This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json) Hash identifier: Juaozq5HweUMZjjdlcEMoG5rKoEJRrZLEoqKVo7WMNY= Subject key identifier: 3A:A6:7C:55:D0:8C:6A:41:42:56:DB:BF:0A:D2:A0:0A:58:1B:8F:F8 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584C083B5D02AD3D82986F3CAF00 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 8075 IP address blocks: 208.90.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:3b:5d:02:ad:3d:82:98:6f:3c:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=5517705d-33b5-4dff-b224-1e932f554eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:b4:72:82:27:06:e4:4f:d7:9f:0e:77:b4: 89:5b:0d:10:ff:8d:a5:da:52:1d:1d:17:37:0c:09: c4:9c:9a:06:21:9e:e4:fb:b0:ef:47:42:b4:90:ec: 94:e2:b4:b0:2d:51:1b:d0:de:10:bc:e2:c4:1a:0c: 9d:d5:ab:af:a9:bf:c0:1e:47:68:ea:34:a3:72:d3: 11:13:1b:5f:e3:67:95:b3:ee:6a:db:07:b6:d9:35: 31:8a:db:ff:49:4f:40:2d:a5:b6:54:80:43:98:90: 7d:69:4e:b8:b3:8f:a3:7d:ed:f8:e0:06:ba:b9:60: e7:3d:b6:b6:40:50:d9:fe:d4:bb:76:0b:6c:bb:43: f9:a9:01:ed:60:e2:44:88:59:73:c9:19:2b:ff:b3: 1c:69:69:f4:1a:3d:95:1c:4e:c0:9b:7d:17:ff:f6: cd:ae:81:5e:61:89:7c:75:a0:47:c6:76:e5:48:a0: dc:a1:f8:75:ed:7d:41:97:cf:fa:65:a7:33:13:d3: f9:a8:af:f3:d1:ea:2e:dc:94:c0:2e:7d:8c:5e:7b: 6f:49:12:1f:16:8a:ea:b5:63:ae:cc:41:cf:80:16: cb:de:00:ba:83:33:fc:31:f8:04:14:2b:14:3a:f9: 02:31:8b:c1:e8:e8:50:55:01:c9:13:5c:a0:54:ef: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A6:7C:55:D0:8C:6A:41:42:56:DB:BF:0A:D2:A0:0A:58:1B:8F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c7:c4:72:f0:41:28:17:f6:b6:d2:63:e6:a2:14:0b:26:3d: 45:eb:62:c1:b1:cd:86:03:c3:f9:84:0e:73:98:fd:ee:da:73: a4:9d:ee:7f:66:4c:f9:82:2e:fa:72:5f:0d:b3:e9:bb:f8:06: 8c:07:bf:c8:28:43:46:d5:e3:60:b7:70:90:15:b2:d7:ed:ad: 45:2e:e8:1d:3c:4b:16:fe:3e:ce:eb:ac:fc:b3:24:e7:3a:01: 95:65:ff:90:36:10:f7:ef:9c:8b:8c:7c:12:17:34:bb:f4:f6: 0f:ad:b3:51:8d:33:71:50:a0:0a:c3:d8:19:9c:e7:b8:d8:d4: 9d:a3:6f:41:ae:a9:52:b8:a3:a3:32:68:2f:ea:df:9e:84:52: 98:3f:35:15:97:14:ee:f0:18:0d:b2:39:54:f8:55:82:a4:f4: be:ce:c3:16:06:ca:07:5c:93:f1:9a:0f:15:05:3b:78:84:66: 3a:4d:31:8d:6a:80:73:26:c7:16:ad:e0:b8:d8:27:e5:34:db: b1:e3:b4:6f:d0:47:e6:05:c1:58:4d:37:bb:89:ce:11:42:b0: ce:3f:26:53:f3:e6:f8:14:1c:6d:33:4c:9f:18:d6:88:07:04: 4a:d9:8e:d0:a9:d0:cc:65:c9:a4:f4:3f:1d:09:a9:2a:87:dd: 44:28:35:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwIO10CrT2CmG88rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk NTUxNzcwNWQtMzNiNS00ZGZmLWIyMjQtMWU5MzJmNTU0ZWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCu0coInBuRP158Od7SJWw0Q/42l2lIdHRc3 DAnEnJoGIZ7k+7DvR0K0kOyU4rSwLVEb0N4QvOLEGgyd1auvqb/AHkdo6jSjctMR Extf42eVs+5q2we22TUxitv/SU9ALaW2VIBDmJB9aU64s4+jfe344Aa6uWDnPba2 QFDZ/tS7dgtsu0P5qQHtYOJEiFlzyRkr/7McaWn0Gj2VHE7Am30X//bNroFeYYl8 daBHxnblSKDcofh17X1Bl8/6ZaczE9P5qK/z0eou3JTALn2MXntvSRIfForqtWOu zEHPgBbL3gC6gzP8MfgEFCsUOvkCMYvB6OhQVQHJE1ygVO/uSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqmfFXQjGpBQlbbvwrSoApYG4/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvYTAyNDFhODctZWU2My0z Y2E0LTg3NjItMDFiZDAyMjcwN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfHxHLwQSgX9rbSY+aiFAsmPUXrYsGxzYYDw/mEDnOY/e7ac6Sd7n9m TPmCLvpyXw2z6bv4BowHv8goQ0bV42C3cJAVstftrUUu6B08Sxb+Ps7rrPyzJOc6 AZVl/5A2EPfvnIuMfBIXNLv09g+ts1GNM3FQoArD2Bmc57jY1J2jb0GuqVK4o6My aC/q356EUpg/NRWXFO7wGA2yOVT4VYKk9L7OwxYGygdck/GaDxUFO3iEZjpNMY1q gHMmxxat4LjYJ+U027HjtG/QR+YFwVhNN7uJzhFCsM4/JlPz5vgUHG0zTJ8Y1ogH BErZjtCp0MxlyaT0Px0JqSqH3UQoNVA= -----END CERTIFICATE-----Generated at Thu Dec 4 10:28:58 2025 by rpki-client