This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa File: 04220d33-aa94-3e2f-968e-e384d2bf91b3.roa (raw, json) Hash identifier: fwV519vcaeYNUi60RcIeptuRqt45bDOUzhtImq65raY= Subject key identifier: 7C:B9:73:B2:89:E7:64:42:BC:EF:6D:4C:1B:99:04:5E:4E:68:A4:4D Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584BEDB5CE15866CE4D29AF45500 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 16509 IP address blocks: 208.71.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:ce:15:86:6c:e4:d2:9a:f4:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=b16879ab-8a54-4163-b3d5-e4b289f68e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:ca:ce:d4:58:34:e0:bc:8c:aa:7d:09:29: c9:6b:43:dd:ea:c8:55:bb:72:37:a4:ea:24:e6:1a: 75:05:ec:6b:3f:49:01:32:2f:74:5e:47:b4:cd:3c: 7b:90:0d:a9:76:8e:b6:4f:9e:f0:a3:33:d1:e3:83: 38:f8:c7:93:f3:fd:68:4a:51:ae:65:75:0c:0b:ef: 2a:da:14:9e:da:1e:3e:65:b3:6d:34:9c:6b:b3:82: db:fa:d7:24:01:55:08:ad:c0:ad:24:c5:4e:95:10: cd:1e:9e:58:b1:e7:fe:dd:f9:58:7b:d7:31:35:8b: a9:85:f8:ed:82:d7:03:46:da:c4:1b:ff:c5:dd:21: 36:5e:1f:25:50:c2:d8:a4:82:b6:45:8a:a3:c0:af: 32:a7:51:dc:50:19:ae:15:bc:a8:c7:a5:3c:88:aa: 94:01:f6:81:b2:4e:42:a3:fd:aa:85:cc:18:88:04: 32:5e:c7:62:3f:e5:0e:77:86:99:1c:5e:08:a8:96: ea:8b:95:a8:fa:cd:16:a7:7c:15:8d:84:c5:32:e9: e3:0c:60:c0:80:41:ce:fa:ba:05:4c:f1:61:97:b5: fc:27:96:b9:77:ad:36:7a:1f:2d:17:df:99:31:05: 37:e3:9b:e5:73:ee:81:8d:6b:4a:9c:2d:a4:b5:c2: a7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B9:73:B2:89:E7:64:42:BC:EF:6D:4C:1B:99:04:5E:4E:68:A4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/04220d33-aa94-3e2f-968e-e384d2bf91b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:d7:81:bc:c4:6d:b2:7b:33:1b:5e:e2:27:e4:49:ff:83:7e: bf:2f:14:77:2a:67:0f:3e:de:1c:e2:87:7e:3c:26:fb:21:46: 5a:43:fc:42:10:4f:49:92:d6:d9:f7:34:48:96:1c:21:41:97: 10:aa:bf:f4:b2:a5:51:01:91:fb:0c:34:9a:d7:29:21:88:a7: 9f:40:0a:7b:25:0b:5d:92:31:12:4c:4b:f5:ee:1a:bb:49:31: 7a:eb:02:78:c3:d9:2c:b1:26:04:b7:f8:58:8f:eb:b4:1e:39: 80:47:c0:79:34:75:f0:ef:e8:f8:7a:f4:5d:88:5d:90:f1:a0: 2d:dc:35:1c:c3:17:5e:f5:f7:3f:6d:09:50:d2:64:e0:fc:8d: fb:bc:07:eb:3e:16:6d:28:fb:31:ee:8e:4a:22:92:5b:3a:15: 06:8a:6b:1e:04:66:29:45:70:7e:89:76:4c:d4:5e:19:32:4e: bb:ea:0d:80:49:74:da:34:b8:d9:3f:18:7b:39:d1:07:6b:7c: b7:75:6e:88:b7:c1:27:94:67:8a:53:45:22:cf:48:cb:54:1c: 62:14:e2:66:bb:8e:b8:ed:9a:66:15:dd:cd:36:4f:18:f2:20: 2d:c9:e8:e2:bf:bb:35:a0:9a:6d:da:8e:9d:49:cf:59:a0:0b: 58:60:cf:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttc4Vhmzk0pr0VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk YjE2ODc5YWItOGE1NC00MTYzLWIzZDUtZTRiMjg5ZjY4ZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUHKztRYNOC8jKp9CSnJa0Pd6shVu3I3pOok 5hp1BexrP0kBMi90Xke0zTx7kA2pdo62T57wozPR44M4+MeT8/1oSlGuZXUMC+8q 2hSe2h4+ZbNtNJxrs4Lb+tckAVUIrcCtJMVOlRDNHp5Ysef+3flYe9cxNYuphfjt gtcDRtrEG//F3SE2Xh8lUMLYpIK2RYqjwK8yp1HcUBmuFbyox6U8iKqUAfaBsk5C o/2qhcwYiAQyXsdiP+UOd4aZHF4IqJbqi5Wo+s0Wp3wVjYTFMunjDGDAgEHO+roF TPFhl7X8J5a5d602eh8tF9+ZMQU345vlc+6BjWtKnC2ktcKnHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHy5c7KJ52RCvO9tTBuZBF5OaKRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMDQyMjBkMzMtYWE5NC0z ZTJmLTk2OGUtZTM4NGQyYmY5MWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ef1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjXgbzEbbJ7Mxte4ifkSf+Dfr8vFHcqZw8+3hzih348JvshRlpD/EIQ T0mS1tn3NEiWHCFBlxCqv/SypVEBkfsMNJrXKSGIp59ACnslC12SMRJMS/XuGrtJ MXrrAnjD2SyxJgS3+FiP67QeOYBHwHk0dfDv6Ph69F2IXZDxoC3cNRzDF1719z9t CVDSZOD8jfu8B+s+Fm0o+zHujkoikls6FQaKax4EZilFcH6JdkzUXhkyTrvqDYBJ dNo0uNk/GHs50QdrfLd1boi3wSeUZ4pTRSLPSMtUHGIU4ma7jrjtmmYV3c02Txjy IC3J6OK/uzWgmm3ajp1Jz1mgC1hgzx8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:22:23 2025 by rpki-client