This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa File: 3cd4923c-6128-376c-8446-baffa366fd39.roa (raw, json) Hash identifier: vI/fUPydehiH2PkF1vVteb0FtMQIXegfHBz4f572PLU= Subject key identifier: 21:CB:64:7E:D9:C2:2C:E3:0C:3E:54:53:6F:FA:CD:7D:F2:C3:81:92 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584BC96AE5A235F93EF0C6F4E680 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 14618 IP address blocks: 208.90.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:e5:a2:35:f9:3e:f0:c6:f4:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=f16bd3fa-c4f2-4f58-a6ec-1424680cad6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a3:50:ca:eb:95:91:6a:b7:c2:6a:2b:0b:a3: 0f:f2:48:43:5d:58:40:e1:d6:c9:35:27:09:a8:14: bd:96:80:ad:09:46:b0:c8:2d:2a:f5:27:a9:dc:de: 4e:10:2c:60:34:4b:6f:bf:78:ad:ef:6c:a9:8e:48: 5d:b7:51:82:83:b0:4f:f6:f7:b6:cc:12:e4:55:78: 63:89:a7:d0:2e:93:a3:6d:7d:4b:ca:cb:ef:44:b9: bb:60:54:de:7a:39:28:11:68:68:80:9c:8f:1b:25: 7e:62:c0:35:55:2a:46:a2:e2:36:f4:da:4e:3c:59: cd:6d:b5:25:a3:4d:a6:f3:17:c5:89:f2:28:14:32: 7f:4a:6a:c6:4f:58:e4:21:d2:1e:5d:45:0e:de:d9: 49:77:6b:7c:71:1e:9a:34:8e:41:47:d4:29:93:7a: 34:cc:2a:8c:55:2a:79:af:ca:c3:05:76:52:92:e7: 5e:f0:99:96:70:39:8d:0e:ce:73:fe:b6:1c:1e:75: da:d2:84:99:a2:bd:d6:b1:c6:92:ec:3a:f3:3e:c6: 12:b0:18:cc:7c:17:c9:96:21:3e:9a:c7:2e:70:57: 85:00:5d:fc:06:ed:b5:ee:7d:75:a8:11:62:e3:74: 8d:88:3b:9f:72:b5:71:14:a9:f9:08:71:a9:dc:9d: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CB:64:7E:D9:C2:2C:E3:0C:3E:54:53:6F:FA:CD:7D:F2:C3:81:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/3cd4923c-6128-376c-8446-baffa366fd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:c8:64:c9:43:f1:00:9b:69:8f:bf:88:9f:f8:fa:04:5e:58: 3a:51:58:61:6f:b7:b0:1a:2e:e0:df:ad:7a:e2:f2:18:62:64: d7:eb:6f:b3:09:c2:65:dc:c9:87:57:14:1d:b4:24:43:90:66: b6:09:80:61:15:fe:8e:fb:bf:20:f2:7b:57:5d:bd:a7:be:d5: e3:35:6f:40:6c:c5:7e:eb:61:38:ad:26:63:aa:0d:2b:6c:08: 68:0f:25:af:30:a2:a9:25:6d:11:1a:89:b9:f2:96:7c:f0:11: aa:67:da:8b:0a:b6:5e:c5:9d:2c:28:19:c2:43:7b:ec:52:83: 4b:a9:0c:f0:c5:fb:90:61:45:41:e9:85:42:94:b5:c0:cd:e0: cb:67:8a:9a:b3:d2:19:b2:a3:26:b1:c9:7a:c3:ba:92:13:ac: 69:33:9e:88:7d:97:d3:84:7d:ee:2d:a7:d1:6b:44:da:e6:73: 9e:24:32:50:08:ae:e3:b8:58:2a:ff:79:aa:01:91:f3:13:75: 6e:db:dd:fb:55:3e:d1:99:28:00:3f:58:b6:72:90:a1:96:27: 44:24:01:93:17:eb:aa:42:60:ee:ae:1d:8d:73:7d:df:ef:c9: 4e:9e:64:92:d4:a4:d3:1f:12:37:80:7a:72:eb:0d:1f:9b:46: 35:17:bf:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJauWiNfk+8Mb05oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk ZjE2YmQzZmEtYzRmMi00ZjU4LWE2ZWMtMTQyNDY4MGNhZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6NQyuuVkWq3wmorC6MP8khDXVhA4dbJNScJ qBS9loCtCUawyC0q9Sep3N5OECxgNEtvv3it72ypjkhdt1GCg7BP9ve2zBLkVXhj iafQLpOjbX1LysvvRLm7YFTeejkoEWhogJyPGyV+YsA1VSpGouI29NpOPFnNbbUl o02m8xfFifIoFDJ/SmrGT1jkIdIeXUUO3tlJd2t8cR6aNI5BR9Qpk3o0zCqMVSp5 r8rDBXZSkude8JmWcDmNDs5z/rYcHnXa0oSZor3WscaS7DrzPsYSsBjMfBfJliE+ mscucFeFAF38Bu217n11qBFi43SNiDufcrVxFKn5CHGp3J0QzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHLZH7ZwizjDD5UU2/6zX3yw4GSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvM2NkNDkyM2MtNjEyOC0z NzZjLTg0NDYtYmFmZmEzNjZmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLIZMlD8QCbaY+/iJ/4+gReWDpRWGFvt7AaLuDfrXri8hhiZNfrb7MJ wmXcyYdXFB20JEOQZrYJgGEV/o77vyDye1ddvae+1eM1b0BsxX7rYTitJmOqDSts CGgPJa8woqklbREaibnylnzwEapn2osKtl7FnSwoGcJDe+xSg0upDPDF+5BhRUHp hUKUtcDN4Mtnipqz0hmyoyaxyXrDupITrGkznoh9l9OEfe4tp9FrRNrmc54kMlAI ruO4WCr/eaoBkfMTdW7b3ftVPtGZKAA/WLZykKGWJ0QkAZMX66pCYO6uHY1zfd/v yU6eZJLUpNMfEjeAenLrDR+bRjUXv68= -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:33 2025 by rpki-client