This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa File: 0fa138cc-579e-337f-844b-d4a832c956c9.roa (raw, json) Hash identifier: iruBe8/G1CN13eGwcYNrC0H1Se05hBnV8i2k+xwoX1Q= Subject key identifier: 46:A9:AC:28:E8:95:CE:45:A0:87:0F:35:5A:00:B9:AB:73:2F:B0:FE Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb Certificate serial: 010D0C9F4328584BDCF5AFF31DC23EA6AEDBE8C0 Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 55039 IP address blocks: 208.66.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:af:f3:1d:c2:3e:a6:ae:db:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=2043005d-58d3-4bd8-acba-480ded10021f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:88:94:1b:c8:6a:2f:2e:6c:82:c1:85:2b: 82:1b:de:d9:52:a8:6b:19:72:98:e2:d7:68:c3:f5: 40:08:7d:16:17:94:e2:d1:45:aa:a0:3d:de:21:42: 23:37:a0:90:ac:34:b8:52:3f:f1:df:d7:f2:a6:8b: b6:08:e7:40:81:16:a5:79:a9:47:ad:76:1c:05:8a: 60:d9:ea:83:50:f2:f7:4b:3a:6e:9c:24:18:70:79: 5b:b2:49:96:8a:66:58:d3:4f:04:f0:12:ad:a3:29: 6b:0f:6c:ce:0b:71:27:ce:53:f0:8a:48:d1:11:c9: 7f:ba:d4:b6:7e:c0:cf:d4:96:29:57:27:3d:ac:c7: cb:9f:b2:cd:b9:5f:5a:9e:f2:90:28:1f:2f:cc:72: df:a8:71:2a:10:24:05:0b:87:d7:48:c5:bb:9c:b1: cc:4e:9c:83:34:0d:e1:77:c8:d5:a0:2b:f1:92:37: e7:02:6e:de:61:2e:f4:9d:88:39:ee:c8:95:ce:6f: 04:7d:bd:6a:5d:d1:07:be:88:f1:7d:2c:79:1f:dc: aa:fe:4e:ba:7c:21:79:15:02:30:1d:a8:bf:bd:82: 17:90:17:87:80:ea:f5:ed:c3:df:38:05:dc:54:08: af:eb:88:9a:ec:ad:94:7f:2d:f2:9f:33:52:3b:26: 07:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A9:AC:28:E8:95:CE:45:A0:87:0F:35:5A:00:B9:AB:73:2F:B0:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/0fa138cc-579e-337f-844b-d4a832c956c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl X509v3 Authority Key Identifier: keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer sbgp-ipAddrBlock: critical IPv4: 208.66.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:3d:5b:fa:f7:08:f1:87:13:08:17:d0:30:da:7a:9b:47:b4: 78:9d:47:65:c3:47:f0:eb:8c:10:7d:6f:d0:84:a7:b3:26:bb: c7:2a:1e:37:bf:38:48:77:ff:79:19:ce:5f:de:72:bc:73:91: 86:12:2a:1a:1c:25:d4:6d:57:f8:6e:34:94:38:d2:12:e9:79: 46:ee:4d:a9:8d:37:f4:01:6b:11:26:94:09:9b:e6:e4:c3:8a: e3:3b:21:89:c4:2f:42:61:c3:9d:1c:48:60:d6:37:12:ab:50: 1d:4f:f2:b5:0b:0d:38:f0:c8:f0:53:ec:90:f0:4a:b4:14:4a: 41:37:01:6d:ff:ad:65:55:21:2c:50:ec:13:d9:73:10:76:42: a5:9d:3e:28:13:e4:0d:9b:ed:be:33:71:6c:9f:c4:ad:a8:8b: 0e:c7:cb:2d:a6:92:7e:58:06:72:b0:94:ba:3e:b9:ba:2b:0f: 63:b6:b4:a6:68:f5:b8:42:db:cd:d1:44:cd:44:cf:f5:fd:9a: 44:13:82:ef:f3:e0:40:65:45:b9:fa:22:e5:27:bb:44:7f:77: 1e:b3:01:60:e9:0b:80:7e:8f:c3:08:1a:be:c9:52:98:c5:92: d5:61:a0:ee:e0:38:8b:af:a3:84:ae:11:c8:22:a8:51:ef:2b: 3e:08:9b:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9a/zHcI+pq7b6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIwMzYzZGEtMTFlMS00N2Q5LWFjNTEtZmUxNTY3Mzdj OGJiMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MjA0MzAwNWQtNThkMy00YmQ4LWFjYmEtNDgwZGVkMTAwMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzmIlBvIai8ubILBhSuCG97ZUqhrGXKY4tdo w/VACH0WF5Ti0UWqoD3eIUIjN6CQrDS4Uj/x39fypou2COdAgRalealHrXYcBYpg 2eqDUPL3SzpunCQYcHlbskmWimZY008E8BKtoylrD2zOC3EnzlPwikjREcl/utS2 fsDP1JYpVyc9rMfLn7LNuV9anvKQKB8vzHLfqHEqECQFC4fXSMW7nLHMTpyDNA3h d8jVoCvxkjfnAm7eYS70nYg57siVzm8Efb1qXdEHvojxfSx5H9yq/k66fCF5FQIw Hai/vYIXkBeHgOr17cPfOAXcVAiv64ia7K2Ufy3ynzNSOyYHZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaprCjolc5FoIcPNVoAuatzL7D+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAz NjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1NjczN2M4YmIvMGZhMTM4Y2MtNTc5ZS0z MzdmLTg0NGItZDRhODMyYzk1NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwMzYzZGEtMTFlMS00N2Q5LWFj NTEtZmUxNTY3MzdjOGJiL2EyMDM2M2RhLTExZTEtNDdkOS1hYzUxLWZlMTU2NzM3 YzhiYi5jcmwwHwYDVR0jBBgwFoAU00Sj8uDd7uXT1A4v3OrfYK5roBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjAzNjNkYS0xMWUxLTQ3ZDktYWM1MS1mZTE1 NjczN2M4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHA9W/r3CPGHEwgX0DDaeptHtHidR2XDR/DrjBB9b9CEp7Mmu8cqHje/ OEh3/3kZzl/ecrxzkYYSKhocJdRtV/huNJQ40hLpeUbuTamNN/QBaxEmlAmb5uTD iuM7IYnEL0Jhw50cSGDWNxKrUB1P8rULDTjwyPBT7JDwSrQUSkE3AW3/rWVVISxQ 7BPZcxB2QqWdPigT5A2b7b4zcWyfxK2oiw7Hyy2mkn5YBnKwlLo+uborD2O2tKZo 9bhC283RRM1Ez/X9mkQTgu/z4EBlRbn6IuUnu0R/dx6zAWDpC4B+j8MIGr7JUpjF ktVhoO7gOIuvo4SuEcgiqFHvKz4Im0Y= -----END CERTIFICATE-----Generated at Sun Dec 7 00:45:37 2025 by rpki-client