This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa File: f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa (raw, json) Hash identifier: hsnoYQPR9CA5GgNqDqrmKxzmSXx8yILPVrniW/pBG7M= Subject key identifier: 44:4E:D0:78:EA:BB:50:3F:B0:56:13:6B:5C:A7:D6:AA:FF:09:FF:3D Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584BE555C606A4B4C98093C738A0 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa Signing time: Tue 18 Nov 2025 02:00:30 +0000 ROA not before: Tue 18 Nov 2025 02:00:30 +0000 ROA not after: Mon 16 Feb 2026 02:00:30 +0000 asID: 12129 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e5:55:c6:06:a4:b4:c9:80:93:c7:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Nov 18 02:00:30 2025 GMT Not After : Feb 16 02:00:30 2026 GMT Subject: CN=502b7008-3cec-45ea-bbe2-e38e5f851b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f3:2a:0b:df:e4:3f:53:0f:e8:ed:f6:64:fb: 01:94:64:7a:53:86:ca:d4:71:50:f6:b2:33:c6:1f: fb:b7:db:20:5c:61:d9:64:be:48:6f:89:0d:13:72: dd:82:f5:ad:b0:bd:58:1b:d3:19:e0:aa:1a:a3:3b: 36:f0:e6:59:64:4b:5e:e8:d5:56:be:ef:9b:41:dc: cf:be:d1:ad:c1:9e:ea:32:f6:19:1e:47:3e:ee:7b: e6:ca:ba:34:3c:2f:02:71:47:f8:dd:47:d9:10:44: e9:54:86:ac:54:e7:6b:a5:45:19:12:c8:97:9e:46: 33:9a:67:88:f9:d1:e1:b3:d1:1a:fb:27:6e:23:38: a0:17:ba:93:62:4e:5f:e3:4a:19:77:ba:a8:88:e0: 16:61:5c:49:a9:95:d2:02:a7:e2:6a:a1:f8:f3:98: 26:e7:af:8e:ad:3e:e7:c4:fd:5c:e3:f9:3f:fe:17: 66:bf:13:02:79:7b:f7:56:a0:4e:c9:8b:3a:b8:35: 56:03:1f:1c:53:53:41:7f:68:06:ae:9d:cd:65:50: e3:f0:2c:d4:86:c7:ed:bb:73:6a:3a:68:72:13:66: fb:4d:ac:9a:23:32:2f:d4:e7:58:13:01:4f:4e:7a: 70:3f:a0:4d:4e:f6:68:6f:36:d6:13:a6:97:5a:bc: 8a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4E:D0:78:EA:BB:50:3F:B0:56:13:6B:5C:A7:D6:AA:FF:09:FF:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/f6fac09e-6dfd-30ef-b8c0-2da92bc53a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5f:56:1c:00:9a:e7:6a:16:2f:7c:4e:70:4b:1e:98:0a:ba: 9a:c2:29:52:e3:3b:f4:4f:20:96:8d:fd:d5:f9:d4:be:86:b0: d7:44:32:62:3e:16:bb:5e:69:15:00:56:8d:88:1e:6c:aa:90: 95:75:0f:2e:d3:0a:74:39:eb:e1:11:03:4e:fe:1b:2d:ad:d1: cf:bb:df:73:cf:31:8a:5d:95:32:54:62:8e:d6:ac:89:20:fc: 5c:8c:9e:c3:27:63:95:06:57:e9:3f:37:f0:bf:33:2c:eb:9a: 7d:94:27:21:9e:6e:78:24:43:97:c0:8c:c1:a6:2a:1f:fd:d1: b9:d7:4e:dd:55:57:c7:6f:ed:36:c9:6c:68:4c:ff:97:e4:dd: 7a:cd:5f:88:5f:b5:22:9f:45:48:39:f4:c6:9b:95:a2:24:c8: 27:9e:62:b2:dd:fb:7b:3e:ad:c6:5b:b1:0a:fd:c6:48:99:37: a0:b2:d1:f8:d1:65:71:84:01:71:67:20:c0:44:b7:93:a2:3f: 22:18:95:2a:36:97:f5:da:3c:d7:1a:46:20:50:51:36:b7:74: 83:ea:dc:d5:83:22:51:de:4a:20:2c:09:a7:48:f3:0b:33:2e: 73:b2:05:2c:f4:0c:6d:0a:9d:1c:53:69:c3:47:4e:6d:11:0c: cc:2a:19:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvlVcYGpLTJgJPHOKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MTExODAyMDAzMFoXDTI2MDIxNjAyMDAzMFowLzEtMCsGA1UEAxMk NTAyYjcwMDgtM2NlYy00NWVhLWJiZTItZTM4ZTVmODUxYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/MqC9/kP1MP6O32ZPsBlGR6U4bK1HFQ9rIz xh/7t9sgXGHZZL5Ib4kNE3LdgvWtsL1YG9MZ4Koaozs28OZZZEte6NVWvu+bQdzP vtGtwZ7qMvYZHkc+7nvmyro0PC8CcUf43UfZEETpVIasVOdrpUUZEsiXnkYzmmeI +dHhs9Ea+yduIzigF7qTYk5f40oZd7qoiOAWYVxJqZXSAqfiaqH485gm56+OrT7n xP1c4/k//hdmvxMCeXv3VqBOyYs6uDVWAx8cU1NBf2gGrp3NZVDj8CzUhsftu3Nq OmhyE2b7TayaIzIv1OdYEwFPTnpwP6BNTvZobzbWE6aXWryKWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERO0Hjqu1A/sFYTa1yn1qr/Cf89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvZjZmYWMwOWUtNmRmZC0z MGVmLWI4YzAtMmRhOTJiYzUzYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJfVhwAmudqFi98TnBLHpgKuprCKVLjO/RPIJaN/dX51L6GsNdEMmI+ FrteaRUAVo2IHmyqkJV1Dy7TCnQ56+ERA07+Gy2t0c+733PPMYpdlTJUYo7WrIkg /FyMnsMnY5UGV+k/N/C/Myzrmn2UJyGebngkQ5fAjMGmKh/90bnXTt1VV8dv7TbJ bGhM/5fk3XrNX4hftSKfRUg59MablaIkyCeeYrLd+3s+rcZbsQr9xkiZN6Cy0fjR ZXGEAXFnIMBEt5OiPyIYlSo2l/XaPNcaRiBQUTa3dIPq3NWDIlHeSiAsCadI8wsz LnOyBSz0DG0KnRxTacNHTm0RDMwqGSE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:14 2025 by rpki-client