This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa File: a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa (raw, json) Hash identifier: qxbI/SbMSbjoM8NDYXGb+w3+n4mgN8nyKEtoNZw1tu8= Subject key identifier: AE:F5:8C:73:17:CB:61:0E:E8:2A:54:1B:13:B4:E1:A1:CD:75:8A:7B Certificate issuer: /CN=2831c461-e175-4265-a0ea-565d8e6179b8 Certificate serial: 010D0C9F4328584BD1CB20756AA3088D14D93280 Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 36610 IP address blocks: 199.68.144.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:cb:20:75:6a:a3:08:8d:14:d9:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=c7b4ac54-6e72-471a-8538-0ee1328b00da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:d0:24:fc:a1:1f:1b:67:1b:7b:e3:f2:67: 1d:8c:be:12:09:b4:9f:62:53:d9:48:e7:1a:ef:e1: c1:70:2c:9f:ba:d5:2d:99:82:1e:0a:35:bf:7e:48: f8:ad:82:20:bb:c3:75:63:96:9b:c4:a3:d2:89:13: c6:30:aa:e3:f7:84:7c:f0:ba:58:84:9e:c5:20:11: 99:82:f6:15:48:0d:c8:57:93:0b:0d:be:7b:03:19: e2:87:e2:84:51:fc:0a:53:2c:76:b0:27:56:01:14: e5:c8:8a:2a:85:09:3e:21:94:1c:f4:9f:ae:2c:39: 09:2c:c7:62:c6:d7:91:59:81:3a:03:aa:71:c3:5f: 16:e9:e6:66:df:4d:3d:5d:9d:a1:7d:5f:be:82:bb: 44:d6:05:fb:c8:6d:e7:38:d4:41:d0:c6:9b:ca:95: eb:84:30:b1:5e:37:f7:82:fc:93:f8:be:25:10:d7: c6:bb:a1:59:f6:26:3f:43:5a:bb:07:93:b2:64:2e: 1c:73:a0:1c:d3:85:23:b7:47:b9:64:22:10:f9:42: 51:2b:f6:53:6e:05:81:22:c9:74:1f:ad:21:b8:67: 8a:a3:53:2f:d9:12:e5:cc:db:ca:84:7a:1a:7a:79: 66:4b:53:b8:eb:4a:0b:47:1f:7c:9b:42:34:55:2f: e8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:8C:73:17:CB:61:0E:E8:2A:54:1B:13:B4:E1:A1:CD:75:8A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/a9457a3d-56de-3e38-ab7a-0babba50c0c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl X509v3 Authority Key Identifier: keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer sbgp-ipAddrBlock: critical IPv4: 199.68.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:26:98:eb:af:e5:dc:f2:8c:6b:ed:2d:e2:b6:e2:6e:40:99: 53:be:d8:6e:79:c1:ec:6a:bb:d3:49:35:2d:53:94:63:d9:c6: a4:b5:23:e6:77:a0:44:c8:d9:52:96:ee:d3:99:99:fc:71:e4: cd:7d:3d:ff:00:55:6e:b8:6a:98:2c:1f:bc:f6:e6:bd:e4:f6: 1f:9f:e0:91:cc:25:5e:0b:6b:fd:84:0c:25:78:b3:f5:01:b4: 3a:95:1a:7f:43:7c:ca:7f:1f:78:91:34:ac:3b:ce:31:6e:37: e3:77:1d:5d:06:88:42:d9:30:a8:fd:8a:ff:dc:f5:7a:c7:50: ae:c8:99:36:17:97:39:6f:ef:f8:e3:89:9a:7e:01:c6:f1:f6: 54:99:97:e7:89:11:8b:44:d5:01:f0:8b:6d:37:30:f0:3d:fa: a0:21:a9:36:e0:ad:4a:69:9c:da:90:99:40:ab:a7:3f:80:69: 92:d9:c3:dc:bf:99:1b:09:c2:19:44:59:02:eb:8c:08:83:37: 04:26:3f:9b:b8:ff:00:bc:f1:cf:40:73:ac:ba:72:b1:2a:b1: c0:eb:6a:fd:8d:eb:52:9f:6d:21:52:6c:61:66:d0:52:89:15: 1d:d6:2f:3a:94:7e:c8:a1:9e:03:99:73:f1:ba:cc:b4:4b:d9: 96:9c:78:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyyB1aqMIjRTZMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3 OWI4MB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk YzdiNGFjNTQtNmU3Mi00NzFhLTg1MzgtMGVlMTMyOGIwMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm3QJPyhHxtnG3vj8mcdjL4SCbSfYlPZSOca 7+HBcCyfutUtmYIeCjW/fkj4rYIgu8N1Y5abxKPSiRPGMKrj94R88LpYhJ7FIBGZ gvYVSA3IV5MLDb57Axnih+KEUfwKUyx2sCdWARTlyIoqhQk+IZQc9J+uLDkJLMdi xteRWYE6A6pxw18W6eZm3009XZ2hfV++grtE1gX7yG3nONRB0MabypXrhDCxXjf3 gvyT+L4lENfGu6FZ9iY/Q1q7B5OyZC4cc6Ac04Ujt0e5ZCIQ+UJRK/ZTbgWBIsl0 H60huGeKo1Mv2RLlzNvKhHoaenlmS1O460oLRx98m0I0VS/oXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK71jHMXy2EO6CpUGxO04aHNdYp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvYTk0NTdhM2QtNTZkZS0z ZTM4LWFiN2EtMGJhYmJhNTBjMGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk OGU2MTc5YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgmmOuv5dzyjGvtLeK24m5AmVO+2G55wexqu9NJNS1TlGPZxqS1I+Z3 oETI2VKW7tOZmfxx5M19Pf8AVW64apgsH7z25r3k9h+f4JHMJV4La/2EDCV4s/UB tDqVGn9DfMp/H3iRNKw7zjFuN+N3HV0GiELZMKj9iv/c9XrHUK7ImTYXlzlv7/jj iZp+Acbx9lSZl+eJEYtE1QHwi203MPA9+qAhqTbgrUppnNqQmUCrpz+AaZLZw9y/ mRsJwhlEWQLrjAiDNwQmP5u4/wC88c9Ac6y6crEqscDrav2N61KfbSFSbGFm0FKJ FR3WLzqUfsihngOZc/G6zLRL2ZaceO4= -----END CERTIFICATE-----Generated at Tue Nov 25 01:39:09 2025 by rpki-client