This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: YLEq3qyaoxWT/5BkD7+1aQpPlmt1fomeEYFt0bTrwIA= Subject key identifier: 9D:A2:CA:ED:7C:C4:1E:2F:9A:9F:09:3E:3E:0A:3B:73:8B:E1:73:29 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584BFBAB4476EDD766A94D8BE840 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:44:76:ed:d7:66:a9:4d:8b:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=ef2b441c-8074-4f57-bbd2-799b381caa9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fa:7e:1b:dc:53:73:35:ca:eb:31:85:4a:69: 77:23:fb:f8:13:51:f5:1b:7a:97:b9:39:2c:19:27: 1f:15:ae:e7:1d:1d:76:91:ad:9f:a7:77:a6:3b:e5: 46:89:c5:4e:c2:04:7b:5c:22:60:47:66:a8:ea:27: 7d:96:e3:4b:a0:26:e4:27:58:74:4e:74:5e:34:8e: 18:34:bb:10:3d:2b:c0:bf:a5:a7:35:74:3d:0b:de: 13:06:b6:08:23:b6:09:bd:83:bd:b3:ff:8c:0d:b0: 6f:0b:d4:45:d3:51:02:42:69:fd:30:c7:7f:38:72: 39:5b:9c:e8:0b:b9:78:4b:d3:7d:ea:25:83:79:a0: 7a:48:12:ba:18:29:45:91:61:d2:1b:ac:16:06:84: 7f:19:ba:d6:e1:84:b1:e3:16:72:26:22:66:e6:41: 02:66:77:f5:a1:2d:ee:55:9c:4b:cb:77:04:40:a0: 9e:71:74:c4:6c:d7:90:cf:a9:ec:d5:82:b7:e0:55: 50:68:4f:a9:b4:6d:a8:d7:e8:41:71:a9:bf:7a:7d: 84:07:6e:ce:90:ed:63:32:ef:d5:29:74:36:a1:92: 94:bb:bd:37:93:3f:31:18:55:2e:8b:60:c9:de:01: c1:11:3a:fc:4e:90:6b:7c:ec:de:fc:c1:bc:8c:86: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A2:CA:ED:7C:C4:1E:2F:9A:9F:09:3E:3E:0A:3B:73:8B:E1:73:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b3:6f:28:ba:55:c7:41:57:30:49:3e:f4:3f:dc:21:b7:5c: ba:a0:d3:87:aa:f1:63:20:49:49:06:db:62:7e:e2:b5:3b:d1: f1:92:3d:86:27:f5:e3:2d:cd:97:cd:f4:e0:6a:e6:f4:18:88: 6c:8a:39:9e:ef:98:f3:c9:1f:ed:ea:34:27:55:ea:1c:34:6d: 03:dc:9c:eb:1f:7e:a8:b9:0e:d4:cc:4c:b4:27:89:f6:2d:20: 83:ef:fc:bc:5f:a7:00:53:b2:2a:e0:20:4f:b3:59:af:1a:52: 93:b2:47:cb:1c:a8:8f:92:13:64:8e:73:f0:2f:57:c4:a0:e1: ca:96:58:1d:61:ae:fe:9d:71:43:28:a6:82:03:09:c0:83:24: ef:ec:5e:f3:44:0a:ad:ea:3c:3b:c9:e9:ae:cb:3a:9d:8a:79: 8d:2e:18:44:5f:c2:e3:a9:73:b5:22:a7:0f:97:d6:77:0d:79: 78:33:6e:04:00:82:28:17:c8:aa:16:c6:2d:8d:97:2e:6e:29: fd:1b:5c:05:bd:79:a5:c2:8d:a9:b2:da:13:7e:6c:29:4f:6e: ef:7c:1a:25:b4:fd:51:e2:8c:c7:19:46:4b:40:9b:15:d0:0b: c7:52:24:44:62:a8:20:79:97:1c:85:38:a8:c4:63:9d:bf:ce: 4c:5c:f0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q0R27ddmqU2L6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZWYyYjQ0MWMtODA3NC00ZjU3LWJiZDItNzk5YjM4MWNhYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/p+G9xTczXK6zGFSml3I/v4E1H1G3qXuTks GScfFa7nHR12ka2fp3emO+VGicVOwgR7XCJgR2ao6id9luNLoCbkJ1h0TnReNI4Y NLsQPSvAv6WnNXQ9C94TBrYII7YJvYO9s/+MDbBvC9RF01ECQmn9MMd/OHI5W5zo C7l4S9N96iWDeaB6SBK6GClFkWHSG6wWBoR/GbrW4YSx4xZyJiJm5kECZnf1oS3u VZxLy3cEQKCecXTEbNeQz6ns1YK34FVQaE+ptG2o1+hBcam/en2EB27OkO1jMu/V KXQ2oZKUu703kz8xGFUui2DJ3gHBETr8TpBrfOze/MG8jIbuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2iyu18xB4vmp8JPj4KO3OL4XMpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2zbyi6VcdBVzBJPvQ/3CG3XLqg04eq8WMgSUkG22J+4rU70fGSPYYn 9eMtzZfN9OBq5vQYiGyKOZ7vmPPJH+3qNCdV6hw0bQPcnOsffqi5DtTMTLQnifYt IIPv/LxfpwBTsirgIE+zWa8aUpOyR8scqI+SE2SOc/AvV8Sg4cqWWB1hrv6dcUMo poIDCcCDJO/sXvNECq3qPDvJ6a7LOp2KeY0uGERfwuOpc7Uipw+X1ncNeXgzbgQA gigXyKoWxi2Nly5uKf0bXAW9eaXCjamy2hN+bClPbu98GiW0/VHijMcZRktAmxXQ C8dSJERiqCB5lxyFOKjEY52/zkxc8HY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:56 2025 by rpki-client