This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa File: 2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa (raw, json) Hash identifier: pfGOWEtv7ooYFVouBwi2kgOey6vqs2XgLLoWZpU4vAQ= Subject key identifier: C3:EE:62:C4:19:20:B0:0C:D1:16:B9:C1:CE:EE:E0:FD:C4:F6:42:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BFD10C76EEC8C38F9E22426A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 397196 IP address blocks: 199.7.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:c7:6e:ec:8c:38:f9:e2:24:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=b6dcf102-f7b9-4573-ab8a-b69f437afb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b9:de:a5:c8:df:27:a6:3a:0e:21:44:cd:de: bd:08:8b:3d:3b:03:68:11:e7:39:8b:e2:2d:ef:8f: 03:ea:4d:da:eb:39:d5:38:b4:a1:8f:0b:96:04:31: 74:87:ea:61:62:5a:31:e2:15:b4:a0:ff:02:1a:46: 02:0a:d4:8c:b6:2b:c6:e8:f0:a3:3e:40:31:31:fb: 99:d4:09:78:ef:9b:68:0b:0b:92:02:8c:9d:ac:d2: aa:63:1d:7b:ef:09:8f:00:f4:bd:72:9c:1d:1d:65: 15:d9:ee:02:4c:c6:26:ed:06:4d:c2:00:b1:ca:a2: de:f4:2b:76:44:26:d9:df:52:e9:24:09:f5:33:1b: 8d:d7:af:5a:5c:f0:d7:4e:12:53:8e:9b:e2:18:01: 8b:e4:fe:7a:7f:40:7e:94:98:51:11:b2:9e:b5:6e: b8:8d:bc:e1:e0:6c:51:7e:76:98:7f:9e:ee:e1:81: 30:ca:73:84:42:70:90:15:66:c9:39:03:01:d6:b3: 0d:b7:63:bd:5e:c8:3a:db:5e:35:85:9d:29:10:36: 91:3a:7b:2f:79:da:e1:59:9f:70:9b:61:98:c6:3e: b2:19:ce:0a:7e:62:b0:84:ee:54:45:a6:c9:5d:50: 2f:67:ac:bc:73:bc:49:1a:67:c6:8a:80:c7:bb:80: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EE:62:C4:19:20:B0:0C:D1:16:B9:C1:CE:EE:E0:FD:C4:F6:42:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f9f311c-cab0-3a12-ac17-ce48fdfb0d49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 199.7.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:8d:4e:bf:02:ce:17:0a:72:c7:f9:c7:bf:01:2e:e9:ee:d0: 68:8d:c9:5e:d9:6a:80:a3:6f:aa:4a:14:8e:aa:8e:99:a5:0c: cb:91:c1:42:80:de:23:f3:5f:16:31:d2:0f:02:d9:9d:45:d3: 47:2f:2e:f5:2f:d1:79:24:f3:7b:17:58:63:46:86:82:26:cc: 77:56:b7:72:ee:dc:c5:08:a8:04:16:49:6a:21:4e:dc:2e:02: de:2f:4a:30:88:dc:7f:1b:56:28:46:3b:c0:1d:88:cd:c1:c4: f2:5b:77:17:b0:5e:64:90:a0:52:5a:ed:de:ad:3b:37:ca:21: f0:b4:95:9e:90:a7:dc:d1:e7:53:04:29:5f:03:27:b8:75:f9: a2:09:22:e6:4e:d6:2f:00:c0:ca:69:33:ea:ae:54:5e:5c:68: 2e:07:c0:7c:e6:1d:b4:02:f6:5c:15:8e:2b:10:7c:7c:63:21: c3:a5:89:9c:3e:2f:ff:bd:79:47:6a:70:39:cf:af:fd:21:98: 82:e8:34:86:3d:5b:53:b4:2a:e0:4a:11:31:20:0e:31:c7:f1: 05:7d:5d:30:b1:f1:da:48:de:0b:55:70:5f:25:27:fd:34:fb: b1:b3:74:b3:5b:4b:b6:f9:80:48:72:19:26:3f:e5:77:be:6d: 6a:a8:f2:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EMdu7Iw4+eIkJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YjZkY2YxMDItZjdiOS00NTczLWFiOGEtYjY5ZjQzN2FmYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LnepcjfJ6Y6DiFEzd69CIs9OwNoEec5i+It 748D6k3a6znVOLShjwuWBDF0h+phYlox4hW0oP8CGkYCCtSMtivG6PCjPkAxMfuZ 1Al475toCwuSAoydrNKqYx177wmPAPS9cpwdHWUV2e4CTMYm7QZNwgCxyqLe9Ct2 RCbZ31LpJAn1MxuN169aXPDXThJTjpviGAGL5P56f0B+lJhREbKetW64jbzh4GxR fnaYf57u4YEwynOEQnCQFWbJOQMB1rMNt2O9Xsg62141hZ0pEDaROnsvedrhWZ9w m2GYxj6yGc4KfmKwhO5URabJXVAvZ6y8c7xJGmfGioDHu4DvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPuYsQZILAM0Ra5wc7u4P3E9kIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmY5ZjMxMWMtY2FiMC0z YTEyLWFjMTctY2U0OGZkZmIwZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwdHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6NTr8CzhcKcsf5x78BLunu0GiNyV7ZaoCjb6pKFI6qjpmlDMuRwUKA 3iPzXxYx0g8C2Z1F00cvLvUv0Xkk83sXWGNGhoImzHdWt3Lu3MUIqAQWSWohTtwu At4vSjCI3H8bVihGO8AdiM3BxPJbdxewXmSQoFJa7d6tOzfKIfC0lZ6Qp9zR51ME KV8DJ7h1+aIJIuZO1i8AwMppM+quVF5caC4HwHzmHbQC9lwVjisQfHxjIcOliZw+ L/+9eUdqcDnPr/0hmILoNIY9W1O0KuBKETEgDjHH8QV9XTCx8dpI3gtVcF8lJ/00 +7GzdLNbS7b5gEhyGSY/5Xe+bWqo8oo= -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:57 2025 by rpki-client