This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09d1d824-7b97-358f-8f62-29f1b8223e1a.roa File: 09d1d824-7b97-358f-8f62-29f1b8223e1a.roa (raw, json) Hash identifier: YIAQL6Kf8Rbhll6mnyKxbFAkJSqJl6D8cq9AhASbMFI= Subject key identifier: A7:12:66:E5:2D:FE:E8:B4:9E:F8:B9:FE:D0:2B:45:3F:FC:61:53:9A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584C0AFE6FE9C3180F2E83691F00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09d1d824-7b97-358f-8f62-29f1b8223e1a.roa Signing time: Mon 01 Dec 2025 13:45:23 +0000 ROA not before: Mon 01 Dec 2025 13:45:23 +0000 ROA not after: Sun 01 Mar 2026 13:45:23 +0000 asID: 216378 IP address blocks: 104.250.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0a:fe:6f:e9:c3:18:0f:2e:83:69:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Dec 1 13:45:23 2025 GMT Not After : Mar 1 13:45:23 2026 GMT Subject: CN=43ff2efd-5fdc-4ec9-8f37-fdbebc2a4c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6e:d3:17:25:ff:d2:70:0e:60:24:29:74:e4: b7:c5:c5:c6:14:c4:21:b7:ae:7e:a1:b8:63:62:6d: 89:fc:10:6f:4e:9f:a4:77:d4:88:a6:b1:e0:46:be: 53:61:03:ee:a0:a9:1a:de:e8:95:cb:77:d6:25:ab: 78:16:b0:45:bc:b3:6d:f2:a4:37:21:ba:f7:12:5d: 10:59:0c:1f:82:61:0f:95:e6:c0:df:4c:3f:31:98: 8c:49:b9:60:7f:0c:b7:5d:4e:b0:4d:6d:c5:b7:c2: 3f:a2:ed:93:53:76:0d:62:a1:cb:25:f0:60:e0:3c: 55:0e:83:48:97:95:4a:b0:0c:ac:a1:bb:00:0e:9a: cc:04:d6:6b:3c:85:49:6a:54:1b:b9:98:40:d9:38: e2:e3:ed:6a:5f:b3:44:64:21:62:cb:74:c7:3d:05: 17:fe:a2:c2:7a:24:f1:06:ee:5d:a0:21:f6:ac:77: 86:aa:7e:47:46:89:b4:ef:2f:6b:01:4b:d0:28:22: bd:e1:00:e7:05:d2:cb:83:fb:55:71:7a:af:9d:14: 14:5f:67:72:e3:e2:01:f3:eb:e9:2b:30:27:58:07: 1d:2b:ec:5d:e5:b9:01:c0:3b:93:fd:99:b7:f9:4f: c1:55:43:47:9d:b2:f7:28:d8:4e:f5:13:cd:48:3e: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:12:66:E5:2D:FE:E8:B4:9E:F8:B9:FE:D0:2B:45:3F:FC:61:53:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/09d1d824-7b97-358f-8f62-29f1b8223e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c7:51:e2:8d:66:dd:7f:96:65:76:06:d0:a9:71:86:ae:3a: d2:0a:a0:9c:1c:c6:9a:52:58:fc:34:56:e0:71:22:60:a4:d4: dd:46:7b:35:f0:9b:24:d1:6a:df:9a:92:71:aa:41:c2:54:1d: f2:74:3d:26:08:9f:a9:32:78:c2:d3:3f:c7:f6:22:1f:ff:37: 83:ad:b5:e6:5d:c3:c8:db:72:bb:fc:3c:cb:93:ed:dc:55:ff: 4e:4f:e8:43:82:b2:59:54:01:82:47:32:6f:ca:1e:0b:43:90: 21:6b:e2:79:04:a7:29:65:9e:7c:ef:09:13:a8:c6:d2:d0:f8: 97:1a:de:8d:72:43:a2:e6:6f:c9:59:99:45:92:28:ee:2c:78: 7e:46:7e:5e:fc:45:1f:78:e6:5e:3c:28:64:4d:9c:90:63:f1: 4d:b8:b4:5c:7c:da:15:28:cf:15:47:58:ee:6a:e2:32:1d:53: 95:70:e8:00:61:5f:59:17:85:60:c2:14:c0:10:c3:8a:56:eb: 06:4d:d4:65:19:f4:78:09:4f:01:11:d8:42:fa:bc:17:12:bc: d8:75:2b:78:2c:b7:79:03:07:77:11:05:1a:7e:38:2a:6b:99: 9d:eb:e6:90:e6:99:9b:cc:98:e0:23:b3:f4:85:77:25:68:6e: f3:60:58:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwK/m/pwxgPLoNpHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTIwMTEzNDUyM1oXDTI2MDMwMTEzNDUyM1owLzEtMCsGA1UEAxMk NDNmZjJlZmQtNWZkYy00ZWM5LThmMzctZmRiZWJjMmE0Yzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G7TFyX/0nAOYCQpdOS3xcXGFMQht65+obhj Ym2J/BBvTp+kd9SIprHgRr5TYQPuoKka3uiVy3fWJat4FrBFvLNt8qQ3Ibr3El0Q WQwfgmEPlebA30w/MZiMSblgfwy3XU6wTW3Ft8I/ou2TU3YNYqHLJfBg4DxVDoNI l5VKsAysobsADprMBNZrPIVJalQbuZhA2Tji4+1qX7NEZCFiy3THPQUX/qLCeiTx Bu5doCH2rHeGqn5HRom07y9rAUvQKCK94QDnBdLLg/tVcXqvnRQUX2dy4+IB8+vp KzAnWAcdK+xd5bkBwDuT/Zm3+U/BVUNHnbL3KNhO9RPNSD5/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcSZuUt/ui0nvi5/tArRT/8YVOaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDlkMWQ4MjQtN2I5Ny0z NThmLThmNjItMjlmMWI4MjIzZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDHUeKNZt1/lmV2BtCpcYauOtIKoJwcxppSWPw0VuBxImCk1N1GezXw myTRat+aknGqQcJUHfJ0PSYIn6kyeMLTP8f2Ih//N4OtteZdw8jbcrv8PMuT7dxV /05P6EOCsllUAYJHMm/KHgtDkCFr4nkEpyllnnzvCROoxtLQ+Jca3o1yQ6Lmb8lZ mUWSKO4seH5Gfl78RR945l48KGRNnJBj8U24tFx82hUozxVHWO5q4jIdU5Vw6ABh X1kXhWDCFMAQw4pW6wZN1GUZ9HgJTwER2EL6vBcSvNh1K3gst3kDB3cRBRp+OCpr mZ3r5pDmmZvMmOAjs/SFdyVobvNgWNU= -----END CERTIFICATE-----Generated at Fri Dec 5 13:47:15 2025 by rpki-client