This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa File: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (raw, json) Hash identifier: YrbmwWTMcVSNmBiWyFHO5c8sc63rVMAhGhTfybW4wR0= Subject key identifier: 53:A2:ED:B7:29:4D:74:D2:9E:3C:0B:1F:8E:43:3E:05:55:DE:BF:13 Certificate issuer: /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Certificate serial: 010D0C9F4328584BE3F07894D6549C6DB67B5E00 Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa Signing time: Mon 17 Nov 2025 14:00:39 +0000 ROA not before: Mon 17 Nov 2025 14:00:39 +0000 ROA not after: Sun 15 Feb 2026 14:00:39 +0000 asID: 8075 IP address blocks: 192.12.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e3:f0:78:94:d6:54:9c:6d:b6:7b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a Validity Not Before: Nov 17 14:00:39 2025 GMT Not After : Feb 15 14:00:39 2026 GMT Subject: CN=1297a5e3-d4e2-4985-82d8-a73a13589675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ad:b9:f2:d1:d5:af:0c:d4:f3:2a:67:8f:aa: 8b:29:09:8e:3b:a5:08:fa:a1:1e:7c:08:3e:47:f8: f5:2a:90:eb:6f:4d:a1:ec:b5:96:a6:ef:97:dd:8f: 69:8a:82:b4:41:fb:8a:a6:51:51:fb:c6:72:81:3b: 24:29:b0:ed:84:8a:9e:83:a8:af:9c:2c:fc:55:0f: 89:af:0b:21:6e:f7:6c:63:75:f2:54:36:a4:8e:ac: 86:ff:5f:06:a4:f7:ff:06:25:3f:db:13:db:f4:e4: 15:08:58:a2:22:34:be:9d:88:27:b4:8f:78:98:ad: 8b:d9:b6:ad:e8:9f:70:2a:91:de:2e:78:66:72:c7: de:18:df:38:10:d6:4f:12:9a:05:5c:26:4a:23:43: b4:ec:56:7a:81:32:eb:43:88:6e:bc:18:3b:d6:06: 50:14:1d:94:79:a3:0f:70:39:ab:44:18:2f:87:84: 6b:9d:17:5e:7b:44:cd:e8:c8:ed:ad:63:16:dc:7e: a3:38:51:65:dd:f6:8d:e6:80:b8:08:61:c4:4a:7f: 82:f1:e0:6d:e0:41:36:ab:15:7f:9d:6e:1f:89:0e: 88:ee:20:19:bb:39:70:f2:1a:a6:df:ff:0a:7d:d4: 66:f6:a4:d6:9b:6e:90:7c:a3:f9:72:95:2c:72:aa: 88:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A2:ED:B7:29:4D:74:D2:9E:3C:0B:1F:8E:43:3E:05:55:DE:BF:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/3b4f080a-93ea-356c-9216-559219ab2f01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl X509v3 Authority Key Identifier: keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer sbgp-ipAddrBlock: critical IPv4: 192.12.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:6a:e1:45:90:c6:89:b3:82:ea:da:30:05:4c:64:56:85:fd: b5:a2:f1:42:fe:69:8a:61:d2:52:c7:a0:eb:6d:c5:29:b3:7f: ce:b0:0b:d1:37:35:5c:08:b1:5c:69:44:58:31:65:d1:56:ec: d0:80:4a:38:df:9e:a2:fd:70:8c:9f:28:26:76:57:c1:d8:8c: fc:0b:5f:43:2b:91:c1:ed:1f:f8:95:b3:26:61:94:43:5c:59: 0c:bf:56:ed:64:52:e0:b5:71:b9:ec:d7:95:e9:15:36:fa:ed: 4f:cc:57:75:64:23:ae:53:e6:49:68:04:bb:0f:20:7f:eb:bf: 23:6e:0a:66:c3:3a:2b:1c:fc:30:4c:01:5d:f9:cd:07:be:e9: ba:f0:bc:35:87:12:80:72:3e:4f:75:64:c0:57:29:72:2f:30: fa:b8:00:69:43:e2:30:e9:7c:fc:59:da:69:f0:24:f4:84:f1: 0d:6c:5a:14:e3:ed:b9:1b:fc:52:10:cd:91:1c:6c:d6:9b:07: ec:11:12:3e:b0:21:d1:6e:63:8f:91:ca:61:04:3c:42:e0:f5: ca:e8:59:1b:da:d2:55:36:c2:04:c7:d5:eb:83:96:c6:6f:d9: 69:78:76:68:12:ae:7a:8b:3f:43:2e:98:45:36:8e:77:00:b1: 5a:1e:50:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvj8HiU1lScbbZ7XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDhmYmY4YjItZDJiYy00ZWQ4LWJkNTctMmE1ZTQzYTMw ZjNhMB4XDTI1MTExNzE0MDAzOVoXDTI2MDIxNTE0MDAzOVowLzEtMCsGA1UEAxMk MTI5N2E1ZTMtZDRlMi00OTg1LTgyZDgtYTczYTEzNTg5Njc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq258tHVrwzU8ypnj6qLKQmOO6UI+qEefAg+ R/j1KpDrb02h7LWWpu+X3Y9pioK0QfuKplFR+8ZygTskKbDthIqeg6ivnCz8VQ+J rwshbvdsY3XyVDakjqyG/18GpPf/BiU/2xPb9OQVCFiiIjS+nYgntI94mK2L2bat 6J9wKpHeLnhmcsfeGN84ENZPEpoFXCZKI0O07FZ6gTLrQ4huvBg71gZQFB2UeaMP cDmrRBgvh4RrnRdee0TN6MjtrWMW3H6jOFFl3faN5oC4CGHESn+C8eBt4EE2qxV/ nW4fiQ6I7iAZuzlw8hqm3/8KfdRm9qTWm26QfKP5cpUscqqIiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOi7bcpTXTSnjwLH45DPgVV3r8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kOGZi ZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVlNDNhMzBmM2EvM2I0ZjA4MGEtOTNlYS0z NTZjLTkyMTYtNTU5MjE5YWIyZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDhmYmY4YjItZDJiYy00ZWQ4LWJk NTctMmE1ZTQzYTMwZjNhL2Q4ZmJmOGIyLWQyYmMtNGVkOC1iZDU3LTJhNWU0M2Ez MGYzYS5jcmwwHwYDVR0jBBgwFoAUAamV2enW0oeEHc6Nh2edpM3R/tQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9kOGZiZjhiMi1kMmJjLTRlZDgtYmQ1Ny0yYTVl NDNhMzBmM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdq4UWQxomzguraMAVMZFaF/bWi8UL+aYph0lLHoOttxSmzf86wC9E3 NVwIsVxpRFgxZdFW7NCASjjfnqL9cIyfKCZ2V8HYjPwLX0MrkcHtH/iVsyZhlENc WQy/Vu1kUuC1cbns15XpFTb67U/MV3VkI65T5kloBLsPIH/rvyNuCmbDOisc/DBM AV35zQe+6brwvDWHEoByPk91ZMBXKXIvMPq4AGlD4jDpfPxZ2mnwJPSE8Q1sWhTj 7bkb/FIQzZEcbNabB+wREj6wIdFuY4+RymEEPELg9croWRva0lU2wgTH1euDlsZv 2Wl4dmgSrnqLP0MumEU2jncAsVoeUL0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:28:37 2025 by rpki-client