This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa File: c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa (raw, json) Hash identifier: gfB1OAtp4mn/wa59onAt0Wnr230elMrArmY/r4IF5jo= Subject key identifier: F5:FF:31:3B:9E:98:F6:4C:43:F5:54:E8:36:0F:76:9C:C5:38:5A:9E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C109B64A855E9D8300CE16E80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 3949 IP address blocks: 128.242.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:64:a8:55:e9:d8:30:0c:e1:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=8f9123cd-6ca8-4715-8b4b-b09fce00c6e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:88:d7:92:da:00:50:d7:a5:38:28:7f:59:ee: 2b:35:da:0d:1f:ae:cf:3c:05:95:d5:46:e1:fe:bc: 96:1f:07:2b:76:a2:31:69:45:4d:36:76:62:ea:3c: 38:4f:3b:3a:8a:69:0a:59:95:7b:3a:32:18:66:5a: 2a:70:f6:4f:91:d6:9a:f3:5e:64:5e:dc:07:fe:a0: cf:b1:65:b8:63:30:1b:1e:db:db:23:0a:2b:fb:c4: 2b:75:bb:6a:9c:ee:b1:4b:3c:bd:cd:78:11:b6:65: 31:6c:2b:c6:a0:9f:17:4e:71:79:bc:f6:d5:d0:8d: a7:4d:2a:07:c3:53:ad:f7:97:97:0b:55:69:ed:4b: 83:02:1d:92:05:d6:2d:e6:47:f4:33:2a:ed:80:de: be:6d:6c:43:a6:d3:9f:0a:f0:d0:2d:a3:a9:0f:4c: d5:f4:53:51:d5:ca:d8:1a:53:67:27:64:4b:fb:ce: 50:a9:be:5b:41:95:5d:51:ed:3c:fc:8c:b6:1b:19: b1:22:64:7d:41:cc:9f:5a:57:28:8f:c7:c5:37:36: 54:8f:82:f5:04:37:26:ae:d2:5d:34:8b:19:79:e5: aa:b1:c6:0a:36:b6:9b:ae:c5:01:f9:7a:ee:02:8d: 23:cd:67:04:ff:e6:56:05:65:ce:66:ae:90:e9:a3: 0d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:31:3B:9E:98:F6:4C:43:F5:54:E8:36:0F:76:9C:C5:38:5A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c8a70f21-5aba-3be5-af0c-d8a97aaaeb6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.242.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0b:61:c2:08:03:fa:6c:b2:c1:e2:45:8f:d7:e9:c1:2f:42: f0:02:04:12:52:7d:b4:01:4a:22:6c:70:b8:dd:22:9c:dd:1b: 41:b1:d6:9e:6c:87:64:d3:1c:1a:95:cf:91:98:bd:60:31:80: 37:00:dc:3e:6a:5b:04:c4:49:5d:7e:7e:3e:cc:07:3c:31:cb: 9e:1c:36:44:03:45:22:ff:05:d8:4e:df:79:bb:dc:d3:e4:72: bf:13:ca:7c:f4:34:8e:54:45:c2:b2:bd:4d:31:01:3b:b7:32: 2f:29:f0:db:6f:8c:a6:74:a4:af:23:81:65:e2:45:e4:68:2f: ff:aa:9c:2e:3a:4a:cb:71:f3:5b:3a:40:fd:66:07:de:ad:2f: 12:0c:99:b1:d5:dd:ad:39:c8:44:3f:f7:d2:86:ad:e5:dc:04: 9e:7c:19:42:0d:28:a0:03:4a:07:2c:50:ac:ac:66:8e:f4:33: bb:a1:40:dd:63:1e:a5:df:54:d1:c1:73:41:9e:64:32:36:ce: 62:ce:72:d3:32:18:9d:2a:e1:0b:74:71:60:ba:9d:02:73:2e: 58:47:26:a4:dc:2c:ef:65:0c:84:49:0e:c1:47:2a:d9:9e:97: d4:bf:bc:f6:11:7f:3c:c8:aa:94:5d:30:3e:28:46:e4:0e:cd: b7:e9:f5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm2SoVenYMAzhboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk OGY5MTIzY2QtNmNhOC00NzE1LThiNGItYjA5ZmNlMDBjNmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIjXktoAUNelOCh/We4rNdoNH67PPAWV1Ubh /ryWHwcrdqIxaUVNNnZi6jw4Tzs6imkKWZV7OjIYZloqcPZPkdaa815kXtwH/qDP sWW4YzAbHtvbIwor+8QrdbtqnO6xSzy9zXgRtmUxbCvGoJ8XTnF5vPbV0I2nTSoH w1Ot95eXC1Vp7UuDAh2SBdYt5kf0MyrtgN6+bWxDptOfCvDQLaOpD0zV9FNR1crY GlNnJ2RL+85Qqb5bQZVdUe08/Iy2GxmxImR9QcyfWlcoj8fFNzZUj4L1BDcmrtJd NIsZeeWqscYKNrabrsUB+XruAo0jzWcE/+ZWBWXOZq6Q6aMNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX/MTuemPZMQ/VU6DYPdpzFOFqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzhhNzBmMjEtNWFiYS0z YmU1LWFmMGMtZDhhOTdhYWFlYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgPJYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACELYcIIA/psssHiRY/X6cEvQvACBBJSfbQBSiJscLjdIpzdG0Gx1p5s h2TTHBqVz5GYvWAxgDcA3D5qWwTESV1+fj7MBzwxy54cNkQDRSL/BdhO33m73NPk cr8Tynz0NI5URcKyvU0xATu3Mi8p8NtvjKZ0pK8jgWXiReRoL/+qnC46Sstx81s6 QP1mB96tLxIMmbHV3a05yEQ/99KGreXcBJ58GUINKKADSgcsUKysZo70M7uhQN1j HqXfVNHBc0GeZDI2zmLOctMyGJ0q4Qt0cWC6nQJzLlhHJqTcLO9lDIRJDsFHKtme l9S/vPYRfzzIqpRdMD4oRuQOzbfp9ZU= -----END CERTIFICATE-----Generated at Sat Dec 6 06:43:18 2025 by rpki-client