This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a9aef2e7-bb6c-36d8-8fac-a895cf8b1889.roa File: a9aef2e7-bb6c-36d8-8fac-a895cf8b1889.roa (raw, json) Hash identifier: J17p8xMgAP3Imh6bT+jEFar42CJfeLzpmbepzT7MYXw= Subject key identifier: B4:C7:BD:F4:30:01:49:51:69:CB:48:95:43:08:F1:85:D1:B7:F4:95 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584BF619195AC50A8C1A9D9BECC0 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a9aef2e7-bb6c-36d8-8fac-a895cf8b1889.roa Signing time: Mon 24 Nov 2025 02:07:08 +0000 ROA not before: Mon 24 Nov 2025 02:07:08 +0000 ROA not after: Sun 22 Feb 2026 02:07:08 +0000 asID: 30456 IP address blocks: 204.19.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:19:19:5a:c5:0a:8c:1a:9d:9b:ec:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Nov 24 02:07:08 2025 GMT Not After : Feb 22 02:07:08 2026 GMT Subject: CN=9828665e-e2ce-4ea0-84c3-764eee01c262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:47:e1:cc:9f:f2:00:b5:99:8c:39:d2:ed:44: 98:77:f8:7a:73:9e:b7:52:f7:d1:5d:f0:31:33:3a: 9d:08:33:cf:fe:37:1c:6a:95:df:3a:0d:ea:0f:a8: 9f:00:ae:46:54:9e:28:0c:1c:d1:b3:4a:1c:6d:f7: 17:4d:c4:e8:c5:de:89:ad:f2:9a:72:d3:f2:ba:42: b4:f0:c1:e6:1e:ea:ed:6a:82:3a:30:9b:9c:72:55: b8:10:11:0f:e1:38:de:05:53:2a:12:68:1a:15:46: a6:cf:46:24:05:ab:08:ba:90:96:8e:29:b0:21:9a: 77:ad:6d:64:34:49:e3:0b:65:f1:2a:b2:f0:de:d0: 64:d0:38:00:79:f2:52:9c:58:d6:ad:15:fd:b4:3b: 14:33:cf:85:97:86:d5:86:18:0c:e3:94:8f:a3:a2: 9b:17:79:fb:8e:57:62:2b:c1:53:75:6e:d1:cd:83: a3:c4:c7:3f:18:4e:a5:91:5f:f9:db:aa:c5:82:2d: 09:40:27:97:26:ff:0b:3e:dc:f3:66:7b:23:c8:b4: 11:2c:68:4e:c3:2c:b0:1f:97:c7:a5:40:b9:71:73: 91:11:c2:71:9c:9e:29:56:eb:92:b6:48:0b:02:b3: 09:e6:59:ce:7a:80:dd:44:36:b0:8b:61:ea:7a:1b: 0c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C7:BD:F4:30:01:49:51:69:CB:48:95:43:08:F1:85:D1:B7:F4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a9aef2e7-bb6c-36d8-8fac-a895cf8b1889.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 204.19.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:d2:b8:aa:00:c8:45:f3:92:32:72:cf:dd:cb:8f:18:f5: cf:f4:14:84:88:0e:4c:d2:77:3c:77:3f:84:54:a9:af:6d:92: 7e:96:16:82:fa:80:02:63:85:39:da:64:ff:de:fb:e3:5b:66: 7e:bc:cd:31:81:6b:a6:88:5f:9d:2b:86:5e:e6:ab:16:75:71: 8e:a0:01:8f:c1:39:c6:4b:4f:25:2f:fc:fc:80:88:57:8c:ff: d9:98:29:2f:eb:70:46:60:bf:a5:68:40:8d:47:7f:fe:f2:5d: 75:1a:0e:d4:f6:d6:98:d2:86:48:30:4a:ce:6e:4a:f4:46:ed: 1d:58:29:1d:de:2c:f1:70:25:ee:4a:09:e0:8b:b3:96:16:6d: 30:7d:80:b4:27:23:67:55:b8:35:27:dc:e7:b8:f9:56:31:85: 96:69:43:cd:ff:ce:ff:67:11:f1:6b:b8:3c:19:7e:2a:c3:f2: fa:42:3f:80:a3:45:85:38:8e:97:a4:90:63:48:e3:be:35:e4: 31:47:34:51:5f:5d:40:8d:a9:f1:5a:8c:1c:cf:8e:28:77:d2: 84:79:7a:9c:c0:8d:f1:a1:39:89:21:3e:e7:e5:98:70:76:d2: 82:1c:60:43:f4:28:b1:37:70:06:d5:c3:47:51:02:80:27:ef: 02:8f:3b:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2GRlaxQqMGp2b7MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI1MTEyNDAyMDcwOFoXDTI2MDIyMjAyMDcwOFowLzEtMCsGA1UEAxMk OTgyODY2NWUtZTJjZS00ZWEwLTg0YzMtNzY0ZWVlMDFjMjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUfhzJ/yALWZjDnS7USYd/h6c563UvfRXfAx MzqdCDPP/jccapXfOg3qD6ifAK5GVJ4oDBzRs0ocbfcXTcToxd6JrfKactPyukK0 8MHmHurtaoI6MJucclW4EBEP4TjeBVMqEmgaFUamz0YkBasIupCWjimwIZp3rW1k NEnjC2XxKrLw3tBk0DgAefJSnFjWrRX9tDsUM8+Fl4bVhhgM45SPo6KbF3n7jldi K8FTdW7RzYOjxMc/GE6lkV/526rFgi0JQCeXJv8LPtzzZnsjyLQRLGhOwyywH5fH pUC5cXOREcJxnJ4pVuuStkgLArMJ5lnOeoDdRDawi2HqehsMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTHvfQwAUlRactIlUMI8YXRt/SVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYTlhZWYyZTctYmI2Yy0z NmQ4LThmYWMtYTg5NWNmOGIxODg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7e0riqAMhF85Iycs/dy48Y9c/0FISIDkzSdzx3P4RUqa9tkn6WFoL6 gAJjhTnaZP/e++NbZn68zTGBa6aIX50rhl7mqxZ1cY6gAY/BOcZLTyUv/PyAiFeM /9mYKS/rcEZgv6VoQI1Hf/7yXXUaDtT21pjShkgwSs5uSvRG7R1YKR3eLPFwJe5K CeCLs5YWbTB9gLQnI2dVuDUn3Oe4+VYxhZZpQ83/zv9nEfFruDwZfirD8vpCP4Cj RYU4jpekkGNI47415DFHNFFfXUCNqfFajBzPjih30oR5epzAjfGhOYkhPuflmHB2 0oIcYEP0KLE3cAbVw0dRAoAn7wKPOxg= -----END CERTIFICATE-----Generated at Thu Nov 27 01:28:49 2025 by rpki-client