This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa File: aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa (raw, json) Hash identifier: CYwUehhzNVcsogp63WgiVgRP4nCEN4BuldjTWrhDihE= Subject key identifier: E0:C7:D0:DE:37:FF:8B:33:1C:72:1A:2D:8F:61:70:18:46:52:8D:E9 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584BDCF5CB9C0B337D31C1D39D00 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 15204 IP address blocks: 64.33.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:cb:9c:0b:33:7d:31:c1:d3:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=1f77d405-ef36-4f0d-a2a6-6d235f2267f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:f7:66:1e:77:7d:9f:b7:5f:b5:c9:4a:84: 9e:f0:7f:cb:86:9d:c0:5c:ee:98:aa:58:62:14:03: aa:fe:7a:cf:c1:92:1c:ff:f7:60:cf:65:5b:cb:df: 17:c8:e1:e6:a3:d4:96:8e:04:09:ab:d3:e8:f2:5b: c8:21:9c:38:ca:4e:2e:73:5f:f1:b6:44:70:df:c1: 84:9e:ca:20:68:5a:d2:ed:1c:c2:56:50:4c:36:45: cc:64:cf:44:50:11:01:63:18:ee:2a:78:2f:0f:89: f6:3d:29:e1:ef:f0:b7:17:6a:d0:9c:9f:6c:34:12: 74:2f:87:59:bb:38:2c:33:01:21:89:d1:ea:25:2a: 44:5c:d7:7b:65:59:ba:9f:c0:2e:e7:00:b5:32:ef: 5b:7e:75:9a:37:fc:98:42:55:7e:d6:ab:a1:f4:61: 2a:af:49:7b:4c:39:0a:1a:43:21:44:7c:10:b5:e7: cd:67:02:de:44:a4:23:32:57:65:47:f2:47:5e:86: ae:2d:66:f1:7d:e9:44:aa:a4:dd:eb:c6:e1:5e:2e: 01:f9:0f:4f:a3:ae:4e:d7:56:ba:b3:b9:68:06:23: 13:f2:99:8e:1b:d5:e2:70:5c:97:8f:eb:53:f8:7b: 42:a2:4c:1e:71:62:3b:9b:a9:6e:39:fd:99:f2:40: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:D0:DE:37:FF:8B:33:1C:72:1A:2D:8F:61:70:18:46:52:8D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/aa1ef16a-31d8-3a69-a070-8a6f086b417b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:58:56:48:04:aa:d0:19:62:84:e6:bc:2e:41:4c:20:4a:6c: 7f:bc:c1:06:47:15:22:30:dd:82:76:52:08:b8:9b:76:14:d8: d9:f5:62:46:a2:ef:7d:89:d7:c3:db:fd:8b:56:f2:58:29:51: 65:d6:c7:0a:48:a9:c2:87:80:a2:f0:ca:64:ac:b8:c5:17:ff: 9d:a8:41:c9:c7:44:7e:ff:56:21:24:21:ee:1e:82:70:b5:e3: 54:82:ed:6e:99:80:61:62:a6:30:89:9d:a4:72:7c:e2:a5:e3: 36:20:81:52:d4:c8:ee:d4:17:32:61:37:40:b4:5a:57:96:be: ea:21:ff:4e:8c:10:cc:e8:73:9f:d0:d9:e9:33:25:62:f2:c6: 53:8c:28:67:47:8e:b8:fa:8d:73:e0:56:4e:23:c9:17:8a:eb: 04:d0:56:7b:99:f8:c1:c0:37:3a:ca:fb:10:ae:53:2b:58:b3: f0:3c:50:31:c0:18:d3:3e:04:25:66:c8:b9:98:56:5a:cf:49: 23:a7:3d:21:ce:50:b5:1b:5f:fb:e9:b3:03:bb:5c:d1:c5:37: 6e:92:2a:ab:a3:77:31:2e:d6:85:fe:b1:1b:74:6b:be:b9:e3: 70:07:47:e3:6f:82:e1:44:50:63:08:df:8c:65:09:f5:18:21: 40:e6:98:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9cucCzN9McHTnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MWY3N2Q0MDUtZWYzNi00ZjBkLWEyYTYtNmQyMzVmMjI2N2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYv3Zh53fZ+3X7XJSoSe8H/Lhp3AXO6Yqlhi FAOq/nrPwZIc//dgz2Vby98XyOHmo9SWjgQJq9Po8lvIIZw4yk4uc1/xtkRw38GE nsogaFrS7RzCVlBMNkXMZM9EUBEBYxjuKngvD4n2PSnh7/C3F2rQnJ9sNBJ0L4dZ uzgsMwEhidHqJSpEXNd7ZVm6n8Au5wC1Mu9bfnWaN/yYQlV+1quh9GEqr0l7TDkK GkMhRHwQtefNZwLeRKQjMldlR/JHXoauLWbxfelEqqTd68bhXi4B+Q9Po65O11a6 s7loBiMT8pmOG9XicFyXj+tT+HtCokwecWI7m6luOf2Z8kAJ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODH0N43/4szHHIaLY9hcBhGUo3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvYWExZWYxNmEtMzFkOC0z YTY5LWEwNzAtOGE2ZjA4NmI0MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFYVkgEqtAZYoTmvC5BTCBKbH+8wQZHFSIw3YJ2Ugi4m3YU2Nn1Ykai 732J18Pb/YtW8lgpUWXWxwpIqcKHgKLwymSsuMUX/52oQcnHRH7/ViEkIe4egnC1 41SC7W6ZgGFipjCJnaRyfOKl4zYggVLUyO7UFzJhN0C0WleWvuoh/06MEMzoc5/Q 2ekzJWLyxlOMKGdHjrj6jXPgVk4jyReK6wTQVnuZ+MHANzrK+xCuUytYs/A8UDHA GNM+BCVmyLmYVlrPSSOnPSHOULUbX/vpswO7XNHFN26SKqujdzEu1oX+sRt0a765 43AHR+NvguFEUGMI34xlCfUYIUDmmIE= -----END CERTIFICATE-----Generated at Tue Nov 25 14:27:36 2025 by rpki-client