This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa File: 8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa (raw, json) Hash identifier: L8sZtf4GlU05jXifPMYI02cR+nLLwQjX+9NF5yZRcNg= Subject key identifier: 3F:09:EE:A3:C8:04:64:DF:83:BD:80:95:6C:F1:9C:5C:F1:2B:99:13 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584BF8E09929F30EB075A19A2D00 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 22781 IP address blocks: 173.255.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:99:29:f3:0e:b0:75:a1:9a:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=9e161bd0-de66-40c2-b7f1-a48a070e3c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:cb:db:88:06:50:a1:e6:ef:95:f1:b5:b8: 66:2f:89:a1:f0:ac:52:3a:7b:0d:14:a5:5a:e2:23: 47:bb:f2:49:89:29:a4:dd:1a:2c:65:4d:1b:a2:e7: 03:06:08:b3:35:a5:ac:c0:50:3e:b3:b5:d7:4b:d7: e4:af:53:ba:17:4c:b0:e4:46:8d:fe:ac:14:69:87: c8:56:95:42:44:5d:37:31:b4:20:71:63:fe:61:9e: 66:02:10:46:53:7a:74:f6:7a:4c:f4:b0:39:8c:b1: 74:3b:21:17:63:19:72:b3:3f:7a:a6:66:6f:0a:64: 1a:ab:fe:68:41:22:5f:e5:99:6f:b4:aa:9a:79:ee: 98:38:a4:35:e7:37:b9:ec:e1:53:d8:a7:63:7b:b7: 38:d2:f9:f5:8b:1f:86:df:f2:e1:cb:6f:4e:a9:eb: ab:9e:0a:d6:1c:af:99:c1:f9:c8:6b:46:55:08:05: b0:f4:13:7e:b9:f2:aa:b3:fb:b4:3b:b0:9b:a6:6d: 6e:a3:78:56:05:32:ec:ec:5e:d5:42:ca:23:dc:c4: 9d:2d:bd:7f:58:f4:1f:1d:93:30:18:8e:5b:53:f5: 10:f9:18:f2:73:9b:29:0c:19:30:f3:53:97:a3:a9: ab:52:ec:30:e2:9f:d5:c7:bb:6a:ee:f9:dd:e2:da: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:09:EE:A3:C8:04:64:DF:83:BD:80:95:6C:F1:9C:5C:F1:2B:99:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/8aa4cda8-06f3-3a77-8cff-5e8603ce4b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 173.255.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:25:ac:ea:6c:9b:1a:cb:49:ac:78:55:77:1d:b9:f7:00:35: 4a:76:aa:ba:ff:27:df:76:af:bd:a3:0e:33:a3:00:fa:aa:da: c7:75:54:9f:06:ec:52:04:81:42:9c:27:44:0e:31:85:68:3f: b3:58:a6:71:07:46:b5:7c:fe:aa:1a:2a:c9:a8:a5:07:b9:56: a1:b7:8a:cf:43:14:bf:f1:f1:b0:10:54:21:1b:7c:63:05:6a: 02:79:d2:33:40:fb:bd:57:79:bc:d1:76:b3:6c:e3:9a:b6:25: d0:3b:79:28:81:51:82:79:89:db:3a:74:09:ec:3d:00:3f:4a: 40:15:80:0b:75:59:71:44:80:94:dd:2e:d0:31:63:f3:1a:ff: 37:76:e9:24:89:e7:48:c0:ad:e5:91:6a:aa:8f:cf:81:e1:e4: 63:c9:76:07:52:bd:4c:2b:71:a5:c0:f8:f0:e6:29:09:20:46: 35:7b:5d:c4:ae:3f:e2:af:be:10:f4:cc:b9:8d:d8:0d:f6:c1: 76:0a:33:d8:2b:bf:ff:7b:8d:55:cb:cb:87:bc:0c:26:36:0d: 88:28:a6:21:98:9c:06:1f:b8:fe:4c:59:0a:a2:63:d6:bf:90: 83:2e:12:0c:45:4b:79:67:07:69:e0:a4:cb:d6:f4:61:af:20: c1:a1:5b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44Jkp8w6wdaGaLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OWUxNjFiZDAtZGU2Ni00MGMyLWI3ZjEtYTQ4YTA3MGUzYzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEPL24gGUKHm75XxtbhmL4mh8KxSOnsNFKVa 4iNHu/JJiSmk3RosZU0boucDBgizNaWswFA+s7XXS9fkr1O6F0yw5EaN/qwUaYfI VpVCRF03MbQgcWP+YZ5mAhBGU3p09npM9LA5jLF0OyEXYxlysz96pmZvCmQaq/5o QSJf5ZlvtKqaee6YOKQ15ze57OFT2Kdje7c40vn1ix+G3/Lhy29OqeurngrWHK+Z wfnIa0ZVCAWw9BN+ufKqs/u0O7Cbpm1uo3hWBTLs7F7VQsoj3MSdLb1/WPQfHZMw GI5bU/UQ+Rjyc5spDBkw81OXo6mrUuww4p/Vx7tq7vnd4tp5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8J7qPIBGTfg72AlWzxnFzxK5kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvOGFhNGNkYTgtMDZmMy0z YTc3LThjZmYtNWU4NjAzY2U0YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrf+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8lrOpsmxrLSax4VXcdufcANUp2qrr/J992r72jDjOjAPqq2sd1VJ8G 7FIEgUKcJ0QOMYVoP7NYpnEHRrV8/qoaKsmopQe5VqG3is9DFL/x8bAQVCEbfGMF agJ50jNA+71XebzRdrNs45q2JdA7eSiBUYJ5ids6dAnsPQA/SkAVgAt1WXFEgJTd LtAxY/Ma/zd26SSJ50jAreWRaqqPz4Hh5GPJdgdSvUwrcaXA+PDmKQkgRjV7XcSu P+KvvhD0zLmN2A32wXYKM9grv/97jVXLy4e8DCY2DYgopiGYnAYfuP5MWQqiY9a/ kIMuEgxFS3lnB2ngpMvW9GGvIMGhW5Q= -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:11 2025 by rpki-client