This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa File: 8a37a60a-eebd-367b-baaf-9445a8a0316f.roa (raw, json) Hash identifier: HyhDQR7ppicc3wSILJAmVrcg7ppk8NYnmv7EaR3zk+0= Subject key identifier: ED:BA:6D:72:FA:92:FE:78:2A:14:2B:3F:54:0A:A9:3D:32:04:D0:9E Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584BFBAB58039BF8540940727A40 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 3561 IP address blocks: 208.132.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:58:03:9b:f8:54:09:40:72:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=72c933dc-9184-43a5-aae9-5e43db3a2c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:fd:0c:12:96:11:6a:59:4d:fc:c2:6e:fb: 51:a5:f7:04:f8:5e:03:30:e9:89:93:0a:18:00:ca: 8e:82:27:64:09:21:27:01:06:ab:b4:38:cd:19:97: 77:2a:0e:dc:88:08:ed:f0:b4:52:b7:8e:a0:92:a3: 97:6d:2c:6d:3c:bf:fc:f6:da:d3:31:05:b1:6f:7b: 4a:c7:1b:d1:70:1d:55:41:a2:ba:53:4a:af:dc:c6: e5:57:14:76:67:0b:23:72:09:ef:79:2f:74:76:a2: c5:e0:0e:e3:a7:42:7d:2b:7a:b7:75:84:3b:30:75: b0:36:fb:a4:bd:7e:94:20:3f:d6:04:67:ce:6b:6d: d1:3c:1d:2e:68:d1:2d:c9:3b:dd:51:a4:94:00:51: 9e:e9:65:c8:5f:0b:e6:ea:46:0c:4d:0a:17:7d:b3: f7:58:65:e3:bc:59:81:62:b3:47:65:90:26:92:0d: 57:6e:e1:dc:ab:21:47:ed:40:70:48:45:5d:0a:63: 05:62:53:c3:48:ae:81:a5:c1:fa:38:2a:0a:00:44: f1:b0:fc:f8:8f:b6:a7:52:7f:9e:20:1c:d1:a1:70: 35:98:24:69:43:42:b9:2d:cd:02:06:76:7c:ea:72: 78:30:7f:f9:e5:96:53:15:f1:73:a8:4d:76:0e:c5: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BA:6D:72:FA:92:FE:78:2A:14:2B:3F:54:0A:A9:3D:32:04:D0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.132.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5b:5d:76:66:84:37:f7:0a:d4:14:05:19:9d:db:db:2d:34: 9a:f4:04:3a:21:7b:84:79:ba:cb:e7:a5:96:54:2b:15:ce:1a: bb:28:2f:86:a3:4d:d3:f0:e8:93:92:32:0c:19:2a:e4:d9:89: e0:87:4e:52:05:39:a0:31:e5:87:41:36:59:4b:b8:6a:db:e5: 35:fc:b9:ab:8b:0f:b7:6b:cd:58:f2:09:e5:79:76:d1:7a:d4: ca:3d:75:f5:31:a1:92:1a:40:60:07:ed:ca:97:66:d2:d5:9b: 0f:07:4f:7b:4b:e7:d7:16:32:f4:36:e8:05:be:75:0e:74:cc: 23:92:7f:fa:a7:40:84:13:0b:56:88:0a:ea:f7:35:97:46:4e: 65:b2:3f:ef:c1:e2:2e:c8:05:00:1d:7e:5d:ab:34:83:d2:43: 30:e2:78:c2:d8:0c:62:e6:75:42:86:ef:75:11:c2:83:a1:76: 40:2a:cd:00:ca:0a:cd:39:0c:e9:39:e6:94:56:64:f1:21:97: d4:cf:92:c3:b2:60:33:81:80:a1:e6:15:1c:92:e9:d0:8a:c1: bf:e4:ed:80:2d:8c:91:12:ce:8f:c7:57:2b:d4:f1:1e:1c:2d: 26:d2:dc:af:21:3a:13:14:c3:f8:5f:17:f2:4c:78:bc:08:f8: 2c:38:7f:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7q1gDm/hUCUByekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk NzJjOTMzZGMtOTE4NC00M2E1LWFhZTktNWU0M2RiM2EyYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJj9DBKWEWpZTfzCbvtRpfcE+F4DMOmJkwoY AMqOgidkCSEnAQartDjNGZd3Kg7ciAjt8LRSt46gkqOXbSxtPL/89trTMQWxb3tK xxvRcB1VQaK6U0qv3MblVxR2ZwsjcgnveS90dqLF4A7jp0J9K3q3dYQ7MHWwNvuk vX6UID/WBGfOa23RPB0uaNEtyTvdUaSUAFGe6WXIXwvm6kYMTQoXfbP3WGXjvFmB YrNHZZAmkg1XbuHcqyFH7UBwSEVdCmMFYlPDSK6BpcH6OCoKAETxsPz4j7anUn+e IBzRoXA1mCRpQ0K5Lc0CBnZ86nJ4MH/55ZZTFfFzqE12DsVUPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO26bXL6kv54KhQrP1QKqT0yBNCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOGEzN2E2MGEtZWViZC0z NjdiLWJhYWYtOTQ0NWE4YTAzMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ISAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJbXXZmhDf3CtQUBRmd29stNJr0BDohe4R5usvnpZZUKxXOGrsoL4aj TdPw6JOSMgwZKuTZieCHTlIFOaAx5YdBNllLuGrb5TX8uauLD7drzVjyCeV5dtF6 1Mo9dfUxoZIaQGAH7cqXZtLVmw8HT3tL59cWMvQ26AW+dQ50zCOSf/qnQIQTC1aI Cur3NZdGTmWyP+/B4i7IBQAdfl2rNIPSQzDieMLYDGLmdUKG73URwoOhdkAqzQDK Cs05DOk55pRWZPEhl9TPksOyYDOBgKHmFRyS6dCKwb/k7YAtjJESzo/HVyvU8R4c LSbS3K8hOhMUw/hfF/JMeLwI+Cw4f4A= -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:15 2025 by rpki-client