This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa File: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (raw, json) Hash identifier: lAu5HclHr33tnh10VXR6FGnp2WEmJNF88Y0e8VOGEBA= Subject key identifier: A7:5E:D2:BA:E2:72:69:3C:76:7B:8F:EC:E9:42:FB:16:D2:48:E8:37 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584BCD9B030B04AABD0584BB0E00 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 393444 IP address blocks: 199.33.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:03:0b:04:aa:bd:05:84:bb:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=2443a3af-4148-4188-9302-76bdc2774865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b8:17:48:b9:af:cb:6e:2d:8d:b9:48:f4:23: fa:0c:52:7c:d1:ad:d9:33:0f:65:a5:f4:73:13:3d: db:7a:ea:bb:47:f7:31:7a:e7:6b:e2:a7:94:63:3c: e8:ab:c7:50:0b:38:1c:44:27:9a:f1:0a:2d:70:ce: f5:7b:37:b5:34:40:a8:f4:37:02:0b:46:dc:78:42: ae:2b:34:21:25:3d:74:65:66:67:0c:c6:36:74:fb: 0e:96:55:34:b8:92:33:78:2f:2d:87:61:37:95:42: 42:8f:21:eb:a0:bf:50:cc:d0:c8:0f:8e:62:76:2a: e3:13:50:b2:00:55:27:23:35:f6:b5:bc:a0:89:26: 1f:26:8f:5a:f7:4c:68:ed:eb:08:95:61:21:b4:cc: f3:ea:a3:af:c1:30:c2:a3:35:e3:73:0a:23:fd:b4: df:e9:a9:d4:6e:40:ac:ab:67:51:ca:38:09:bb:33: 26:2e:51:25:1e:72:85:e1:fc:d8:05:5b:a8:fc:ad: 47:fc:4a:66:7f:e4:6a:90:22:1e:5f:af:29:a0:9c: 91:bb:2b:94:c8:3f:05:aa:a4:fb:2f:ba:c6:d9:5e: d4:b2:ba:f8:e3:9b:79:da:0a:0f:e8:4d:2e:1a:c8: 48:d6:10:dd:be:53:c0:1a:c6:d8:6c:ea:dc:22:b7: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:D2:BA:E2:72:69:3C:76:7B:8F:EC:E9:42:FB:16:D2:48:E8:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/1404fac3-bbc2-308f-8af1-df72ff2c55be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 199.33.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:27:77:d0:93:5b:7b:5c:90:d8:66:66:55:bd:fd:4a:71:06: 34:2c:83:16:5c:65:bc:13:22:46:e0:d5:f2:75:53:4f:54:f4: 84:e6:1e:30:18:fd:19:df:16:44:68:51:f7:c5:8d:4d:15:f4: da:48:7c:44:f1:b1:6c:2f:39:24:01:8c:c1:28:d0:af:a1:78: 09:ff:cb:7d:29:44:fd:c7:b0:d0:86:14:b0:40:73:08:b6:a7: 96:57:80:77:ce:5f:53:ce:ba:63:e3:78:17:f1:63:aa:cb:99: 1c:e9:13:ba:9f:c3:7d:ea:51:66:21:75:50:1f:90:c4:62:bc: 70:86:a8:f2:d0:5d:91:af:44:47:38:97:89:17:ea:e6:f3:62: 45:e5:2c:47:60:7d:e6:44:4a:3b:77:c8:6b:03:5f:75:e9:47: bd:bb:bc:6a:92:fd:48:cc:60:86:1d:41:6f:46:a8:ab:3d:3c: e0:a9:25:ff:fd:f7:24:82:3d:c5:c3:13:be:8f:1b:c9:9a:4c: 3b:81:c6:35:42:4a:5d:88:41:32:6f:56:30:d8:7f:5d:ec:d1: 98:03:36:4a:d3:97:20:f2:65:dc:c2:76:81:f3:d7:62:cb:af: 55:9a:af:af:db:c6:a2:79:55:fe:50:33:eb:9e:26:9c:1e:4c: 7d:69:52:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmwMLBKq9BYS7DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjQ0M2EzYWYtNDE0OC00MTg4LTkzMDItNzZiZGMyNzc0ODY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbgXSLmvy24tjblI9CP6DFJ80a3ZMw9lpfRz Ez3beuq7R/cxeudr4qeUYzzoq8dQCzgcRCea8QotcM71eze1NECo9DcCC0bceEKu KzQhJT10ZWZnDMY2dPsOllU0uJIzeC8th2E3lUJCjyHroL9QzNDID45idirjE1Cy AFUnIzX2tbygiSYfJo9a90xo7esIlWEhtMzz6qOvwTDCozXjcwoj/bTf6anUbkCs q2dRyjgJuzMmLlElHnKF4fzYBVuo/K1H/Epmf+RqkCIeX68poJyRuyuUyD8FqqT7 L7rG2V7Usrr445t52goP6E0uGshI1hDdvlPAGsbYbOrcIrcE8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKde0rricmk8dnuP7OlC+xbSSOg3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvMTQwNGZhYzMtYmJjMi0z MDhmLThhZjEtZGY3MmZmMmM1NWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyHSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKknd9CTW3tckNhmZlW9/UpxBjQsgxZcZbwTIkbg1fJ1U09U9ITmHjAY /RnfFkRoUffFjU0V9NpIfETxsWwvOSQBjMEo0K+heAn/y30pRP3HsNCGFLBAcwi2 p5ZXgHfOX1POumPjeBfxY6rLmRzpE7qfw33qUWYhdVAfkMRivHCGqPLQXZGvREc4 l4kX6ubzYkXlLEdgfeZESjt3yGsDX3XpR727vGqS/UjMYIYdQW9GqKs9POCpJf/9 9ySCPcXDE76PG8maTDuBxjVCSl2IQTJvVjDYf13s0ZgDNkrTlyDyZdzCdoHz12LL r1War6/bxqJ5Vf5QM+ueJpweTH1pUvY= -----END CERTIFICATE-----Generated at Wed Nov 26 01:12:27 2025 by rpki-client