This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa File: 004aa721-0c95-3726-9aca-e862d11c0d18.roa (raw, json) Hash identifier: ZoWO8nXUSMDpaVD3yx2t34l7KMDhpfNV1S38r7e6orY= Subject key identifier: 09:60:A6:83:05:4D:65:E3:5D:08:F4:57:02:02:F4:CC:68:74:0D:D0 Certificate issuer: /CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Certificate serial: 010D0C9F4328584BE4E5433E9D2FBF7835D73B80 Authority key identifier: 6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa Signing time: Mon 17 Nov 2025 22:13:56 +0000 ROA not before: Mon 17 Nov 2025 22:13:56 +0000 ROA not after: Sun 15 Feb 2026 22:13:56 +0000 asID: 4922 IP address blocks: 199.187.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e4:e5:43:3e:9d:2f:bf:78:35:d7:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f1d9e6-0be2-4baa-847c-d665c807eddd Validity Not Before: Nov 17 22:13:56 2025 GMT Not After : Feb 15 22:13:56 2026 GMT Subject: CN=3a73588a-b475-4ea4-9593-056ebf90f394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:52:e1:d3:75:2b:92:ea:2f:d7:78:88:b4:0b: 39:e5:52:d2:fc:8d:6f:c5:88:59:39:f9:db:16:cd: 3b:d1:02:83:14:13:f9:93:f2:c5:4b:0f:6b:ce:01: 96:55:e2:c8:b3:94:71:d6:e5:96:5c:fa:bf:94:dc: 09:d9:81:31:42:32:99:d6:fc:d8:63:25:d4:00:a4: 39:b3:87:3b:da:17:5e:0a:e2:34:0b:54:0d:e4:6d: 6c:41:30:b6:a7:d4:7a:ee:73:46:fb:a0:d9:9e:d3: 6f:c4:47:57:71:b6:61:28:a5:71:21:b2:09:3c:4e: 77:64:5d:ce:10:9e:36:97:c9:60:1b:7b:b8:1f:75: 15:bd:e7:9e:6e:9c:25:03:14:1c:7b:8d:fe:73:84: 51:e8:14:36:0e:40:10:57:d5:f0:77:0a:e9:f0:8d: 10:55:88:3b:8c:ac:ed:1e:98:c4:be:fe:2e:73:62: 4c:b7:de:3d:05:00:75:c3:9b:e7:be:95:a7:0d:c2: 92:0f:15:37:6a:cf:f9:93:4e:bd:4e:ed:d1:be:6d: a8:9a:18:19:72:2a:01:87:72:32:50:c7:04:8d:05: 91:39:cb:87:e4:c7:bd:1d:59:aa:d1:a6:43:37:7b: 5a:6e:1f:56:c5:fc:10:7b:37:8f:f7:31:04:4a:92: 5c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:60:A6:83:05:4D:65:E3:5D:08:F4:57:02:02:F4:CC:68:74:0D:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/004aa721-0c95-3726-9aca-e862d11c0d18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd/d5f1d9e6-0be2-4baa-847c-d665c807eddd.crl X509v3 Authority Key Identifier: keyid:6B:35:D1:0B:29:0C:A7:69:63:67:ED:A9:F5:88:43:46:15:A2:DE:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d5f1d9e6-0be2-4baa-847c-d665c807eddd.cer sbgp-ipAddrBlock: critical IPv4: 199.187.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6a:af:a0:2b:0b:50:95:44:69:af:2d:74:6b:56:24:15:a7: 18:d6:48:a0:09:b6:63:67:f4:d0:9b:6a:d4:bc:0c:98:2f:71: 1e:f1:31:ac:54:e4:bf:41:20:9d:67:9c:0e:c4:e6:41:1b:18: 11:e5:d1:6f:f8:56:2a:fd:55:82:1f:32:82:a9:cb:14:44:a7: be:3a:5f:61:08:d7:2c:20:e0:d1:ca:5e:00:49:91:03:00:36: ff:de:d4:a6:ef:71:4e:c8:88:ee:c0:d6:3e:fb:96:8e:9a:7a: b0:58:bf:46:b2:43:d6:c1:e7:1f:e8:2a:8b:76:a5:03:c5:bd: 1f:cf:4a:4f:4e:20:50:db:2a:25:07:e8:ae:d6:62:9e:59:e2: 58:32:cb:b0:d7:77:0d:ff:9e:88:d1:6c:17:e1:95:c3:36:2b: 57:d2:36:b0:4e:f6:4f:ef:70:fe:11:7a:df:2d:cc:ac:65:48: 73:f5:04:16:32:3d:be:d3:61:c6:45:ba:0d:5e:a2:e1:9d:90: 4e:4e:4f:c3:d2:66:dd:c6:e5:33:d8:cf:48:e9:12:75:5f:db: 44:50:a0:f0:31:cb:91:57:81:3a:93:e4:e6:40:30:25:4d:2d: 4e:4b:94:28:b7:59:9f:7e:d9:6e:79:de:c8:7c:ef:e8:be:ab: 1b:b1:1b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvk5UM+nS+/eDXXO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVmMWQ5ZTYtMGJlMi00YmFhLTg0N2MtZDY2NWM4MDdl ZGRkMB4XDTI1MTExNzIyMTM1NloXDTI2MDIxNTIyMTM1NlowLzEtMCsGA1UEAxMk M2E3MzU4OGEtYjQ3NS00ZWE0LTk1OTMtMDU2ZWJmOTBmMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lLh03Urkuov13iItAs55VLS/I1vxYhZOfnb Fs070QKDFBP5k/LFSw9rzgGWVeLIs5Rx1uWWXPq/lNwJ2YExQjKZ1vzYYyXUAKQ5 s4c72hdeCuI0C1QN5G1sQTC2p9R67nNG+6DZntNvxEdXcbZhKKVxIbIJPE53ZF3O EJ42l8lgG3u4H3UVveeebpwlAxQce43+c4RR6BQ2DkAQV9Xwdwrp8I0QVYg7jKzt HpjEvv4uc2JMt949BQB1w5vnvpWnDcKSDxU3as/5k069Tu3Rvm2omhgZcioBh3Iy UMcEjQWROcuH5Me9HVmq0aZDN3tabh9WxfwQezeP9zEESpJc5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAlgpoMFTWXjXQj0VwIC9MxodA3QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYx ZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1YzgwN2VkZGQvMDA0YWE3MjEtMGM5NS0z NzI2LTlhY2EtZTg2MmQxMWMwZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDVmMWQ5ZTYtMGJlMi00YmFhLTg0 N2MtZDY2NWM4MDdlZGRkL2Q1ZjFkOWU2LTBiZTItNGJhYS04NDdjLWQ2NjVjODA3 ZWRkZC5jcmwwHwYDVR0jBBgwFoAUazXRCykMp2ljZ+2p9YhDRhWi3twwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNWYxZDllNi0wYmUyLTRiYWEtODQ3Yy1kNjY1 YzgwN2VkZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7vEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5qr6ArC1CVRGmvLXRrViQVpxjWSKAJtmNn9NCbatS8DJgvcR7xMaxU 5L9BIJ1nnA7E5kEbGBHl0W/4Vir9VYIfMoKpyxREp746X2EI1ywg4NHKXgBJkQMA Nv/e1KbvcU7IiO7A1j77lo6aerBYv0ayQ9bB5x/oKot2pQPFvR/PSk9OIFDbKiUH 6K7WYp5Z4lgyy7DXdw3/nojRbBfhlcM2K1fSNrBO9k/vcP4Ret8tzKxlSHP1BBYy Pb7TYcZFug1eouGdkE5OT8PSZt3G5TPYz0jpEnVf20RQoPAxy5FXgTqT5OZAMCVN LU5LlCi3WZ9+2W553sh87+i+qxuxG/U= -----END CERTIFICATE-----Generated at Tue Nov 25 11:32:35 2025 by rpki-client