This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa File: 628a2640-8a50-3b2f-aae1-1862509d9497.roa (raw, json) Hash identifier: GSnh1/tRusUVIJFtET73RI9aLAwG86b5h7qnvfdxfo4= Subject key identifier: 8A:D5:C0:B9:0D:DA:B4:6E:00:5C:B2:38:68:05:BE:DE:EF:A3:60:8C Certificate issuer: /CN=5f1bb9ef-c69a-43f3-a558-7e7101515a25 Certificate serial: 010D0C9F4328584BE28B142E90B96F0FCDE68420 Authority key identifier: E5:89:C7:87:B0:D5:6A:1D:CA:5B:2F:DB:AF:5B:95:D1:BD:34:AF:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa Signing time: Mon 17 Nov 2025 02:00:31 +0000 ROA not before: Mon 17 Nov 2025 02:00:31 +0000 ROA not after: Sun 15 Feb 2026 02:00:31 +0000 asID: 5009 IP address blocks: 64.251.96.0/20 maxlen: 24 66.97.48.0/20 maxlen: 24 69.31.144.0/20 maxlen: 24 199.192.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e2:8b:14:2e:90:b9:6f:0f:cd:e6:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1bb9ef-c69a-43f3-a558-7e7101515a25 Validity Not Before: Nov 17 02:00:31 2025 GMT Not After : Feb 15 02:00:31 2026 GMT Subject: CN=98f1157a-0fac-4912-8020-260ee3d80be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:8f:3f:6e:9f:67:e0:17:c1:26:bd:7d:05: 50:8c:5f:2e:5b:a7:96:01:11:57:b5:56:c4:ba:11: 52:b3:f7:e8:ba:0e:e1:63:51:12:85:89:2b:0e:70: 74:6d:3e:bd:1d:0f:97:ea:84:29:56:3f:b7:64:08: 2d:0f:3e:7c:cd:2e:f4:e7:12:fb:61:05:b1:bf:29: 75:fe:a2:8b:c0:80:59:33:6b:11:5a:2d:18:e2:d2: 4f:40:f1:fa:ee:fd:6a:7d:b6:87:f3:62:3d:31:de: 2a:5b:5e:78:da:01:83:8d:a5:cc:ae:48:10:85:09: 4e:19:fa:f9:d7:ea:fd:3c:8e:c7:06:0b:d8:05:84: ba:23:ab:d0:51:50:01:96:ed:60:79:61:1a:16:65: 77:d6:db:22:a1:f3:56:9f:d3:67:00:94:f6:d5:45: ec:9a:a8:b5:e2:39:ec:89:b8:91:9b:87:05:13:b4: 73:52:49:15:cd:75:c9:56:db:32:9f:df:d8:c2:32: 5e:1e:6d:dd:24:f4:d4:19:7f:41:73:b6:a1:03:16: 79:fc:83:66:03:ca:5b:8a:9f:75:9c:91:86:72:96: c1:e4:6d:ae:ad:d1:5d:1b:fb:75:3e:17:72:4c:3d: 9d:9a:76:39:d0:d5:84:28:50:3f:f4:a1:27:8d:0b: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D5:C0:B9:0D:DA:B4:6E:00:5C:B2:38:68:05:BE:DE:EF:A3:60:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/628a2640-8a50-3b2f-aae1-1862509d9497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25/5f1bb9ef-c69a-43f3-a558-7e7101515a25.crl X509v3 Authority Key Identifier: keyid:E5:89:C7:87:B0:D5:6A:1D:CA:5B:2F:DB:AF:5B:95:D1:BD:34:AF:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5f1bb9ef-c69a-43f3-a558-7e7101515a25.cer sbgp-ipAddrBlock: critical IPv4: 64.251.96.0/20 66.97.48.0/20 69.31.144.0/20 199.192.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:28:ac:d2:61:12:3c:dc:f9:90:42:a0:b8:70:ab:27:eb:00: 8e:28:62:a3:0f:f2:5e:2a:4d:ba:48:20:d2:52:d2:cd:d5:59: 32:aa:d9:29:a6:c1:ea:f0:b5:4b:bd:e6:1b:b1:c3:84:47:fe: 13:2f:3e:06:be:fa:8b:8d:19:0b:3e:f0:a1:4e:56:b4:e5:bb: 6e:c6:4f:7e:c4:5a:e2:98:6e:fc:e5:ab:f4:68:37:2f:fd:ba: f4:91:f6:cc:af:a7:f7:e8:ae:0a:c0:e0:6c:16:0c:5d:0e:21: 0b:23:34:af:9d:78:d0:63:a9:87:58:11:71:60:af:ca:fe:9a: 52:0b:1e:68:ba:d1:a8:db:1f:50:3e:70:fb:bb:c8:aa:19:ec: a5:d1:63:35:7d:1f:59:0f:66:99:04:77:15:d3:07:55:7b:c6: 93:0d:69:1a:3d:88:de:d5:e2:2f:cb:43:91:f4:47:5a:3d:7f: 84:cc:ea:a7:d0:5c:23:8f:ee:5d:b1:67:17:96:e0:d9:fc:ef: 4e:10:5e:68:e4:20:11:41:aa:32:41:f6:b5:e4:61:77:3a:21: 59:8a:5e:c9:79:1a:5c:41:30:ba:df:7e:4c:ee:a7:dd:6e:4e: fd:ac:61:e1:ac:ab:0a:50:0a:0a:aa:de:5f:2c:a1:61:e6:29: 75:b3:62:42 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEviixQukLlvD83mhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxYmI5ZWYtYzY5YS00M2YzLWE1NTgtN2U3MTAxNTE1 YTI1MB4XDTI1MTExNzAyMDAzMVoXDTI2MDIxNTAyMDAzMVowLzEtMCsGA1UEAxMk OThmMTE1N2EtMGZhYy00OTEyLTgwMjAtMjYwZWUzZDgwYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzaPP26fZ+AXwSa9fQVQjF8uW6eWARFXtVbE uhFSs/foug7hY1EShYkrDnB0bT69HQ+X6oQpVj+3ZAgtDz58zS705xL7YQWxvyl1 /qKLwIBZM2sRWi0Y4tJPQPH67v1qfbaH82I9Md4qW1542gGDjaXMrkgQhQlOGfr5 1+r9PI7HBgvYBYS6I6vQUVABlu1geWEaFmV31tsiofNWn9NnAJT21UXsmqi14jns ibiRm4cFE7RzUkkVzXXJVtsyn9/YwjJeHm3dJPTUGX9Bc7ahAxZ5/INmA8pbip91 nJGGcpbB5G2urdFdG/t1PhdyTD2dmnY50NWEKFA/9KEnjQuwcwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFIrVwLkN2rRuAFyyOGgFvt7vo2CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZjFi YjllZi1jNjlhLTQzZjMtYTU1OC03ZTcxMDE1MTVhMjUvNjI4YTI2NDAtOGE1MC0z YjJmLWFhZTEtMTg2MjUwOWQ5NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWYxYmI5ZWYtYzY5YS00M2YzLWE1 NTgtN2U3MTAxNTE1YTI1LzVmMWJiOWVmLWM2OWEtNDNmMy1hNTU4LTdlNzEwMTUx NWEyNS5jcmwwHwYDVR0jBBgwFoAU5YnHh7DVah3KWy/br1uV0b00r58wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZjFiYjllZi1jNjlhLTQzZjMtYTU1OC03ZTcx MDE1MTVhMjUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQPtgAwQE QmEwAwQERR+QAwQCx8B0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHIorNJhEjzc+ZBCoLhwqyfrAI4oYqMP 8l4qTbpIINJS0s3VWTKq2SmmwerwtUu95huxw4RH/hMvPga++ouNGQs+8KFOVrTl u27GT37EWuKYbvzlq/RoNy/9uvSR9syvp/forgrA4GwWDF0OIQsjNK+deNBjqYdY EXFgr8r+mlILHmi60ajbH1A+cPu7yKoZ7KXRYzV9H1kPZpkEdxXTB1V7xpMNaRo9 iN7V4i/LQ5H0R1o9f4TM6qfQXCOP7l2xZxeW4Nn8704QXmjkIBFBqjJB9rXkYXc6 IVmKXsl5GlxBMLrffkzup91uTv2sYeGsqwpQCgqq3l8soWHmKXWzYkI= -----END CERTIFICATE-----Generated at Wed Nov 26 03:15:40 2025 by rpki-client