This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa File: ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa (raw, json) Hash identifier: yQcsw0cuhmsUE+PtibcmsEP8WHxjZaJEjc+AjwfjNwU= Subject key identifier: 86:D2:7D:54:2E:03:57:31:5E:CF:57:2C:5C:9D:8C:E8:54:4A:20:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BDCF5DC65D5439F707807BC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 7342 IP address blocks: 209.131.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:dc:65:d5:43:9f:70:78:07:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=20321d9a-56b2-4b7f-b102-cd1a8a82bf72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:ed:12:f8:1f:34:9c:d9:84:b1:f7:24:64: 1e:19:17:0b:ef:40:79:9c:e8:6f:d7:67:26:99:db: 9a:ca:ea:3f:ac:4f:6e:ed:18:40:8b:a9:ec:7e:61: ae:da:da:13:07:ef:31:01:0a:fe:fb:cb:a1:04:8a: 3b:0a:aa:c4:50:98:6b:d6:30:92:e4:f7:03:f9:d6: 8e:3f:be:db:b3:14:65:50:a0:88:0a:32:fe:5e:64: bf:b9:68:fc:3d:b8:e5:d9:0e:58:64:8f:69:ef:7d: d3:54:1c:bc:b7:0e:ee:70:bf:8d:98:d2:3a:ed:fb: d1:04:68:9c:8c:71:c1:53:dc:87:78:39:07:b0:a5: 9f:44:52:d1:3e:f7:69:f7:64:a1:69:e7:a0:04:db: bf:01:97:cc:e4:69:e5:fb:1a:7b:c3:b6:8b:33:0f: c2:87:a6:66:10:f1:ee:4b:39:33:0c:2f:02:4c:e3: 3a:1c:8c:79:af:cd:17:31:bc:54:65:ad:8d:d9:ef: 93:6d:f7:99:c0:f0:0e:32:16:ec:cb:9b:d9:85:38: 93:76:c0:1f:1b:8a:34:b5:7f:17:1b:9e:77:90:e4: f8:4a:de:d2:a9:ec:ce:b8:d3:74:0f:51:a9:c6:5e: aa:6b:1e:dd:ce:7d:2d:d1:ea:5d:0d:9b:48:53:e1: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D2:7D:54:2E:03:57:31:5E:CF:57:2C:5C:9D:8C:E8:54:4A:20:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca43ef40-a891-3e42-a32d-6f967b3bc73e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ae:ac:c1:86:23:3f:83:b3:db:2d:8e:13:69:39:c6:08:ff: d7:52:2c:60:e8:18:3b:e0:f6:37:8a:a7:da:e5:a6:ab:d3:da: 3f:1e:32:42:15:db:68:aa:5b:17:35:c2:c5:ee:e4:9a:fc:8a: b7:23:59:ba:83:29:04:ca:ba:4b:25:74:ac:c2:af:48:6b:8f: 47:01:12:9e:7b:05:14:8a:b9:13:6b:9b:4b:34:89:5c:fc:8d: 89:64:ec:38:bb:4c:f8:56:c3:cc:d7:59:b3:b7:da:23:c5:29: a5:23:87:ea:62:f1:7b:26:c8:99:e5:ba:f0:a1:9a:27:06:19: fe:e5:17:27:7f:44:bf:d1:f1:11:22:05:07:a6:70:31:7f:55: 1a:2c:18:fd:c7:cb:7b:f4:36:4a:64:8a:f0:68:54:32:2c:2d: f2:15:62:9d:f3:e5:f8:3b:6d:98:16:c5:33:85:85:76:5b:1a: c7:09:af:d2:51:b9:27:1a:ec:42:6b:f3:33:71:84:e5:06:c8: c2:57:53:c1:cf:02:8a:50:0c:d8:05:5c:e0:86:5c:e0:fb:46: c3:5b:10:82:47:8f:d7:3e:61:58:04:26:4f:d4:f9:4f:99:3f: 24:99:10:3c:d2:1a:03:8b:9d:8b:ab:f6:c4:bc:ce:57:a8:0b: 81:9a:5b:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9dxl1UOfcHgHvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk MjAzMjFkOWEtNTZiMi00YjdmLWIxMDItY2QxYThhODJiZjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHntEvgfNJzZhLH3JGQeGRcL70B5nOhv12cm mduayuo/rE9u7RhAi6nsfmGu2toTB+8xAQr++8uhBIo7CqrEUJhr1jCS5PcD+daO P77bsxRlUKCICjL+XmS/uWj8Pbjl2Q5YZI9p733TVBy8tw7ucL+NmNI67fvRBGic jHHBU9yHeDkHsKWfRFLRPvdp92ShaeegBNu/AZfM5Gnl+xp7w7aLMw/Ch6ZmEPHu SzkzDC8CTOM6HIx5r80XMbxUZa2N2e+TbfeZwPAOMhbsy5vZhTiTdsAfG4o0tX8X G553kOT4St7SqezOuNN0D1Gpxl6qax7dzn0t0epdDZtIU+HrewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbSfVQuA1cxXs9XLFydjOhUSiBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2E0M2VmNDAtYTg5MS0z ZTQyLWEzMmQtNmY5NjdiM2JjNzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2urMGGIz+Ds9stjhNpOcYI/9dSLGDoGDvg9jeKp9rlpqvT2j8eMkIV 22iqWxc1wsXu5Jr8ircjWbqDKQTKuksldKzCr0hrj0cBEp57BRSKuRNrm0s0iVz8 jYlk7Di7TPhWw8zXWbO32iPFKaUjh+pi8XsmyJnluvChmicGGf7lFyd/RL/R8REi BQemcDF/VRosGP3Hy3v0NkpkivBoVDIsLfIVYp3z5fg7bZgWxTOFhXZbGscJr9JR uSca7EJr8zNxhOUGyMJXU8HPAopQDNgFXOCGXOD7RsNbEIJHj9c+YVgEJk/U+U+Z PySZEDzSGgOLnYur9sS8zleoC4GaW6g= -----END CERTIFICATE-----Generated at Sat Dec 6 16:26:03 2025 by rpki-client