This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json) Hash identifier: s8/65CesRY4YWi/RvoMth3MEbAr7dPsMr9oQNlxvgUU= Subject key identifier: 23:AE:E2:D6:FE:50:04:62:6F:93:93:5F:BD:A4:21:BE:3C:45:D7:73 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584C22C0E1BD0CD7DF041196D780 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396998 IP address blocks: 64.68.192.0/24 maxlen: 24 2620:49:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Dec 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e1:bd:0c:d7:df:04:11:96:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=fb28971c-a177-4287-8e87-eaf98c3677b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:84:88:ac:e3:ff:bf:9c:c3:e9:77:46:a5:46: 1d:74:64:c1:81:ec:a2:0f:0d:c0:2c:05:8d:61:98: 1c:8f:df:14:f1:a7:f5:b8:61:b4:27:f8:26:5f:14: ec:38:55:f3:25:1a:93:17:d7:25:57:4c:84:81:5f: 14:8d:a8:e7:b2:ef:db:f4:03:b4:e1:4a:21:f6:06: 5a:3e:80:33:1a:7b:4e:b2:e4:8c:f2:48:9d:01:0d: e8:fd:c7:0a:a9:ce:f1:09:da:c3:b8:f4:fc:0a:3b: b6:f6:37:23:e5:45:56:ab:40:46:3d:0a:6c:9a:33: 70:a6:f3:47:9f:9f:39:92:f8:c5:54:ea:15:8a:02: 12:14:1d:ce:bf:93:92:88:03:9b:a8:71:83:5b:62: e3:bf:52:36:71:02:1c:43:5e:4a:29:52:20:d8:92: a2:bf:3c:b7:de:46:49:cf:6b:c4:50:77:14:8a:c9: dd:cd:65:5e:2f:16:16:59:86:cb:2f:6c:d4:e0:a6: 34:28:ef:65:7d:07:3e:87:8c:f3:8e:52:3c:e2:99: 12:45:a5:76:37:67:2f:7a:3c:20:b8:23:e3:ef:9e: 69:41:6e:7f:8b:33:5e:cb:9f:bd:6c:b3:00:b7:2d: 35:5b:b7:cb:ae:07:ac:50:5b:60:3a:08:f1:c2:3f: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:AE:E2:D6:FE:50:04:62:6F:93:93:5F:BD:A4:21:BE:3C:45:D7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/24 IPv6: 2620:49:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:fa:70:e4:2c:2f:d0:2b:4e:85:49:31:8e:18:a6:6c:45:36: 56:ce:4e:06:b5:a8:91:c5:d9:07:64:8d:84:b1:34:7f:7e:4b: ff:a5:8b:3a:70:44:72:7c:0e:61:b9:e2:34:3a:1c:93:06:64: 20:eb:8d:04:41:be:5e:02:05:57:e9:12:ea:55:41:c9:7d:be: 78:75:75:35:c5:d3:c3:4e:df:78:44:dc:67:2d:07:82:2a:0e: f5:d1:29:1f:d5:36:c1:5d:37:26:a8:7f:56:bd:61:c3:a9:ef: cc:91:90:c3:98:15:8e:93:e4:c9:99:7b:9a:ec:33:06:86:22: 42:8a:5e:17:bd:15:e2:cd:e8:3d:95:17:90:57:83:92:62:57: 3f:3b:ad:21:e2:e3:99:c1:c0:7a:19:67:3a:c0:61:c4:f7:c2: 02:05:b9:e6:56:f2:df:ee:00:76:61:cf:e1:1d:c3:af:e4:4b: e5:eb:c3:d4:2e:c0:52:f3:f5:44:2e:39:c8:2b:c2:eb:a9:f5: 65:33:d5:9a:55:c1:7c:22:8c:de:45:f1:ea:95:f1:c3:6f:5f: 0a:81:d7:5e:ad:9d:44:ec:aa:38:23:c0:8a:5c:48:d6:e6:ca: b3:c7:0d:d8:f4:96:be:c4:8c:e8:4c:16:ba:4a:58:ee:fe:be: ff:6d:a4:2a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEwiwOG9DNffBBGW14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZmIyODk3MWMtYTE3Ny00Mjg3LThlODctZWFmOThjMzY3N2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxISIrOP/v5zD6XdGpUYddGTBgeyiDw3ALAWN YZgcj98U8af1uGG0J/gmXxTsOFXzJRqTF9clV0yEgV8Ujajnsu/b9AO04Uoh9gZa PoAzGntOsuSM8kidAQ3o/ccKqc7xCdrDuPT8Cju29jcj5UVWq0BGPQpsmjNwpvNH n585kvjFVOoVigISFB3Ov5OSiAObqHGDW2Ljv1I2cQIcQ15KKVIg2JKivzy33kZJ z2vEUHcUisndzWVeLxYWWYbLL2zU4KY0KO9lfQc+h4zzjlI84pkSRaV2N2cvejwg uCPj755pQW5/izNey5+9bLMAty01W7fLrgesUFtgOgjxwj8j6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCOu4tb+UARib5OTX72kIb48RddzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZDlmM2JmMjAtNGMwYi0z MGEzLTlkOTgtODNmZGEwMzQ2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETAMA8E AgACMAkDBwAmIABJAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj/pw5Cwv0CtOhUkxjhimbEU2Vs5OBrWo kcXZB2SNhLE0f35L/6WLOnBEcnwOYbniNDockwZkIOuNBEG+XgIFV+kS6lVByX2+ eHV1NcXTw07feETcZy0HgioO9dEpH9U2wV03Jqh/Vr1hw6nvzJGQw5gVjpPkyZl7 muwzBoYiQopeF70V4s3oPZUXkFeDkmJXPzutIeLjmcHAehlnOsBhxPfCAgW55lby 3+4AdmHP4R3Dr+RL5evD1C7AUvP1RC45yCvC66n1ZTPVmlXBfCKM3kXx6pXxw29f CoHXXq2dROyqOCPAilxI1ubKs8cN2PSWvsSM6EwWukpY7v6+/22kKg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:08 2025 by rpki-client