This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6d311d9-d235-3cfb-946d-25236601cb23.roa File: c6d311d9-d235-3cfb-946d-25236601cb23.roa (raw, json) Hash identifier: 3jIJBqphBmHLV3LTi+cikLVCumnhqsavtX/5DMSS+sc= Subject key identifier: 38:ED:B9:33:FA:AF:21:04:2C:9F:5B:D2:54:00:86:AB:A4:F2:C2:F2 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584BEC507F8091A0C54B33BFD580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6d311d9-d235-3cfb-946d-25236601cb23.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 6079 IP address blocks: 204.0.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:7f:80:91:a0:c5:4b:33:bf:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=85d0f8aa-9f1d-42f0-8555-4e0755394cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:70:9b:ee:28:c9:62:e5:3a:3a:5a:05:bf: 65:09:7a:0f:51:16:b3:23:64:37:bf:a2:c6:86:9d: f5:c7:42:51:b0:d6:c0:b8:7d:83:0e:4f:48:50:51: 63:f2:f6:20:60:59:ed:58:2c:ab:72:ee:e8:4e:39: fc:25:65:13:ce:3d:bf:1f:66:88:25:28:8b:18:53: ae:49:73:e3:a4:91:f6:ab:08:04:60:03:57:56:87: c4:99:8a:de:a0:31:52:83:d3:18:5b:06:e1:e0:b5: 9a:83:c7:79:64:f4:1c:d2:1d:02:8c:80:9c:55:85: 52:b1:6d:bd:aa:93:48:ef:ec:06:dc:c0:b2:96:48: 24:7c:e4:76:2c:11:22:58:31:cc:c3:b4:90:f1:59: 3c:14:f3:9b:57:e2:1f:ae:84:e2:87:5e:44:5a:93: 42:80:6e:04:e1:43:db:f3:3a:eb:31:8c:72:36:cf: 1d:81:c6:64:16:72:95:d8:06:3c:31:04:70:78:02: 1f:a6:93:82:b5:22:f1:23:b3:28:77:43:d7:c0:8a: a9:da:3d:1a:de:c4:7d:38:14:27:12:7f:d0:61:67: 3a:07:94:0c:1c:ed:49:cc:34:d0:06:1f:09:a7:fb: 47:9d:16:d1:6d:2a:05:e4:6c:1c:38:74:dc:84:51: ff:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:B9:33:FA:AF:21:04:2C:9F:5B:D2:54:00:86:AB:A4:F2:C2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c6d311d9-d235-3cfb-946d-25236601cb23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.0.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b3:fc:42:d6:3f:9d:01:ce:a6:b3:6e:3e:6c:55:f5:69:17: a7:63:37:8d:e7:66:eb:39:54:37:e9:45:ce:7a:06:b6:fb:a2: 87:59:49:f9:f7:c6:42:e0:e8:af:4c:99:5e:d7:48:de:d3:cb: 55:24:df:1b:2c:03:d0:62:c5:fd:78:e2:1f:bd:97:95:27:af: fc:69:7c:a6:d7:68:bd:88:ed:b4:90:45:0e:d3:9b:e8:62:65: 76:54:c4:90:e9:a0:88:cf:8d:c2:cd:c5:32:62:a0:70:e7:0e: d4:41:fe:d5:98:87:08:ca:86:34:01:de:7d:04:77:68:b9:2c: 7d:f8:2b:f6:d8:84:9f:51:9f:f5:20:c7:54:8b:ca:03:8f:54: e9:47:e8:4c:6a:55:2b:53:ff:d0:a8:b1:4c:b5:f0:4c:53:53: 5f:5c:0a:ab:b9:a5:06:d6:78:82:81:60:aa:57:ee:4b:31:b9: c1:bf:cf:87:c4:6e:a5:6e:ab:9b:03:5e:36:26:c9:20:3d:c7: 82:78:5f:48:8d:1f:d9:93:fb:a9:be:31:0c:ac:28:f7:8e:bb: a7:7f:8f:82:fb:b6:a4:bb:d2:96:6f:2f:0b:4c:12:fc:8f:4d: b2:9c:c3:50:a7:fb:7f:24:ba:81:74:eb:a9:9c:5e:ea:71:40: 13:07:e6:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUH+AkaDFSzO/1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk ODVkMGY4YWEtOWYxZC00MmYwLTg1NTUtNGUwNzU1Mzk0Y2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRRwm+4oyWLlOjpaBb9lCXoPURazI2Q3v6LG hp31x0JRsNbAuH2DDk9IUFFj8vYgYFntWCyrcu7oTjn8JWUTzj2/H2aIJSiLGFOu SXPjpJH2qwgEYANXVofEmYreoDFSg9MYWwbh4LWag8d5ZPQc0h0CjICcVYVSsW29 qpNI7+wG3MCylkgkfOR2LBEiWDHMw7SQ8Vk8FPObV+IfroTih15EWpNCgG4E4UPb 8zrrMYxyNs8dgcZkFnKV2AY8MQRweAIfppOCtSLxI7Mod0PXwIqp2j0a3sR9OBQn En/QYWc6B5QMHO1JzDTQBh8Jp/tHnRbRbSoF5GwcOHTchFH/ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjtuTP6ryEELJ9b0lQAhquk8sLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzZkMzExZDktZDIzNS0z Y2ZiLTk0NmQtMjUyMzY2MDFjYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWz/ELWP50Bzqazbj5sVfVpF6djN43nZus5VDfpRc56Brb7oodZSfn3 xkLg6K9MmV7XSN7Ty1Uk3xssA9Bixf144h+9l5Unr/xpfKbXaL2I7bSQRQ7Tm+hi ZXZUxJDpoIjPjcLNxTJioHDnDtRB/tWYhwjKhjQB3n0Ed2i5LH34K/bYhJ9Rn/Ug x1SLygOPVOlH6ExqVStT/9CosUy18ExTU19cCqu5pQbWeIKBYKpX7ksxucG/z4fE bqVuq5sDXjYmySA9x4J4X0iNH9mT+6m+MQysKPeOu6d/j4L7tqS70pZvLwtMEvyP TbKcw1Cn+38kuoF066mcXupxQBMH5rY= -----END CERTIFICATE-----Generated at Sat Dec 6 06:45:23 2025 by rpki-client