This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa File: a45363ac-38b7-3765-9fd2-71955777f847.roa (raw, json) Hash identifier: 4Hwh/5lve+FGJIQJQEmsdiciRNqnF7+eGrUXCYBpKts= Subject key identifier: 35:C0:25:90:02:14:8D:E3:50:FA:43:D0:F5:C3:75:58:6C:00:38:21 Certificate issuer: /CN=3d17c017-30b5-444a-aa30-048cc30971e3 Certificate serial: 010D0C9F4328584BDA2B31DFCA8E4DACA90B6080 Authority key identifier: 6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 401927 IP address blocks: 104.204.192.0/21 maxlen: 21 2604:1d20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:31:df:ca:8e:4d:ac:a9:0b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d17c017-30b5-444a-aa30-048cc30971e3 Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=2f9fc4e4-c955-46e6-8f9c-fa56151ca727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:9b:c3:33:d4:ad:eb:47:ab:aa:12:19:a7: 24:f3:b6:b0:b6:13:e5:1c:db:8e:da:a6:3d:55:0d: 5e:3e:9b:b3:9a:b9:6d:e7:e5:ac:04:7d:75:50:80: c5:b7:50:ae:e7:2e:67:6c:34:b5:4a:ca:b6:5b:c6: 91:f7:fb:ef:8d:b7:a7:db:b5:e7:0f:af:c2:58:be: 34:7b:a7:6a:94:33:6d:74:0b:3b:91:ec:f7:ed:df: 97:5e:de:50:1e:3f:7e:65:bb:d4:82:64:78:3a:18: 8f:0f:f4:5b:a1:ef:09:b6:8e:c8:95:52:25:80:e1: 67:b0:10:db:63:08:e2:38:87:23:00:16:7d:ec:45: 39:eb:1f:38:01:69:41:7a:c8:d9:87:49:00:d3:d5: 27:55:55:74:8e:eb:83:ff:3d:e2:cd:be:9e:6f:b5: a0:2f:3b:98:23:17:23:41:61:0f:e5:69:67:41:ae: d1:de:bd:33:86:b2:30:5c:0c:fb:1e:79:5f:d4:1a: 8d:85:14:fc:1a:90:f0:65:e2:8f:4d:a6:b6:07:e2: bd:8c:36:62:cd:cd:80:33:65:ef:cf:21:45:6f:83: b8:a4:a4:81:f7:08:0f:d9:0b:93:7d:93:93:9b:67: 11:6b:4b:eb:1f:cb:28:d0:7f:4e:e7:ea:84:e7:cb: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C0:25:90:02:14:8D:E3:50:FA:43:D0:F5:C3:75:58:6C:00:38:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/a45363ac-38b7-3765-9fd2-71955777f847.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3/3d17c017-30b5-444a-aa30-048cc30971e3.crl X509v3 Authority Key Identifier: keyid:6C:B3:35:22:2D:B9:DC:2C:D3:98:62:F1:4D:22:68:34:1A:DC:2B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3d17c017-30b5-444a-aa30-048cc30971e3.cer sbgp-ipAddrBlock: critical IPv4: 104.204.192.0/21 IPv6: 2604:1d20::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:32:5d:f7:28:ab:d0:9e:9b:0e:69:3f:01:a0:73:1a:45:bb: a0:2d:2b:36:4f:07:47:f0:a2:93:3d:c8:2c:a8:16:be:f4:17: 27:8b:53:bf:9d:e2:79:1d:50:0e:9f:4e:f7:5e:4b:42:58:cb: 82:ca:13:a5:7d:7c:81:11:8c:af:96:0f:27:d8:cc:de:7e:1f: 21:1d:ca:6a:a2:2e:ae:ab:2a:49:cf:21:e1:14:9d:c3:92:6e: 27:24:e8:25:a0:7a:6e:ce:15:bb:12:d1:d2:9a:c6:04:ec:bb: 60:fd:0d:2a:e8:31:9e:bd:c7:32:fb:54:66:da:db:da:54:d3: 5e:d5:db:9a:9b:7e:cf:47:9a:70:e7:57:95:db:8a:33:5d:0b: fa:08:c3:c7:c3:4b:61:65:f8:39:20:e1:4a:ed:14:b7:59:44: 62:5a:e8:1a:49:97:e2:d1:ad:de:20:0c:9e:f4:61:65:35:7a: f1:3d:36:e8:17:18:fb:3c:eb:a9:35:bb:7d:a3:c5:eb:44:60: 1f:5a:e2:4a:92:e4:76:66:15:70:c8:f9:24:38:3a:32:e9:9c: 14:28:e5:a2:5f:d1:7e:3d:ed:29:0d:17:70:cf:c9:40:fe:d9: 63:d5:06:61:8b:51:05:5e:5e:56:2d:17:21:cc:01:bd:f3:2c: b1:01:fe:ba -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEvaKzHfyo5NrKkLYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxN2MwMTctMzBiNS00NDRhLWFhMzAtMDQ4Y2MzMDk3 MWUzMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk MmY5ZmM0ZTQtYzk1NS00NmU2LThmOWMtZmE1NjE1MWNhNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tebwzPUretHq6oSGack87awthPlHNuO2qY9 VQ1ePpuzmrlt5+WsBH11UIDFt1Cu5y5nbDS1Ssq2W8aR9/vvjben27XnD6/CWL40 e6dqlDNtdAs7kez37d+XXt5QHj9+ZbvUgmR4OhiPD/Rboe8Jto7IlVIlgOFnsBDb YwjiOIcjABZ97EU56x84AWlBesjZh0kA09UnVVV0juuD/z3izb6eb7WgLzuYIxcj QWEP5WlnQa7R3r0zhrIwXAz7Hnlf1BqNhRT8GpDwZeKPTaa2B+K9jDZizc2AM2Xv zyFFb4O4pKSB9wgP2QuTfZOTm2cRa0vrH8so0H9O5+qE58sC+wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDXAJZACFI3jUPpD0PXDdVhsADghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3 YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhjYzMwOTcxZTMvYTQ1MzYzYWMtMzhiNy0z NzY1LTlmZDItNzE5NTU3NzdmODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2QxN2MwMTctMzBiNS00NDRhLWFh MzAtMDQ4Y2MzMDk3MWUzLzNkMTdjMDE3LTMwYjUtNDQ0YS1hYTMwLTA0OGNjMzA5 NzFlMy5jcmwwHwYDVR0jBBgwFoAUbLM1Ii253CzTmGLxTSJoNBrcKx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZDE3YzAxNy0zMGI1LTQ0NGEtYWEzMC0wNDhj YzMwOTcxZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDaMzAMA0E AgACMAcDBQAmBB0gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADIyXfcoq9Cemw5pPwGgcxpFu6AtKzZPB0fw opM9yCyoFr70FyeLU7+d4nkdUA6fTvdeS0JYy4LKE6V9fIERjK+WDyfYzN5+HyEd ymqiLq6rKknPIeEUncOSbick6CWgem7OFbsS0dKaxgTsu2D9DSroMZ69xzL7VGba 29pU017V25qbfs9HmnDnV5XbijNdC/oIw8fDS2Fl+Dkg4UrtFLdZRGJa6BpJl+LR rd4gDJ70YWU1evE9NugXGPs866k1u32jxetEYB9a4kqS5HZmFXDI+SQ4OjLpnBQo 5aJf0X497SkNF3DPyUD+2WPVBmGLUQVeXlYtFyHMAb3zLLEB/ro= -----END CERTIFICATE-----Generated at Sat Nov 22 21:22:01 2025 by rpki-client