This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa File: 423c23a3-fd63-3040-9f8b-286fc8843cee.roa (raw, json) Hash identifier: RPPPYhf0Z9IBHoBDpDiBNGeInBFQ7VkJ24hyUUQsVZA= Subject key identifier: 40:54:3F:DD:60:14:49:69:5F:18:FE:EC:8A:0C:CD:98:6C:15:76:0F Certificate issuer: /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Certificate serial: 010D0C9F4328584BFBAB368D598584B3A2249F80 Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 7057 IP address blocks: 216.8.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:36:8d:59:85:84:b3:a2:24:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8 Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=1abe15ad-5924-4358-9003-8f8607599b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:df:ce:e3:b3:0c:cf:37:52:98:08:2c:0d:e8: d8:55:f0:b0:3a:8c:fb:8a:a0:da:11:1e:96:d2:32: 5f:4d:40:93:e3:fc:bd:3b:0c:29:7e:69:2d:47:16: c4:c5:28:17:2d:4b:7f:04:70:22:4a:f4:dd:5b:b6: 13:c5:aa:c7:c4:74:c1:6c:4b:02:da:d0:ca:4a:ab: 69:3a:30:c3:90:e1:76:f2:f2:bb:b2:45:64:8f:57: b3:13:77:3e:9f:be:62:f2:af:c6:b5:a8:4b:17:b5: 26:a2:1c:6e:98:9b:f8:da:00:db:59:fb:ab:b4:58: ca:69:7c:bc:0d:a0:f1:b9:55:39:23:db:aa:25:c5: 81:2a:70:ad:53:f2:6d:cd:c0:35:58:e4:f6:6f:61: 50:35:74:83:d6:3d:78:ba:c0:7a:aa:14:15:7b:cf: 63:7d:88:7d:26:08:ae:4f:c6:cf:c3:82:cd:88:49: 32:bb:8a:75:1b:6a:0a:78:a8:cd:17:ef:16:53:5e: c3:79:a2:2d:ec:17:e0:03:9c:fc:6f:83:29:f6:c8: cb:44:1c:3d:e2:f4:e6:cc:62:79:7d:be:3e:43:e2: 6f:0a:f8:2b:91:82:f6:d3:cf:48:7f:75:3f:70:08: 0d:4b:d0:02:78:4a:bd:d7:23:31:cf:a3:fd:ff:d1: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:3F:DD:60:14:49:69:5F:18:FE:EC:8A:0C:CD:98:6C:15:76:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/423c23a3-fd63-3040-9f8b-286fc8843cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl X509v3 Authority Key Identifier: keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer sbgp-ipAddrBlock: critical IPv4: 216.8.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:46:5e:20:c3:27:08:e5:f1:58:26:4d:81:16:c6:88:6d:31: ef:c5:c6:ee:6f:6c:8c:1c:f2:2a:d0:a1:ca:8c:f8:fa:d9:ed: cb:a8:8f:ed:98:b9:68:60:2e:da:29:60:e6:0a:41:81:f9:2e: d8:07:b7:6b:fc:10:59:06:93:3b:08:2a:f5:84:7b:96:32:59: 58:49:8f:a7:33:a3:8e:a7:c7:c8:e5:ed:16:ac:82:1f:c5:82: 26:04:22:66:ed:4f:6c:bf:5e:1d:87:23:f9:ef:b2:87:17:34: 6f:cd:33:bd:a3:26:74:fb:b5:01:4f:f5:e7:26:75:a7:78:c0: cb:7e:65:ae:35:72:93:38:d7:d4:15:95:9b:0e:8e:fd:d4:bc: 9d:b9:ab:a1:ed:da:7a:f4:23:0a:b8:d2:04:af:33:73:32:2e: cf:26:0a:73:48:4d:7b:4d:cd:2f:22:03:89:d7:96:d2:95:fa: 71:ce:c1:67:02:f8:e5:92:07:13:47:69:b5:e2:0d:d0:3f:d0: 03:20:bc:b0:5c:02:1e:b0:82:d3:c5:cc:1f:a8:db:88:81:08: 48:ed:da:4c:08:67:43:3a:11:f7:c0:fe:82:a5:2f:2f:7b:67: d7:17:9a:8a:23:2e:77:a0:9f:dc:af:e7:b0:24:fd:ee:90:71: 32:75:9e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7qzaNWYWEs6Ikn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz OWM4MB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk MWFiZTE1YWQtNTkyNC00MzU4LTkwMDMtOGY4NjA3NTk5YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt/O47MMzzdSmAgsDejYVfCwOoz7iqDaER6W 0jJfTUCT4/y9OwwpfmktRxbExSgXLUt/BHAiSvTdW7YTxarHxHTBbEsC2tDKSqtp OjDDkOF28vK7skVkj1ezE3c+n75i8q/GtahLF7UmohxumJv42gDbWfurtFjKaXy8 DaDxuVU5I9uqJcWBKnCtU/JtzcA1WOT2b2FQNXSD1j14usB6qhQVe89jfYh9Jgiu T8bPw4LNiEkyu4p1G2oKeKjNF+8WU17DeaIt7BfgA5z8b4Mp9sjLRBw94vTmzGJ5 fb4+Q+JvCvgrkYL2089If3U/cAgNS9ACeEq91yMxz6P9/9Gp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBUP91gFElpXxj+7IoMzZhsFXYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvNDIzYzIzYTMtZmQ2My0z MDQwLTlmOGItMjg2ZmM4ODQzY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0 ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdGXiDDJwjl8VgmTYEWxohtMe/Fxu5vbIwc8irQocqM+PrZ7cuoj+2Y uWhgLtopYOYKQYH5LtgHt2v8EFkGkzsIKvWEe5YyWVhJj6czo46nx8jl7Rasgh/F giYEImbtT2y/Xh2HI/nvsocXNG/NM72jJnT7tQFP9ecmdad4wMt+Za41cpM419QV lZsOjv3UvJ25q6Ht2nr0Iwq40gSvM3MyLs8mCnNITXtNzS8iA4nXltKV+nHOwWcC +OWSBxNHabXiDdA/0AMgvLBcAh6wgtPFzB+o24iBCEjt2kwIZ0M6EffA/oKlLy97 Z9cXmoojLnegn9yv57Ak/e6QcTJ1nng= -----END CERTIFICATE-----Generated at Sat Dec 6 14:14:37 2025 by rpki-client