This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json) Hash identifier: lGXbBjdOpYcTDqdxuVxLWBm5dfcpCaTe01kn+W/fej0= Subject key identifier: 7D:B0:2C:3A:79:0D:CD:48:89:50:05:B0:18:A3:F7:9F:84:20:5A:94 Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Certificate serial: 010D0C9F4328584BCD9AF9967DE25417DD6B1E60 Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 397681 IP address blocks: 192.219.99.0/24 maxlen: 24 198.168.2.0/24 maxlen: 24 199.202.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9a:f9:96:7d:e2:54:17:dd:6b:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=8f82d781-8747-42da-bca3-afee67de7eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:ce:0a:75:cd:6b:67:7c:73:4c:58:ca:ef: c1:e5:fc:b4:37:5a:5b:3f:f2:84:c3:35:da:d2:09: 3b:20:f8:74:c1:78:f7:9e:a0:60:c8:d0:53:7e:43: 7a:8a:9c:6c:ed:81:0e:d8:b7:49:0a:29:81:ec:72: 84:b4:09:4b:84:f5:f5:68:ad:ea:f8:0b:06:5a:02: 57:51:2e:26:55:9c:ca:5b:c2:86:85:8a:2e:b1:f8: 07:a4:5f:a6:ee:59:93:db:7c:b5:c8:f1:4d:02:87: 39:66:66:69:12:bf:dd:b5:a6:ee:5b:f7:8e:36:90: c0:27:83:0d:af:fa:ce:39:a2:89:cb:9d:f0:a4:38: 79:b4:12:58:3e:7f:af:f8:1d:13:bb:4c:b2:77:24: bf:d7:96:8a:34:f8:8f:38:26:a6:c3:07:f4:bc:b8: 2c:37:00:fd:dd:b4:3b:e5:20:a7:4a:7f:b8:8d:0b: 07:07:22:d7:5c:aa:11:30:ad:e3:66:4d:96:5e:8a: c6:03:75:76:2c:61:8d:64:84:df:44:54:38:34:52: dd:e7:74:34:0d:5b:16:20:57:20:01:80:1c:a0:54: 3d:60:c6:93:8a:db:e9:a5:55:f6:15:07:01:a6:ec: 69:64:e8:da:46:80:fc:32:7f:33:62:04:86:ca:d2: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B0:2C:3A:79:0D:CD:48:89:50:05:B0:18:A3:F7:9F:84:20:5A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl X509v3 Authority Key Identifier: keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer sbgp-ipAddrBlock: critical IPv4: 192.219.99.0/24 198.168.2.0/24 199.202.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:17:d7:c3:ac:d3:fb:e4:e7:42:1c:ef:d1:e5:90:14:a6:59: b5:15:1f:17:5f:33:68:a8:00:80:7d:3f:e7:ce:09:dc:49:1d: 30:31:5d:ec:e4:3f:64:22:5c:de:34:3f:9e:e5:01:4d:13:02: 10:fa:0a:5c:f0:62:65:aa:11:6b:c5:8d:ef:e9:14:c6:12:42: 0c:28:24:af:a5:d6:9e:10:bd:8b:79:1d:d5:29:1d:66:e5:5e: e6:23:2c:f4:78:ec:eb:f5:7a:f5:63:38:8f:d9:dd:03:e8:04: ca:e4:7c:60:9d:35:7c:65:b7:82:b0:b5:ba:4a:11:20:23:99: f8:58:d3:6d:70:89:2c:55:5b:2b:01:4e:a3:0c:65:0e:2f:01: 9b:bd:ef:dd:66:74:fc:c4:46:56:e5:cb:3b:b9:b9:19:ae:c6: 2b:d8:3a:2c:76:9d:2c:44:17:a4:13:53:5d:81:b1:f1:d7:f5: 6e:5c:4e:aa:0f:53:5d:f3:2c:36:99:b5:0b:0f:4b:8e:ba:ee: 2c:2a:c9:2a:93:2e:62:28:b1:2b:2a:ba:db:c8:f8:de:81:bb: f0:dc:18:42:f8:12:07:a2:3c:3a:9b:c2:04:4d:08:62:7e:e4: 33:9e:86:3d:c3:35:34:9d:c3:09:82:b1:85:d7:60:90:8c:d4: e6:8f:ad:4b -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEvNmvmWfeJUF91rHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY5NGFmMzAtYThlOC00MmI0LTllNDMtNjQ5NDM3YzBj YWM3MB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk OGY4MmQ3ODEtODc0Ny00MmRhLWJjYTMtYWZlZTY3ZGU3ZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmzOCnXNa2d8c0xYyu/B5fy0N1pbP/KEwzXa 0gk7IPh0wXj3nqBgyNBTfkN6ipxs7YEO2LdJCimB7HKEtAlLhPX1aK3q+AsGWgJX US4mVZzKW8KGhYousfgHpF+m7lmT23y1yPFNAoc5ZmZpEr/dtabuW/eONpDAJ4MN r/rOOaKJy53wpDh5tBJYPn+v+B0Tu0yydyS/15aKNPiPOCamwwf0vLgsNwD93bQ7 5SCnSn+4jQsHByLXXKoRMK3jZk2WXorGA3V2LGGNZITfRFQ4NFLd53Q0DVsWIFcg AYAcoFQ9YMaTitvppVX2FQcBpuxpZOjaRoD8Mn8zYgSGytJPtwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFH2wLDp5Dc1IiVAFsBij95+EIFqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0 YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0MzdjMGNhYzcvODM4NjQzZDUtN2ZmZS0z OGJmLWI1MWYtNWFmZGNkMmE1NWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGY5NGFmMzAtYThlOC00MmI0LTll NDMtNjQ5NDM3YzBjYWM3L2RmOTRhZjMwLWE4ZTgtNDJiNC05ZTQzLTY0OTQzN2Mw Y2FjNy5jcmwwHwYDVR0jBBgwFoAUSlVhvCQAUxXcn0jPVU/W2Iri/LswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjk0YWYzMC1hOGU4LTQyYjQtOWU0My02NDk0 MzdjMGNhYzcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwNtjAwQA xqgCAwQAx8pbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABoX18Os0/vk50Ic79HlkBSmWbUVHxdfM2ioAIB9 P+fOCdxJHTAxXezkP2QiXN40P57lAU0TAhD6ClzwYmWqEWvFje/pFMYSQgwoJK+l 1p4QvYt5HdUpHWblXuYjLPR47Ov1evVjOI/Z3QPoBMrkfGCdNXxlt4KwtbpKESAj mfhY021wiSxVWysBTqMMZQ4vAZu9791mdPzERlblyzu5uRmuxivYOix2nSxEF6QT U12BsfHX9W5cTqoPU13zLDaZtQsPS4667iwqySqTLmIosSsqutvI+N6Bu/DcGEL4 EgeiPDqbwgRNCGJ+5DOehj3DNTSdwwmCsYXXYJCM1OaPrUs= -----END CERTIFICATE-----Generated at Sun Nov 30 16:23:36 2025 by rpki-client