This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a9efaa4-f522-323b-a9c6-8e7c0e83e14a.roa File: 4a9efaa4-f522-323b-a9c6-8e7c0e83e14a.roa (raw, json) Hash identifier: /nkmzQ4UbSw3Lp6L58NMnsOFUUwnzWRvRH6an3VKY6o= Subject key identifier: BC:04:52:34:BA:67:55:CB:C0:EF:EC:3F:A4:83:DD:72:D4:53:63:E1 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BEBF753413A49E90F5E4D3840 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a9efaa4-f522-323b-a9c6-8e7c0e83e14a.roa Signing time: Thu 20 Nov 2025 11:00:59 +0000 ROA not before: Thu 20 Nov 2025 11:00:59 +0000 ROA not after: Wed 18 Feb 2026 11:00:59 +0000 asID: 9304 IP address blocks: 64.204.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:eb:f7:53:41:3a:49:e9:0f:5e:4d:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 20 11:00:59 2025 GMT Not After : Feb 18 11:00:59 2026 GMT Subject: CN=796b2e24-85f9-4e4f-8366-a0ab35d8810d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e7:63:54:0b:68:30:68:03:d4:99:d5:ef:3f: 5b:78:4a:e7:46:12:34:1e:77:8a:4c:d5:a1:eb:36: 1d:7d:b0:ba:34:a9:e9:8c:95:76:cb:9e:64:1b:44: ee:ec:f5:cc:3e:2e:42:7a:52:be:7b:8e:e3:95:1a: ad:2c:f0:dd:65:22:49:b1:c2:bb:57:a1:07:2e:9a: 85:a5:3d:7e:64:51:68:10:f8:64:57:7d:2a:d6:e5: 4d:99:21:60:26:e1:fd:f7:32:03:1c:69:02:01:41: bd:39:54:c7:3d:5d:1c:15:0c:30:73:9a:9d:40:08: e4:ee:ec:d2:ba:d6:cf:6f:4e:14:ad:6f:c6:39:42: ee:b1:a1:8f:66:d3:92:95:4b:b2:94:88:52:f7:9b: b0:fa:e9:3a:f6:92:d0:31:6b:5a:51:f8:c3:21:17: d7:9e:04:d4:09:ee:7f:5c:b6:3e:e9:17:ce:0f:cb: 3a:60:74:f0:14:bf:d2:a7:db:87:61:d5:14:31:4a: bc:6b:37:a1:dd:0a:4a:82:b2:f5:8f:ce:70:ea:78: 07:44:07:a1:97:3d:2a:b4:1b:1d:fe:d7:b0:af:1a: 4b:97:3f:2a:80:9e:63:9f:a3:4e:f0:c2:2a:e7:5a: cb:a0:7c:79:a3:8b:a4:04:40:39:a1:1f:27:e2:a2: c2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:04:52:34:BA:67:55:CB:C0:EF:EC:3F:A4:83:DD:72:D4:53:63:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4a9efaa4-f522-323b-a9c6-8e7c0e83e14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.204.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:95:b6:f2:a2:92:43:c0:aa:fe:d8:73:06:98:b2:d8:5a:c0: 79:aa:14:ce:03:31:25:ac:7d:e2:da:8a:27:55:ad:4d:8c:2c: 8c:83:7f:4b:dc:3c:82:69:b0:e5:50:be:54:d6:ea:c3:85:96: 30:96:34:e1:99:1d:2f:d8:26:99:ae:24:61:fa:5e:56:6e:50: 78:7d:05:49:0b:4d:e2:6b:51:cd:b2:e2:08:ea:4f:8e:36:db: c6:d0:73:87:17:df:d8:20:32:71:0d:c9:3a:1b:4d:f1:f2:a2: a8:71:e8:41:08:d5:ea:a0:0a:87:08:71:33:b6:5e:d2:ed:a4: ea:4e:01:08:6e:e7:65:e7:19:2f:51:1e:99:3f:76:96:3d:4c: 86:e9:51:e5:07:83:69:52:86:6c:d9:96:64:d2:06:f6:e4:af: 9f:a5:b6:4e:77:17:fa:ee:98:29:e3:2d:b8:d9:44:07:d2:9b: 06:da:b4:74:7c:27:54:43:f3:01:a1:bc:75:80:f5:99:bb:0d: 77:28:bb:2a:0e:bf:91:a8:f2:b7:ad:d3:79:ab:2d:97:70:a3: d2:ae:5f:46:c9:d0:a4:27:3d:eb:9c:97:72:b0:fe:71:bc:55: ae:c9:ea:23:c0:9d:03:b0:cc:8e:a5:84:24:bc:29:59:94:33: a3:a8:bd:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvr91NBOknpD15NOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTEyMDExMDA1OVoXDTI2MDIxODExMDA1OVowLzEtMCsGA1UEAxMk Nzk2YjJlMjQtODVmOS00ZTRmLTgzNjYtYTBhYjM1ZDg4MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsedjVAtoMGgD1JnV7z9beErnRhI0HneKTNWh 6zYdfbC6NKnpjJV2y55kG0Tu7PXMPi5CelK+e47jlRqtLPDdZSJJscK7V6EHLpqF pT1+ZFFoEPhkV30q1uVNmSFgJuH99zIDHGkCAUG9OVTHPV0cFQwwc5qdQAjk7uzS utbPb04UrW/GOULusaGPZtOSlUuylIhS95uw+uk69pLQMWtaUfjDIRfXngTUCe5/ XLY+6RfOD8s6YHTwFL/Sp9uHYdUUMUq8azeh3QpKgrL1j85w6ngHRAehlz0qtBsd /tewrxpLlz8qgJ5jn6NO8MIq51rLoHx5o4ukBEA5oR8n4qLCpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwEUjS6Z1XLwO/sP6SD3XLUU2PhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNGE5ZWZhYTQtZjUyMi0z MjNiLWE5YzYtOGU3YzBlODNlMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMzpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiVtvKikkPAqv7YcwaYsthawHmqFM4DMSWsfeLaiidVrU2MLIyDf0vc PIJpsOVQvlTW6sOFljCWNOGZHS/YJpmuJGH6XlZuUHh9BUkLTeJrUc2y4gjqT442 28bQc4cX39ggMnENyTobTfHyoqhx6EEI1eqgCocIcTO2XtLtpOpOAQhu52XnGS9R Hpk/dpY9TIbpUeUHg2lShmzZlmTSBvbkr5+ltk53F/rumCnjLbjZRAfSmwbatHR8 J1RD8wGhvHWA9Zm7DXcouyoOv5Go8ret03mrLZdwo9KuX0bJ0KQnPeucl3Kw/nG8 Va7J6iPAnQOwzI6lhCS8KVmUM6OovY8= -----END CERTIFICATE-----Generated at Tue Nov 25 14:49:15 2025 by rpki-client