This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa File: 154594e0-ee8d-31de-8d13-6d107201791f.roa (raw, json) Hash identifier: mExurc9mDKqplr5MmgQCV2BWoy+Qj1dv3rDXE1PL2IM= Subject key identifier: 72:95:9F:C2:39:68:3C:BE:C1:AB:DE:C3:AA:76:A1:A3:78:DA:51:15 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584BEAEB2E2D8B2F749744926AEA Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 393885 IP address blocks: 64.71.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:2e:2d:8b:2f:74:97:44:92:6a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=c8de099a-69de-4530-945e-b2c948e8fa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:5b:59:b8:62:a9:29:b9:8c:b5:d0:2b:e4: d3:d1:6a:21:98:60:1b:7e:00:fb:98:05:56:b7:7f: 0a:90:33:56:14:c2:42:e2:07:96:df:ac:83:8a:3f: 1d:dd:38:68:cf:c2:43:44:ff:77:00:cd:25:60:e4: ef:ad:e0:3c:0e:40:a9:6c:48:54:8c:5f:6b:c8:45: c1:05:0b:c5:f3:17:e6:8a:27:78:2e:d1:c3:eb:e9: 25:ec:1f:a0:fa:90:44:7e:07:dd:89:f1:56:51:27: 76:21:9c:7f:10:0f:08:e2:69:94:85:90:42:58:c4: 10:1c:ec:ba:3e:5c:73:c9:d8:84:aa:13:47:ea:5a: f3:5d:91:85:24:a5:d8:a8:85:3b:f0:b9:4e:be:68: 86:a3:b5:0a:34:a6:29:23:cf:91:9f:53:e2:82:98: 8a:9e:05:d1:49:1c:08:38:29:a6:c8:84:f0:f3:30: d1:08:65:1f:a1:63:a1:04:9e:34:20:7d:38:5a:1d: 17:db:01:df:b1:34:c9:cd:52:52:b5:a5:b5:b4:1d: 3c:a1:cd:1c:bd:1c:64:97:b6:7f:65:e9:1c:96:74: d6:8c:9b:f2:80:4d:0e:0f:24:63:05:97:2a:1d:04: 11:ee:0f:ab:63:b1:dd:c4:d9:70:73:d8:ff:f7:fd: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:95:9F:C2:39:68:3C:BE:C1:AB:DE:C3:AA:76:A1:A3:78:DA:51:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/154594e0-ee8d-31de-8d13-6d107201791f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d2:2d:82:8e:64:84:84:8b:e4:14:44:fd:bd:aa:62:40:27: 36:c8:36:ad:77:5a:a5:fe:0a:c1:f4:e3:2d:14:7c:b9:57:04: 05:57:c2:e6:56:07:3a:00:a6:44:43:70:5c:99:c1:05:2c:c9: 55:7b:eb:a0:80:21:8d:b6:a7:80:7f:b5:ba:f6:de:93:af:f2: 0a:c8:f0:46:23:b1:3a:a3:e3:4d:4c:10:86:57:a5:91:ad:4c: 74:1f:bd:71:d2:b2:6f:06:4e:7c:08:bf:64:1a:95:35:2e:69: 0d:b6:1d:ee:19:d1:1c:8a:ba:26:4a:23:43:03:ed:36:71:db: 94:60:91:0f:8d:ac:a9:d0:a3:de:00:bf:35:02:d4:17:e3:ef: 17:ac:99:90:22:5c:7e:99:f7:e3:82:14:ba:dc:86:3f:41:4d: 60:ee:93:4f:69:29:84:17:f8:a5:d4:bf:38:c4:fe:ce:af:24: f6:f8:cf:07:0f:a2:39:c8:02:d0:05:81:9b:5e:1c:99:bd:77: b5:4a:a8:50:81:bb:54:14:05:ad:3a:b0:e3:f1:46:c4:b7:e4: 83:6f:a8:e8:27:92:85:c5:68:8c:08:e2:d7:52:b1:3c:01:b0: 30:d5:54:ac:af:9e:be:ce:6e:56:41:8a:9e:00:4c:3d:10:a5: 35:3f:d8:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvq6y4tiy90l0SSauowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk YzhkZTA5OWEtNjlkZS00NTMwLTk0NWUtYjJjOTQ4ZThmYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7BbWbhiqSm5jLXQK+TT0WohmGAbfgD7mAVW t38KkDNWFMJC4geW36yDij8d3Thoz8JDRP93AM0lYOTvreA8DkCpbEhUjF9ryEXB BQvF8xfmiid4LtHD6+kl7B+g+pBEfgfdifFWUSd2IZx/EA8I4mmUhZBCWMQQHOy6 PlxzydiEqhNH6lrzXZGFJKXYqIU78LlOvmiGo7UKNKYpI8+Rn1PigpiKngXRSRwI OCmmyITw8zDRCGUfoWOhBJ40IH04Wh0X2wHfsTTJzVJStaW1tB08oc0cvRxkl7Z/ ZekclnTWjJvygE0ODyRjBZcqHQQR7g+rY7HdxNlwc9j/9/2FpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKVn8I5aDy+wavew6p2oaN42lEVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvMTU0NTk0ZTAtZWU4ZC0z MWRlLThkMTMtNmQxMDcyMDE3OTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQEfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnSLYKOZISEi+QURP29qmJAJzbINq13WqX+CsH04y0UfLlXBAVXwuZW BzoApkRDcFyZwQUsyVV766CAIY22p4B/tbr23pOv8grI8EYjsTqj401MEIZXpZGt THQfvXHSsm8GTnwIv2QalTUuaQ22He4Z0RyKuiZKI0MD7TZx25RgkQ+NrKnQo94A vzUC1Bfj7xesmZAiXH6Z9+OCFLrchj9BTWDuk09pKYQX+KXUvzjE/s6vJPb4zwcP ojnIAtAFgZteHJm9d7VKqFCBu1QUBa06sOPxRsS35INvqOgnkoXFaIwI4tdSsTwB sDDVVKyvnr7OblZBip4ATD0QpTU/2Cs= -----END CERTIFICATE-----Generated at Sun Dec 14 09:16:44 2025 by rpki-client