This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa File: aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa (raw, json) Hash identifier: dOZ/nzncFuocAcmTzG3GdFsCO6S99i/NS9QmhT+t0fM= Subject key identifier: 50:37:72:A0:7F:F5:71:E8:5D:0B:6E:06:4A:96:C6:84:D1:E3:BD:37 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584BD065A9A25C522D7E7C5E6B80 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa Signing time: Mon 10 Nov 2025 14:00:38 +0000 ROA not before: Mon 10 Nov 2025 14:00:38 +0000 ROA not after: Sun 08 Feb 2026 14:00:38 +0000 asID: 199527 IP address blocks: 216.132.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d0:65:a9:a2:5c:52:2d:7e:7c:5e:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Nov 10 14:00:38 2025 GMT Not After : Feb 8 14:00:38 2026 GMT Subject: CN=54c56718-1d83-438d-afce-3a02036cb579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:c8:51:a2:df:d7:52:c1:fa:5a:f9:3b:22: 8e:0b:12:ad:3b:0e:33:d3:7a:ba:69:ee:f7:ab:c1: bd:a7:f0:74:8d:4a:c4:4c:8a:10:8d:b1:53:97:fa: 08:27:16:96:42:ab:2c:38:bb:93:14:be:7d:e0:d6: 7f:c0:d2:63:d5:d4:e2:31:61:17:93:d4:6a:80:22: d6:11:73:53:4c:f3:2b:08:c3:b3:42:03:7d:7f:a2: e4:97:5b:89:d3:1f:c1:69:66:66:db:6e:64:6d:4e: 37:05:34:e7:58:f3:2c:28:a1:06:5b:39:59:ba:a1: 43:d9:8f:b2:23:3c:1b:ef:f4:e2:ad:9d:68:bf:8d: 3d:33:53:51:9a:55:f2:77:93:e4:9c:e7:7f:41:b2: af:bc:34:f2:37:d6:ad:5c:f9:af:a3:af:16:e3:c8: a4:36:85:2e:45:4e:2e:1a:33:e4:75:21:0d:75:3c: 2e:f8:c6:30:3e:aa:d7:9c:43:0a:50:0e:d3:b7:df: eb:a6:c4:2f:bc:bd:35:73:8e:19:c0:ad:a0:5c:89: 5d:4e:4c:c6:23:c8:b5:f2:48:b2:e6:78:11:c6:b3: ff:7c:e4:a2:34:d0:92:8f:69:44:57:a0:8c:da:f3: 85:ba:37:44:b2:23:33:74:60:d0:40:8b:00:34:a6: 2d:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:37:72:A0:7F:F5:71:E8:5D:0B:6E:06:4A:96:C6:84:D1:E3:BD:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aaacd4a8-4daf-3b20-bacf-6eba324ab86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 216.132.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:10:fc:b6:6c:9d:2c:8c:b6:f1:ec:24:46:dd:8b:09:41:12: 47:93:e1:eb:3a:0a:c6:2b:e0:22:7e:98:1f:59:88:e7:a5:9e: 19:af:cd:fa:ed:02:47:5e:5a:3d:a8:c8:0b:bd:5c:13:87:91: 80:99:67:08:88:25:dc:66:62:6b:e6:f1:17:ec:8a:1c:8d:0a: 28:23:54:65:bc:f8:74:73:32:14:d6:80:ab:41:56:77:54:79: ad:17:bb:5e:ee:9c:99:ae:c7:ee:fb:9a:29:0b:0e:fd:b0:f3: db:99:0e:0f:fa:21:21:65:72:90:14:02:c3:ef:af:d2:0b:84: d6:c2:3d:81:0b:f9:8d:1c:ff:69:f2:7c:07:0a:17:2c:c2:42: c9:7d:27:dc:7b:db:71:1c:83:ae:cd:e5:9f:e7:2d:2b:49:53: c8:8e:db:ab:e3:61:2e:40:f9:28:79:55:b5:ff:74:11:74:cc: 33:9b:83:23:11:9b:1f:86:01:bc:58:b3:db:12:91:7b:70:d5: 09:db:57:cb:fd:64:12:83:6e:1f:54:0b:87:31:58:38:bb:ad: 28:08:ab:83:d4:95:79:d0:39:63:56:6e:9a:16:12:d3:14:c4: d2:a3:5a:d0:09:b4:e5:2f:87:14:24:e6:a9:be:93:16:02:8d: 6b:a7:4b:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvQZamiXFItfnxea4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MTExMDE0MDAzOFoXDTI2MDIwODE0MDAzOFowLzEtMCsGA1UEAxMk NTRjNTY3MTgtMWQ4My00MzhkLWFmY2UtM2EwMjAzNmNiNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdvIUaLf11LB+lr5OyKOCxKtOw4z03q6ae73 q8G9p/B0jUrETIoQjbFTl/oIJxaWQqssOLuTFL594NZ/wNJj1dTiMWEXk9RqgCLW EXNTTPMrCMOzQgN9f6Lkl1uJ0x/BaWZm225kbU43BTTnWPMsKKEGWzlZuqFD2Y+y Izwb7/TirZ1ov409M1NRmlXyd5PknOd/QbKvvDTyN9atXPmvo68W48ikNoUuRU4u GjPkdSENdTwu+MYwPqrXnEMKUA7Tt9/rpsQvvL01c44ZwK2gXIldTkzGI8i18kiy 5ngRxrP/fOSiNNCSj2lEV6CM2vOFujdEsiMzdGDQQIsANKYt0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFA3cqB/9XHoXQtuBkqWxoTR4703MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYWFhY2Q0YTgtNGRhZi0z YjIwLWJhY2YtNmViYTMyNGFiODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2IQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcQ/LZsnSyMtvHsJEbdiwlBEkeT4es6CsYr4CJ+mB9ZiOelnhmvzfrt AkdeWj2oyAu9XBOHkYCZZwiIJdxmYmvm8RfsihyNCigjVGW8+HRzMhTWgKtBVndU ea0Xu17unJmux+77mikLDv2w89uZDg/6ISFlcpAUAsPvr9ILhNbCPYEL+Y0c/2ny fAcKFyzCQsl9J9x723Ecg67N5Z/nLStJU8iO26vjYS5A+Sh5VbX/dBF0zDObgyMR mx+GAbxYs9sSkXtw1QnbV8v9ZBKDbh9UC4cxWDi7rSgIq4PUlXnQOWNWbpoWEtMU xNKjWtAJtOUvhxQk5qm+kxYCjWunS+A= -----END CERTIFICATE-----Generated at Tue Nov 25 14:56:08 2025 by rpki-client