This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa File: d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa (raw, json) Hash identifier: 23ppnI0ucgsvZo5LY94virydlbjMjoqExZPZgDfsI3c= Subject key identifier: A5:B9:F5:1D:3D:2C:27:3E:25:FB:00:DA:99:29:EB:95:8E:7C:35:07 Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584C0F361A12E2CD3FEA75FFC800 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa Signing time: Wed 03 Dec 2025 02:00:30 +0000 ROA not before: Wed 03 Dec 2025 02:00:30 +0000 ROA not after: Tue 03 Mar 2026 02:00:30 +0000 asID: 26286 IP address blocks: 204.197.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0f:36:1a:12:e2:cd:3f:ea:75:ff:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Dec 3 02:00:30 2025 GMT Not After : Mar 3 02:00:30 2026 GMT Subject: CN=071543f7-2817-4322-a208-bbe6990d185c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:90:30:a0:fa:c2:46:38:3a:b7:83:25:70: e7:a1:04:a5:2a:55:71:bc:fa:33:de:39:5e:ca:95: 99:ea:94:d2:63:3f:79:1a:27:6f:ef:46:83:5f:e1: d0:44:0a:3c:5b:d2:22:40:c3:d2:e1:c2:34:c9:54: 25:52:50:12:98:10:5e:c7:c6:b8:60:03:46:24:4a: a1:87:83:c8:b8:9d:9f:96:07:59:c7:aa:61:40:36: 9b:c5:51:f7:4d:80:b2:09:da:98:a1:52:c2:b2:c3: ae:85:80:f2:bd:c5:3e:79:5d:9e:8a:82:5a:80:f1: ca:ef:66:ac:ae:42:e1:c0:81:55:49:35:0b:e1:9e: 3d:4b:b6:a5:87:89:d8:5a:47:d5:2f:f2:f3:bb:f8: 32:e0:bc:c1:27:b9:55:4c:f7:d6:25:55:74:5f:ac: 3a:bb:6e:12:4c:89:e4:04:7a:57:3f:35:8e:d2:1c: 1d:21:36:67:c2:60:2b:a9:b1:6b:f3:68:91:0e:ce: ef:9a:b0:df:8f:81:70:62:cf:d7:93:6e:0f:d4:b8: cf:64:b8:ff:95:79:0a:e0:71:22:78:a3:fd:1a:39: c5:f6:2b:e5:e6:f9:43:a4:02:56:43:95:2f:5f:53: f7:3e:3e:01:2a:b0:a7:eb:3b:da:78:2e:b5:74:2b: 64:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B9:F5:1D:3D:2C:27:3E:25:FB:00:DA:99:29:EB:95:8E:7C:35:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/d9c4d9a7-0b81-36b0-b76b-a0c9dec648d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 204.197.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:63:1b:03:f5:cc:bd:e9:52:e9:57:a7:c5:37:cb:c5:62:7f: 93:01:04:9a:e8:a8:16:59:81:2e:c3:be:ea:2f:d7:41:18:e7: c1:29:5b:58:b4:31:be:86:36:8e:6a:e5:4b:ea:88:25:b6:23: 63:40:db:16:9b:11:29:77:bd:7d:32:99:77:b7:a6:ba:b1:34: ba:e9:22:b1:d8:c0:ba:39:c6:d3:39:91:d2:2f:d9:bc:f4:04: ce:4d:0d:b2:e4:f7:5c:99:2c:3b:c8:a5:4d:dc:42:3a:37:cf: 6b:89:b7:0c:4e:8d:5d:4b:6d:be:fa:f1:c3:90:2e:5a:0b:a2: be:ec:4e:73:ab:44:22:5a:2a:20:14:1f:f2:2e:ed:94:d8:cf: 97:13:2c:94:97:96:6f:eb:29:f6:c8:d2:ca:c2:90:8f:b7:2e: df:4f:16:04:f9:a7:03:a9:8b:7d:0c:ae:8a:50:4e:11:dd:1d: 60:48:d9:ee:6e:67:e6:73:a8:e2:fc:10:08:0b:00:5b:43:1d: d3:67:71:ac:1d:3f:8e:bb:69:a9:06:62:17:c7:f7:d5:3d:1f: 93:14:5e:98:1f:68:60:07:88:db:90:1e:bf:ae:6e:c4:2b:78: 0f:33:12:54:61:a7:49:00:5c:4c:7b:56:7e:8e:b8:0a:d9:65: db:34:ba:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwPNhoS4s0/6nX/yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI1MTIwMzAyMDAzMFoXDTI2MDMwMzAyMDAzMFowLzEtMCsGA1UEAxMk MDcxNTQzZjctMjgxNy00MzIyLWEyMDgtYmJlNjk5MGQxODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbCQMKD6wkY4OreDJXDnoQSlKlVxvPoz3jle ypWZ6pTSYz95Gidv70aDX+HQRAo8W9IiQMPS4cI0yVQlUlASmBBex8a4YANGJEqh h4PIuJ2flgdZx6phQDabxVH3TYCyCdqYoVLCssOuhYDyvcU+eV2eioJagPHK72as rkLhwIFVSTUL4Z49S7alh4nYWkfVL/Lzu/gy4LzBJ7lVTPfWJVV0X6w6u24STInk BHpXPzWO0hwdITZnwmArqbFr82iRDs7vmrDfj4FwYs/Xk24P1LjPZLj/lXkK4HEi eKP9GjnF9ivl5vlDpAJWQ5UvX1P3Pj4BKrCn6zvaeC61dCtkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKW59R09LCc+JfsA2pkp65WOfDUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvZDljNGQ5YTctMGI4MS0z NmIwLWI3NmItYTBjOWRlYzY0OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzMWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANjGwP1zL3pUulXp8U3y8Vif5MBBJroqBZZgS7Dvuov10EY58EpW1i0 Mb6GNo5q5UvqiCW2I2NA2xabESl3vX0ymXe3prqxNLrpIrHYwLo5xtM5kdIv2bz0 BM5NDbLk91yZLDvIpU3cQjo3z2uJtwxOjV1Lbb768cOQLloLor7sTnOrRCJaKiAU H/Iu7ZTYz5cTLJSXlm/rKfbI0srCkI+3Lt9PFgT5pwOpi30MropQThHdHWBI2e5u Z+ZzqOL8EAgLAFtDHdNncawdP467aakGYhfH99U9H5MUXpgfaGAHiNuQHr+ubsQr eA8zElRhp0kAXEx7Vn6OuArZZds0unw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:47 2025 by rpki-client