This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0331d8-61ee-3fb8-8085-5bad19d923d4.roa File: 1c0331d8-61ee-3fb8-8085-5bad19d923d4.roa (raw, json) Hash identifier: PBBtUgdGNIEGkSTi3iaiOlAmFJLHWVpI38pZgB0V/4U= Subject key identifier: B4:CA:42:21:1C:DD:D7:C3:F4:70:BE:0C:78:BE:FA:FE:87:96:78:68 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584BF8E0C66DE97D3F77C431CB80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0331d8-61ee-3fb8-8085-5bad19d923d4.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 22516 IP address blocks: 97.71.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:c6:6d:e9:7d:3f:77:c4:31:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=04acfe7a-6d76-4c3a-8e4c-6e5d898733e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:54:e9:b9:e2:6b:e8:c8:a6:c9:85:4f:89:b2: af:04:83:04:4f:e1:25:37:7d:e5:b6:2b:d4:3f:7f: 87:f2:c3:c6:ae:08:f8:f6:11:ab:40:7a:7e:5a:f5: 47:bd:5a:fc:76:3a:e4:d4:b0:47:ae:af:eb:e8:12: 6f:2f:65:e3:ce:a9:07:f5:40:0e:8a:0d:78:11:af: fa:18:e9:73:9d:fc:c1:98:61:d3:13:2d:f4:f2:0b: a4:ca:b9:80:ba:63:2b:4b:58:07:95:fb:3b:4d:b8: d6:6d:b8:28:3f:92:98:6a:d3:86:37:56:b8:c4:9e: 85:5c:dd:d7:db:3c:b8:00:f2:75:cb:6f:ab:93:ba: 04:e2:70:3a:35:ba:f6:91:fa:07:04:19:22:4c:f6: 7a:26:38:00:7d:67:5c:a3:e4:89:12:c4:6f:26:14: 1b:f9:1d:81:01:ce:f3:06:c0:43:00:c6:02:a1:17: 60:c5:41:c1:f2:97:77:cf:5c:e6:f2:9f:6c:51:6f: 42:26:e8:88:95:e7:fd:69:f1:7a:96:73:f8:22:27: 42:64:7c:4c:86:94:e4:c4:7f:bd:43:48:d1:7e:9e: a1:6d:a6:41:5f:82:44:d1:20:67:87:a3:f0:09:c1: 15:b8:ef:07:88:fe:4a:03:7e:10:58:26:90:ad:b9: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CA:42:21:1C:DD:D7:C3:F4:70:BE:0C:78:BE:FA:FE:87:96:78:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1c0331d8-61ee-3fb8-8085-5bad19d923d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.71.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:65:f9:45:bc:4c:66:6b:05:9e:21:58:ac:81:3b:f0:a9:38: 12:88:bf:cb:85:57:2a:0f:31:3b:69:97:a8:0b:ed:58:94:39: 26:de:7d:a0:c3:cc:a7:e5:24:17:73:d6:75:10:d0:2f:96:b5: 02:c0:4d:44:e7:13:cc:3c:26:98:d8:9a:73:ae:6d:02:cc:38: d0:ef:bf:ce:12:d6:32:e5:4f:dc:66:4c:2d:e2:dd:f6:c0:34: d6:8d:77:9e:1a:3b:ba:7c:1a:f4:8d:c7:7a:00:14:02:ee:95: 1f:c4:0b:79:bc:aa:6e:bf:83:3c:a0:a3:cd:d2:a5:e7:c3:55: f1:31:36:23:e4:ab:e6:9a:3a:0e:d8:f9:34:5d:df:f2:51:15: 6a:f2:98:57:73:af:74:39:da:24:73:fa:6b:0e:75:b8:83:ea: c9:e7:fd:2b:94:93:d8:93:e3:bf:20:22:e4:e2:8c:39:9e:51: c2:3f:da:d3:da:c0:a4:eb:15:36:55:a4:b3:f0:1c:f2:b4:de: 13:0c:8f:1c:6e:38:9b:4c:26:6e:b5:68:16:52:47:f6:02:9a: 95:ae:5a:31:5e:67:0e:9c:04:d2:dc:8c:5d:44:76:63:76:7d: 99:a9:be:b8:ed:63:cc:f3:56:96:78:5c:da:d7:67:20:01:8a: 08:a8:9c:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44MZt6X0/d8Qxy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk MDRhY2ZlN2EtNmQ3Ni00YzNhLThlNGMtNmU1ZDg5ODczM2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VTpueJr6MimyYVPibKvBIMET+ElN33ltivU P3+H8sPGrgj49hGrQHp+WvVHvVr8djrk1LBHrq/r6BJvL2XjzqkH9UAOig14Ea/6 GOlznfzBmGHTEy308gukyrmAumMrS1gHlfs7TbjWbbgoP5KYatOGN1a4xJ6FXN3X 2zy4APJ1y2+rk7oE4nA6Nbr2kfoHBBkiTPZ6JjgAfWdco+SJEsRvJhQb+R2BAc7z BsBDAMYCoRdgxUHB8pd3z1zm8p9sUW9CJuiIlef9afF6lnP4IidCZHxMhpTkxH+9 Q0jRfp6hbaZBX4JE0SBnh6PwCcEVuO8HiP5KA34QWCaQrblG9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTKQiEc3dfD9HC+DHi++v6HlnhoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMWMwMzMxZDgtNjFlZS0z ZmI4LTgwODUtNWJhZDE5ZDkyM2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYUcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtl+UW8TGZrBZ4hWKyBO/CpOBKIv8uFVyoPMTtpl6gL7ViUOSbefaDD zKflJBdz1nUQ0C+WtQLATUTnE8w8JpjYmnOubQLMONDvv84S1jLlT9xmTC3i3fbA NNaNd54aO7p8GvSNx3oAFALulR/EC3m8qm6/gzygo83SpefDVfExNiPkq+aaOg7Y +TRd3/JRFWrymFdzr3Q52iRz+msOdbiD6snn/SuUk9iT478gIuTijDmeUcI/2tPa wKTrFTZVpLPwHPK03hMMjxxuOJtMJm61aBZSR/YCmpWuWjFeZw6cBNLcjF1EdmN2 fZmpvrjtY8zzVpZ4XNrXZyABigionC0= -----END CERTIFICATE-----Generated at Sat Dec 6 14:10:29 2025 by rpki-client