This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa File: 991cf70e-362f-3d84-afc7-74ab49a12348.roa (raw, json) Hash identifier: lB3Qf0J85JkV4dyCU6AdpH63UoSoH7cdnX9l4jZmUNc= Subject key identifier: 62:FF:4E:DB:FE:39:0C:8C:72:C1:61:2C:97:29:57:95:86:47:7E:FB Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584C1FF6343173C531518DA54E00 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa Signing time: Tue 09 Dec 2025 02:00:31 +0000 ROA not before: Tue 09 Dec 2025 02:00:31 +0000 ROA not after: Mon 09 Mar 2026 01:00:31 +0000 asID: 393249 IP address blocks: 128.189.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1f:f6:34:31:73:c5:31:51:8d:a5:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Dec 9 02:00:31 2025 GMT Not After : Mar 9 01:00:31 2026 GMT Subject: CN=ba723aeb-212b-4ce6-b9d5-a8229f6dadad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:8b:83:cc:cf:5e:7d:79:1a:66:46:21:cd: 9a:7f:4a:57:cf:50:56:19:49:b3:d9:f3:63:05:66: c9:57:c5:26:ce:60:a4:59:e7:72:24:b9:e5:db:a9: 9a:0c:7e:7b:f2:32:72:b9:22:ed:05:39:17:a4:06: 5a:4d:ad:cd:67:b9:96:fb:aa:15:80:4c:71:9a:07: dd:a4:a0:81:94:90:cf:c9:50:7f:b9:54:db:f3:7d: 7d:7f:c8:9d:67:1d:bb:cc:b5:ad:3a:43:7f:66:79: 25:a3:45:b8:b5:a7:ec:bb:0f:01:45:de:23:e8:55: e5:d9:1f:d4:3c:e0:af:5c:1c:81:89:73:6b:8c:c8: 54:14:77:75:b8:19:0b:5c:8a:36:29:5c:fe:fa:f6: a2:c8:3a:4a:a7:e0:12:6a:3b:a6:24:61:1a:85:b2: a0:ee:21:e1:5a:7d:cf:e7:37:39:3f:8a:14:60:11: 1e:6c:4f:5c:3c:42:52:a0:85:4e:bc:a6:9c:84:d6: 74:0d:ba:45:e2:08:3a:aa:e4:a3:3c:0f:45:65:4d: f5:3c:7d:4c:07:db:b6:63:c8:6a:11:da:d2:fb:ad: 3d:d3:aa:97:73:ae:ec:96:08:e1:a8:8e:f1:85:fa: 1c:26:f3:24:72:03:90:cd:5e:13:30:de:7d:be:02: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:FF:4E:DB:FE:39:0C:8C:72:C1:61:2C:97:29:57:95:86:47:7E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 128.189.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:64:f6:99:31:fe:d7:2a:25:c0:81:43:b4:44:d2:5c:d2: 60:5b:9e:9b:c2:bc:5d:cf:08:02:7d:65:8a:8d:84:b0:95:6c: 75:70:2e:51:79:d3:0e:7c:42:27:af:e0:53:56:e8:57:77:56: 03:a8:d0:6c:80:40:f3:e4:ac:f3:b7:6a:b9:ba:dc:cb:61:7a: 29:ce:c9:ea:64:70:f5:b8:0f:eb:5b:17:b1:25:71:5d:05:a4: a9:40:dc:d5:bc:74:4e:53:d1:7e:64:de:4a:7b:e6:b8:09:33: 7d:c6:64:80:73:d9:68:7a:64:52:72:84:67:b0:21:76:ab:43: 92:f4:43:1f:a8:da:b8:92:2b:99:d8:7b:34:c0:d5:80:3b:7b: 1b:4b:d4:0d:d6:ec:09:35:40:73:d8:f3:d0:21:ff:83:4a:e4: 8d:30:1a:42:c4:0e:4c:28:13:d7:79:2e:3e:f5:da:8a:d7:48: 2f:0c:16:6e:79:ea:2d:21:1c:7a:af:e9:ce:ad:77:48:1b:a3: 3f:a1:18:58:76:73:56:69:cb:9a:1c:ab:d3:28:0d:4a:18:67: a7:53:83:41:05:fe:db:8e:48:39:97:41:ba:03:93:40:09:f1: 00:c9:13:44:f8:19:1c:fe:22:3b:1a:ac:a3:1d:f9:ae:e4:52: d5:8f:a2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwf9jQxc8UxUY2lTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI1MTIwOTAyMDAzMVoXDTI2MDMwOTAxMDAzMVowLzEtMCsGA1UEAxMk YmE3MjNhZWItMjEyYi00Y2U2LWI5ZDUtYTgyMjlmNmRhZGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA096Lg8zPXn15GmZGIc2af0pXz1BWGUmz2fNj BWbJV8UmzmCkWedyJLnl26maDH578jJyuSLtBTkXpAZaTa3NZ7mW+6oVgExxmgfd pKCBlJDPyVB/uVTb8319f8idZx27zLWtOkN/Znklo0W4tafsuw8BRd4j6FXl2R/U POCvXByBiXNrjMhUFHd1uBkLXIo2KVz++vaiyDpKp+ASajumJGEahbKg7iHhWn3P 5zc5P4oUYBEebE9cPEJSoIVOvKachNZ0DbpF4gg6quSjPA9FZU31PH1MB9u2Y8hq EdrS+60906qXc67slgjhqI7xhfocJvMkcgOQzV4TMN59vgKizQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGL/Ttv+OQyMcsFhLJcpV5WGR377MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOTkxY2Y3MGUtMzYyZi0z ZDg0LWFmYzctNzRhYjQ5YTEyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgL0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdiZPaZMf7XKiXAgUO0RNJc0mBbnpvCvF3PCAJ9ZYqNhLCVbHVwLlF5 0w58Qiev4FNW6Fd3VgOo0GyAQPPkrPO3arm63MtheinOyepkcPW4D+tbF7ElcV0F pKlA3NW8dE5T0X5k3kp75rgJM33GZIBz2Wh6ZFJyhGewIXarQ5L0Qx+o2riSK5nY ezTA1YA7extL1A3W7Ak1QHPY89Ah/4NK5I0wGkLEDkwoE9d5Lj712orXSC8MFm55 6i0hHHqv6c6td0gboz+hGFh2c1Zpy5ocq9MoDUoYZ6dTg0EF/tuOSDmXQboDk0AJ 8QDJE0T4GRz+IjsarKMd+a7kUtWPogM= -----END CERTIFICATE-----Generated at Wed Dec 10 05:32:37 2025 by rpki-client