This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa File: 3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa (raw, json) Hash identifier: +Ox8/jkCg5qvFVxlnISK5Me0MBTl+B7fUwWAnyQUwrw= Subject key identifier: E4:E3:A8:AE:4A:33:71:CD:63:82:A2:5A:80:64:8C:7E:C0:A4:19:3F Certificate issuer: /CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Certificate serial: 010D0C9F4328584BD354EE2E20E0006C9B394840 Authority key identifier: 04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa Signing time: Tue 11 Nov 2025 15:14:23 +0000 ROA not before: Tue 11 Nov 2025 15:14:23 +0000 ROA not after: Mon 09 Feb 2026 15:14:23 +0000 asID: 19211 IP address blocks: 66.235.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:54:ee:2e:20:e0:00:6c:9b:39:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cfc6d7b-a1e6-4d32-803d-0e5060c00725 Validity Not Before: Nov 11 15:14:23 2025 GMT Not After : Feb 9 15:14:23 2026 GMT Subject: CN=4db33b06-344b-4586-aed0-3704df3ee2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:87:8f:c4:f2:46:06:9b:37:d8:6c:ce:fb: 44:dc:5d:0b:45:71:e4:88:22:54:b2:77:36:ed:06: bc:5e:12:5d:db:78:36:36:e6:b7:01:30:b5:c9:16: b0:6c:14:75:61:9b:39:9c:15:27:41:5b:d1:1d:b1: 56:a7:ef:c7:b3:77:3a:a1:c9:a5:6a:20:05:86:51: 80:02:05:7c:da:66:a8:8b:b0:38:a1:02:00:6c:e2: 75:a9:46:92:50:0c:cd:dd:d3:e3:c5:63:c5:fd:6e: 3a:31:1d:47:34:45:13:63:bc:29:68:cd:62:cd:0a: 33:c5:c5:1c:76:60:f2:ea:35:c7:12:bc:a6:a0:20: 1b:45:5e:fa:b3:fa:82:16:6e:79:ce:90:2c:1a:fc: e0:c6:1c:78:cd:bd:6a:76:8a:4c:1e:92:8b:69:82: 3c:64:c5:db:61:25:3e:bd:83:d5:8c:28:50:89:54: 08:c2:cf:94:50:68:c3:86:49:d1:8f:be:07:7e:25: a5:04:74:61:b4:f5:7e:27:0d:b6:00:6f:5a:6a:8e: 07:ac:ef:1c:54:06:65:34:00:55:8d:20:fc:5f:12: 0f:88:6c:d4:0e:9c:38:1b:45:44:7a:79:64:8b:90: 72:02:f0:67:e8:93:1a:70:e4:84:d3:b1:70:86:0e: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:A8:AE:4A:33:71:CD:63:82:A2:5A:80:64:8C:7E:C0:A4:19:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3f51f917-15c6-360f-9df2-b1d062ea6b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.crl X509v3 Authority Key Identifier: keyid:04:25:0A:C7:4E:4D:D3:95:46:55:BB:39:96:37:F5:FE:A3:71:5B:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3cfc6d7b-a1e6-4d32-803d-0e5060c00725.cer sbgp-ipAddrBlock: critical IPv4: 66.235.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8e:7b:88:60:ef:17:ad:25:c5:3d:89:90:ba:66:ee:9d:4e: e6:41:fd:de:80:0a:db:2c:cc:48:d1:07:a7:70:f4:ef:92:56: 5e:c9:19:ab:af:b6:c7:da:d6:26:e7:40:15:08:4b:ba:aa:d7: 8e:86:92:08:5f:4b:57:5b:b2:59:c0:9e:a3:37:8f:76:f1:30: a6:56:2f:cb:b4:0b:28:62:ac:84:53:11:9b:86:1d:dd:08:2b: b0:36:5b:c2:ff:4b:9c:f5:67:ec:47:61:95:6c:3e:e9:ac:f0: ab:19:1e:30:46:46:6f:48:a8:8b:2a:97:dd:a9:38:ba:7f:00: f4:93:4e:18:f6:09:7e:6b:2f:96:58:05:3e:a0:91:3a:dc:c3: 6c:b8:d0:a5:22:3f:f9:b6:e8:8f:b2:b9:7f:3c:29:49:5c:65: aa:48:ef:74:22:4f:bc:c6:c2:c9:8d:d1:30:54:50:ce:ae:40: e6:d5:88:57:4c:7a:16:d9:67:de:86:05:60:dc:4a:d4:1e:c5: c7:97:1c:b6:d5:4e:dd:58:92:aa:fb:e7:2a:38:0e:12:3e:5f: f3:30:10:03:f3:37:4c:b1:64:90:44:75:0e:31:e1:dc:b0:ef: 53:52:db:27:21:9f:cf:29:d1:5a:ac:17:56:8b:8f:01:93:41: 92:01:0a:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTVO4uIOAAbJs5SEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NmYzZkN2ItYTFlNi00ZDMyLTgwM2QtMGU1MDYwYzAw NzI1MB4XDTI1MTExMTE1MTQyM1oXDTI2MDIwOTE1MTQyM1owLzEtMCsGA1UEAxMk NGRiMzNiMDYtMzQ0Yi00NTg2LWFlZDAtMzcwNGRmM2VlMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3iHj8TyRgabN9hszvtE3F0LRXHkiCJUsnc2 7Qa8XhJd23g2Nua3ATC1yRawbBR1YZs5nBUnQVvRHbFWp+/Hs3c6ocmlaiAFhlGA AgV82maoi7A4oQIAbOJ1qUaSUAzN3dPjxWPF/W46MR1HNEUTY7wpaM1izQozxcUc dmDy6jXHErymoCAbRV76s/qCFm55zpAsGvzgxhx4zb1qdopMHpKLaYI8ZMXbYSU+ vYPVjChQiVQIws+UUGjDhknRj74HfiWlBHRhtPV+Jw22AG9aao4HrO8cVAZlNABV jSD8XxIPiGzUDpw4G0VEenlki5ByAvBn6JMacOSE07Fwhg475wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTjqK5KM3HNY4KiWoBkjH7ApBk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2Zj NmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUwNjBjMDA3MjUvM2Y1MWY5MTctMTVjNi0z NjBmLTlkZjItYjFkMDYyZWE2YjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2NmYzZkN2ItYTFlNi00ZDMyLTgw M2QtMGU1MDYwYzAwNzI1LzNjZmM2ZDdiLWExZTYtNGQzMi04MDNkLTBlNTA2MGMw MDcyNS5jcmwwHwYDVR0jBBgwFoAUBCUKx05N05VGVbs5ljf1/qNxW2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zY2ZjNmQ3Yi1hMWU2LTRkMzItODAzZC0wZTUw NjBjMDA3MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQutgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASOe4hg7xetJcU9iZC6Zu6dTuZB/d6ACtsszEjRB6dw9O+SVl7JGauv tsfa1ibnQBUIS7qq146GkghfS1dbslnAnqM3j3bxMKZWL8u0CyhirIRTEZuGHd0I K7A2W8L/S5z1Z+xHYZVsPums8KsZHjBGRm9IqIsql92pOLp/APSTThj2CX5rL5ZY BT6gkTrcw2y40KUiP/m26I+yuX88KUlcZapI73QiT7zGwsmN0TBUUM6uQObViFdM ehbZZ96GBWDcStQexceXHLbVTt1Ykqr75yo4DhI+X/MwEAPzN0yxZJBEdQ4x4dyw 71NS2ychn88p0VqsF1aLjwGTQZIBCtY= -----END CERTIFICATE-----Generated at Fri Nov 28 08:29:03 2025 by rpki-client