This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json) Hash identifier: Cvbr3wLQMAXSMqMf1e1hDoaHxms9sz2ACWlsjb0TitQ= Subject key identifier: 1A:4C:DB:E2:CB:0D:96:0B:B9:1C:DC:B4:C8:83:42:17:EA:99:EF:74 Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Certificate serial: 010D0C9F4328584C083B5C57DEE47993B7799A08 Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 393909 IP address blocks: 172.86.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:3b:5c:57:de:e4:79:93:b7:79:9a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=61999fc7-dc2e-4c42-8773-9e39c93ebb6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:97:c5:dc:c5:c7:b7:d5:4c:31:8e:ea:76: 07:5b:b7:f2:0a:cd:b9:da:6a:19:f1:7e:14:e1:ac: bf:52:f6:1e:2b:00:19:3a:23:5b:11:44:c4:04:af: 45:e9:c5:fe:8d:48:b7:46:bd:91:4c:a0:bd:0c:39: 7a:86:d4:0f:93:6a:24:09:4d:56:c4:3d:3d:89:d1: 00:a8:cb:74:7c:18:82:ea:9a:aa:22:b1:8e:14:ac: 5f:9c:2d:76:8d:02:0a:c0:6b:97:ee:4c:d6:e8:12: d0:15:c7:31:59:eb:08:31:5c:bd:48:bd:59:7f:d0: 45:1b:09:09:e6:3e:53:ad:70:f2:6b:15:c0:31:59: 2e:1f:49:7c:21:ec:20:14:31:11:d3:5f:21:a3:01: 33:ab:0f:64:ef:6e:7c:1c:ba:f8:f1:04:1c:9a:3b: 24:9a:14:de:cf:fe:d8:f3:6c:22:5b:16:02:a6:d2: 6c:99:d6:24:e9:05:7b:28:8c:21:a5:a1:dc:4f:cb: 6b:7c:2d:34:f5:20:9f:a4:88:7a:de:8b:a4:03:a6: 52:52:71:b6:64:90:bb:58:19:78:a3:11:4f:52:39: 02:b1:86:e8:d5:43:59:f7:1f:ee:8e:ca:39:87:f8: 08:8e:b0:f7:4c:dd:da:4c:99:af:97:f0:0b:6c:24: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4C:DB:E2:CB:0D:96:0B:B9:1C:DC:B4:C8:83:42:17:EA:99:EF:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl X509v3 Authority Key Identifier: keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer sbgp-ipAddrBlock: critical IPv4: 172.86.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:14:f6:fc:ed:99:2b:47:35:87:75:9f:2e:6c:31:ec:f4:40: 7d:28:a8:1e:9a:f1:2e:1b:26:03:94:9b:b4:b6:a0:0e:67:2a: cc:b0:dd:9f:3f:a2:75:bb:f1:6b:6f:62:f9:3d:1c:ac:4d:04: 40:83:73:b9:59:22:34:0a:57:1e:8b:64:3e:a1:e7:53:68:e4: ef:5f:7d:4d:25:ef:07:ef:6b:60:20:6a:6b:2a:7f:dc:3a:f6: de:68:99:bf:c4:eb:26:c1:26:1b:93:3c:bb:a0:fe:c1:da:33: 9d:35:0f:79:aa:7a:37:68:6f:81:bd:4a:e7:c3:bf:e6:6e:7d: 55:12:9d:ea:98:ef:ba:79:85:ed:2a:1a:c4:94:3e:a6:d8:2b: 6f:b8:8c:4a:91:36:27:19:a9:e8:30:b1:cb:24:77:c2:6f:9d: 36:e6:c8:aa:88:4d:32:cb:89:08:bc:50:ed:02:f1:72:10:a4: c5:df:51:b5:11:31:03:b1:79:1f:b7:c6:2e:e3:a9:2b:1d:76: 08:9f:68:d2:fc:99:eb:06:cc:9f:f9:6f:ae:bd:24:20:d4:49: df:e4:83:35:30:34:bf:0b:2c:ae:e1:10:a7:e6:e6:fb:6d:d1: ea:3f:3b:ff:ec:99:91:d3:7d:9e:81:3f:eb:8f:c8:3d:1a:4e: d9:1a:bf:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwIO1xX3uR5k7d5mggwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJm OTU2MB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk NjE5OTlmYzctZGMyZS00YzQyLTg3NzMtOWUzOWM5M2ViYjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7P2XxdzFx7fVTDGO6nYHW7fyCs252moZ8X4U 4ay/UvYeKwAZOiNbEUTEBK9F6cX+jUi3Rr2RTKC9DDl6htQPk2okCU1WxD09idEA qMt0fBiC6pqqIrGOFKxfnC12jQIKwGuX7kzW6BLQFccxWesIMVy9SL1Zf9BFGwkJ 5j5TrXDyaxXAMVkuH0l8IewgFDER018howEzqw9k7258HLr48QQcmjskmhTez/7Y 82wiWxYCptJsmdYk6QV7KIwhpaHcT8trfC009SCfpIh63oukA6ZSUnG2ZJC7WBl4 oxFPUjkCsYbo1UNZ9x/ujso5h/gIjrD3TN3aTJmvl/ALbCQbqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpM2+LLDZYLuRzctMiDQhfqme90MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFh MGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvZmY1NDk5YmYtODI4MC0z ODZkLWE1NWEtYzQ5NDE4MWJlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDExYTBkMWItNzlhNC00ZDE0LTlj ZDAtMDc0M2YyOWJmOTU2LzAxMWEwZDFiLTc5YTQtNGQxNC05Y2QwLTA3NDNmMjli Zjk1Ni5jcmwwHwYDVR0jBBgwFoAUUQq891lS4iYG1wETEyKMWAPnvxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQz ZjI5YmY5NTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQU9vztmStHNYd1ny5sMez0QH0oqB6a8S4bJgOUm7S2oA5nKsyw3Z8/ onW78WtvYvk9HKxNBECDc7lZIjQKVx6LZD6h51No5O9ffU0l7wfva2Agamsqf9w6 9t5omb/E6ybBJhuTPLug/sHaM501D3mqejdob4G9SufDv+ZufVUSneqY77p5he0q GsSUPqbYK2+4jEqRNicZqegwscskd8JvnTbmyKqITTLLiQi8UO0C8XIQpMXfUbUR MQOxeR+3xi7jqSsddgifaNL8mesGzJ/5b669JCDUSd/kgzUwNL8LLK7hEKfm5vtt 0eo/O//smZHTfZ6BP+uPyD0aTtkav20= -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:15 2025 by rpki-client