This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa File: 7af485d2-1411-389c-a251-d3d163a361e3.roa (raw, json) Hash identifier: FGibIcnK5pgwhQA52en9N7434QgM4hQKKY2Yb5r+2VM= Subject key identifier: 7F:50:DF:EF:E5:8B:34:25:F2:0C:E7:A9:72:16:4F:3B:F0:B8:33:00 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C3EABB580F43D776BCBF77E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 203 IP address blocks: 192.57.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:b5:80:f4:3d:77:6b:cb:f7:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=e6dc7307-072c-47eb-9824-2658cb0d3c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:b9:0b:e7:62:74:41:9c:84:31:6e:58:b5: 62:d7:7e:50:05:7e:f4:e6:fd:a9:ac:60:0b:d8:ee: 2f:d7:79:25:84:d1:b8:b8:67:15:1e:54:5e:38:ba: 75:7a:06:f2:c2:a9:3e:bf:96:53:1b:ef:e4:c1:2a: 3f:d8:5f:38:4b:75:cf:7c:d9:8b:ed:3d:e2:be:82: 72:91:5f:46:53:01:5e:cf:46:c4:c6:1d:74:59:21: 69:7c:96:57:61:66:fd:06:d5:94:d3:af:dd:5b:cc: 25:fd:0b:0f:c5:7b:87:fb:e3:44:58:00:e6:d3:a8: f2:fe:57:a6:73:98:47:21:01:a4:a8:20:81:6b:c5: ee:fb:e7:07:95:ae:33:f4:6e:f0:bb:ce:c0:3f:d3: 9e:2b:26:40:c8:b0:ae:31:e3:f4:a0:e1:b1:af:da: 7d:f6:44:99:64:b6:3c:25:ad:84:e6:63:1e:b2:87: 65:ea:bf:23:d8:86:8d:55:62:d9:03:7e:82:b8:49: 25:bd:83:b1:89:86:ef:ba:68:9c:59:01:4d:57:e2: 52:b3:6d:ae:53:18:4d:57:fe:fc:85:cf:5b:f0:0d: 73:a7:0d:96:36:43:69:4f:d2:1a:eb:df:7b:77:97: 82:21:7d:a6:bc:b4:5a:95:da:76:72:18:e2:64:5c: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:50:DF:EF:E5:8B:34:25:F2:0C:E7:A9:72:16:4F:3B:F0:B8:33:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/7af485d2-1411-389c-a251-d3d163a361e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 192.57.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:da:21:02:1b:12:af:24:d3:59:3b:4b:8c:c3:b1:42:01:c2: 83:df:33:fe:ca:e2:ec:9f:72:2b:02:d4:23:a4:06:55:9e:1f: ca:70:ac:29:40:7b:cb:4d:64:26:78:f1:ce:f1:05:a0:82:d2: 35:f2:be:1e:18:3d:40:32:a6:8d:f8:47:af:70:27:af:d7:1f: c3:6b:2a:cb:90:73:7c:8c:ef:9b:05:9b:af:92:7c:9f:9e:9e: f3:9d:f8:82:98:4d:b2:32:b0:44:2f:33:93:1e:57:e0:fd:a2: d9:70:c9:67:9f:9d:fd:a8:a8:32:5e:6f:fc:22:62:e7:bc:10: 7b:5e:8d:8d:f6:ab:99:40:33:3a:a5:25:79:28:bd:69:e5:25: 74:af:74:da:a7:ca:63:d0:c2:20:eb:5e:05:d4:08:37:cd:12: fd:f9:98:d9:14:4b:60:a7:f4:55:18:a2:e4:c8:3e:e3:96:f7: f4:a4:97:c2:1a:81:21:b4:cc:8d:ef:18:98:ba:9d:aa:65:6d: 3a:47:33:da:5c:ac:b8:64:9d:97:07:1a:a1:35:d6:b0:e2:19: 2b:f8:3a:ed:b3:b0:eb:ab:ee:85:d7:7a:0e:20:b8:7c:a9:57: fa:b7:e6:db:51:8d:1c:d4:f4:f6:bc:c1:83:2f:3d:03:a2:2f: 79:cb:ee:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q7WA9D13a8v3fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk ZTZkYzczMDctMDcyYy00N2ViLTk4MjQtMjY1OGNiMGQzYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsO5C+didEGchDFuWLVi135QBX705v2prGAL 2O4v13klhNG4uGcVHlReOLp1egbywqk+v5ZTG+/kwSo/2F84S3XPfNmL7T3ivoJy kV9GUwFez0bExh10WSFpfJZXYWb9BtWU06/dW8wl/QsPxXuH++NEWADm06jy/lem c5hHIQGkqCCBa8Xu++cHla4z9G7wu87AP9OeKyZAyLCuMeP0oOGxr9p99kSZZLY8 Ja2E5mMesodl6r8j2IaNVWLZA36CuEklvYOxiYbvumicWQFNV+JSs22uUxhNV/78 hc9b8A1zpw2WNkNpT9Ia6997d5eCIX2mvLRaldp2chjiZFx1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9Q3+/lizQl8gznqXIWTzvwuDMAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvN2FmNDg1ZDItMTQxMS0z ODljLWEyNTEtZDNkMTYzYTM2MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwDmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbaIQIbEq8k01k7S4zDsUIBwoPfM/7K4uyfcisC1COkBlWeH8pwrClA e8tNZCZ48c7xBaCC0jXyvh4YPUAypo34R69wJ6/XH8NrKsuQc3yM75sFm6+SfJ+e nvOd+IKYTbIysEQvM5MeV+D9otlwyWefnf2oqDJeb/wiYue8EHtejY32q5lAMzql JXkovWnlJXSvdNqnymPQwiDrXgXUCDfNEv35mNkUS2Cn9FUYouTIPuOW9/Skl8Ia gSG0zI3vGJi6naplbTpHM9pcrLhknZcHGqE11rDiGSv4Ou2zsOur7oXXeg4guHyp V/q35ttRjRzU9Pa8wYMvPQOiL3nL7vc= -----END CERTIFICATE-----Generated at Tue Dec 23 04:57:45 2025 by rpki-client