This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/a163ff4c-23b6-3304-be68-6017eeb9e220.roa File: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (raw, json) Hash identifier: Pf/B365zT6MABXsqQnlXoHX+HpGvmh5X1VsjGm24c+Y= Subject key identifier: 70:6B:B4:77:45:97:F7:26:34:40:FA:EA:33:F6:18:0B:99:65:71:2A Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584C00C55644E6B40C4722512540 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/a163ff4c-23b6-3304-be68-6017eeb9e220.roa Signing time: Thu 27 Nov 2025 21:52:15 +0000 ROA not before: Thu 27 Nov 2025 21:52:15 +0000 ROA not after: Wed 25 Feb 2026 21:52:15 +0000 asID: 19318 IP address blocks: 199.38.252.0/24 maxlen: 24 199.38.253.0/24 maxlen: 24 199.38.254.0/24 maxlen: 24 199.38.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:c5:56:44:e6:b4:0c:47:22:51:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Nov 27 21:52:15 2025 GMT Not After : Feb 25 21:52:15 2026 GMT Subject: CN=b6025365-2d68-4ba8-b821-bd99ec02694d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:0e:be:bb:96:83:0b:99:ae:b0:97:d5:da:1b: 82:86:74:d6:21:a4:af:fc:15:ff:cb:26:cc:f9:eb: 3c:18:bb:b6:5a:9f:31:40:d3:e5:bc:e2:f2:d7:bc: b3:34:af:ee:17:4a:e5:7c:fa:fd:8a:b9:57:8d:af: f8:2f:87:46:0e:8d:d3:d0:7c:51:48:14:e5:02:c7: 07:f4:66:85:2e:25:fd:3c:f4:59:5c:b5:6e:87:4c: f1:2b:6d:d2:5a:85:af:92:81:70:3e:16:49:6f:04: af:db:f0:4b:4f:e4:41:ea:be:96:ea:e5:c7:25:e8: 3e:a1:d7:8c:74:f6:69:92:9f:81:9d:65:56:72:6a: ed:75:a3:0a:8b:24:af:03:32:30:83:f1:9e:ba:74: 16:34:74:12:0c:02:ed:99:c9:37:f3:1a:32:ee:9f: 2b:49:e0:32:fd:04:10:1a:37:1c:96:0c:bd:c6:8e: 00:4b:55:ac:c7:65:38:23:98:2c:6d:17:15:e5:52: 5b:b5:fa:f8:15:97:68:c2:ec:e4:39:04:a7:5b:bb: cc:c7:09:87:af:a8:b6:1f:80:bb:9f:6c:75:79:10: 12:bf:68:98:b7:3a:bd:37:72:f5:bc:9a:bb:57:e0: 34:4e:fa:1c:77:ca:53:3a:67:96:16:21:6b:11:7c: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:6B:B4:77:45:97:F7:26:34:40:FA:EA:33:F6:18:0B:99:65:71:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/a163ff4c-23b6-3304-be68-6017eeb9e220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: 199.38.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:02:a4:cb:bc:ce:e3:16:73:61:3f:f2:6b:97:56:b4:f7:14: e2:5d:3d:4e:e2:09:84:bc:cb:c5:f5:f7:c8:28:7f:d6:d1:32: 0b:1f:f0:cf:a0:1d:45:ab:31:b4:b8:c8:8a:3e:46:e2:fb:fd: e8:22:e8:ba:9a:5f:3c:e0:e6:e4:22:46:46:8c:95:f9:b3:d2: e5:0b:1c:42:ef:2f:61:c5:d1:51:e3:88:7c:34:21:5f:10:13: a8:b9:86:78:c3:81:1e:2d:a2:06:0a:0b:09:98:32:57:ef:7d: f9:10:55:10:a0:6b:d5:1f:ad:60:ed:07:2c:c8:41:28:24:8a: 69:ae:e0:a0:98:f5:a9:38:7b:93:f1:c0:6d:fc:2a:61:70:91: 00:f4:68:0f:fd:71:33:60:62:95:2d:bc:5b:a9:87:a6:c0:bf: 8f:f3:69:68:af:2e:a9:e3:ed:2b:65:52:e9:9f:67:ff:02:48: 9f:f3:92:78:58:63:54:6a:74:01:e3:bf:4b:2b:8d:ef:a5:3a: 0a:91:d4:73:fb:61:85:39:a4:70:31:bd:7f:43:e0:57:cc:10: d5:ad:18:db:02:63:63:fb:fc:03:4c:7e:76:a8:85:54:ff:77: c2:e5:94:46:1d:cc:92:19:a9:50:6f:7c:b5:60:0a:ae:a7:49: 2f:10:76:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwAxVZE5rQMRyJRJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI1MTEyNzIxNTIxNVoXDTI2MDIyNTIxNTIxNVowLzEtMCsGA1UEAxMk YjYwMjUzNjUtMmQ2OC00YmE4LWI4MjEtYmQ5OWVjMDI2OTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q6+u5aDC5musJfV2huChnTWIaSv/BX/yybM +es8GLu2Wp8xQNPlvOLy17yzNK/uF0rlfPr9irlXja/4L4dGDo3T0HxRSBTlAscH 9GaFLiX9PPRZXLVuh0zxK23SWoWvkoFwPhZJbwSv2/BLT+RB6r6W6uXHJeg+odeM dPZpkp+BnWVWcmrtdaMKiySvAzIwg/GeunQWNHQSDALtmck38xoy7p8rSeAy/QQQ Gjcclgy9xo4AS1Wsx2U4I5gsbRcV5VJbtfr4FZdowuzkOQSnW7vMxwmHr6i2H4C7 n2x1eRASv2iYtzq9N3L1vJq7V+A0Tvocd8pTOmeWFiFrEXwh9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBrtHdFl/cmNED66jP2GAuZZXEqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvYTE2M2ZmNGMtMjNiNi0z MzA0LWJlNjgtNjAxN2VlYjllMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxyb8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4CpMu8zuMWc2E/8muXVrT3FOJdPU7iCYS8y8X198gof9bRMgsf8M+g HUWrMbS4yIo+RuL7/egi6LqaXzzg5uQiRkaMlfmz0uULHELvL2HF0VHjiHw0IV8Q E6i5hnjDgR4togYKCwmYMlfvffkQVRCga9UfrWDtByzIQSgkimmu4KCY9ak4e5Px wG38KmFwkQD0aA/9cTNgYpUtvFuph6bAv4/zaWivLqnj7StlUumfZ/8CSJ/zknhY Y1RqdAHjv0srje+lOgqR1HP7YYU5pHAxvX9D4FfMENWtGNsCY2P7/ANMfnaohVT/ d8LllEYdzJIZqVBvfLVgCq6nSS8QdrY= -----END CERTIFICATE-----Generated at Fri Nov 28 07:19:28 2025 by rpki-client