This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa File: 40314b4d-9789-377e-9741-c7a9e2e27829.roa (raw, json) Hash identifier: +EhIVH5BhVrkNbw9Etp3I4heAatKLgmXCZcuCfy2nYg= Subject key identifier: 1A:2A:FE:CA:C7:33:25:BF:5C:E0:84:4D:B1:99:9A:6E:FF:8F:2D:D9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC96B02F65086E2982B92AB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 7342 IP address blocks: 209.131.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6b:02:f6:50:86:e2:98:2b:92:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=20cfa4f0-e1c0-40cf-98d5-274ced1f8d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:28:26:b8:61:b6:e0:01:a4:a6:dc:d2:2d:e9: 0f:cb:f3:d3:3b:5c:68:62:04:66:80:27:f7:2c:9f: d0:dd:93:83:0d:4a:44:bb:69:fb:13:57:df:a5:32: df:9f:2c:16:77:c8:f6:17:d5:6c:9b:13:df:20:02: 67:3e:bc:49:96:13:1e:e3:22:84:b1:57:a4:4f:45: 9f:f9:15:8f:f0:ab:74:f7:44:73:c5:1c:1f:49:21: 47:d5:ab:aa:09:71:44:9b:a8:cc:54:f5:e9:74:44: c4:c2:ee:2e:a5:1a:3a:45:a9:6f:71:fa:4f:dc:40: c7:ef:8c:ff:65:5b:c1:39:97:b9:6b:aa:ac:ad:ee: 40:dd:5b:90:f2:a8:ef:84:9c:ac:80:90:6b:49:4a: c9:16:31:40:95:f4:87:37:11:3e:53:28:51:db:56: cf:d9:9c:bb:be:c9:95:56:5f:0c:05:83:e1:30:fd: 64:35:56:65:c5:69:f9:ec:6b:f3:47:0e:e2:1a:c2: 3a:06:6a:fd:41:ca:4d:14:01:89:a1:0f:23:67:ef: 1c:e3:29:5e:bc:05:b0:b4:94:1a:ec:b7:da:fa:e5: 5a:fe:2e:36:ad:04:53:ca:07:fa:d7:59:56:61:70: 00:3c:a4:18:52:5e:6f:a8:d6:cf:02:2b:dc:ab:30: 39:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2A:FE:CA:C7:33:25:BF:5C:E0:84:4D:B1:99:9A:6E:FF:8F:2D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40314b4d-9789-377e-9741-c7a9e2e27829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5a:0a:5a:a7:ec:9f:21:75:f0:b0:57:6d:95:2d:01:5b:d2: b1:59:d2:9f:e8:9f:10:f7:fd:48:69:35:6d:1c:0f:29:a7:da: 0e:1b:52:49:ec:e4:71:70:3d:4a:a4:4a:10:ed:e1:9e:9e:1f: 1d:a0:24:79:80:34:4b:11:60:a0:b1:74:af:56:30:9b:34:d0: 90:ff:f0:7b:50:da:e8:d9:ed:b0:a9:db:c3:62:7d:bf:cb:70: 1f:46:02:c2:a1:17:fc:9c:a8:57:c2:3e:34:80:cd:67:41:c8: 21:66:80:b4:af:c1:6f:cc:97:cb:ad:d4:dc:38:56:f5:cc:a6: fe:1f:99:c2:60:0d:ad:e3:d1:02:fd:8a:71:49:f2:13:b2:9c: f9:b1:b3:fc:f6:b0:3b:8c:f3:74:0c:7f:ba:2d:30:7c:71:8e: db:ea:ea:4f:8e:f2:48:d6:23:1c:12:7d:51:29:98:01:d2:79: 72:45:30:cc:45:b5:df:ef:29:32:ab:ed:c2:87:a6:17:02:2a: d6:ca:3f:d5:ab:7b:5a:00:cc:84:09:1c:cb:c3:e5:b4:9c:4b: e7:27:e3:eb:dd:ba:16:4e:eb:66:6e:a5:1c:e8:70:28:1e:ab: 11:a1:96:39:a6:39:9f:0d:77:9b:ce:6c:c7:2a:53:87:36:0e: 62:8d:45:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJawL2UIbimCuSqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk MjBjZmE0ZjAtZTFjMC00MGNmLTk4ZDUtMjc0Y2VkMWY4ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSgmuGG24AGkptzSLekPy/PTO1xoYgRmgCf3 LJ/Q3ZODDUpEu2n7E1ffpTLfnywWd8j2F9VsmxPfIAJnPrxJlhMe4yKEsVekT0Wf +RWP8Kt090RzxRwfSSFH1auqCXFEm6jMVPXpdETEwu4upRo6RalvcfpP3EDH74z/ ZVvBOZe5a6qsre5A3VuQ8qjvhJysgJBrSUrJFjFAlfSHNxE+UyhR21bP2Zy7vsmV Vl8MBYPhMP1kNVZlxWn57GvzRw7iGsI6Bmr9QcpNFAGJoQ8jZ+8c4ylevAWwtJQa 7Lfa+uVa/i42rQRTygf611lWYXAAPKQYUl5vqNbPAivcqzA5nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoq/srHMyW/XOCETbGZmm7/jy3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAzMTRiNGQtOTc4OS0z NzdlLTk3NDEtYzdhOWUyZTI3ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhaClqn7J8hdfCwV22VLQFb0rFZ0p/onxD3/UhpNW0cDymn2g4bUkns 5HFwPUqkShDt4Z6eHx2gJHmANEsRYKCxdK9WMJs00JD/8HtQ2ujZ7bCp28Nifb/L cB9GAsKhF/ycqFfCPjSAzWdByCFmgLSvwW/Ml8ut1Nw4VvXMpv4fmcJgDa3j0QL9 inFJ8hOynPmxs/z2sDuM83QMf7otMHxxjtvq6k+O8kjWIxwSfVEpmAHSeXJFMMxF td/vKTKr7cKHphcCKtbKP9Wre1oAzIQJHMvD5bScS+cn4+vduhZO62ZupRzocCge qxGhljmmOZ8Nd5vObMcqU4c2DmKNRdQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:29 2025 by rpki-client