This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3224232c-6710-31a3-a886-de869a3f4135.roa File: 3224232c-6710-31a3-a886-de869a3f4135.roa (raw, json) Hash identifier: haYJZFaQK7OPbGx1YQZXlCiRGyC4rixOFdxo1hse8YA= Subject key identifier: B0:00:2A:CD:70:79:C1:CA:C4:E8:0B:8C:BE:14:17:0C:19:83:D5:06 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD85FC3D50211F7062D5CC860 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3224232c-6710-31a3-a886-de869a3f4135.roa Signing time: Thu 13 Nov 2025 10:35:15 +0000 ROA not before: Thu 13 Nov 2025 10:35:15 +0000 ROA not after: Wed 11 Feb 2026 10:35:15 +0000 asID: 36183 IP address blocks: 172.224.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:5f:c3:d5:02:11:f7:06:2d:5c:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 10:35:15 2025 GMT Not After : Feb 11 10:35:15 2026 GMT Subject: CN=af1299b7-71dc-4609-a14a-c2095ce4583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3d:ce:99:e6:18:f1:a4:6c:39:13:a0:e9:4d: 8a:af:7c:09:01:df:59:12:f0:d2:75:24:8e:2a:45: 2e:f6:e9:ba:b1:11:f4:dd:73:9f:76:5d:b1:cb:fd: b2:8f:9d:b5:a7:83:c3:cd:d7:7c:49:07:58:bb:5e: 04:48:b3:9e:25:cb:f8:0c:62:25:ab:8e:60:e5:0d: 00:92:84:a5:11:5e:4b:48:cc:9d:50:61:8d:33:31: 98:79:82:66:4d:33:56:1a:c9:ce:7f:c4:0e:92:51: 46:e5:1d:4f:ee:ea:4e:0e:e9:4d:fb:91:9a:72:ff: 20:31:f4:8e:14:d5:0f:5b:b1:55:77:c5:2b:7a:d5: ef:51:7f:81:2b:fd:e6:1f:9c:11:ef:98:aa:ea:31: 70:30:10:07:3e:5d:0c:80:27:07:4a:db:61:44:42: db:27:fd:a4:c5:d2:ec:12:b2:c7:9e:2a:d6:b1:17: 93:52:97:7b:9d:21:b2:40:80:df:02:92:85:c9:f8: c8:73:e9:c9:ff:4c:55:b4:f4:ad:a7:e2:fb:10:0a: 02:12:c4:27:2e:27:33:4a:1b:09:d0:88:98:a4:9a: 4b:32:cf:0e:b8:30:e0:ba:5e:1a:62:9f:86:32:bf: 90:57:be:4a:d1:84:01:68:60:db:ae:cb:fc:cc:28: ed:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:00:2A:CD:70:79:C1:CA:C4:E8:0B:8C:BE:14:17:0C:19:83:D5:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3224232c-6710-31a3-a886-de869a3f4135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:32:72:d1:5b:60:69:a7:4a:3d:dd:4c:89:7c:bf:64:84:4e: 64:f8:39:24:c7:1c:3d:3a:ff:5a:a7:ab:30:34:75:56:72:22: 4a:71:55:4f:2d:76:8e:73:7c:85:13:00:f2:62:06:83:bd:d3: 04:a0:77:55:fe:27:35:6f:09:b4:10:1a:01:6d:21:66:f3:c5: 84:8e:73:b2:7e:6f:35:e4:22:fb:f4:f8:1c:30:da:d9:3c:f9: da:04:16:8e:78:6c:54:a3:d1:4d:ac:91:23:29:33:f8:d2:f5: 49:c0:92:85:a3:b6:3c:8a:1d:d9:53:27:9d:e7:99:12:c6:f7: d2:56:ce:49:3b:0e:fc:e0:8a:a9:9c:b3:da:43:16:58:24:0c: ab:5a:38:19:98:5d:e4:0c:12:cf:ee:df:53:bc:53:08:f8:d4: 17:03:6e:7c:ce:ac:9c:95:55:e7:e5:aa:73:ca:4b:5c:db:08: 2b:38:96:d9:7c:5f:73:59:dd:d9:ec:e8:b8:45:03:be:71:88: 74:f4:4b:8a:6f:90:df:f7:09:60:65:07:ab:e5:dd:3f:2b:fd: ce:e2:8b:56:cd:72:85:92:97:e7:67:02:10:e6:b7:6b:1e:5e: f3:9e:6c:1b:cf:59:5b:2c:37:e0:24:e4:f8:8b:91:12:49:e4: cc:05:a3:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYX8PVAhH3Bi1cyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMzEwMzUxNVoXDTI2MDIxMTEwMzUxNVowLzEtMCsGA1UEAxMk YWYxMjk5YjctNzFkYy00NjA5LWExNGEtYzIwOTVjZTQ1ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj3OmeYY8aRsOROg6U2Kr3wJAd9ZEvDSdSSO KkUu9um6sRH03XOfdl2xy/2yj521p4PDzdd8SQdYu14ESLOeJcv4DGIlq45g5Q0A koSlEV5LSMydUGGNMzGYeYJmTTNWGsnOf8QOklFG5R1P7upODulN+5Gacv8gMfSO FNUPW7FVd8UretXvUX+BK/3mH5wR75iq6jFwMBAHPl0MgCcHStthRELbJ/2kxdLs ErLHnirWsReTUpd7nSGyQIDfApKFyfjIc+nJ/0xVtPStp+L7EAoCEsQnLiczShsJ 0IiYpJpLMs8OuDDgul4aYp+GMr+QV75K0YQBaGDbrsv8zCjtMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAAKs1wecHKxOgLjL4UFwwZg9UGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIyNDIzMmMtNjcxMC0z MWEzLWE4ODYtZGU4NjlhM2Y0MTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwyctFbYGmnSj3dTIl8v2SETmT4OSTHHD06/1qnqzA0dVZyIkpxVU8t do5zfIUTAPJiBoO90wSgd1X+JzVvCbQQGgFtIWbzxYSOc7J+bzXkIvv0+Bww2tk8 +doEFo54bFSj0U2skSMpM/jS9UnAkoWjtjyKHdlTJ53nmRLG99JWzkk7Dvzgiqmc s9pDFlgkDKtaOBmYXeQMEs/u31O8Uwj41BcDbnzOrJyVVeflqnPKS1zbCCs4ltl8 X3NZ3dns6LhFA75xiHT0S4pvkN/3CWBlB6vl3T8r/c7ii1bNcoWSl+dnAhDmt2se XvOebBvPWVssN+Ak5PiLkRJJ5MwFo0s= -----END CERTIFICATE-----Generated at Fri Dec 5 22:06:34 2025 by rpki-client