This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa File: e8b1a2de-db29-3c0e-843b-2204be6c7077.roa (raw, json) Hash identifier: 7Bf0Fh3DE+dYDuzMQbgNOfESPp/mcBKjvg4AaVSuaAc= Subject key identifier: AA:56:07:EB:7A:77:BC:25:77:A9:3B:C0:C4:CD:D2:7A:84:60:F5:8E Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584BC8059ACCC8693B2DBBC77F80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa Signing time: Fri 07 Nov 2025 14:00:38 +0000 ROA not before: Fri 07 Nov 2025 14:00:38 +0000 ROA not after: Thu 05 Feb 2026 14:00:38 +0000 asID: 174 IP address blocks: 206.228.112.0/21 maxlen: 24 207.13.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:05:9a:cc:c8:69:3b:2d:bb:c7:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 7 14:00:38 2025 GMT Not After : Feb 5 14:00:38 2026 GMT Subject: CN=bebf9ff1-d6d0-472c-bc7f-b57a4b4c99c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:97:30:ad:02:fd:5a:9b:f0:73:d2:d3:1e:11: 92:29:af:1d:68:36:57:30:f8:72:63:28:29:d2:97: ac:74:48:86:fb:53:a0:8e:da:0c:7d:ce:9d:4f:48: cb:c8:b9:f4:94:91:1b:b2:99:39:93:af:ea:dc:6d: 72:18:18:dd:59:66:96:bc:20:13:96:23:68:7b:06: 37:f9:58:d0:a0:47:22:d6:12:a7:f5:62:48:9b:87: ca:6c:6c:3d:ac:3c:0b:20:14:8b:cb:01:1a:bf:34: dc:5b:b5:2f:e1:70:14:e9:6c:7a:2a:74:88:90:84: a8:c4:63:01:e9:f7:95:54:27:c1:06:5c:94:1a:31: 6b:15:fb:2e:03:32:e0:00:db:77:84:2f:61:e9:48: 77:99:91:81:4b:4a:88:70:55:16:48:74:61:c7:6f: f6:8b:a9:39:76:cd:df:db:ac:79:63:2b:ae:51:f3: 78:20:f4:e3:3f:e3:98:95:c8:15:2f:ea:50:68:ff: ec:d0:8e:1e:2f:e3:75:45:dc:55:db:3c:eb:eb:b1: 52:2d:0f:65:74:97:f4:71:c2:03:0f:14:64:7e:72: 8e:38:15:7f:bd:77:1d:10:66:81:cd:cf:fe:c5:db: 69:89:d9:f9:4e:9c:13:99:27:6a:e6:dc:9d:7e:39: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:56:07:EB:7A:77:BC:25:77:A9:3B:C0:C4:CD:D2:7A:84:60:F5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/e8b1a2de-db29-3c0e-843b-2204be6c7077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 206.228.112.0/21 207.13.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:3d:12:6b:b0:e9:cc:6c:5c:b4:7d:bb:c2:79:5a:06:73:4e: 25:97:2a:fe:31:c4:ee:7e:aa:b4:a7:f3:e1:f7:f5:48:27:47: 9e:f3:a5:fa:d2:75:cd:65:fc:c0:89:0d:1c:c0:dd:56:a3:5e: d0:f7:3f:03:7d:43:84:de:fa:a1:9d:15:a9:0a:49:41:bb:21: e8:e9:df:91:d2:57:7b:5a:01:ad:14:c0:8d:94:fb:3d:6a:cf: 32:7f:2d:ea:c8:fb:71:53:0e:e7:49:05:e6:3a:4e:7c:1a:8b: a7:ad:22:81:f3:1b:81:b5:61:e6:b3:78:8c:76:c5:f5:25:35: 6f:df:8f:0c:75:ff:26:9a:d6:cf:4d:fc:4a:3f:2a:ce:61:44: 4e:4a:fb:76:b1:47:85:1b:d1:aa:a4:35:a1:6b:29:39:0a:eb: 38:92:63:c3:68:ba:28:82:82:f4:88:31:05:22:8b:b6:1f:be: a9:3e:fe:ba:4f:cd:55:1f:c0:9d:eb:90:23:56:8a:77:28:02: ad:58:d1:e4:51:7f:fb:40:a0:55:54:5d:1b:9b:cf:24:7a:0c: 8f:96:7b:40:00:cc:68:d2:3f:13:ec:e5:6f:ff:39:af:40:0d: 93:e7:11:a0:b6:a2:94:1b:dd:76:56:4d:4b:bc:80:8c:e4:f8: e1:a3:5c:43 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvIBZrMyGk7LbvHf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTEwNzE0MDAzOFoXDTI2MDIwNTE0MDAzOFowLzEtMCsGA1UEAxMk YmViZjlmZjEtZDZkMC00NzJjLWJjN2YtYjU3YTRiNGM5OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5cwrQL9Wpvwc9LTHhGSKa8daDZXMPhyYygp 0pesdEiG+1OgjtoMfc6dT0jLyLn0lJEbspk5k6/q3G1yGBjdWWaWvCATliNoewY3 +VjQoEci1hKn9WJIm4fKbGw9rDwLIBSLywEavzTcW7Uv4XAU6Wx6KnSIkISoxGMB 6feVVCfBBlyUGjFrFfsuAzLgANt3hC9h6Uh3mZGBS0qIcFUWSHRhx2/2i6k5ds3f 26x5YyuuUfN4IPTjP+OYlcgVL+pQaP/s0I4eL+N1RdxV2zzr67FSLQ9ldJf0ccID DxRkfnKOOBV/vXcdEGaBzc/+xdtpidn5TpwTmSdq5tydfjl8ewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKpWB+t6d7wld6k7wMTN0nqEYPWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvZThiMWEyZGUtZGIyOS0z YzBlLTg0M2ItMjIwNGJlNmM3MDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDzuRwAwQA zw3HMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALs9Emuw6cxsXLR9u8J5WgZzTiWXKv4xxO5+qrSn8+H39Ugn R57zpfrSdc1l/MCJDRzA3VajXtD3PwN9Q4Te+qGdFakKSUG7Iejp35HSV3taAa0U wI2U+z1qzzJ/LerI+3FTDudJBeY6Tnwai6etIoHzG4G1YeazeIx2xfUlNW/fjwx1 /yaa1s9N/Eo/Ks5hRE5K+3axR4Ub0aqkNaFrKTkK6ziSY8NouiiCgvSIMQUii7Yf vqk+/rpPzVUfwJ3rkCNWincoAq1Y0eRRf/tAoFVUXRubzyR6DI+We0AAzGjSPxPs 5W//Oa9ADZPnEaC2opQb3XZWTUu8gIzk+OGjXEM= -----END CERTIFICATE-----Generated at Tue Nov 25 06:30:47 2025 by rpki-client