This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43cf805-433b-3fcd-ace7-1fb042ddf9ec.roa File: f43cf805-433b-3fcd-ace7-1fb042ddf9ec.roa (raw, json) Hash identifier: RoI2+NLDfwbRmlVHp5Djm9wOhzWWKaCGYKtfEq31/1w= Subject key identifier: 93:B3:00:1D:5A:A4:31:A2:C0:F4:C6:DD:C2:A5:A0:87:E2:F3:A6:FD Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0D1D29BDF3A44996F6CC0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43cf805-433b-3fcd-ace7-1fb042ddf9ec.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 36621 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:d1:d2:9b:df:3a:44:99:6f:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=20c4ec59-6d85-40e1-967d-d0946ab1a190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:91:c9:22:95:2c:b2:a7:41:1f:c0:b2:10:b6: 96:7f:8b:42:b3:5b:b2:e9:16:ad:26:26:3e:1c:c5: 14:4b:ef:7f:22:c0:2f:a9:69:34:14:cb:d0:a5:04: a3:fe:d5:e7:91:fe:ae:81:8b:1f:7b:4e:92:f0:40: 00:97:d7:3f:0f:e5:91:cb:64:cc:e3:43:ce:41:1e: 19:0f:71:70:81:9d:8d:72:0f:11:ef:16:68:ec:39: 2e:52:64:40:d1:b4:3f:5e:c1:aa:f3:86:8c:6f:b2: 76:8f:35:e7:d1:40:f6:8f:74:f7:c1:8f:7f:c0:b3: 9c:79:69:80:6a:a8:64:e9:c2:a4:9b:9a:28:e6:f6: 92:c9:2f:81:7f:95:18:e0:62:3e:e8:d6:66:2f:39: a6:12:35:8e:96:89:fc:46:b2:4c:dc:ce:24:89:25: db:79:2a:05:3a:7f:75:41:d9:a4:ea:65:e8:81:a1: 7a:0c:bd:44:ba:29:97:7d:2b:99:d2:08:66:b0:dd: e4:ff:32:0e:40:ef:60:b5:a6:41:0d:e4:33:57:52: e3:6f:24:de:05:2b:86:bf:cb:15:27:c8:de:6c:63: 2c:2d:d3:77:a0:2b:05:f8:5e:d2:b7:ca:ed:9a:3a: 88:80:fa:6e:be:a0:3d:29:19:9f:52:ed:50:c7:02: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B3:00:1D:5A:A4:31:A2:C0:F4:C6:DD:C2:A5:A0:87:E2:F3:A6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f43cf805-433b-3fcd-ace7-1fb042ddf9ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:47:50:00:18:08:9f:ff:13:5d:ff:a5:b5:d9:d4:f2:36:18: 19:4c:70:3b:50:b3:d7:84:a7:90:f4:58:89:43:21:a9:96:7e: 4f:a2:aa:0f:a2:a7:6b:22:21:96:b6:ed:a2:e4:7f:28:26:2e: 3d:3f:35:85:f3:a8:c1:1d:fc:2c:2d:78:79:cb:85:b8:4f:b8: 10:d5:cf:50:c8:48:6b:85:bf:23:02:62:22:c4:0f:f6:39:fd: ee:e1:ba:63:ac:b7:17:0a:eb:7e:b9:85:fd:91:62:20:66:7f: b8:47:1a:28:d9:12:10:26:61:a6:93:fc:5f:e7:02:82:cc:4d: 6d:90:fb:a8:6e:8f:bf:ce:bf:99:c9:fd:a9:69:b3:e4:14:c1: a9:82:07:26:cf:e2:a8:6c:46:f7:f6:43:a5:39:09:77:f4:8f: 46:e6:90:15:1a:17:2a:2d:41:a6:94:be:5b:a1:4b:99:13:4f: 4d:b6:48:8e:1f:d6:58:eb:5a:17:ae:6a:d5:8d:e0:5d:36:36: 34:f6:6d:ad:25:31:44:1a:3d:65:e1:0c:de:67:da:20:f9:7b: bf:ce:2b:01:8a:ef:83:e6:50:40:51:bb:37:7e:18:57:f7:03: 2a:a0:2a:05:78:1e:ff:67:44:6d:b3:ef:bc:f6:72:25:d5:f0: b5:a8:5a:6e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwNHSm986RJlvbMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk MjBjNGVjNTktNmQ4NS00MGUxLTk2N2QtZDA5NDZhYjFhMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5HJIpUssqdBH8CyELaWf4tCs1uy6RatJiY+ HMUUS+9/IsAvqWk0FMvQpQSj/tXnkf6ugYsfe06S8EAAl9c/D+WRy2TM40POQR4Z D3FwgZ2Ncg8R7xZo7DkuUmRA0bQ/XsGq84aMb7J2jzXn0UD2j3T3wY9/wLOceWmA aqhk6cKkm5oo5vaSyS+Bf5UY4GI+6NZmLzmmEjWOlon8RrJM3M4kiSXbeSoFOn91 Qdmk6mXogaF6DL1EuimXfSuZ0ghmsN3k/zIOQO9gtaZBDeQzV1LjbyTeBSuGv8sV J8jebGMsLdN3oCsF+F7St8rtmjqIgPpuvqA9KRmfUu1QxwLk0wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJOzAB1apDGiwPTG3cKloIfi86b9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjQzY2Y4MDUtNDMzYi0z ZmNkLWFjZTctMWZiMDQyZGRmOWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBfR1AAGAif/xNd/6W12dTyNhgZTHA7ULPXhKeQ9FiJQyGpln5PoqoP oqdrIiGWtu2i5H8oJi49PzWF86jBHfwsLXh5y4W4T7gQ1c9QyEhrhb8jAmIixA/2 Of3u4bpjrLcXCut+uYX9kWIgZn+4Rxoo2RIQJmGmk/xf5wKCzE1tkPuobo+/zr+Z yf2pabPkFMGpggcmz+KobEb39kOlOQl39I9G5pAVGhcqLUGmlL5boUuZE09NtkiO H9ZY61oXrmrVjeBdNjY09m2tJTFEGj1l4QzeZ9og+Xu/zisBiu+D5lBAUbs3fhhX 9wMqoCoFeB7/Z0Rts++89nIl1fC1qFpu -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:30 2025 by rpki-client