This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa File: ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa (raw, json) Hash identifier: k4yUOKopwcmlfoAM/5v8e1ewVamiWYhTatVhHIBucr8= Subject key identifier: 3F:F7:D3:8B:2A:EC:1E:E1:29:6C:6A:DD:AA:90:AB:4A:68:8A:B6:8F Certificate issuer: /CN=7da3df33-ad97-4a08-81e8-054f28d035ed Certificate serial: 010D0C9F4328584C13661CA50E1B73D4AD104D00 Authority key identifier: 9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa Signing time: Thu 04 Dec 2025 14:00:39 +0000 ROA not before: Thu 04 Dec 2025 14:00:39 +0000 ROA not after: Wed 04 Mar 2026 14:00:39 +0000 asID: 13660 IP address blocks: 199.253.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:13:66:1c:a5:0e:1b:73:d4:ad:10:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da3df33-ad97-4a08-81e8-054f28d035ed Validity Not Before: Dec 4 14:00:39 2025 GMT Not After : Mar 4 14:00:39 2026 GMT Subject: CN=922221e0-45b6-46ab-a05c-fcc2bf52d3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:d7:c5:c9:35:55:3b:0b:81:0f:46:fc:02: a8:2d:54:a8:72:1d:72:6b:7f:27:e6:35:ba:3c:38: 61:f0:ac:ed:66:4d:ef:cc:dd:33:d7:d3:2b:72:ba: d7:0d:a6:b3:b0:2e:a6:b4:fd:96:f1:36:02:3b:33: 19:97:7a:8a:53:b8:14:06:94:34:8f:03:c9:4f:3d: dd:96:7b:79:3f:c4:07:61:ce:ef:ff:35:56:92:a1: 25:0f:5a:84:33:00:a5:13:0d:2a:cd:a0:98:5a:6e: 52:4f:0e:ab:d8:24:d3:d3:6a:b6:b0:55:cf:55:e1: de:33:08:3a:ce:c2:88:ae:b8:20:e4:ad:55:16:ae: 24:78:24:e7:ae:50:64:b1:d6:9a:de:f1:83:66:a5: 4f:f9:04:64:b7:84:64:a1:9f:aa:27:c4:ca:54:1b: 8a:50:29:3d:b8:ba:ed:a7:d2:22:ba:d0:3e:1d:7a: 10:ca:7c:bb:80:1c:99:b6:94:79:d4:bc:93:f6:ad: 3b:c4:2a:ad:5f:db:f9:19:44:42:93:31:3b:bf:ca: 54:2f:ca:5f:2a:46:31:16:e0:bc:e4:79:a5:2b:7d: e0:59:2a:26:d5:63:37:fd:ab:f9:cd:30:ba:e4:e6: b9:8b:dc:8d:80:69:f4:bb:77:40:60:2c:1f:bc:6d: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F7:D3:8B:2A:EC:1E:E1:29:6C:6A:DD:AA:90:AB:4A:68:8A:B6:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/ce340ada-f5c7-356e-8f6c-c81a6c72c892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed/7da3df33-ad97-4a08-81e8-054f28d035ed.crl X509v3 Authority Key Identifier: keyid:9B:DE:29:AF:A5:09:E8:75:50:75:E0:45:F3:29:2F:B1:0E:64:88:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7da3df33-ad97-4a08-81e8-054f28d035ed.cer sbgp-ipAddrBlock: critical IPv4: 199.253.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:26:4d:8e:a0:9d:2f:a1:60:4a:2f:ca:5d:5c:55:44:0d:34: 67:1e:0b:4a:69:1e:62:6d:cd:54:b7:8e:dd:d8:e2:4a:14:c9: c8:9a:8c:ed:99:fd:18:a8:60:bc:96:fa:61:3d:9e:74:70:4f: e4:8c:da:e9:2c:c3:99:73:a2:a9:2e:60:f6:23:77:b6:a9:12: 50:8e:5b:77:7a:31:ab:6a:d4:64:15:29:71:51:35:d0:c9:1c: 05:5d:5f:a7:ea:1c:c3:8f:96:a4:42:b6:46:ab:af:a7:ed:57: 80:7a:b9:c5:ba:78:43:47:b1:3f:9c:30:99:57:53:b9:d6:3a: 3f:86:c2:db:0f:79:c5:16:91:3a:40:e4:38:df:04:fe:93:8a: 02:c6:fb:cc:17:c5:45:e6:04:a2:8b:07:21:f9:c5:2a:e7:5e: c6:f3:c8:ae:35:53:0c:35:72:f1:87:5d:ce:8a:51:14:c3:2b: 5e:06:b6:45:ca:c4:f2:78:bc:39:f9:af:ee:eb:5f:14:b0:bb: e3:85:dc:e9:23:ad:04:30:9f:d0:d1:9e:d6:cd:cb:8b:db:0b: 69:16:73:4b:d1:6c:75:cf:d4:86:ef:b1:8d:be:9b:be:b9:97: 7c:05:65:f2:60:c8:b0:85:df:44:51:bd:ca:5e:90:3a:66:04: 87:46:c6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwTZhylDhtz1K0QTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RhM2RmMzMtYWQ5Ny00YTA4LTgxZTgtMDU0ZjI4ZDAz NWVkMB4XDTI1MTIwNDE0MDAzOVoXDTI2MDMwNDE0MDAzOVowLzEtMCsGA1UEAxMk OTIyMjIxZTAtNDViNi00NmFiLWEwNWMtZmNjMmJmNTJkM2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VvXxck1VTsLgQ9G/AKoLVSoch1ya38n5jW6 PDhh8KztZk3vzN0z19MrcrrXDaazsC6mtP2W8TYCOzMZl3qKU7gUBpQ0jwPJTz3d lnt5P8QHYc7v/zVWkqElD1qEMwClEw0qzaCYWm5STw6r2CTT02q2sFXPVeHeMwg6 zsKIrrgg5K1VFq4keCTnrlBksdaa3vGDZqVP+QRkt4RkoZ+qJ8TKVBuKUCk9uLrt p9IiutA+HXoQyny7gByZtpR51LyT9q07xCqtX9v5GURCkzE7v8pUL8pfKkYxFuC8 5HmlK33gWSom1WM3/av5zTC65Oa5i9yNgGn0u3dAYCwfvG2LqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/304sq7B7hKWxq3aqQq0poiraPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEz ZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRmMjhkMDM1ZWQvY2UzNDBhZGEtZjVjNy0z NTZlLThmNmMtYzgxYTZjNzJjODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2RhM2RmMzMtYWQ5Ny00YTA4LTgx ZTgtMDU0ZjI4ZDAzNWVkLzdkYTNkZjMzLWFkOTctNGEwOC04MWU4LTA1NGYyOGQw MzVlZC5jcmwwHwYDVR0jBBgwFoAUm94pr6UJ6HVQdeBF8ykvsQ5kiF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83ZGEzZGYzMy1hZDk3LTRhMDgtODFlOC0wNTRm MjhkMDM1ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx/2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMmTY6gnS+hYEovyl1cVUQNNGceC0ppHmJtzVS3jt3Y4koUyciajO2Z /RioYLyW+mE9nnRwT+SM2uksw5lzoqkuYPYjd7apElCOW3d6Matq1GQVKXFRNdDJ HAVdX6fqHMOPlqRCtkarr6ftV4B6ucW6eENHsT+cMJlXU7nWOj+GwtsPecUWkTpA 5DjfBP6TigLG+8wXxUXmBKKLByH5xSrnXsbzyK41Uww1cvGHXc6KURTDK14GtkXK xPJ4vDn5r+7rXxSwu+OF3OkjrQQwn9DRntbNy4vbC2kWc0vRbHXP1IbvsY2+m765 l3wFZfJgyLCF30RRvcpekDpmBIdGxv0= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:55 2025 by rpki-client