This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa File: 36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa (raw, json) Hash identifier: MxFI9ry+84XfEIq0WvBJvZ5hZqA4OaTNIkRMVBLy3iY= Subject key identifier: DF:A5:28:C7:F6:3C:3A:3B:CA:1E:D5:E5:68:BE:27:CE:97:48:A0:C6 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584BF8E0A4D46414C30D7EE19080 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 137409 IP address blocks: 64.64.98.0/24 maxlen: 24 64.64.99.0/24 maxlen: 24 98.159.41.0/24 maxlen: 24 173.239.205.0/24 maxlen: 24 173.239.220.0/24 maxlen: 24 173.239.221.0/24 maxlen: 24 173.239.249.0/24 maxlen: 24 173.244.32.0/24 maxlen: 24 173.244.33.0/24 maxlen: 24 173.244.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:a4:d4:64:14:c3:0d:7e:e1:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=ca090003-b0ce-4d4a-abed-b0c65676f85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a8:0e:e0:2f:a7:79:04:0d:dd:e6:f0:0c:20: 87:d3:d1:6e:1f:d3:6d:82:ca:ae:3e:3f:b4:85:f1: 54:f2:fe:e4:46:8f:0f:d2:4b:3c:e7:0b:9e:5a:bd: f7:4a:20:48:41:ac:b1:e1:ce:bd:52:50:cd:80:49: 1e:22:45:0b:3a:d6:38:f6:ff:51:3b:3c:9e:ae:8b: 7d:ea:2c:70:c5:7c:87:be:de:af:b4:5b:55:7a:d1: dc:50:2e:96:6d:23:1f:13:b5:41:ad:13:79:fe:90: ee:23:d9:2c:78:d0:42:cf:ef:55:13:53:1e:49:a1: 0a:8d:42:fd:a5:37:1a:1e:26:22:32:fd:35:9b:be: 75:6d:4f:95:81:c8:e0:94:48:54:b9:f9:f1:c7:09: 64:c4:ca:2e:b1:46:2d:5f:44:98:cb:b2:1b:0d:85: a4:82:70:67:e2:e0:30:20:9d:25:fb:10:dd:ca:46: ae:94:a1:15:58:81:b5:8d:7f:43:f4:7e:72:bf:b6: 2e:66:4f:a1:77:08:8d:4f:d3:1f:1d:3e:26:d4:35: 8f:9b:a8:d5:c3:78:b3:e8:70:24:0c:89:3b:12:7f: 04:20:6a:cb:6a:63:d2:bf:b3:40:c4:a5:9f:b4:6f: b4:5c:ae:92:b6:2b:9c:4c:90:83:0e:7b:3a:9d:ac: f9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A5:28:C7:F6:3C:3A:3B:CA:1E:D5:E5:68:BE:27:CE:97:48:A0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 64.64.98.0/23 98.159.41.0/24 173.239.205.0/24 173.239.220.0/23 173.239.249.0/24 173.244.32.0/23 173.244.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0b:2a:1e:f0:47:16:72:9d:08:43:95:35:d5:cc:c2:44:57: 16:b8:cd:88:2f:3a:e2:c9:f6:8d:e6:ac:50:1d:e8:8b:84:09: 7f:c3:9d:60:9d:40:3e:7b:23:29:05:8e:4d:32:40:18:a3:fe: 71:71:e8:cd:60:b5:90:ef:f0:8c:80:75:a7:01:9e:67:e9:f7: fa:fc:1f:e9:4a:0c:9c:75:46:d9:fc:98:c8:02:ba:bc:02:ea: 22:01:67:1c:e9:4d:7c:10:85:6c:01:da:84:7f:c7:bf:08:46: ca:38:91:ee:f9:37:8f:dc:44:28:91:85:26:92:95:bc:04:de: 3b:7c:93:3c:2a:01:b9:9f:2a:4a:4d:3b:a2:76:06:59:d2:d1: 19:50:db:93:ca:33:57:17:54:73:08:1d:39:5f:56:2d:39:b3: 6f:b3:6c:30:09:b6:7c:b2:3d:7d:c9:39:50:6b:14:ba:50:10: bb:27:bf:5e:44:a1:f8:04:46:68:af:b6:15:93:b7:51:af:cf: f5:f7:ef:78:60:b4:fe:55:3b:30:c9:66:28:80:54:69:c6:e7: 77:89:9c:2c:d6:68:bc:d8:cf:31:2d:0a:42:8e:bb:18:c0:df: 88:a2:a7:67:07:97:81:aa:2b:41:cb:d2:6d:ea:7d:b4:69:8c: fc:66:61:b0 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEv44KTUZBTDDX7hkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk Y2EwOTAwMDMtYjBjZS00ZDRhLWFiZWQtYjBjNjU2NzZmODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6gO4C+neQQN3ebwDCCH09FuH9NtgsquPj+0 hfFU8v7kRo8P0ks85wueWr33SiBIQayx4c69UlDNgEkeIkULOtY49v9ROzyerot9 6ixwxXyHvt6vtFtVetHcUC6WbSMfE7VBrRN5/pDuI9kseNBCz+9VE1MeSaEKjUL9 pTcaHiYiMv01m751bU+VgcjglEhUufnxxwlkxMousUYtX0SYy7IbDYWkgnBn4uAw IJ0l+xDdykaulKEVWIG1jX9D9H5yv7YuZk+hdwiNT9MfHT4m1DWPm6jVw3iz6HAk DIk7En8EIGrLamPSv7NAxKWftG+0XK6StiucTJCDDns6naz5uwIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFN+lKMf2PDo7yh7V5Wi+J86XSKDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMzZkYjViYjktYjg3YS0z NzNmLThkZDktODRiZmVlNTg1Y2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQEBiAwQA Yp8pAwQAre/NAwQBre/cAwQAre/5AwQBrfQgAwQArfQqMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF8LKh7w RxZynQhDlTXVzMJEVxa4zYgvOuLJ9o3mrFAd6IuECX/DnWCdQD57IykFjk0yQBij /nFx6M1gtZDv8IyAdacBnmfp9/r8H+lKDJx1Rtn8mMgCurwC6iIBZxzpTXwQhWwB 2oR/x78IRso4ke75N4/cRCiRhSaSlbwE3jt8kzwqAbmfKkpNO6J2BlnS0RlQ25PK M1cXVHMIHTlfVi05s2+zbDAJtnyyPX3JOVBrFLpQELsnv15EofgERmivthWTt1Gv z/X373hgtP5VOzDJZiiAVGnG53eJnCzWaLzYzzEtCkKOuxjA34iip2cHl4GqK0HL 0m3qfbRpjPxmYbA= -----END CERTIFICATE-----Generated at Sat Dec 6 15:12:23 2025 by rpki-client