This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa File: da3009a3-e762-39fb-8667-ec3c96699ae9.roa (raw, json) Hash identifier: XtHEGsjK+WfOf98d9m2nlzOieFgWklolDAoHhfX6bxY= Subject key identifier: 4A:52:A9:33:F2:95:88:11:C4:89:93:89:9E:BB:96:1F:5A:0F:CA:37 Certificate issuer: /CN=472e14ed-5432-4736-a4d2-f21c573a3c6c Certificate serial: 010D0C9F4328584BD2E7D21A19AB8363A28E2740 Authority key identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa Signing time: Tue 11 Nov 2025 11:34:33 +0000 ROA not before: Tue 11 Nov 2025 11:34:33 +0000 ROA not after: Mon 09 Feb 2026 11:34:33 +0000 asID: 19211 IP address blocks: 131.143.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d2:e7:d2:1a:19:ab:83:63:a2:8e:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472e14ed-5432-4736-a4d2-f21c573a3c6c Validity Not Before: Nov 11 11:34:33 2025 GMT Not After : Feb 9 11:34:33 2026 GMT Subject: CN=da2f187c-0610-4741-aa67-03808b140a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:14:54:10:9a:ae:97:c6:2c:14:33:ad:0c:d6: a8:f9:cb:74:1f:ed:d2:ab:f0:46:9c:03:10:00:44: 02:c9:9d:90:26:0b:51:16:83:b9:3d:c3:9a:0f:89: 9c:97:bd:7f:ef:c8:8e:22:1b:a4:0a:41:30:61:aa: 53:39:06:4d:9b:c9:74:ba:3c:07:4b:dd:69:78:1b: 81:76:c6:3d:4f:62:7d:b3:aa:5b:ef:7a:e0:5d:e0: f0:c7:cc:e1:ab:3b:bf:de:31:1b:18:6f:52:b8:30: 2c:8c:74:30:f4:9b:91:1e:20:88:a6:8a:98:61:75: 00:e9:5b:6e:7a:0b:60:0b:c2:85:cd:aa:76:1c:8e: 61:d8:9f:91:37:68:ba:49:6b:6e:fe:fc:35:e8:cf: 74:1f:43:78:87:ad:ec:b3:e8:12:88:cb:31:97:68: 39:00:ea:8a:98:b6:da:c7:bf:2b:e8:85:8a:13:a8: 7e:bb:17:32:c7:84:3f:e7:93:4f:09:d1:89:74:7b: ac:a1:a0:27:d3:aa:f0:61:bb:e3:a8:81:f9:80:a1: 82:7a:af:d1:73:a8:1f:9b:45:c1:04:30:30:45:d6: e0:7b:a5:09:c9:12:16:be:c4:ed:64:47:0d:0b:53: da:67:6c:79:85:ca:37:23:46:42:21:b8:ca:b3:2c: 3c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:A9:33:F2:95:88:11:C4:89:93:89:9E:BB:96:1F:5A:0F:CA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl X509v3 Authority Key Identifier: keyid:8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer sbgp-ipAddrBlock: critical IPv4: 131.143.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4d:e3:cf:aa:2b:86:8e:8c:58:9f:13:19:a8:ef:90:9d:26: c2:93:63:4a:31:76:eb:e6:e5:f6:5a:06:d8:89:ff:ee:05:ee: 2e:77:73:33:de:b9:21:56:c2:54:9d:63:a8:a8:e0:bc:2c:04: a9:43:10:cb:b4:cc:0d:23:64:96:58:84:fb:2c:62:01:09:c1: 9b:c0:a0:be:d2:6d:68:f3:e8:71:72:4b:2a:1f:c8:6c:b1:e3: 8d:3b:23:f5:b6:4e:6f:3d:e1:6b:63:da:45:9c:11:ce:57:5a: 21:2b:92:f8:65:1e:9d:2a:71:ba:5b:10:ce:cc:1c:30:67:ab: 2d:e9:6d:0d:42:93:ab:d4:f9:e7:2b:6f:55:fc:b2:76:4a:98: 32:30:ca:2e:c7:76:72:11:f5:2a:7f:50:4f:d4:f0:a3:ec:9f: cd:81:0c:04:11:2f:0d:78:7b:93:40:4a:07:84:a0:d9:c2:c2: d7:92:b3:d6:95:b9:11:9e:7b:43:3e:c6:7f:68:15:61:b3:b2: f1:92:d7:47:93:58:ab:7d:b7:d9:c3:8e:61:c0:7f:e1:26:01: 2d:cd:f4:38:89:02:9f:10:b2:27:c5:95:b3:ed:93:8b:83:8e: 69:92:9f:8d:c6:1d:53:56:19:1f:64:bb:f4:ef:6f:94:8a:78: 61:de:c3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvS59IaGauDY6KOJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDcyZTE0ZWQtNTQzMi00NzM2LWE0ZDItZjIxYzU3M2Ez YzZjMB4XDTI1MTExMTExMzQzM1oXDTI2MDIwOTExMzQzM1owLzEtMCsGA1UEAxMk ZGEyZjE4N2MtMDYxMC00NzQxLWFhNjctMDM4MDhiMTQwYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRRUEJqul8YsFDOtDNao+ct0H+3Sq/BGnAMQ AEQCyZ2QJgtRFoO5PcOaD4mcl71/78iOIhukCkEwYapTOQZNm8l0ujwHS91peBuB dsY9T2J9s6pb73rgXeDwx8zhqzu/3jEbGG9SuDAsjHQw9JuRHiCIpoqYYXUA6Vtu egtgC8KFzap2HI5h2J+RN2i6SWtu/vw16M90H0N4h63ss+gSiMsxl2g5AOqKmLba x78r6IWKE6h+uxcyx4Q/55NPCdGJdHusoaAn06rwYbvjqIH5gKGCeq/Rc6gfm0XB BDAwRdbge6UJyRIWvsTtZEcNC1PaZ2x5hco3I0ZCIbjKsyw8hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpSqTPylYgRxImTiZ67lh9aD8o3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzJl MTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFjNTczYTNjNmMvZGEzMDA5YTMtZTc2Mi0z OWZiLTg2NjctZWMzYzk2Njk5YWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDcyZTE0ZWQtNTQzMi00NzM2LWE0 ZDItZjIxYzU3M2EzYzZjLzQ3MmUxNGVkLTU0MzItNDczNi1hNGQyLWYyMWM1NzNh M2M2Yy5jcmwwHwYDVR0jBBgwFoAUi6K611FfgiFkZfsSGLPlrcLhd9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NzJlMTRlZC01NDMyLTQ3MzYtYTRkMi1mMjFj NTczYTNjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg48gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1N48+qK4aOjFifExmo75CdJsKTY0oxduvm5fZaBtiJ/+4F7i53czPe uSFWwlSdY6io4LwsBKlDEMu0zA0jZJZYhPssYgEJwZvAoL7SbWjz6HFySyofyGyx 4407I/W2Tm894Wtj2kWcEc5XWiErkvhlHp0qcbpbEM7MHDBnqy3pbQ1Ck6vU+ecr b1X8snZKmDIwyi7HdnIR9Sp/UE/U8KPsn82BDAQRLw14e5NASgeEoNnCwteSs9aV uRGee0M+xn9oFWGzsvGS10eTWKt9t9nDjmHAf+EmAS3N9DiJAp8QsifFlbPtk4uD jmmSn43GHVNWGR9ku/Tvb5SKeGHewxQ= -----END CERTIFICATE-----Generated at Fri Nov 28 07:52:37 2025 by rpki-client