This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json) Hash identifier: aW/3i2rZpQfu0DZSl3lG2atxD2hnveBJmHj52ZyjXsQ= Subject key identifier: 43:C9:F9:CB:AA:6A:0E:6F:48:9E:04:C3:E9:13:49:D9:C1:30:DE:4C Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F4328584BCD9B273C09CB930DDA630DC0 Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 394989 IP address blocks: 23.151.192.0/24 maxlen: 24 23.151.193.0/24 maxlen: 24 2602:febb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:27:3c:09:cb:93:0d:da:63:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=9ede32a7-445c-4ba6-957c-0d811ad4e6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:72:f7:7d:3a:ec:53:df:d7:5f:d7:ae:87: de:11:a0:3c:96:db:2c:19:2a:a3:28:80:a9:19:36: a7:bf:bd:83:f1:0a:c7:35:73:8b:80:04:be:f9:ac: 97:ea:df:c0:fd:98:8a:f8:4c:47:47:58:df:d2:1f: 28:eb:b5:09:e0:c3:72:56:18:73:f6:71:d2:d6:fa: 70:61:d5:0f:2d:29:77:96:83:d2:1a:f9:0c:53:f5: c1:f5:22:46:b9:fb:6a:9c:c8:e8:d3:7d:0f:40:2e: f2:ea:58:de:da:2c:30:4c:61:8e:8c:bd:d1:75:38: cc:30:bb:b3:1a:5b:36:85:14:22:8b:9e:df:7a:47: ff:57:e9:53:c9:3e:2c:40:7c:ac:01:ff:c6:79:45: 19:b0:aa:b1:66:26:a8:2f:37:9e:25:f1:04:a7:5d: 15:38:ae:67:58:93:90:d2:e8:3a:d7:31:f1:dc:fb: ff:74:a4:44:61:61:68:32:8b:67:54:16:fb:8d:3f: 8d:84:0e:a3:ad:57:ea:89:52:8b:cb:ce:fa:1d:bd: 7d:4f:22:6e:6f:0b:c1:c2:83:1e:a6:4b:5c:9d:dd: 77:97:02:3c:5e:dc:54:2f:c6:f7:a2:82:74:6c:1c: f8:db:ff:5a:d6:0d:aa:ad:84:ef:35:98:d8:73:66: 52:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C9:F9:CB:AA:6A:0E:6F:48:9E:04:C3:E9:13:49:D9:C1:30:DE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: 23.151.192.0/23 IPv6: 2602:febb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e5:33:c8:18:ec:b2:82:92:09:fe:d0:f0:1c:52:6c:28:9f: cb:ff:4c:e3:0f:f7:2d:b6:f6:50:6a:37:2f:6b:fe:c8:f1:b6: ed:b5:ff:02:1c:64:c0:c7:01:59:9d:95:30:ff:85:ed:65:25: bf:52:90:0a:56:1b:62:7b:17:7c:fd:09:cb:bd:93:6f:82:5b: af:38:d5:e3:c5:e0:30:1d:35:ac:93:f7:d9:2c:d9:7f:00:4f: 0d:0a:22:5a:b3:99:27:0e:40:31:cd:b0:42:13:a3:5b:ef:1a: c9:5c:2d:a4:bb:c6:07:c6:86:d4:e9:a2:b0:dd:08:01:7f:e2: af:2a:f2:d1:76:14:66:c3:db:b5:a1:56:00:b8:a4:33:e0:58: 32:2b:2b:bb:e0:9a:de:4d:1f:34:35:09:5d:0f:52:e1:89:e5: d2:2d:91:c8:f3:32:1f:58:b5:d5:5a:91:80:cf:9e:0d:a6:8f: 50:02:44:04:de:b5:96:c6:8c:6b:35:f7:74:78:48:05:b9:cd: 13:8e:76:97:45:ce:ef:0e:d3:ff:2f:a5:f3:8e:1e:5f:d6:52: 6b:8e:c4:d4:84:58:de:34:81:2b:78:20:fb:5f:da:e6:f2:f9: 42:ec:8f:62:08:29:60:dc:6d:21:25:9e:68:55:b5:68:2d:73: cc:a9:78:c2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEvNmyc8CcuTDdpjDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk OWVkZTMyYTctNDQ1Yy00YmE2LTk1N2MtMGQ4MTFhZDRlNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJy93067FPf11/XrofeEaA8ltssGSqjKICp GTanv72D8QrHNXOLgAS++ayX6t/A/ZiK+ExHR1jf0h8o67UJ4MNyVhhz9nHS1vpw YdUPLSl3loPSGvkMU/XB9SJGuftqnMjo030PQC7y6lje2iwwTGGOjL3RdTjMMLuz Gls2hRQii57fekf/V+lTyT4sQHysAf/GeUUZsKqxZiaoLzeeJfEEp10VOK5nWJOQ 0ug61zHx3Pv/dKREYWFoMotnVBb7jT+NhA6jrVfqiVKLy876Hb19TyJubwvBwoMe pktcnd13lwI8XtxUL8b3ooJ0bBz42/9a1g2qrYTvNZjYc2ZSfwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEPJ+cuqag5vSJ4Ew+kTSdnBMN5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYzdmYjAxMjAtODQ3My0z MTZlLTgxYjQtNzBmOTEyMWMwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5fAMA4E AgACMAgDBgQmAv67ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF5TPIGOyygpIJ/tDwHFJsKJ/L/0zjD/ct tvZQajcva/7I8bbttf8CHGTAxwFZnZUw/4XtZSW/UpAKVhtiexd8/QnLvZNvgluv ONXjxeAwHTWsk/fZLNl/AE8NCiJas5knDkAxzbBCE6Nb7xrJXC2ku8YHxobU6aKw 3QgBf+KvKvLRdhRmw9u1oVYAuKQz4FgyKyu74JreTR80NQldD1LhieXSLZHI8zIf WLXVWpGAz54Npo9QAkQE3rWWxoxrNfd0eEgFuc0TjnaXRc7vDtP/L6Xzjh5f1lJr jsTUhFjeNIEreCD7X9rm8vlC7I9iCClg3G0hJZ5oVbVoLXPMqXjC -----END CERTIFICATE-----Generated at Sat Nov 22 21:21:46 2025 by rpki-client