This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa File: 8d688a7e-be14-37fa-9233-e8b2572cd686.roa (raw, json) Hash identifier: z+tJW8kfJrf2oHecQfvMVtJQehhkR8a4IBMGGgCJ+PE= Subject key identifier: 71:F8:9A:0D:C6:E1:C9:06:35:D8:30:6B:35:7E:C8:2A:41:FD:F5:4C Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584BEDB5DE336A119EA0829D983A Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa Signing time: Fri 21 Nov 2025 02:00:30 +0000 ROA not before: Fri 21 Nov 2025 02:00:30 +0000 ROA not after: Thu 19 Feb 2026 02:00:30 +0000 asID: 19740 IP address blocks: 66.249.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ed:b5:de:33:6a:11:9e:a0:82:9d:98:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Nov 21 02:00:30 2025 GMT Not After : Feb 19 02:00:30 2026 GMT Subject: CN=572869ec-b15b-4962-aa01-a607b57197fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:00:57:cc:b0:34:df:a6:5b:35:3d:3f:71: b3:39:eb:5f:ff:c1:d7:f0:76:df:00:a8:0e:b0:ee: 17:f6:95:38:b3:b6:6b:a5:df:24:ac:b5:27:6f:c5: c2:d4:23:30:a9:1e:c1:7b:1b:7a:40:af:dd:4b:8b: 70:f5:fd:18:a7:0e:66:67:0e:d1:89:a5:03:2f:20: 40:f6:d9:22:5e:69:09:3c:f3:1a:c2:e2:02:f0:dc: ce:b5:08:f6:95:5a:f4:9c:69:b0:f2:9e:44:2a:f2: e9:8b:ae:d8:0c:8d:0f:43:a1:61:35:6a:0c:aa:87: 7b:f6:a8:ab:aa:8b:0c:2d:96:d5:66:a2:6c:f9:d9: 9f:91:8f:52:8c:c8:40:20:97:b0:7d:cf:b7:70:82: e0:01:6d:99:97:af:a1:89:d3:fa:c1:f7:55:9b:4c: 07:ac:4c:2d:3e:fc:11:1b:39:fd:a3:12:87:d7:c5: 87:f3:33:02:11:c0:60:70:eb:be:f1:36:94:2a:09: a4:6b:c3:b5:74:1f:e0:ce:18:14:fd:01:9c:75:fd: 06:d3:99:35:73:1c:22:06:17:f5:0b:be:77:f6:0b: c7:fb:02:65:87:97:8b:68:cb:61:fd:85:21:f8:51: 8f:3a:03:a3:64:1c:f3:6c:58:5e:5a:01:1f:39:c8: 20:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:9A:0D:C6:E1:C9:06:35:D8:30:6B:35:7E:C8:2A:41:FD:F5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/8d688a7e-be14-37fa-9233-e8b2572cd686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 66.249.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5d:28:b9:0c:5a:b0:1d:f0:42:2f:8e:a3:c9:ac:a5:2b:e2: 8a:ce:b1:59:69:16:14:f1:fe:3f:c4:83:d3:e2:9f:db:9e:61: 76:9d:f2:29:7b:34:3d:dc:c9:ef:a3:ba:40:e8:46:44:0f:7f: 70:89:cb:2f:b4:35:08:b3:4a:91:01:57:cb:79:80:b0:82:52: 70:1d:c5:a8:1f:a8:1f:61:d0:12:10:b8:c5:de:bd:28:da:78: 97:54:16:98:97:bc:e8:d2:e7:0a:ae:57:f8:d2:24:a8:ef:6e: 40:3a:61:e0:dc:ea:f2:05:57:18:47:51:2f:e5:fd:83:bb:ec: 79:ed:ea:fe:01:a9:e7:02:a4:a6:7d:75:15:7b:00:b2:ef:85: ee:2e:bd:53:a4:13:0b:4a:e6:86:cf:8f:d2:b5:1a:27:d6:09: de:1e:bc:06:13:b9:af:3d:f9:cf:d4:08:30:da:e9:a5:05:d5: 39:61:51:b6:a1:b7:02:1c:38:99:6a:32:49:04:a2:7a:00:9f: 7c:23:cf:7d:58:5e:a3:38:b6:64:e8:2c:f9:4c:40:c5:10:84: bd:9d:29:80:6c:f4:25:ae:b8:44:ff:80:15:64:4d:12:f7:8a: 71:09:12:1b:49:0b:96:0a:fa:b8:f8:91:aa:3e:ea:33:83:2f: 92:34:c5:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvttd4zahGeoIKdmDowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI1MTEyMTAyMDAzMFoXDTI2MDIxOTAyMDAzMFowLzEtMCsGA1UEAxMk NTcyODY5ZWMtYjE1Yi00OTYyLWFhMDEtYTYwN2I1NzE5N2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQsAV8ywNN+mWzU9P3GzOetf/8HX8HbfAKgO sO4X9pU4s7Zrpd8krLUnb8XC1CMwqR7Bext6QK/dS4tw9f0Ypw5mZw7RiaUDLyBA 9tkiXmkJPPMawuIC8NzOtQj2lVr0nGmw8p5EKvLpi67YDI0PQ6FhNWoMqod79qir qosMLZbVZqJs+dmfkY9SjMhAIJewfc+3cILgAW2Zl6+hidP6wfdVm0wHrEwtPvwR Gzn9oxKH18WH8zMCEcBgcOu+8TaUKgmka8O1dB/gzhgU/QGcdf0G05k1cxwiBhf1 C7539gvH+wJlh5eLaMth/YUh+FGPOgOjZBzzbFheWgEfOcgggwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH4mg3G4ckGNdgwazV+yCpB/fVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvOGQ2ODhhN2UtYmUxNC0z N2ZhLTkyMzMtZThiMjU3MmNkNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQvmEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJdKLkMWrAd8EIvjqPJrKUr4orOsVlpFhTx/j/Eg9Pin9ueYXad8il7 ND3cye+jukDoRkQPf3CJyy+0NQizSpEBV8t5gLCCUnAdxagfqB9h0BIQuMXevSja eJdUFpiXvOjS5wquV/jSJKjvbkA6YeDc6vIFVxhHUS/l/YO77Hnt6v4BqecCpKZ9 dRV7ALLvhe4uvVOkEwtK5obPj9K1GifWCd4evAYTua89+c/UCDDa6aUF1TlhUbah twIcOJlqMkkEonoAn3wjz31YXqM4tmToLPlMQMUQhL2dKYBs9CWuuET/gBVkTRL3 inEJEhtJC5YK+rj4kao+6jODL5I0xfY= -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:03 2025 by rpki-client