This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa File: cd506063-bc38-3ca7-adcf-ef0907ec2013.roa (raw, json) Hash identifier: /ZjoYVm1xlhMAqUcs8RWxe07F78mVeE4q8cDkPS/k+E= Subject key identifier: BF:BD:65:72:6C:9E:1E:73:53:59:DC:A3:6A:15:EE:A4:F2:A2:E3:AA Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0EC035279324BF91E3780 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396586 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:ec:03:52:79:32:4b:f9:1e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=7a397bde-f354-40ee-8795-bbdbed78f25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:79:e7:79:f6:6e:ca:81:04:e7:95:a6:ea: 35:58:17:b0:fc:4c:19:09:b0:0c:cc:74:cb:38:48: 38:25:0e:ba:72:34:69:ed:b1:93:ea:61:47:d8:b4: ab:31:ac:01:bb:4b:f0:e9:65:76:47:81:9e:f1:72: a7:81:d2:b7:82:75:ef:0a:bd:54:bf:2c:d4:91:9d: 4e:c9:74:6c:7c:58:5f:ae:db:c5:e0:c5:19:e3:73: c9:93:f9:03:63:e1:68:74:6b:c0:ee:7a:90:af:ea: 7c:7b:c9:86:73:a9:8e:cd:be:d2:22:eb:57:cf:c1: 43:22:d2:40:8d:74:d6:c7:5c:7c:a0:61:dc:ac:28: 11:cd:9f:58:1f:48:71:94:bc:72:dc:52:2f:35:eb: 75:06:a3:d0:6d:77:99:2c:b5:d9:75:3f:4b:a3:4c: 9d:c9:30:2d:7c:09:20:17:29:d4:37:cb:37:4e:63: 1c:10:4b:f8:20:c2:12:66:b5:21:cf:5f:5e:f3:46: d1:fa:16:ce:1e:7d:a9:4d:72:ea:51:ea:ce:67:9d: f5:8b:9f:d9:17:56:ce:9c:10:ff:df:97:1a:c4:02: dd:e3:d8:ca:9e:2c:bd:d8:47:5b:c9:8a:3c:d8:48: ae:27:2a:b4:60:8e:0f:75:75:9c:d7:07:46:18:87: b8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BD:65:72:6C:9E:1E:73:53:59:DC:A3:6A:15:EE:A4:F2:A2:E3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cd506063-bc38-3ca7-adcf-ef0907ec2013.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:e6:fe:39:e4:34:49:f2:da:b5:6e:4d:2a:b9:90:95:92:55: 65:d6:da:cc:fc:38:ec:12:66:09:b9:48:c6:64:d9:a4:21:b7: a6:c1:55:99:e8:43:19:e3:9a:61:ae:55:bd:12:03:b1:20:24: e7:d2:14:af:89:83:32:ed:5a:96:71:44:cd:1a:28:b3:5c:ea: b3:02:87:ad:94:0b:31:35:d1:88:5b:3b:25:20:e9:f8:74:32: 09:89:2a:ac:d3:d9:07:5f:18:2a:8b:66:62:4b:19:1d:ae:04: 39:ce:fc:39:f7:cc:53:a5:49:ef:d2:b9:3a:8b:97:f8:d5:81: 10:30:60:76:1e:50:bf:ff:d7:d9:26:82:10:d4:f0:7b:2c:b3: 39:a1:49:8a:63:fc:1d:99:37:54:4e:31:47:03:0b:a2:03:52: 68:d3:12:9c:3f:29:01:3d:e1:6c:9a:d0:51:cb:0f:2b:31:54: 22:09:19:59:a1:e7:b1:8e:d3:47:9b:6f:a0:3f:26:8f:4f:0a: 2a:23:28:07:b9:a2:82:88:39:9d:2a:79:43:ee:5f:33:f8:b1: 5b:1d:7d:f4:cc:a2:7d:cc:e5:df:2e:27:f1:47:2d:eb:2e:3f: 64:77:38:41:4f:6a:f3:e4:2a:0b:51:67:ad:bd:df:cc:f0:40: e2:2e:49:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwOwDUnkyS/keN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk N2EzOTdiZGUtZjM1NC00MGVlLTg3OTUtYmJkYmVkNzhmMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAx553n2bsqBBOeVpuo1WBew/EwZCbAMzHTL OEg4JQ66cjRp7bGT6mFH2LSrMawBu0vw6WV2R4Ge8XKngdK3gnXvCr1UvyzUkZ1O yXRsfFhfrtvF4MUZ43PJk/kDY+FodGvA7nqQr+p8e8mGc6mOzb7SIutXz8FDItJA jXTWx1x8oGHcrCgRzZ9YH0hxlLxy3FIvNet1BqPQbXeZLLXZdT9Lo0ydyTAtfAkg FynUN8s3TmMcEEv4IMISZrUhz19e80bR+hbOHn2pTXLqUerOZ531i5/ZF1bOnBD/ 35caxALd49jKniy92EdbyYo82EiuJyq0YI4PdXWc1wdGGIe4UQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL+9ZXJsnh5zU1nco2oV7qTyouOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2Q1MDYwNjMtYmMzOC0z Y2E3LWFkY2YtZWYwOTA3ZWMyMDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBc5v455DRJ8tq1bk0quZCVklVl1trM/DjsEmYJuUjGZNmkIbemwVWZ 6EMZ45phrlW9EgOxICTn0hSviYMy7VqWcUTNGiizXOqzAoetlAsxNdGIWzslIOn4 dDIJiSqs09kHXxgqi2ZiSxkdrgQ5zvw598xTpUnv0rk6i5f41YEQMGB2HlC//9fZ JoIQ1PB7LLM5oUmKY/wdmTdUTjFHAwuiA1Jo0xKcPykBPeFsmtBRyw8rMVQiCRlZ oeexjtNHm2+gPyaPTwoqIygHuaKCiDmdKnlD7l8z+LFbHX30zKJ9zOXfLifxRy3r Lj9kdzhBT2rz5CoLUWetvd/M8EDiLknw -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:25 2025 by rpki-client