This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa File: dd8d1673-3853-3ac6-8b5a-648454432ae7.roa (raw, json) Hash identifier: KSMJtQvYHC69YyOqv2KIkjbyu/19KX4m+5ETEIhhwXY= Subject key identifier: B7:35:45:AE:A2:D3:39:C0:EF:B0:B2:93:0D:AB:06:D2:5F:D7:4E:F3 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584BC81D24324614AE0154D76700 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa Signing time: Fri 07 Nov 2025 14:48:05 +0000 ROA not before: Fri 07 Nov 2025 14:48:05 +0000 ROA not after: Thu 05 Feb 2026 14:48:05 +0000 asID: 3209 IP address blocks: 208.138.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c8:1d:24:32:46:14:ae:01:54:d7:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Nov 7 14:48:05 2025 GMT Not After : Feb 5 14:48:05 2026 GMT Subject: CN=50855a2e-c003-444f-905b-0f6eb851c43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:7f:e0:2e:f5:2d:22:05:7d:15:dd:4b:b0: 56:06:5e:cf:56:22:05:65:78:88:90:d7:fd:f5:fa: 23:6e:ed:c8:a4:93:58:d6:34:78:4d:2f:47:de:eb: b0:fd:1c:89:cd:cf:57:8c:33:1c:4d:8f:66:be:71: ff:67:ed:85:54:81:d1:fb:4e:dd:6d:93:30:82:01: 92:15:b3:a8:17:ea:c3:2d:c7:c0:ee:c7:db:d0:55: 8c:94:e2:25:5a:1f:cb:e2:7c:45:ca:0b:f4:27:d8: 58:a5:88:bc:84:66:6b:c6:7c:c4:1f:6d:e4:42:81: 98:c1:a7:44:a4:d4:16:d8:e4:09:15:0a:d8:f5:f7: a8:53:71:3f:67:89:48:81:00:d0:a3:05:96:c9:02: 93:b4:f7:97:01:a4:c8:62:bc:26:42:09:9a:6f:d2: 60:7a:02:cf:ad:48:db:b3:d3:bd:16:15:44:46:c6: 80:60:13:5d:39:58:7f:aa:ef:a1:06:60:86:92:a5: de:5b:b4:3d:14:32:7b:a4:05:85:86:c8:27:06:f8: c7:f5:61:14:e4:31:7f:25:60:2f:a8:13:52:32:4a: 53:31:86:9d:8b:65:67:9f:f7:38:55:7e:5f:38:c0: 91:bb:7d:89:fe:74:d2:c0:f3:ff:c5:8d:c5:0c:bf: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:45:AE:A2:D3:39:C0:EF:B0:B2:93:0D:AB:06:D2:5F:D7:4E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 208.138.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:84:02:bb:e3:6b:93:62:85:4e:f0:c2:85:1b:c6:74:be:82: e1:41:aa:55:34:82:49:1f:6f:95:70:cc:2c:71:96:0f:b7:6a: 2f:6e:63:36:80:85:f8:fa:05:9a:52:77:34:08:4e:45:5d:d8: 7d:d1:f7:8c:2b:0a:5b:03:cf:9a:6e:67:03:a7:09:bd:0c:c6: 40:73:8a:ed:62:ee:3f:6d:56:e0:cb:70:bc:ec:35:41:19:b1: d6:57:1e:8a:04:f0:bd:76:7e:60:a5:e2:98:18:63:75:08:fd: 75:cd:e1:b6:88:a4:d4:88:2f:56:0d:90:56:66:18:9f:df:7b: a2:9e:fb:ec:9d:db:2e:9a:a9:39:40:cb:56:23:91:79:02:6c: 7f:7d:58:12:70:1a:a0:e7:80:37:4e:21:b7:6e:c5:c5:27:70: 77:9c:34:8a:2d:b6:81:86:7a:47:82:a2:d9:ba:83:04:3a:de: a2:a3:34:97:55:c6:f0:99:95:18:f3:6c:ee:92:2b:60:8c:b6: c1:a2:26:17:53:df:11:6e:8b:19:a6:39:6b:af:60:69:c2:f6: e7:3c:f8:5a:38:82:66:83:c9:61:4d:50:05:68:4a:4f:e3:a6: a0:34:a3:1b:5e:12:03:17:dc:7a:4f:89:58:26:f2:ed:67:37: 1d:67:3a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvIHSQyRhSuAVTXZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI1MTEwNzE0NDgwNVoXDTI2MDIwNTE0NDgwNVowLzEtMCsGA1UEAxMk NTA4NTVhMmUtYzAwMy00NDRmLTkwNWItMGY2ZWI4NTFjNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9R/4C71LSIFfRXdS7BWBl7PViIFZXiIkNf9 9fojbu3IpJNY1jR4TS9H3uuw/RyJzc9XjDMcTY9mvnH/Z+2FVIHR+07dbZMwggGS FbOoF+rDLcfA7sfb0FWMlOIlWh/L4nxFygv0J9hYpYi8hGZrxnzEH23kQoGYwadE pNQW2OQJFQrY9feoU3E/Z4lIgQDQowWWyQKTtPeXAaTIYrwmQgmab9JgegLPrUjb s9O9FhVERsaAYBNdOVh/qu+hBmCGkqXeW7Q9FDJ7pAWFhsgnBvjH9WEU5DF/JWAv qBNSMkpTMYadi2Vnn/c4VX5fOMCRu32J/nTSwPP/xY3FDL/b8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLc1Ra6i0znA77Cykw2rBtJf107zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZGQ4ZDE2NzMtMzg1My0z YWM2LThiNWEtNjQ4NDU0NDMyYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0IqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqEArvja5NihU7wwoUbxnS+guFBqlU0gkkfb5VwzCxxlg+3ai9uYzaA hfj6BZpSdzQITkVd2H3R94wrClsDz5puZwOnCb0MxkBziu1i7j9tVuDLcLzsNUEZ sdZXHooE8L12fmCl4pgYY3UI/XXN4baIpNSIL1YNkFZmGJ/fe6Ke++yd2y6aqTlA y1YjkXkCbH99WBJwGqDngDdOIbduxcUncHecNIottoGGekeCotm6gwQ63qKjNJdV xvCZlRjzbO6SK2CMtsGiJhdT3xFuixmmOWuvYGnC9uc8+Fo4gmaDyWFNUAVoSk/j pqA0oxteEgMX3HpPiVgm8u1nNx1nOkQ= -----END CERTIFICATE-----Generated at Mon Nov 24 22:37:15 2025 by rpki-client