuQkWUwpv3FbgeasqERhPn6 lLvw2qJKUQXLF7w6mMvGHuZxNzMtgIJOKrcyP5U8NnDuzsOHVw4CA55YWJiVaRmJ T/koINKCRgEP7vhgAz3LlDTbYasvoGTVUC2BXvO7C7hj2X6Otaodlb1BtjH02wtY DFlVwS0itBM8CMnutLApDr7ZfxttSu7gpR7wT88ZRDtDTDYvQZ3yh4UoToSC44RA vK8eRFR3oEqWgBA9TTaqdHfgaNCD0UOi -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:41 2025 by rpki-client