This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa File: 6ec4b6bf-d53f-3877-b36e-f669576d8063.roa (raw, json) Hash identifier: 5GHHj2qF5opLnO5ez5wKxySBmD3X6ej0lFe6K9oT3yI= Subject key identifier: 8A:2F:A5:6E:01:AC:96:D0:FA:7D:5F:FC:12:04:E0:08:EC:45:64:06 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584BF615E61B442DC25C7506DC00 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 6128 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:e6:1b:44:2d:c2:5c:75:06:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=0a718b31-fc36-49c7-8a73-ccd86e220948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:92:c8:70:f2:52:5c:14:05:69:dd:a9:45: 00:77:58:8d:ed:99:01:e2:fa:9a:e2:bd:05:6a:14: d1:15:a0:ae:14:c3:e2:07:06:47:6f:b8:2b:24:78: ba:69:b9:7d:30:a4:3f:c1:65:87:23:72:26:5a:83: 3b:e0:21:3e:22:f4:8d:79:80:de:64:56:4d:39:1e: f8:78:38:79:28:2f:09:ed:4b:49:1d:15:21:18:21: e0:97:15:c7:7f:00:85:4a:7a:8b:e9:3a:cc:29:8a: 96:3a:40:8c:47:39:24:fd:04:ea:11:c3:bb:db:d9: b1:ab:24:4e:14:66:8a:dd:cd:28:5a:8f:ff:be:81: de:34:cb:16:61:27:9f:c9:39:4a:5c:b8:e5:0a:06: 61:ce:fe:a3:c9:69:d2:23:7f:8e:92:5f:c4:70:8b: 4a:1c:66:ea:ca:4d:79:05:5c:62:2a:9d:1b:5a:f9: 70:3b:9d:d8:44:3d:23:b3:0d:d3:37:fd:f2:28:8c: 0f:a2:e8:2c:5f:81:88:10:a9:8f:56:34:86:45:2b: 99:86:4f:1f:fb:d5:b3:36:69:b0:e3:30:d5:f6:79: 61:02:29:60:68:c2:c0:30:70:ce:83:43:44:10:81: 6e:07:f7:f8:e2:36:e0:76:88:3c:c4:76:42:2a:8e: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2F:A5:6E:01:AC:96:D0:FA:7D:5F:FC:12:04:E0:08:EC:45:64:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/6ec4b6bf-d53f-3877-b36e-f669576d8063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:aa:28:3e:69:ea:0d:18:98:30:8e:36:d9:af:0f:a1:43:8e: 06:03:b0:fd:ce:d1:f2:2c:6d:a6:3a:6c:97:51:fa:35:48:5c: 1f:26:a6:a6:69:81:a0:ad:7a:a7:b5:c6:bf:1b:2c:93:72:b5: fc:0d:5a:50:b1:6b:ff:9b:5f:2e:ad:2c:b2:92:63:dc:0c:a1: 8e:af:e2:99:f3:d8:ee:3d:92:73:85:bb:e4:a9:f0:21:72:ae: 26:0e:d2:06:6a:19:2f:96:8e:8e:c3:f6:3d:6e:e7:4f:79:85: b6:63:0b:ce:39:11:73:be:fe:51:e3:46:4d:93:f7:51:11:a5: f1:e0:4e:03:90:03:ff:cb:9f:04:fb:89:ff:82:19:15:46:b4: f6:5a:69:74:b7:1d:2f:93:7e:80:ea:7f:a2:62:a4:53:a2:b1: 72:81:4a:c9:53:af:72:5d:eb:93:71:3e:cf:e1:21:3c:aa:c7: 91:21:5d:b6:54:4a:1d:fe:fc:b4:d8:f5:51:5f:d4:32:f2:6e: 53:52:fa:df:ac:d5:43:44:2f:85:80:08:d0:b1:bd:11:25:b5: 4a:08:eb:3d:51:62:0e:03:ff:ec:c2:da:43:8c:13:ad:a2:b6: 24:48:89:ad:28:e1:79:df:70:2c:ee:86:c9:9c:f5:3c:13:81: 54:c1:f7:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv2FeYbRC3CXHUG3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk MGE3MThiMzEtZmMzNi00OWM3LThhNzMtY2NkODZlMjIwOTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0GSyHDyUlwUBWndqUUAd1iN7ZkB4vqa4r0F ahTRFaCuFMPiBwZHb7grJHi6abl9MKQ/wWWHI3ImWoM74CE+IvSNeYDeZFZNOR74 eDh5KC8J7UtJHRUhGCHglxXHfwCFSnqL6TrMKYqWOkCMRzkk/QTqEcO729mxqyRO FGaK3c0oWo//voHeNMsWYSefyTlKXLjlCgZhzv6jyWnSI3+Okl/EcItKHGbqyk15 BVxiKp0bWvlwO53YRD0jsw3TN/3yKIwPougsX4GIEKmPVjSGRSuZhk8f+9WzNmmw 4zDV9nlhAilgaMLAMHDOg0NEEIFuB/f44jbgdog8xHZCKo7TcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIovpW4BrJbQ+n1f/BIE4AjsRWQGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvNmVjNGI2YmYtZDUzZi0z ODc3LWIzNmUtZjY2OTU3NmQ4MDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeqKD5p6g0YmDCONtmvD6FDjgYDsP3O0fIsbaY6bJdR+jVIXB8mpqZp gaCteqe1xr8bLJNytfwNWlCxa/+bXy6tLLKSY9wMoY6v4pnz2O49knOFu+Sp8CFy riYO0gZqGS+Wjo7D9j1u5095hbZjC845EXO+/lHjRk2T91ERpfHgTgOQA//LnwT7 if+CGRVGtPZaaXS3HS+TfoDqf6JipFOisXKBSslTr3Jd65NxPs/hITyqx5EhXbZU Sh3+/LTY9VFf1DLyblNS+t+s1UNEL4WACNCxvREltUoI6z1RYg4D/+zC2kOME62i tiRIia0o4XnfcCzuhsmc9TwTgVTB93I= -----END CERTIFICATE-----Generated at Tue Nov 25 10:06:55 2025 by rpki-client