This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa File: 3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa (raw, json) Hash identifier: h14qb2hGDFGkH+hqsyaatWpnKHkvhk+9lAYXmKUtaqs= Subject key identifier: A7:DB:22:A2:E8:39:1B:12:69:62:DD:7D:CA:DC:B5:95:79:9F:25:C5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BDB9077CDB061CE0FB6848810 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa Signing time: Fri 14 Nov 2025 14:00:37 +0000 ROA not before: Fri 14 Nov 2025 14:00:37 +0000 ROA not after: Thu 12 Feb 2026 14:00:37 +0000 asID: 396562 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:90:77:cd:b0:61:ce:0f:b6:84:88:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 14 14:00:37 2025 GMT Not After : Feb 12 14:00:37 2026 GMT Subject: CN=add4e64f-d36a-488b-a38f-6cc1d5b15352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:ea:4c:61:d4:53:87:6c:ec:bc:fb:56:7c: 9f:6c:c2:a7:04:71:f4:d6:58:28:02:82:89:56:fd: 1e:39:45:b7:13:11:98:1d:f5:17:54:56:72:0a:85: cc:41:cb:d9:da:cb:b5:e5:6d:8f:37:1d:ea:62:db: fa:12:e8:e4:54:43:64:27:07:f3:5e:f7:66:0b:7c: 61:9b:e3:e6:0d:3a:7a:db:a7:74:ee:b0:b1:58:cb: 5c:22:fe:1e:5b:5d:81:96:d1:fb:26:a4:57:c9:42: af:ca:e2:76:16:82:42:8a:b7:1d:ee:88:54:66:56: e3:66:ef:b3:1a:3e:47:3b:dc:03:83:ea:71:e4:57: 49:49:37:30:09:f8:ae:56:e4:0d:a2:ca:93:39:e6: db:fb:f4:ef:bc:b0:6b:f8:33:6b:47:9c:27:e5:1d: 58:e6:9e:10:24:25:0b:0b:89:81:13:a6:e0:14:63: ac:74:dd:42:9c:46:0e:47:ef:38:1b:fc:ea:5a:0a: c6:1c:f4:8a:1f:14:0c:33:3d:af:cb:13:f0:15:9e: fd:31:d7:10:40:22:ec:09:90:18:be:49:88:9d:4b: 44:08:7d:5f:9a:85:79:00:0c:96:e1:60:60:78:89: a8:4e:74:8a:34:8b:9f:cf:8f:e7:52:f1:1a:33:50: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DB:22:A2:E8:39:1B:12:69:62:DD:7D:CA:DC:B5:95:79:9F:25:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:93:99:68:6f:f6:9e:3b:54:a8:81:93:be:e6:34:4f:19:68: 75:1e:9c:eb:53:5f:16:48:e6:f3:50:96:e0:bd:29:b0:20:7c: 31:60:f0:93:a0:e8:7f:e3:bd:51:5f:b7:be:d3:5e:c7:4b:e9: 31:ca:80:4c:fe:6f:c3:6e:c7:f6:d0:6d:17:68:97:d6:fa:25: 28:d6:4a:be:ad:d3:c9:82:56:17:60:81:47:e7:3a:64:39:d2: 4b:93:21:df:ce:7d:1e:7f:b2:64:71:ae:9d:31:da:74:b7:12: 7a:5f:9a:ff:4a:85:80:35:83:d7:e5:f0:f3:f6:6c:bd:d8:a2: 78:3a:eb:31:b1:b8:82:00:f3:12:9e:df:74:f9:d6:47:c7:43: 1d:6c:76:ac:69:42:40:1c:70:ce:c6:db:b0:5e:69:f5:d5:98: a5:f5:94:de:56:09:39:11:d0:dd:65:38:2d:a5:83:53:18:ed: bd:0b:d4:5a:a0:92:06:c5:cc:ba:1c:60:04:85:34:0e:56:b8: 2e:9d:5f:a3:ad:f3:f4:22:52:38:07:59:25:c9:ac:f1:73:63: 34:c5:6a:19:be:40:96:31:5d:2d:bb:36:ce:b9:a7:aa:fa:75: 12:b1:98:fd:85:92:50:37:0d:fe:24:8a:d5:92:e8:d4:40:e0: 39:cc:57:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvbkHfNsGHOD7aEiBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExNDE0MDAzN1oXDTI2MDIxMjE0MDAzN1owLzEtMCsGA1UEAxMk YWRkNGU2NGYtZDM2YS00ODhiLWEzOGYtNmNjMWQ1YjE1MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuF7qTGHUU4ds7Lz7VnyfbMKnBHH01lgoAoKJ Vv0eOUW3ExGYHfUXVFZyCoXMQcvZ2su15W2PNx3qYtv6EujkVENkJwfzXvdmC3xh m+PmDTp626d07rCxWMtcIv4eW12BltH7JqRXyUKvyuJ2FoJCircd7ohUZlbjZu+z Gj5HO9wDg+px5FdJSTcwCfiuVuQNosqTOebb+/TvvLBr+DNrR5wn5R1Y5p4QJCUL C4mBE6bgFGOsdN1CnEYOR+84G/zqWgrGHPSKHxQMMz2vyxPwFZ79MdcQQCLsCZAY vkmInUtECH1fmoV5AAyW4WBgeImoTnSKNIufz4/nUvEaM1CwvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfbIqLoORsSaWLdfcrctZV5nyXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZhMWEyMTctMDI4OC0z ZTI0LThkODUtNmZhZGUzYmM5NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaTmWhv9p47VKiBk77mNE8ZaHUenOtTXxZI5vNQluC9KbAgfDFg8JOg 6H/jvVFft77TXsdL6THKgEz+b8Nux/bQbRdol9b6JSjWSr6t08mCVhdggUfnOmQ5 0kuTId/OfR5/smRxrp0x2nS3Enpfmv9KhYA1g9fl8PP2bL3Yong66zGxuIIA8xKe 33T51kfHQx1sdqxpQkAccM7G27BeafXVmKX1lN5WCTkR0N1lOC2lg1MY7b0L1Fqg kgbFzLocYASFNA5WuC6dX6Ot8/QiUjgHWSXJrPFzYzTFahm+QJYxXS27Ns65p6r6 dRKxmP2FklA3Df4kitWS6NRA4DnMV4U= -----END CERTIFICATE-----Generated at Sat Dec 6 13:17:58 2025 by rpki-client