This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa File: 96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa (raw, json) Hash identifier: HZYFptS4jh8RqB1QCmLsDC6dtCTXvA5nSmDWGzGqTeU= Subject key identifier: C9:67:83:73:C8:7B:F4:4F:E1:DA:89:98:33:F3:CE:13:03:04:D4:56 Certificate issuer: /CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Certificate serial: 010D0C9F4328584BF1E5E0A26858919280355800 Authority key identifier: F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 20473 IP address blocks: 192.206.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e0:a2:68:58:91:92:80:35:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4132bf8c-4af7-4b01-9cd6-dfa2193d127d Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=a08d42ea-b0c0-4962-96c6-36e0615a561c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b9:8f:13:09:73:73:67:ea:62:00:ed:15:d2: 11:1a:6b:d5:1a:05:ac:35:cb:9a:4f:46:a1:ea:55: 30:79:e5:29:7a:70:ef:b6:98:2e:ae:bd:68:a7:17: de:be:ca:c6:49:0a:31:e0:96:b8:18:52:aa:70:6b: dd:c3:50:0d:a4:2f:b1:2c:d6:07:5b:e9:1d:c3:63: a6:8d:81:b2:2d:c3:2f:16:19:db:eb:0b:49:a9:63: 18:27:5d:fc:65:f7:6d:a6:a3:fd:0b:64:db:49:23: 80:cd:ce:67:17:a4:c6:06:5e:45:4e:65:29:df:a2: b4:d1:70:9f:f6:3e:34:81:c8:86:0e:3c:15:bc:7d: 04:47:51:64:2a:82:13:88:30:61:27:04:d7:de:6e: a8:1e:f3:2b:1a:db:52:10:dc:b7:41:f1:cd:12:26: f9:55:31:72:e0:f5:73:e3:c8:31:17:bf:47:24:09: ad:5b:16:ac:55:4a:2c:45:4c:b3:c0:8a:f3:d5:68: 13:71:ee:75:76:36:48:80:07:10:36:54:6c:d8:40: 73:24:3d:e2:f8:4f:ff:b6:f0:b3:7d:79:0b:3c:e0: d2:5c:b3:d9:d7:15:82:d5:f9:9e:f0:98:8f:1a:7d: 2a:9f:d5:35:cc:41:92:a7:50:66:ae:f7:cb:2a:44: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:83:73:C8:7B:F4:4F:E1:DA:89:98:33:F3:CE:13:03:04:D4:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/96ff1ca6-293a-3f0c-aa9f-36fea8938052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.crl X509v3 Authority Key Identifier: keyid:F2:BC:3F:60:15:23:0D:8B:6B:7C:E6:52:59:78:6E:78:AB:21:17:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4132bf8c-4af7-4b01-9cd6-dfa2193d127d.cer sbgp-ipAddrBlock: critical IPv4: 192.206.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:91:e1:9f:2c:0a:cb:d1:73:b3:3e:90:91:b5:d4:88:93: e7:f5:36:19:6c:c5:5a:c7:e5:bf:33:dd:3f:5d:72:af:21:64: 30:9a:3f:a2:f6:70:82:9d:32:cf:f9:f9:7d:ab:cf:b3:e8:7c: 9c:73:ee:4f:99:79:cd:02:28:37:be:81:d1:56:79:df:8f:92: 39:59:83:d0:7b:df:da:56:03:a6:83:b3:ea:a4:d2:7c:c9:2f: 39:ab:cf:63:b3:c4:2c:76:b7:64:cc:e6:8a:9c:54:35:d4:c6: a6:f7:b6:03:6e:3e:6e:fb:7d:f4:7a:5c:cf:9b:2d:9e:34:55: 7c:70:7c:97:14:20:22:76:a7:48:18:d5:5c:76:09:0b:66:bc: 27:4b:6e:dd:34:40:a5:0e:df:47:bd:f6:3b:9a:fb:0f:b5:ff: d4:15:cc:47:41:38:27:12:ea:11:cc:e8:40:8d:f2:75:49:8e: a3:4c:8c:cf:c5:ea:46:85:9b:74:87:fa:65:e1:8e:6c:7f:20: ba:cc:f7:d9:40:a7:2c:13:83:fd:24:6c:42:fd:b1:b7:24:67: cc:ab:93:6b:68:11:44:44:ee:c2:f3:a1:53:f7:ef:23:7b:68: 07:ab:2d:1d:b9:9c:bf:16:d9:18:42:1b:e5:28:67:7c:02:13: 08:a0:2b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5eCiaFiRkoA1WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDEzMmJmOGMtNGFmNy00YjAxLTljZDYtZGZhMjE5M2Qx MjdkMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk YTA4ZDQyZWEtYjBjMC00OTYyLTk2YzYtMzZlMDYxNWE1NjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7mPEwlzc2fqYgDtFdIRGmvVGgWsNcuaT0ah 6lUweeUpenDvtpgurr1opxfevsrGSQox4Ja4GFKqcGvdw1ANpC+xLNYHW+kdw2Om jYGyLcMvFhnb6wtJqWMYJ138ZfdtpqP9C2TbSSOAzc5nF6TGBl5FTmUp36K00XCf 9j40gciGDjwVvH0ER1FkKoITiDBhJwTX3m6oHvMrGttSENy3QfHNEib5VTFy4PVz 48gxF79HJAmtWxasVUosRUyzwIrz1WgTce51djZIgAcQNlRs2EBzJD3i+E//tvCz fXkLPODSXLPZ1xWC1fme8JiPGn0qn9U1zEGSp1BmrvfLKkTZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlng3PIe/RP4dqJmDPzzhMDBNRWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTMy YmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEyMTkzZDEyN2QvOTZmZjFjYTYtMjkzYS0z ZjBjLWFhOWYtMzZmZWE4OTM4MDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDEzMmJmOGMtNGFmNy00YjAxLTlj ZDYtZGZhMjE5M2QxMjdkLzQxMzJiZjhjLTRhZjctNGIwMS05Y2Q2LWRmYTIxOTNk MTI3ZC5jcmwwHwYDVR0jBBgwFoAU8rw/YBUjDYtrfOZSWXhueKshF2YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MTMyYmY4Yy00YWY3LTRiMDEtOWNkNi1kZmEy MTkzZDEyN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANmkeGfLArL0XOzPpCRtdSIk+f1NhlsxVrH5b8z3T9dcq8hZDCaP6L2 cIKdMs/5+X2rz7PofJxz7k+Zec0CKDe+gdFWed+PkjlZg9B739pWA6aDs+qk0nzJ Lzmrz2OzxCx2t2TM5oqcVDXUxqb3tgNuPm77ffR6XM+bLZ40VXxwfJcUICJ2p0gY 1Vx2CQtmvCdLbt00QKUO30e99jua+w+1/9QVzEdBOCcS6hHM6ECN8nVJjqNMjM/F 6kaFm3SH+mXhjmx/ILrM99lApywTg/0kbEL9sbckZ8yrk2toEURE7sLzoVP37yN7 aAerLR25nL8W2RhCG+UoZ3wCEwigKzo= -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:27 2025 by rpki-client