This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa File: aaf1c443-fe8e-397a-9abb-97486c685ca2.roa (raw, json) Hash identifier: n52+CTzYdw72U0gt84yaGr/RQUPzuhNAOi9ST7YWoIM= Subject key identifier: 66:59:90:DC:8C:0C:85:00:93:DD:F3:27:D0:86:EE:68:FF:EA:D6:F0 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BF080829227A0B982FDD3EF80 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 21947 IP address blocks: 204.11.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:82:92:27:a0:b9:82:fd:d3:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=f1a1370e-2ce7-4eaf-b8e1-d554d323e469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:9e:e7:cd:a4:db:04:28:bb:d7:db:a9:b8: 1b:8d:0d:a9:6e:f7:23:09:22:4e:a0:e1:73:e9:00: 9f:41:6a:ac:4a:d3:e0:c1:61:d0:bc:ac:a4:cb:8b: 48:a2:e2:1a:4d:53:f7:68:15:7e:1a:a9:c7:54:69: dc:a7:f8:1c:c7:2e:20:7c:f0:30:4a:08:d1:16:fb: 04:8b:f0:61:f3:46:b8:c1:b2:f7:5b:48:cd:db:ed: 61:73:be:23:00:d3:0c:22:5b:20:de:36:46:26:31: 76:be:64:31:c9:ef:0b:78:1f:f9:73:0d:58:4a:cd: e9:73:e9:9b:91:0b:47:4e:2d:ba:76:ee:6a:13:39: 7a:d7:5d:d9:d8:38:e6:10:6f:a5:75:99:c5:31:30: 35:37:d8:18:c3:92:32:9b:05:b7:6d:45:6f:9a:a7: a4:61:99:2b:82:17:6e:12:3b:41:cd:cf:d2:67:99: 48:b9:bf:6e:54:a4:11:06:08:bb:83:7f:4d:84:84: 83:e1:35:13:16:65:3e:b1:f6:3b:61:1a:ca:5c:f9: 1e:78:3e:e6:13:13:05:a2:18:05:d1:8c:a5:b5:5f: d1:69:5e:42:d3:2f:f8:46:d7:03:a2:79:ce:3b:e9: 9d:3c:ea:81:8d:f3:e3:e3:bb:64:41:d3:b3:3b:7f: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:59:90:DC:8C:0C:85:00:93:DD:F3:27:D0:86:EE:68:FF:EA:D6:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/aaf1c443-fe8e-397a-9abb-97486c685ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 204.11.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f3:6e:6b:49:0b:95:91:e2:d8:4f:62:96:22:dc:c8:73:4d: 35:e6:b1:fc:6a:ee:f0:37:53:cd:42:44:4c:a6:56:c8:b3:c9: 2c:c7:4e:63:76:f6:43:b1:db:0b:a6:5b:31:c6:0d:76:ec:7f: 44:86:c1:51:50:ea:62:58:33:4f:d9:0d:32:57:cf:3b:c7:99: f9:ac:bf:f6:09:be:c9:78:f4:67:e1:a1:89:7f:97:41:4a:38: c8:49:81:4c:56:4d:d8:fd:18:ba:d3:0f:56:1b:94:eb:43:df: 60:8d:6d:10:52:c6:6b:6b:ba:00:14:cf:0b:a7:f1:d9:73:8c: a4:12:e4:61:b7:80:45:08:f1:a2:d4:85:ab:e7:b9:16:47:69: 9d:94:ae:0a:40:68:61:9e:06:94:c3:39:d2:a5:6e:9a:d1:ec: 97:ff:23:57:29:02:d4:14:2d:d0:a9:41:d2:55:38:83:41:68: 44:d8:32:1c:19:5a:e6:08:b2:e1:33:76:39:e1:bf:fe:7b:72: 22:90:37:5b:f0:ad:07:fa:db:04:7f:07:10:b0:bd:35:e0:b8: 7b:e2:b0:d6:1b:69:08:69:a2:6c:74:91:2a:08:35:e9:64:4a: 27:53:0a:f7:15:21:fe:da:19:68:39:6e:7c:c3:43:07:3b:3b: 00:a6:e4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvwgIKSJ6C5gv3T74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk ZjFhMTM3MGUtMmNlNy00ZWFmLWI4ZTEtZDU1NGQzMjNlNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7We582k2wQou9fbqbgbjQ2pbvcjCSJOoOFz 6QCfQWqsStPgwWHQvKyky4tIouIaTVP3aBV+GqnHVGncp/gcxy4gfPAwSgjRFvsE i/Bh80a4wbL3W0jN2+1hc74jANMMIlsg3jZGJjF2vmQxye8LeB/5cw1YSs3pc+mb kQtHTi26du5qEzl6113Z2DjmEG+ldZnFMTA1N9gYw5IymwW3bUVvmqekYZkrghdu EjtBzc/SZ5lIub9uVKQRBgi7g39NhISD4TUTFmU+sfY7YRrKXPkeeD7mExMFohgF 0YyltV/RaV5C0y/4RtcDonnOO+mdPOqBjfPj47tkQdOzO3+/MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZZkNyMDIUAk93zJ9CG7mj/6tbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYWFmMWM0NDMtZmU4ZS0z OTdhLTlhYmItOTc0ODZjNjg1Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAv0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7zbmtJC5WR4thPYpYi3MhzTTXmsfxq7vA3U81CREymVsizySzHTmN2 9kOx2wumWzHGDXbsf0SGwVFQ6mJYM0/ZDTJXzzvHmfmsv/YJvsl49GfhoYl/l0FK OMhJgUxWTdj9GLrTD1YblOtD32CNbRBSxmtrugAUzwun8dlzjKQS5GG3gEUI8aLU havnuRZHaZ2UrgpAaGGeBpTDOdKlbprR7Jf/I1cpAtQULdCpQdJVOINBaETYMhwZ WuYIsuEzdjnhv/57ciKQN1vwrQf62wR/BxCwvTXguHvisNYbaQhpomx0kSoINelk SidTCvcVIf7aGWg5bnzDQwc7OwCm5B4= -----END CERTIFICATE-----Generated at Tue Nov 25 09:59:30 2025 by rpki-client