This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/0f74568e-b5dd-3ac3-8ba1-01bbc0eec509.roa File: 0f74568e-b5dd-3ac3-8ba1-01bbc0eec509.roa (raw, json) Hash identifier: m4PqPCN/Gr4QEs4HUjebydyLcih5qhAh12PEGAh0to4= Subject key identifier: D8:36:8F:18:BD:39:C1:47:43:A6:4A:97:93:45:69:FC:85:27:16:96 Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584C14CB605F32F88E27D018AE00 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/0f74568e-b5dd-3ac3-8ba1-01bbc0eec509.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 3356 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:60:5f:32:f8:8e:27:d0:18:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=475e018c-e7d9-4696-be0d-b1e1470d329c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:9d:b3:30:5b:5a:68:3a:dc:3a:f8:50:e4: 00:08:21:f7:62:8d:65:12:53:01:fc:5e:34:2f:51: a5:0a:cc:36:ad:ed:9a:7c:b9:e7:2e:99:c3:2b:f9: 77:9c:4b:e9:00:8f:0f:b5:77:26:9f:97:6a:89:15: f8:62:a6:aa:79:21:f4:d3:4f:8f:67:7b:01:e1:fd: a5:d6:7b:0c:13:c1:f7:23:bd:52:d1:39:45:90:09: 30:b0:93:94:23:e8:4d:bb:23:eb:e8:61:7d:5c:93: 35:a5:57:4d:bd:4e:fd:67:9f:19:5d:d7:a7:23:05: 4d:95:e4:03:0a:9d:f2:fd:b6:f0:dc:3a:84:d8:c0: 63:c6:97:90:21:a1:b2:11:a7:27:2d:21:2d:41:c5: c7:22:57:56:dc:0e:57:43:c0:93:98:6e:d2:29:ed: 44:1d:8f:02:88:e9:7f:fc:ee:b6:b6:4d:d5:a3:2a: a5:c6:70:50:17:b7:cd:ec:fb:ab:0a:91:1e:a9:e6: e2:6e:82:70:a7:94:df:cb:38:e3:aa:42:de:58:3d: 95:36:5c:d6:a9:a8:e3:27:65:6e:6e:cb:67:3c:3f: 9e:0e:55:49:e1:e1:b9:14:ef:ac:e9:30:7e:66:35: 02:2c:e8:f6:6d:91:e6:b6:6e:61:0c:3c:78:bb:bb: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:36:8F:18:BD:39:C1:47:43:A6:4A:97:93:45:69:FC:85:27:16:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/0f74568e-b5dd-3ac3-8ba1-01bbc0eec509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2f:91:f4:d2:e0:4b:7f:2b:67:de:27:40:5d:0c:8f:93:92: 1c:1d:f7:a0:a7:8d:90:05:f5:cf:a3:5f:1b:ad:07:4d:b4:61: d7:de:3e:31:0b:84:cb:be:43:9f:19:d1:f8:b1:df:9d:37:6e: f2:9b:2f:98:0b:87:3c:a9:1b:10:03:40:09:c6:d7:f8:78:d0: 31:32:a6:f5:16:3a:ae:a7:b9:1a:15:3f:ca:51:2c:50:b0:e7: 39:e0:b9:11:4f:54:bc:7f:5b:7d:b0:ec:61:37:da:68:33:93: 77:a4:c0:7e:e3:84:c4:0d:65:46:2b:df:87:b6:d0:9e:ea:e2: 8d:80:71:ff:57:7b:47:a6:44:dc:06:e8:c5:3a:3a:42:93:ca: 3c:2b:1b:90:7d:a1:00:33:2e:e0:0f:80:d7:ed:a7:ec:34:f2: 5d:c2:e7:8b:b7:cf:73:05:5f:3f:07:85:77:2e:03:64:5d:20: 8a:b1:60:f3:95:63:30:73:aa:3a:5f:87:2e:f1:23:16:e7:a9: 55:5f:fa:6d:98:1b:4f:ad:b1:32:32:33:57:5e:4f:ff:1c:b4: f8:53:54:13:ff:ac:a2:6c:b5:37:23:75:0a:9a:27:73:44:02: 4e:42:06:3b:e0:d5:b5:86:72:79:76:f5:81:b8:0c:6f:d9:b3: c5:75:61:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy2BfMviOJ9AYrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk NDc1ZTAxOGMtZTdkOS00Njk2LWJlMGQtYjFlMTQ3MGQzMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjOdszBbWmg63Dr4UOQACCH3Yo1lElMB/F40 L1GlCsw2re2afLnnLpnDK/l3nEvpAI8PtXcmn5dqiRX4YqaqeSH000+PZ3sB4f2l 1nsME8H3I71S0TlFkAkwsJOUI+hNuyPr6GF9XJM1pVdNvU79Z58ZXdenIwVNleQD Cp3y/bbw3DqE2MBjxpeQIaGyEacnLSEtQcXHIldW3A5XQ8CTmG7SKe1EHY8CiOl/ /O62tk3VoyqlxnBQF7fN7PurCpEeqebiboJwp5TfyzjjqkLeWD2VNlzWqajjJ2Vu bstnPD+eDlVJ4eG5FO+s6TB+ZjUCLOj2bZHmtm5hDDx4u7s9TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg2jxi9OcFHQ6ZKl5NFafyFJxaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvMGY3NDU2OGUtYjVkZC0z YWMzLThiYTEtMDFiYmMwZWVjNTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkvkfTS4Et/K2feJ0BdDI+Tkhwd96CnjZAF9c+jXxutB020YdfePjEL hMu+Q58Z0fix3503bvKbL5gLhzypGxADQAnG1/h40DEypvUWOq6nuRoVP8pRLFCw 5znguRFPVLx/W32w7GE32mgzk3ekwH7jhMQNZUYr34e20J7q4o2Acf9Xe0emRNwG 6MU6OkKTyjwrG5B9oQAzLuAPgNftp+w08l3C54u3z3MFXz8HhXcuA2RdIIqxYPOV YzBzqjpfhy7xIxbnqVVf+m2YG0+tsTIyM1deT/8ctPhTVBP/rKJstTcjdQqaJ3NE Ak5CBjvg1bWGcnl29YG4DG/Zs8V1YRk= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:13 2025 by rpki-client