This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa File: 1c8cfd90-1e45-3ca8-865a-284e8261e043.roa (raw, json) Hash identifier: LKAYp5HfVm6ZJ7rR9sW0ZuQeX5q/d9mfjn61T51I03c= Subject key identifier: 5A:E4:D1:9C:C9:8E:99:A8:78:33:E3:33:11:ED:EA:8A:92:9C:03:35 Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584BDCF5C5E095CBB18AFD899700 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 21949 IP address blocks: 199.68.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:c5:e0:95:cb:b1:8a:fd:89:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=ebbff839-ae11-46ce-9c55-a4925247333f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:40:7a:3b:b4:1b:e5:04:e7:3f:6c:1a:58: b8:7d:11:0e:9a:5a:ba:41:68:17:16:56:6d:e8:ab: 0c:ce:75:06:7d:60:3a:ba:97:76:26:34:86:b5:21: 7e:2c:8d:78:45:08:37:67:0b:06:90:64:19:54:f7: 72:7b:21:97:01:00:39:d8:71:a6:87:b5:1d:c2:2e: 17:c0:c8:e8:27:4a:6e:2a:89:29:41:c3:6a:7d:24: ab:2a:d4:fc:76:c3:6b:80:2b:ad:63:c8:c8:87:9a: 2a:31:36:ec:cb:34:3b:77:7c:c2:d0:32:e4:d1:b2: b7:7e:16:e2:34:28:f2:81:df:18:91:d0:d2:93:a5: 97:8c:a9:b3:a5:86:43:a6:58:06:36:23:6e:10:c4: ce:df:96:88:42:2b:77:78:f0:5b:2b:e6:ef:ee:db: 2d:09:e1:e3:d4:a5:73:92:61:a3:ed:f1:97:2d:53: 32:c2:b6:fa:2e:2f:10:d5:73:ff:9c:c1:d8:a6:d4: 60:a6:44:97:14:cf:22:cd:96:e1:3f:e2:cb:5c:ed: 14:0e:74:13:91:f9:52:94:05:d3:d0:99:1e:28:ab: b3:75:57:77:6d:f2:b5:f8:87:ad:0b:33:1d:3e:ae: 93:48:c8:76:5f:d3:40:a5:99:d8:2a:4c:71:18:c0: 79:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E4:D1:9C:C9:8E:99:A8:78:33:E3:33:11:ED:EA:8A:92:9C:03:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/1c8cfd90-1e45-3ca8-865a-284e8261e043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 199.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cb:0e:8a:57:7a:e5:ab:6f:d0:b3:04:a8:b9:60:c7:68:08: d2:6f:71:fe:2f:35:ff:88:3a:2b:5a:fd:c0:ed:9e:05:89:df: 35:25:9e:c5:7f:15:bf:92:d8:75:cd:b3:f5:51:c2:65:23:18: 75:ec:48:2a:8a:39:58:8a:fe:8a:f4:45:07:6f:ad:24:b0:a1: 5a:c1:c2:18:46:9b:55:e4:00:b0:b7:ea:20:25:67:03:dc:48: 4f:bf:fe:a1:a9:06:59:1a:58:af:55:99:03:4f:a7:c6:f2:53: d7:e8:eb:8f:98:12:c2:27:cc:65:8c:a1:bc:fe:a1:14:97:67: b2:46:73:bb:d6:6f:44:77:82:23:3b:58:b7:22:39:8f:82:cd: 88:a3:6f:bc:b9:e0:ec:59:82:36:31:32:08:ab:72:70:af:b3: 40:fa:7c:96:00:b4:63:70:1a:81:d5:ea:7d:e0:a3:21:e7:9e: b9:98:ea:cd:2f:48:75:79:8b:99:b5:86:55:e3:6e:0e:e1:3d: 01:eb:2c:45:ac:a6:ef:44:eb:46:ec:4f:58:c8:78:cd:cd:de: 42:92:40:94:c1:61:76:22:d5:3e:c1:f2:59:51:e8:0a:41:49: 38:be:3b:7b:b9:a8:5c:32:cd:8d:39:aa:e4:a4:15:02:f5:f3: a4:14:72:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9cXglcuxiv2JlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk ZWJiZmY4MzktYWUxMS00NmNlLTljNTUtYTQ5MjUyNDczMzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TBAeju0G+UE5z9sGli4fREOmlq6QWgXFlZt 6KsMznUGfWA6upd2JjSGtSF+LI14RQg3ZwsGkGQZVPdyeyGXAQA52HGmh7Udwi4X wMjoJ0puKokpQcNqfSSrKtT8dsNrgCutY8jIh5oqMTbsyzQ7d3zC0DLk0bK3fhbi NCjygd8YkdDSk6WXjKmzpYZDplgGNiNuEMTO35aIQit3ePBbK+bv7tstCeHj1KVz kmGj7fGXLVMywrb6Li8Q1XP/nMHYptRgpkSXFM8izZbhP+LLXO0UDnQTkflSlAXT 0JkeKKuzdVd3bfK1+IetCzMdPq6TSMh2X9NApZnYKkxxGMB57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrk0ZzJjpmoeDPjMxHt6oqSnAM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMWM4Y2ZkOTAtMWU0NS0z Y2E4LTg2NWEtMjg0ZTgyNjFlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx0R4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnLDopXeuWrb9CzBKi5YMdoCNJvcf4vNf+IOita/cDtngWJ3zUlnsV/ Fb+S2HXNs/VRwmUjGHXsSCqKOViK/or0RQdvrSSwoVrBwhhGm1XkALC36iAlZwPc SE+//qGpBlkaWK9VmQNPp8byU9fo64+YEsInzGWMobz+oRSXZ7JGc7vWb0R3giM7 WLciOY+CzYijb7y54OxZgjYxMgircnCvs0D6fJYAtGNwGoHV6n3goyHnnrmY6s0v SHV5i5m1hlXjbg7hPQHrLEWspu9E60bsT1jIeM3N3kKSQJTBYXYi1T7B8llR6ApB STi+O3u5qFwyzY05quSkFQL186QUcg8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:22 2025 by rpki-client