This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: 9YcUODYRrLowMc0LUMtKkbxpPWjmbBH8uga5tyyfztQ= Subject key identifier: 70:88:F7:42:46:22:4D:70:FF:E7:C2:37:E5:70:59:C6:A4:9F:23:CA Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584C55011F1C04975773887380C0 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:1f:1c:04:97:57:73:88:73:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=f340591c-b1dc-4076-800d-c740e73bcc7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e0:3a:5d:1b:88:f8:b1:e9:2a:34:bd:23:03: 6f:95:21:83:b2:55:09:49:86:9b:55:2d:c7:36:8f: 81:dd:c2:e5:8d:b4:5d:81:a9:3a:92:c6:72:6f:bf: c2:c8:49:ad:94:01:03:e0:c7:2d:52:9f:29:b6:30: 01:82:b9:8c:b6:5d:b0:65:bc:cc:b3:a7:74:f2:ea: 3d:35:b5:b0:29:1d:e1:c6:a8:9d:68:f0:27:ca:ac: 6f:7f:ff:7c:71:1b:78:53:a3:49:a6:fa:52:60:90: 51:c7:92:cf:0d:d8:98:9d:ef:2d:26:0c:ce:f2:b8: 2a:31:a7:79:14:b1:d0:83:e4:67:e4:c6:fd:20:8e: 70:23:92:35:43:d7:92:7f:5b:dd:c3:34:d4:76:ea: d8:a5:75:bf:13:0d:c0:f9:45:7d:03:70:07:6b:44: cb:f7:0f:d8:a2:d7:67:46:43:55:eb:fe:6c:06:f0: c1:11:da:76:62:f6:1b:a8:10:5c:76:53:16:f2:11: e8:58:63:dd:3b:ed:08:be:38:d3:8a:59:b3:48:89: 59:01:b6:bb:5b:36:a2:a2:42:01:6c:76:09:4f:ef: 35:7d:d2:b8:cb:45:75:5e:ef:a7:6a:51:6c:1f:5a: de:4d:4e:1a:62:10:3f:73:f8:38:37:01:18:b2:64: 65:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:88:F7:42:46:22:4D:70:FF:E7:C2:37:E5:70:59:C6:A4:9F:23:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6e:3e:19:5b:b7:c1:ec:74:6e:86:a0:97:83:54:89:2e:70: ef:ea:d2:00:c1:3b:39:1b:dc:83:74:9e:eb:e5:55:c6:08:74: f7:6d:b9:c7:b8:20:07:53:8b:7e:40:36:e2:0d:a7:08:08:8d: 15:ac:49:d8:1d:e5:06:97:1a:63:ec:93:d1:00:23:81:1b:ab: 5a:53:c5:34:c0:11:50:6f:8a:59:43:3d:18:74:4e:2c:34:c5: db:6a:ed:9c:00:82:56:88:cb:e4:c2:c2:d6:a9:94:a7:b7:26: a8:aa:13:bc:b3:ee:4a:93:6e:df:e3:83:72:8b:24:c2:85:2f: 3d:40:f6:09:c2:d6:53:0f:fe:ed:f0:17:e0:d4:c6:c0:b9:06: a7:89:f4:b7:e1:48:87:1a:cd:f8:7f:a0:6f:9b:23:00:62:17: a3:a9:d7:e8:b5:3f:8e:e3:ce:de:b0:5f:f8:ec:d5:0e:d6:57: 76:b2:69:4c:9c:9f:77:dc:38:d9:48:36:9b:1e:9d:fd:e3:ce: ed:63:14:a0:2e:6c:d5:6e:60:f9:50:90:10:6d:2b:e6:dd:54: 6b:88:e3:ba:3d:a8:02:96:8e:d2:0e:62:37:18:ce:f9:fa:a9: e8:a9:06:02:c4:17:b1:13:15:84:06:fb:e7:0f:80:34:0f:3b: 46:a4:7a:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVAR8cBJdXc4hzgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk ZjM0MDU5MWMtYjFkYy00MDc2LTgwMGQtYzc0MGU3M2JjYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreA6XRuI+LHpKjS9IwNvlSGDslUJSYabVS3H No+B3cLljbRdgak6ksZyb7/CyEmtlAED4MctUp8ptjABgrmMtl2wZbzMs6d08uo9 NbWwKR3hxqidaPAnyqxvf/98cRt4U6NJpvpSYJBRx5LPDdiYne8tJgzO8rgqMad5 FLHQg+Rn5Mb9II5wI5I1Q9eSf1vdwzTUdurYpXW/Ew3A+UV9A3AHa0TL9w/Yotdn RkNV6/5sBvDBEdp2YvYbqBBcdlMW8hHoWGPdO+0IvjjTilmzSIlZAba7WzaiokIB bHYJT+81fdK4y0V1Xu+nalFsH1reTU4aYhA/c/g4NwEYsmRlTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCI90JGIk1w/+fCN+VwWcaknyPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVuPhlbt8HsdG6GoJeDVIkucO/q0gDBOzkb3IN0nuvlVcYIdPdtuce4 IAdTi35ANuINpwgIjRWsSdgd5QaXGmPsk9EAI4Ebq1pTxTTAEVBvillDPRh0Tiw0 xdtq7ZwAglaIy+TCwtaplKe3JqiqE7yz7kqTbt/jg3KLJMKFLz1A9gnC1lMP/u3w F+DUxsC5BqeJ9LfhSIcazfh/oG+bIwBiF6Op1+i1P47jzt6wX/js1Q7WV3ayaUyc n3fcONlINpsenf3jzu1jFKAubNVuYPlQkBBtK+bdVGuI47o9qAKWjtIOYjcYzvn6 qeipBgLEF7ETFYQG++cPgDQPO0akemk= -----END CERTIFICATE-----Generated at Tue Dec 30 00:55:08 2025 by rpki-client