This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa File: 891439fd-34b5-3a59-98cf-17456b30b05b.roa (raw, json) Hash identifier: r2aqJXVkckhlPQdWmXD1a9BoVysEYMiXBiHQBfTNhhM= Subject key identifier: 1F:1B:6D:E8:98:D5:2E:45:5A:29:E8:DF:11:6C:33:8A:09:E4:83:DC Certificate issuer: /CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Certificate serial: 010D0C9F4328584BB2F7BB9BF50AD86C629EA340 Authority key identifier: EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 32003 IP address blocks: 104.243.144.0/20 maxlen: 24 199.38.168.0/22 maxlen: 24 2606:780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:bb:9b:f5:0a:d8:6c:62:9e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce57877c-89ad-4d14-9b2c-3fbd440b003b Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=ed8934ff-7e13-41d8-a69a-bb82e901d604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1d:15:44:02:44:6e:5c:a2:c2:0a:e7:d3:59: 0e:2d:8f:bd:2d:dc:48:ee:94:41:6e:37:ac:9c:aa: 8b:a4:7b:3e:f2:d5:dd:6a:a3:a7:00:e2:08:44:67: a6:be:94:58:1c:de:86:58:3f:fd:42:30:df:1d:54: a2:ae:de:e2:16:de:c9:a6:da:48:ef:05:0c:f2:7a: 8f:75:df:9b:cf:29:20:16:69:ca:ce:de:bc:e0:2a: 35:02:21:1d:81:36:21:63:f6:66:8b:ed:e3:4f:1d: 96:21:5c:f3:d8:4a:80:f6:a9:a5:e0:3b:ec:a1:6f: d3:90:49:be:77:18:4d:d1:a0:17:50:c6:33:02:98: 7e:b9:ad:5a:32:24:0b:bb:fe:01:75:c7:ca:f7:42: 0f:3c:5b:8a:86:31:2d:52:56:e0:b6:93:9d:92:ef: bb:25:3a:a1:92:54:35:7f:e8:8e:65:e4:c9:c4:4b: 22:77:88:aa:4d:6d:10:ed:4a:fa:bb:02:bb:73:33: 61:30:d2:e7:bd:cc:66:b5:08:49:c5:77:ce:5c:ba: 38:04:80:b6:27:61:19:b9:9d:30:af:a2:c4:9e:64: e2:32:d5:8f:39:3e:9c:9e:5d:a2:2d:09:71:7a:05: 2c:e6:2d:b7:36:7a:bc:97:e5:22:0d:dc:8b:e3:86: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1B:6D:E8:98:D5:2E:45:5A:29:E8:DF:11:6C:33:8A:09:E4:83:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/891439fd-34b5-3a59-98cf-17456b30b05b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b/ce57877c-89ad-4d14-9b2c-3fbd440b003b.crl X509v3 Authority Key Identifier: keyid:EE:8F:89:26:87:2F:B3:3A:F5:F1:46:8F:13:B6:F1:C6:1F:12:56:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce57877c-89ad-4d14-9b2c-3fbd440b003b.cer sbgp-ipAddrBlock: critical IPv4: 104.243.144.0/20 199.38.168.0/22 IPv6: 2606:780::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:2e:2a:08:49:3f:7c:b6:22:32:d0:7d:aa:23:94:d3:1a:44: c7:8a:86:e0:95:8a:79:d4:81:45:c3:b7:19:b5:4f:f6:63:0e: 7c:e6:1b:db:ea:e4:ab:5a:50:21:4e:42:f5:fd:a7:0e:4c:52: 63:57:76:c2:21:a5:6b:1d:32:cd:66:45:0b:33:29:66:54:b1: 2d:e3:ab:52:99:75:cf:e0:2e:05:b4:78:f6:65:72:92:08:8e: e8:1a:c3:ee:ec:67:41:a1:41:d3:2b:e6:ac:0b:15:7c:f8:e3: 77:c3:83:38:22:11:e5:73:5f:e7:52:e0:64:cd:00:41:2e:83: 22:d5:ca:9b:80:fc:d3:45:48:56:ae:fc:9c:86:e3:b7:0c:ec: bd:f1:f6:0e:b2:79:6b:07:21:24:b3:8a:41:cc:2a:37:60:90: 7e:87:39:a2:24:e5:ac:3e:c2:27:0c:95:31:59:e6:00:70:04: 15:9d:4d:ec:46:da:bb:84:db:ee:ed:f8:25:74:0d:6c:98:e9: ce:af:68:b6:7e:ce:37:84:f2:27:2d:a8:d2:bc:dd:02:55:00: e5:bc:a4:27:6e:5a:1a:95:95:eb:24:76:49:09:d4:98:80:ec: 55:90:8b:e5:a2:05:3b:f9:b8:30:0b:c7:e2:46:d8:1d:e9:ff: 6b:b6:b2:42 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEuy97ub9QrYbGKeo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U1Nzg3N2MtODlhZC00ZDE0LTliMmMtM2ZiZDQ0MGIw MDNiMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ZWQ4OTM0ZmYtN2UxMy00MWQ4LWE2OWEtYmI4MmU5MDFkNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR0VRAJEblyiwgrn01kOLY+9LdxI7pRBbjes nKqLpHs+8tXdaqOnAOIIRGemvpRYHN6GWD/9QjDfHVSirt7iFt7JptpI7wUM8nqP dd+bzykgFmnKzt684Co1AiEdgTYhY/Zmi+3jTx2WIVzz2EqA9qml4DvsoW/TkEm+ dxhN0aAXUMYzAph+ua1aMiQLu/4BdcfK90IPPFuKhjEtUlbgtpOdku+7JTqhklQ1 f+iOZeTJxEsid4iqTW0Q7Ur6uwK7czNhMNLnvcxmtQhJxXfOXLo4BIC2J2EZuZ0w r6LEnmTiMtWPOT6cnl2iLQlxegUs5i23Nnq8l+UiDdyL44YoKQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFB8bbeiY1S5FWino3xFsM4oJ5IPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3 ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJkNDQwYjAwM2IvODkxNDM5ZmQtMzRiNS0z YTU5LTk4Y2YtMTc0NTZiMzBiMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2U1Nzg3N2MtODlhZC00ZDE0LTli MmMtM2ZiZDQ0MGIwMDNiL2NlNTc4NzdjLTg5YWQtNGQxNC05YjJjLTNmYmQ0NDBi MDAzYi5jcmwwHwYDVR0jBBgwFoAU7o+JJocvszr18UaPE7bxxh8SVkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZTU3ODc3Yy04OWFkLTRkMTQtOWIyYy0zZmJk NDQwYjAwM2IuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEaPOQAwQC xyaoMA0EAgACMAcDBQAmBgeAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHcuKghJP3y2IjLQfaojlNMaRMeK huCVinnUgUXDtxm1T/ZjDnzmG9vq5KtaUCFOQvX9pw5MUmNXdsIhpWsdMs1mRQsz KWZUsS3jq1KZdc/gLgW0ePZlcpIIjugaw+7sZ0GhQdMr5qwLFXz443fDgzgiEeVz X+dS4GTNAEEugyLVypuA/NNFSFau/JyG47cM7L3x9g6yeWsHISSzikHMKjdgkH6H OaIk5aw+wicMlTFZ5gBwBBWdTexG2ruE2+7t+CV0DWyY6c6vaLZ+zjeE8ictqNK8 3QJVAOW8pCduWhqVleskdkkJ1JiA7FWQi+WiBTv5uDALx+JG2B3p/2u2skI= -----END CERTIFICATE-----Generated at Sat Nov 22 21:24:11 2025 by rpki-client