This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa File: cf55352d-0396-321a-a7aa-13ef996b8602.roa (raw, json) Hash identifier: VJSSeNfS6ap1hOpUyD+sOTimPAZhVbWbL8s+BHB9rT8= Subject key identifier: 5B:74:4E:F7:16:AA:1C:57:A0:50:56:84:41:66:0A:15:54:0C:2B:62 Certificate issuer: /CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Certificate serial: 010D0C9F4328584BFBAB4E68204D76F5CC89EA80 Authority key identifier: F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 23465 IP address blocks: 216.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:4e:68:20:4d:76:f5:cc:89:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddae52a5-cdb7-415c-ad44-5125bb123a7a Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=af20add4-3ddf-4030-8799-ed158aa559ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:f9:98:d1:8e:42:53:b9:66:74:e6:32:95: e8:1f:fa:a6:4f:97:1d:a6:8e:45:e4:da:73:2f:d9: e1:22:e4:44:c0:cc:6d:5c:d9:30:11:51:cd:8f:fe: 37:57:8c:97:eb:58:ea:8a:2d:de:6a:f8:70:8b:89: 4c:ea:f7:a7:57:e1:a1:25:9a:df:ce:d3:1d:e2:c0: 20:77:29:ac:ee:3b:d0:3c:3d:91:86:64:a2:7a:b3: 03:ed:10:de:73:d0:c6:02:c5:9c:91:de:08:96:e7: 39:a6:f8:28:dc:c5:b4:9e:a2:8a:25:23:22:7d:7f: b1:af:8b:01:ac:52:aa:4c:14:d2:4c:03:86:e7:b8: 8c:fc:5e:00:62:cd:a1:a5:a5:a3:c5:91:fd:fb:a8: 2f:ed:fe:e1:17:50:c8:bb:c7:87:83:f2:85:92:7f: 9f:da:c9:5e:84:ee:34:a5:76:87:47:1d:23:75:f4: ef:22:e8:c7:50:dd:f8:66:5f:50:35:1c:f3:31:31: 09:4f:e6:6c:16:e8:62:46:1c:f1:2e:a1:2a:8d:59: 03:45:74:d3:55:93:13:42:52:40:33:a9:ea:11:3b: 84:f5:43:d1:bc:a5:fd:ed:ca:33:bf:ab:fc:01:b2: 37:a3:21:d3:b7:5c:9b:88:ed:6c:b4:49:de:2c:e2: 71:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:74:4E:F7:16:AA:1C:57:A0:50:56:84:41:66:0A:15:54:0C:2B:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/cf55352d-0396-321a-a7aa-13ef996b8602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a/ddae52a5-cdb7-415c-ad44-5125bb123a7a.crl X509v3 Authority Key Identifier: keyid:F0:E3:23:52:EB:8D:2B:15:D6:50:65:F8:E6:F7:20:A7:27:1E:32:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddae52a5-cdb7-415c-ad44-5125bb123a7a.cer sbgp-ipAddrBlock: critical IPv4: 216.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:b3:9f:01:6e:0c:8d:65:ab:9a:5c:60:02:5c:b7:4b:9b:12: 48:73:5a:66:49:05:17:a3:ee:64:e3:90:21:6f:27:f4:e9:d8: c4:cc:42:b1:0a:0a:ff:5b:59:84:7b:48:3b:79:3b:86:d8:a7: 5c:ad:5b:7f:84:38:e1:71:6e:e3:7d:2c:9a:a9:57:3b:9e:24: 03:26:a8:1b:86:9a:bf:f4:fd:b9:c6:67:4f:2b:2b:be:87:c7: 24:aa:ba:99:2c:b3:5e:93:45:e7:db:6c:a9:b0:8a:d5:72:d0: 04:cc:30:55:e2:6b:1f:5b:b7:61:97:97:89:9e:d7:18:7c:24: b9:da:c8:07:20:5a:ff:77:19:c8:e4:07:ef:83:de:64:b6:73: 0e:5a:f1:4e:73:92:a6:57:ad:81:84:13:7d:67:a3:ba:1b:a2: e3:13:df:57:19:bf:0d:f9:0c:05:35:f6:ae:b8:c3:a7:58:7a: e7:e5:aa:39:d9:9f:08:04:c7:26:5a:63:ec:72:c5:1a:b5:42: fe:e5:be:27:df:9d:8d:d9:58:22:ff:a4:c7:39:91:29:8c:92: f1:03:53:b6:08:f7:d8:7c:1f:61:2f:0c:02:ed:8a:1d:0b:7e: 9e:a2:85:f1:cb:fa:f6:76:33:99:f5:04:68:7f:df:95:26:fb: e1:95:bd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q05oIE129cyJ6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhZTUyYTUtY2RiNy00MTVjLWFkNDQtNTEyNWJiMTIz YTdhMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk YWYyMGFkZDQtM2RkZi00MDMwLTg3OTktZWQxNThhYTU1OWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2H5mNGOQlO5ZnTmMpXoH/qmT5cdpo5F5Npz L9nhIuREwMxtXNkwEVHNj/43V4yX61jqii3eavhwi4lM6venV+GhJZrfztMd4sAg dyms7jvQPD2RhmSierMD7RDec9DGAsWckd4Iluc5pvgo3MW0nqKKJSMifX+xr4sB rFKqTBTSTAOG57iM/F4AYs2hpaWjxZH9+6gv7f7hF1DIu8eHg/KFkn+f2slehO40 pXaHRx0jdfTvIujHUN34Zl9QNRzzMTEJT+ZsFuhiRhzxLqEqjVkDRXTTVZMTQlJA M6nqETuE9UPRvKX97cozv6v8AbI3oyHTt1ybiO1stEneLOJxqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt0TvcWqhxXoFBWhEFmChVUDCtiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFl NTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1YmIxMjNhN2EvY2Y1NTM1MmQtMDM5Ni0z MjFhLWE3YWEtMTNlZjk5NmI4NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRhZTUyYTUtY2RiNy00MTVjLWFk NDQtNTEyNWJiMTIzYTdhL2RkYWU1MmE1LWNkYjctNDE1Yy1hZDQ0LTUxMjViYjEy M2E3YS5jcmwwHwYDVR0jBBgwFoAU8OMjUuuNKxXWUGX45vcgpyceMvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGFlNTJhNS1jZGI3LTQxNWMtYWQ0NC01MTI1 YmIxMjNhN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2CYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImznwFuDI1lq5pcYAJct0ubEkhzWmZJBRej7mTjkCFvJ/Tp2MTMQrEK Cv9bWYR7SDt5O4bYp1ytW3+EOOFxbuN9LJqpVzueJAMmqBuGmr/0/bnGZ08rK76H xySqupkss16TRefbbKmwitVy0ATMMFXiax9bt2GXl4me1xh8JLnayAcgWv93Gcjk B++D3mS2cw5a8U5zkqZXrYGEE31no7obouMT31cZvw35DAU19q64w6dYeuflqjnZ nwgExyZaY+xyxRq1Qv7lviffnY3ZWCL/pMc5kSmMkvEDU7YI99h8H2EvDALtih0L fp6ihfHL+vZ2M5n1BGh/35Um++GVvdY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:35 2025 by rpki-client