This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa File: b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa (raw, json) Hash identifier: t8QLF7ybZqSnK+03KV416/pINl73tD5WJX/FfDlz8ME= Subject key identifier: FB:D9:CB:56:AB:22:25:F6:F4:81:26:C4:6F:E1:0E:99:ED:1B:72:D4 Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584BF08074491EE308ED27385E00 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa Signing time: Sat 22 Nov 2025 02:00:30 +0000 ROA not before: Sat 22 Nov 2025 02:00:30 +0000 ROA not after: Fri 20 Feb 2026 02:00:30 +0000 asID: 21947 IP address blocks: 64.25.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:74:49:1e:e3:08:ed:27:38:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Nov 22 02:00:30 2025 GMT Not After : Feb 20 02:00:30 2026 GMT Subject: CN=ef4ebc71-9773-41a0-9663-dba21a8f5b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:18:c9:20:42:f7:fa:71:19:db:5d:b8:c7:fa: c1:79:09:c2:a5:98:64:61:3a:10:d7:b9:58:8d:38: 09:16:71:57:a3:c4:e6:32:0a:11:d6:e8:3a:b3:12: a4:91:02:c1:62:ea:6b:40:6c:14:46:9f:2c:aa:e3: a0:6f:91:5c:64:73:3c:38:0b:3f:9d:90:6a:38:9e: 8b:9e:dd:ae:04:30:aa:51:f7:07:2c:1b:e2:dd:42: 6f:56:53:0c:58:0f:29:0f:72:db:9d:12:f7:ab:2a: 7a:b4:5c:59:cc:87:91:51:f8:ac:16:dd:cd:2c:94: 34:23:26:23:71:29:52:75:bb:81:9c:d1:10:d7:0e: bf:bc:48:2e:9f:c7:48:0a:b5:64:29:0e:c1:55:bb: c0:aa:01:16:53:04:ed:1c:4f:72:46:f2:1c:5d:2f: ff:a7:68:33:fd:19:78:be:18:8c:1e:21:59:19:62: 95:bd:ba:59:6a:62:c5:0a:d9:cb:50:3a:29:82:b5: f3:41:f7:2a:f0:e8:aa:2e:0c:1c:e1:26:62:94:60: b3:a5:2d:55:f9:e5:40:ec:05:52:f2:6c:0a:f2:c5: 59:72:27:57:9c:14:21:60:be:e7:54:7d:ff:57:54: da:0e:97:3f:59:ea:27:4e:50:f2:0c:25:e4:71:e4: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:CB:56:AB:22:25:F6:F4:81:26:C4:6F:E1:0E:99:ED:1B:72:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/b50a3d1b-ca50-3ea1-bdb9-3768a86aa81e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 64.25.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:7f:a1:aa:e1:46:b4:dd:c4:2b:68:d0:1f:95:15:b2:44:52: 41:1b:f9:7b:e0:3a:d8:68:b8:74:cc:d4:4a:d8:cf:ba:a7:51: 45:56:91:cb:49:7c:82:8b:0a:95:60:c7:de:9d:b2:ca:43:fb: 38:47:34:fe:fd:42:42:23:9d:48:1a:58:23:42:3b:ef:eb:e1: 41:81:42:ee:41:6d:e3:3f:05:fd:30:10:53:0d:5b:45:68:67: c5:76:0f:88:b3:94:0e:f5:64:48:82:eb:e7:75:a9:43:06:a1: 93:1c:73:12:13:47:e1:4e:e7:22:c9:d2:4d:45:3c:1f:62:76: 86:85:45:68:d7:c1:3c:aa:1b:44:60:f6:f8:13:01:0d:ee:0e: ed:26:70:a9:9a:0d:c1:77:c6:4f:bc:51:9e:bc:43:ab:57:37: 3c:b0:f8:56:84:a6:06:33:cf:12:58:20:1b:0e:7e:f2:d7:5b: 36:bb:bf:6d:ed:31:f4:5c:79:6b:b8:1f:12:c5:c1:55:ad:10: 07:9c:87:8f:e5:48:f1:b2:f1:2b:0e:68:79:41:cd:0b:5f:18: c0:14:9d:e6:da:68:09:27:9e:ed:dc:9c:35:bb:26:1f:24:f7: 0b:24:f9:1a:46:54:52:21:c7:26:0c:f4:09:e6:f6:b4:c5:90: 0a:f3:22:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvwgHRJHuMI7Sc4XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI1MTEyMjAyMDAzMFoXDTI2MDIyMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWY0ZWJjNzEtOTc3My00MWEwLTk2NjMtZGJhMjFhOGY1YjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBjJIEL3+nEZ2124x/rBeQnCpZhkYToQ17lY jTgJFnFXo8TmMgoR1ug6sxKkkQLBYuprQGwURp8squOgb5FcZHM8OAs/nZBqOJ6L nt2uBDCqUfcHLBvi3UJvVlMMWA8pD3LbnRL3qyp6tFxZzIeRUfisFt3NLJQ0IyYj cSlSdbuBnNEQ1w6/vEgun8dICrVkKQ7BVbvAqgEWUwTtHE9yRvIcXS//p2gz/Rl4 vhiMHiFZGWKVvbpZamLFCtnLUDopgrXzQfcq8OiqLgwc4SZilGCzpS1V+eVA7AVS 8mwK8sVZcidXnBQhYL7nVH3/V1TaDpc/WeonTlDyDCXkceS09wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvZy1arIiX29IEmxG/hDpntG3LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvYjUwYTNkMWItY2E1MC0z ZWExLWJkYjktMzc2OGE4NmFhODFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh/oarhRrTdxCto0B+VFbJEUkEb+XvgOthouHTM1ErYz7qnUUVWkctJ fIKLCpVgx96dsspD+zhHNP79QkIjnUgaWCNCO+/r4UGBQu5BbeM/Bf0wEFMNW0Vo Z8V2D4izlA71ZEiC6+d1qUMGoZMccxITR+FO5yLJ0k1FPB9idoaFRWjXwTyqG0Rg 9vgTAQ3uDu0mcKmaDcF3xk+8UZ68Q6tXNzyw+FaEpgYzzxJYIBsOfvLXWza7v23t MfRceWu4HxLFwVWtEAech4/lSPGy8SsOaHlBzQtfGMAUnebaaAknnu3cnDW7Jh8k 9wsk+RpGVFIhxyYM9Anm9rTFkArzIgA= -----END CERTIFICATE-----Generated at Tue Nov 25 09:58:48 2025 by rpki-client