This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa File: 290cf5fd-1adb-3368-ac39-260194c932ba.roa (raw, json) Hash identifier: PT8m3il9L5L3jAUv3UWXH/YxGUPX2Vu98aMFN0flQhY= Subject key identifier: C2:03:E1:3E:5D:6D:4B:CF:35:4C:F0:8A:69:2A:22:90:2B:12:D1:50 Certificate issuer: /CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Certificate serial: 010D0C9F4328584BF34B2A917217C323D478B900 Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa Signing time: Sun 23 Nov 2025 02:00:31 +0000 ROA not before: Sun 23 Nov 2025 02:00:31 +0000 ROA not after: Sat 21 Feb 2026 02:00:31 +0000 asID: 14639 IP address blocks: 199.230.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:4b:2a:91:72:17:c3:23:d4:78:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854 Validity Not Before: Nov 23 02:00:31 2025 GMT Not After : Feb 21 02:00:31 2026 GMT Subject: CN=cbf1bac8-0031-4c9f-b37a-d6826ffd03f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:9b:00:ba:8e:6d:a2:a3:5a:63:6a:c3:c1: 17:3c:02:19:1b:c3:bb:43:fd:46:0f:9b:48:c5:ae: 1a:25:78:ce:ef:9a:6d:8b:01:59:62:3d:cb:41:6c: b5:85:ee:67:67:83:90:f2:82:6c:7d:d0:32:c6:6f: c4:ae:07:a8:da:0d:89:17:98:8d:25:42:aa:68:a9: e9:4a:82:eb:2c:d4:66:0b:97:e7:db:71:7a:dd:e2: 4f:e7:8a:01:bd:67:39:51:0f:31:ee:4e:63:fc:58: 9a:fb:95:32:f9:be:db:67:0e:1d:e6:85:66:da:83: 89:cd:87:3e:6a:10:f9:b2:15:e2:e4:43:5d:a8:eb: df:eb:b3:43:1f:cc:a9:3b:7d:94:e3:93:02:95:a6: 66:e9:38:1c:06:f9:36:94:9f:fa:43:d5:82:70:b2: 75:ef:7d:49:a5:31:79:45:9b:a6:a7:23:23:4b:d8: 2e:d6:a0:5a:21:4c:c5:70:1f:6b:29:b3:17:bd:87: 24:0b:5e:bf:fc:59:35:f6:0d:1c:9b:b0:73:15:6d: f8:26:98:55:6c:ee:89:d6:5e:a3:f2:62:40:6f:7c: 94:6f:b4:54:49:6a:93:83:0f:a3:d3:88:06:99:06: 2a:cb:75:db:93:6e:af:1d:7b:e9:3a:93:b3:78:8b: 59:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:03:E1:3E:5D:6D:4B:CF:35:4C:F0:8A:69:2A:22:90:2B:12:D1:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/290cf5fd-1adb-3368-ac39-260194c932ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl X509v3 Authority Key Identifier: keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer sbgp-ipAddrBlock: critical IPv4: 199.230.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:8e:b6:44:2a:d8:f8:0d:fe:42:66:91:fb:8a:8a:9a:fa:71: c4:82:57:3c:1e:04:fb:67:d8:7e:63:de:b0:be:e5:f7:e6:28: cd:43:43:32:75:05:6b:b0:5c:b6:90:c0:8a:3d:cd:37:51:4f: ec:da:fa:3b:80:fd:a8:6b:60:e3:24:14:b9:01:10:02:89:3f: e4:c8:d4:e5:e3:bf:2b:b0:30:69:e0:9c:4b:47:ee:92:ed:1a: a8:d0:e1:10:6c:9c:6e:cc:4d:2e:fa:f8:2f:63:df:d6:0a:07: 9f:6f:ad:c4:53:9e:35:ca:81:c3:1b:2c:5d:1b:ee:ab:80:ba: fa:9e:81:81:28:a2:09:d9:0d:0f:d6:bd:33:da:8c:dd:67:95: 26:82:8c:b3:24:be:3a:9e:cc:eb:fa:b5:56:4b:55:41:2d:15: 03:73:66:55:9e:49:8e:37:4e:7a:bf:e8:aa:29:f6:0b:df:c0: 39:e3:52:ca:0f:13:7e:d8:2b:6a:4b:aa:eb:66:3e:94:bf:cb: c2:a3:f8:5d:87:b4:82:eb:87:2c:38:96:b9:0b:d0:93:ba:d8: 66:53:d2:d9:a9:2b:e9:df:73:f8:02:d3:5b:ca:73:0f:bc:17: 2b:7c:cc:6a:b9:ec:9f:b7:e4:c2:3c:28:59:32:bc:03:39:44: ed:4a:1a:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvzSyqRchfDI9R4uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE3MWYwMGUtMDIwMC00OGRmLTljYjQtMDA4ZGY5YTRh ODU0MB4XDTI1MTEyMzAyMDAzMVoXDTI2MDIyMTAyMDAzMVowLzEtMCsGA1UEAxMk Y2JmMWJhYzgtMDAzMS00YzlmLWIzN2EtZDY4MjZmZmQwM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOybALqObaKjWmNqw8EXPAIZG8O7Q/1GD5tI xa4aJXjO75ptiwFZYj3LQWy1he5nZ4OQ8oJsfdAyxm/Ergeo2g2JF5iNJUKqaKnp SoLrLNRmC5fn23F63eJP54oBvWc5UQ8x7k5j/Fia+5Uy+b7bZw4d5oVm2oOJzYc+ ahD5shXi5ENdqOvf67NDH8ypO32U45MClaZm6TgcBvk2lJ/6Q9WCcLJ1731JpTF5 RZumpyMjS9gu1qBaIUzFcB9rKbMXvYckC16//Fk19g0cm7BzFW34JphVbO6J1l6j 8mJAb3yUb7RUSWqTgw+j04gGmQYqy3Xbk26vHXvpOpOzeItZuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMID4T5dbUvPNUzwimkqIpArEtFQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yYTcx ZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhkZjlhNGE4NTQvMjkwY2Y1ZmQtMWFkYi0z MzY4LWFjMzktMjYwMTk0YzkzMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmE3MWYwMGUtMDIwMC00OGRmLTlj YjQtMDA4ZGY5YTRhODU0LzJhNzFmMDBlLTAyMDAtNDhkZi05Y2I0LTAwOGRmOWE0 YTg1NC5jcmwwHwYDVR0jBBgwFoAUOA1kwPwYBvuiE5kqAVi9GUZ3do0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yYTcxZjAwZS0wMjAwLTQ4ZGYtOWNiNC0wMDhk ZjlhNGE4NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHx+aAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKOtkQq2PgN/kJmkfuKipr6ccSCVzweBPtn2H5j3rC+5ffmKM1DQzJ1 BWuwXLaQwIo9zTdRT+za+juA/ahrYOMkFLkBEAKJP+TI1OXjvyuwMGngnEtH7pLt GqjQ4RBsnG7MTS76+C9j39YKB59vrcRTnjXKgcMbLF0b7quAuvqegYEoognZDQ/W vTPajN1nlSaCjLMkvjqezOv6tVZLVUEtFQNzZlWeSY43Tnq/6Kop9gvfwDnjUsoP E37YK2pLqutmPpS/y8Kj+F2HtILrhyw4lrkL0JO62GZT0tmpK+nfc/gC01vKcw+8 Fyt8zGq57J+35MI8KFkyvAM5RO1KGnQ= -----END CERTIFICATE-----Generated at Thu Dec 11 08:55:25 2025 by rpki-client