This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa File: 3cd92a3c-2257-3455-bef4-1fda1598d15a.roa (raw, json) Hash identifier: zHxHBpwGy8fCs4XXa5lWfP4bvRd0cujC4reF35yGFNo= Subject key identifier: C1:CD:8C:4B:73:44:33:2F:04:38:61:E0:E6:41:98:16:94:08:B7:5A Certificate issuer: /CN=063abcef-47ff-4267-9198-eb628aba7842 Certificate serial: 010D0C9F4328584BE6BB260B493DE2C73C9B0880 Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 397976 IP address blocks: 143.223.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:26:0b:49:3d:e2:c7:3c:9b:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842 Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=1ec4c665-078c-4652-b145-3d44a5509dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:89:06:1f:85:27:81:84:83:e8:37:0c:c2: dc:9c:ed:f3:4b:3a:89:bc:47:a7:94:0b:35:bc:76: dd:5f:ed:63:84:95:15:ef:ba:bf:2c:8d:56:29:38: 3c:8f:cc:02:44:8b:86:39:62:50:c7:48:2f:19:ba: f5:3a:13:ff:13:7d:50:a0:a8:9a:6e:bb:14:7d:cf: 37:f6:43:e9:b3:ce:5a:ae:42:3f:f3:a0:36:d3:00: be:96:bc:9e:2e:26:6c:83:cd:89:16:7f:0b:58:42: 25:39:f0:2b:3e:83:bb:96:a3:c4:e4:9a:3a:e8:7c: 45:59:ef:0b:20:bd:f7:0d:bc:f4:5d:c1:e3:2a:81: 65:fd:4a:04:11:6c:84:a3:c7:0c:3d:70:d7:b5:aa: 3c:ae:4c:79:0b:16:8a:c8:7c:5b:b5:d5:40:7f:63: 4f:85:28:03:81:0a:d2:6f:5a:13:fc:b9:a1:7a:a1: 06:67:35:47:7a:fd:0d:48:c8:be:87:7a:c3:32:dc: 39:15:84:79:61:fb:c8:cc:7e:df:ea:59:9d:9f:31: de:5a:a9:1d:3d:60:02:34:03:31:ca:ed:32:d3:0b: 59:f3:5f:b5:79:1c:0b:a6:8b:1e:d9:e2:94:9a:9f: d0:32:a8:ee:b5:76:26:18:3b:f6:ef:59:18:6e:64: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CD:8C:4B:73:44:33:2F:04:38:61:E0:E6:41:98:16:94:08:B7:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/3cd92a3c-2257-3455-bef4-1fda1598d15a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl X509v3 Authority Key Identifier: keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer sbgp-ipAddrBlock: critical IPv4: 143.223.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:35:74:e9:79:4c:b4:2c:fe:dd:f2:0d:2e:26:64:01:b9:9b: 2f:14:f1:a5:70:cd:96:db:9c:e7:7c:58:85:80:8b:48:6c:8b: bc:cd:35:1b:77:d4:58:a7:b6:3d:a2:9d:f4:33:f6:1b:ea:04: b5:f5:9a:41:b7:ae:07:86:f0:9f:36:42:a5:73:fb:47:58:50: 0d:23:d5:37:b4:db:41:1a:71:08:9f:69:24:61:85:59:04:9a: d1:b7:93:c4:e2:1a:b5:00:83:ea:3a:2e:7c:68:c0:18:86:31: 3b:d7:12:bb:9c:c1:03:a3:76:1d:73:0e:9a:bb:3b:45:85:de: 8a:3d:18:4a:ba:d0:36:48:64:9e:23:ac:b4:45:52:e2:96:b0: 74:11:1c:43:5b:10:df:37:30:9b:7f:43:09:57:a8:b5:ef:8b: e6:99:49:b7:a6:f8:fe:21:9d:d5:67:28:30:e5:13:bb:99:6a: 62:26:1a:48:70:29:97:88:54:99:ef:03:b5:4d:75:5f:92:02: c9:01:13:27:04:f5:22:83:43:f5:99:ed:65:b7:2e:7e:bc:a2: 32:81:4d:ed:57:4b:4b:09:af:bb:67:e0:5c:36:cd:fd:a7:bd: 54:d5:00:da:cf:87:2b:da:fb:5b:00:52:50:54:7b:b5:70:ab: a3:36:03:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvmuyYLST3ixzybCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDYzYWJjZWYtNDdmZi00MjY3LTkxOTgtZWI2MjhhYmE3 ODQyMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk MWVjNGM2NjUtMDc4Yy00NjUyLWIxNDUtM2Q0NGE1NTA5ZGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wWJBh+FJ4GEg+g3DMLcnO3zSzqJvEenlAs1 vHbdX+1jhJUV77q/LI1WKTg8j8wCRIuGOWJQx0gvGbr1OhP/E31QoKiabrsUfc83 9kPps85arkI/86A20wC+lryeLiZsg82JFn8LWEIlOfArPoO7lqPE5Jo66HxFWe8L IL33Dbz0XcHjKoFl/UoEEWyEo8cMPXDXtao8rkx5CxaKyHxbtdVAf2NPhSgDgQrS b1oT/LmheqEGZzVHev0NSMi+h3rDMtw5FYR5YfvIzH7f6lmdnzHeWqkdPWACNAMx yu0y0wtZ81+1eRwLpose2eKUmp/QMqjutXYmGDv271kYbmSzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHNjEtzRDMvBDhh4OZBmBaUCLdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNh YmNlZi00N2ZmLTQyNjctOTE5OC1lYjYyOGFiYTc4NDIvM2NkOTJhM2MtMjI1Ny0z NDU1LWJlZjQtMWZkYTE1OThkMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDYzYWJjZWYtNDdmZi00MjY3LTkx OTgtZWI2MjhhYmE3ODQyLzA2M2FiY2VmLTQ3ZmYtNDI2Ny05MTk4LWViNjI4YWJh Nzg0Mi5jcmwwHwYDVR0jBBgwFoAULT+tbVsf5f5/PtsiKw72zM1ofcIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wNjNhYmNlZi00N2ZmLTQyNjctOTE5OC1lYjYy OGFiYTc4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj9/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ1dOl5TLQs/t3yDS4mZAG5my8U8aVwzZbbnOd8WIWAi0hsi7zNNRt3 1Fintj2infQz9hvqBLX1mkG3rgeG8J82QqVz+0dYUA0j1Te020EacQifaSRhhVkE mtG3k8TiGrUAg+o6LnxowBiGMTvXErucwQOjdh1zDpq7O0WF3oo9GEq60DZIZJ4j rLRFUuKWsHQRHENbEN83MJt/QwlXqLXvi+aZSbem+P4hndVnKDDlE7uZamImGkhw KZeIVJnvA7VNdV+SAskBEycE9SKDQ/WZ7WW3Ln68ojKBTe1XS0sJr7tn4Fw2zf2n vVTVANrPhyva+1sAUlBUe7Vwq6M2A0A= -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:16 2025 by rpki-client