This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa File: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (raw, json) Hash identifier: VPJAbUf3KOQk7HAlr9tk6Ixh0dN+DsolGqvpVSZj+KA= Subject key identifier: 36:61:03:60:F6:E8:37:8A:14:21:39:A2:1E:F4:36:94:AE:37:43:07 Certificate issuer: /CN=28591b95-39d7-4e54-90f3-1339338b842c Certificate serial: 010D0C9F4328584BFBAB3F40D844E54F6B7D7E80 Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 4755 IP address blocks: 208.78.16.0/24 maxlen: 24 208.78.17.0/24 maxlen: 24 208.78.18.0/24 maxlen: 24 208.78.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:3f:40:d8:44:e5:4f:6b:7d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=99d4d632-3622-46c4-9af5-7d950346f7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cd:37:8c:42:43:23:1b:50:e5:52:b1:6b:17: f7:c6:6c:e2:3f:d8:14:a9:3c:e7:e5:59:dc:35:eb: f7:98:ae:93:33:5b:b4:47:da:1c:2a:35:6b:a4:0b: fa:29:e1:63:85:df:0f:b9:c9:7e:a3:4e:7c:ba:5e: 51:2e:f1:73:d6:3d:7e:6f:e5:04:ea:e1:4c:79:85: 76:13:76:01:cc:68:16:6a:35:0c:16:c7:9f:55:92: f9:fe:80:61:a7:0e:80:18:cb:66:9a:3a:74:40:9f: f1:20:96:c1:dc:d2:f7:2a:d6:ec:d3:e9:4a:60:3d: 89:7c:97:03:20:ec:52:9e:dc:e9:81:a4:b9:33:89: af:1d:fc:29:9c:d0:b9:c1:31:16:a0:c8:43:42:db: be:0f:8a:16:80:8c:d9:3c:8b:32:67:92:36:ca:2c: 4d:8f:32:a6:cb:cf:18:f3:c3:87:64:2a:25:fb:19: 63:f2:1f:56:0d:1d:7b:56:c1:50:50:70:97:6f:8d: bf:1a:86:c4:09:4e:f8:8b:16:de:f4:4e:8e:8c:1d: bf:d2:79:4e:c2:10:3d:84:ba:93:42:d5:4e:33:0a: f2:e4:8d:ec:4a:f9:2c:e4:e4:a7:22:d5:35:7d:52: 1f:35:a9:05:e8:78:aa:b0:b5:64:4e:04:d5:13:a4: 42:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:61:03:60:F6:E8:37:8A:14:21:39:A2:1E:F4:36:94:AE:37:43:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl X509v3 Authority Key Identifier: keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer sbgp-ipAddrBlock: critical IPv4: 208.78.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:7c:4d:68:f8:ab:16:45:51:0d:3b:92:ff:89:ca:f4:b8:8c: 4a:77:28:9a:c3:9b:e5:48:92:c3:4f:cf:90:0c:90:a4:6e:c2: ab:82:16:a7:0c:32:86:ec:78:8f:60:49:d5:38:08:9f:05:e5: 6b:99:69:92:31:c5:dc:12:27:03:eb:ea:7e:de:a1:69:99:71: 62:7d:a2:fe:66:11:fc:4f:22:55:4a:a2:cb:5d:70:44:3b:56: d9:28:b0:4b:5f:87:ba:62:0e:74:a5:56:0b:e9:09:fc:a3:0e: 1a:da:2d:79:20:66:c0:d8:a8:89:e7:64:ff:54:5c:22:a4:d0: 85:7f:2c:97:1e:86:1c:3e:33:f4:cf:90:65:83:63:99:5a:a1: 40:98:92:5f:40:95:b8:ba:f1:bc:f4:39:1d:8f:81:ab:93:9b: fe:20:73:36:9a:c4:9e:10:e7:a3:ae:c3:0d:2b:40:b9:9a:e9: 97:24:ae:95:e5:22:9c:af:c2:2d:d3:90:dd:90:a1:1f:ac:80: 9c:51:22:ca:a7:59:e2:e6:f2:f7:7e:24:10:18:b0:08:4d:bd: 0e:3b:cb:ad:dd:f9:b3:ed:7e:9a:9e:a0:eb:94:03:3c:9e:fd: 3f:34:b3:80:3d:f9:eb:db:17:99:8c:52:27:1e:a6:0c:82:bb: 2f:61:bd:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7qz9A2ETlT2t9foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjg1OTFiOTUtMzlkNy00ZTU0LTkwZjMtMTMzOTMzOGI4 NDJjMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk OTlkNGQ2MzItMzYyMi00NmM0LTlhZjUtN2Q5NTAzNDZmN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM03jEJDIxtQ5VKxaxf3xmziP9gUqTzn5Vnc Nev3mK6TM1u0R9ocKjVrpAv6KeFjhd8Pucl+o058ul5RLvFz1j1+b+UE6uFMeYV2 E3YBzGgWajUMFsefVZL5/oBhpw6AGMtmmjp0QJ/xIJbB3NL3Ktbs0+lKYD2JfJcD IOxSntzpgaS5M4mvHfwpnNC5wTEWoMhDQtu+D4oWgIzZPIsyZ5I2yixNjzKmy88Y 88OHZCol+xlj8h9WDR17VsFQUHCXb42/GobECU74ixbe9E6OjB2/0nlOwhA9hLqT QtVOMwry5I3sSvks5OSnItU1fVIfNakF6HiqsLVkTgTVE6RCYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZhA2D26DeKFCE5oh70NpSuN0MHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5 MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5MzM4Yjg0MmMvZGQzZmExZmYtYTQwOS0z MmQ5LWJhNGMtZGE4M2MzZTQ3ZTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjg1OTFiOTUtMzlkNy00ZTU0LTkw ZjMtMTMzOTMzOGI4NDJjLzI4NTkxYjk1LTM5ZDctNGU1NC05MGYzLTEzMzkzMzhi ODQyYy5jcmwwHwYDVR0jBBgwFoAU/hD3fjltydQ3zw/RR1+y/RTGxWowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yODU5MWI5NS0zOWQ3LTRlNTQtOTBmMy0xMzM5 MzM4Yjg0MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKd8TWj4qxZFUQ07kv+JyvS4jEp3KJrDm+VIksNPz5AMkKRuwquCFqcM MobseI9gSdU4CJ8F5WuZaZIxxdwSJwPr6n7eoWmZcWJ9ov5mEfxPIlVKostdcEQ7 VtkosEtfh7piDnSlVgvpCfyjDhraLXkgZsDYqInnZP9UXCKk0IV/LJcehhw+M/TP kGWDY5laoUCYkl9Albi68bz0OR2PgauTm/4gczaaxJ4Q56Ouww0rQLma6ZckrpXl Ipyvwi3TkN2QoR+sgJxRIsqnWeLm8vd+JBAYsAhNvQ47y63d+bPtfpqeoOuUAzye /T80s4A9+evbF5mMUicepgyCuy9hvaE= -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:39 2025 by rpki-client