This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa File: 9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa (raw, json) Hash identifier: 6c3bD4FgWXQ20GiiqDrKPQTOBFA23fowmWl+T+ZxSXU= Subject key identifier: 6A:95:E8:E5:BA:15:3E:57:B3:13:68:36:3C:46:DB:F4:9A:77:87:10 Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Certificate serial: 010D0C9F4328584C0140CA8CFC841C6C4FC92EC0 Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 212238 IP address blocks: 173.239.200.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:ca:8c:fc:84:1c:6c:4f:c9:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=9568c111-43ba-499e-8892-d6244a25341a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:41:aa:b5:7a:0d:ec:99:fa:11:36:af:0f:f9: fd:7b:a3:ff:1f:ff:4f:9d:ce:6e:72:af:be:98:d7: 4b:03:73:ff:90:3b:3e:b9:d4:91:01:b2:ae:73:88: 6a:2d:b1:78:1b:60:e1:b6:e1:9d:17:ac:75:48:c3: fb:d2:02:cd:ba:66:81:0f:34:fc:26:7d:64:d2:50: 10:31:6d:31:54:a6:e2:ac:db:81:55:81:eb:3d:c1: 99:23:72:f0:86:09:9a:a5:7e:8c:9d:c5:9d:d1:02: fe:82:ea:84:db:43:67:13:be:cf:96:f5:3c:e6:5f: f2:01:61:53:35:e2:bd:7a:1d:f3:53:ea:50:54:46: e6:bf:2d:5f:7a:61:da:4c:3b:82:d2:d9:92:fc:a3: b4:07:96:2f:b9:5a:a8:b9:f5:cc:a9:17:ee:83:f6: 40:56:95:d0:12:08:49:b3:c7:fd:d4:1c:7d:a5:2d: 3a:4d:81:5b:dd:ec:91:48:97:cb:e0:32:0b:01:98: f9:6d:69:33:85:db:d3:91:9e:fa:09:7d:42:9a:de: cb:3a:cd:bd:5a:14:2f:42:3d:10:54:c5:a0:2c:cd: 3d:3b:bd:85:30:f8:be:8a:f2:38:9b:c2:bb:da:8d: b3:91:48:45:fb:a5:7d:17:0a:b6:80:11:60:ce:10: e8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:95:E8:E5:BA:15:3E:57:B3:13:68:36:3C:46:DB:F4:9A:77:87:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9170de7c-e413-32a5-a2c7-c3d0f7cbd369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl X509v3 Authority Key Identifier: keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer sbgp-ipAddrBlock: critical IPv4: 173.239.200.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:7a:2b:1c:6b:9f:d6:0c:b9:61:62:1e:76:6e:87:e0:b6:69: 5d:47:72:19:8c:1b:e1:de:c9:38:69:df:8f:d5:ca:be:0c:a6: af:b4:f0:62:e4:1d:41:45:bb:2d:ca:85:2b:71:3a:bf:e3:ef: 3a:92:ef:74:69:bc:c3:1a:00:a4:bc:b7:aa:cf:51:76:fe:37: 7a:e6:db:aa:4f:eb:ac:64:79:52:de:52:11:90:5e:28:16:c5: 41:7e:12:b9:ac:50:70:62:9a:4b:d2:ac:eb:57:2a:2a:98:37: b1:96:ff:71:9b:43:c1:8c:09:87:df:26:83:ab:9e:19:1f:1b: 63:7d:79:f0:0e:55:6c:3f:60:aa:20:1f:4e:d0:e7:3c:36:a2: b5:27:55:07:3f:e9:1c:24:a4:d6:78:d5:96:9d:16:2f:fc:7b: f9:b3:d1:46:66:7f:83:84:33:50:97:3a:8f:a0:be:84:60:4a: 1e:c8:be:b0:a0:03:6f:53:d3:8e:86:3d:88:db:75:d2:27:22: 4b:f2:2e:19:12:77:10:cc:fe:48:69:59:e3:c0:b6:5a:cd:7e: fb:d3:01:85:3d:6f:4f:f9:a2:90:55:02:18:bd:0a:55:fa:33: 8f:71:eb:6d:35:26:97:9c:ca:cd:16:84:d0:75:22:93:5a:fe: ef:a8:b0:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwBQMqM/IQcbE/JLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx NzNhMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk OTU2OGMxMTEtNDNiYS00OTllLTg4OTItZDYyNDRhMjUzNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkGqtXoN7Jn6ETavD/n9e6P/H/9Pnc5ucq++ mNdLA3P/kDs+udSRAbKuc4hqLbF4G2DhtuGdF6x1SMP70gLNumaBDzT8Jn1k0lAQ MW0xVKbirNuBVYHrPcGZI3LwhgmapX6MncWd0QL+guqE20NnE77PlvU85l/yAWFT NeK9eh3zU+pQVEbmvy1femHaTDuC0tmS/KO0B5YvuVqoufXMqRfug/ZAVpXQEghJ s8f91Bx9pS06TYFb3eyRSJfL4DILAZj5bWkzhdvTkZ76CX1Cmt7LOs29WhQvQj0Q VMWgLM09O72FMPi+ivI4m8K72o2zkUhF+6V9Fwq2gBFgzhDonQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGqV6OW6FT5XsxNoNjxG2/Sad4cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvOTE3MGRlN2MtZTQxMy0z MmE1LWEyYzctYzNkMGY3Y2JkMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk MDFlZjE3M2EuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHre/IgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAceisca5/WDLlhYh52bofgtmldR3IZjBvh3sk4ad+P1cq+DKavtPBi 5B1BRbstyoUrcTq/4+86ku90abzDGgCkvLeqz1F2/jd65tuqT+usZHlS3lIRkF4o FsVBfhK5rFBwYppL0qzrVyoqmDexlv9xm0PBjAmH3yaDq54ZHxtjfXnwDlVsP2Cq IB9O0Oc8NqK1J1UHP+kcJKTWeNWWnRYv/Hv5s9FGZn+DhDNQlzqPoL6EYEoeyL6w oANvU9OOhj2I23XSJyJL8i4ZEncQzP5IaVnjwLZazX770wGFPW9P+aKQVQIYvQpV +jOPcettNSaXnMrNFoTQdSKTWv7vqLC8 -----END CERTIFICATE-----Generated at Sat Dec 6 13:19:10 2025 by rpki-client