This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa File: 9d435f49-9dcd-3273-914a-89e66b8a1f88.roa (raw, json) Hash identifier: 2YxZLb/bEZCDOKmpB2eYu4z5WRHHE4/hYO8SHioE1nE= Subject key identifier: 3A:15:AA:F9:CC:A0:C0:7A:DE:68:51:A8:43:C3:6D:54:DB:61:FD:4A Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BEAEB3298E929956508A24ED8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 9009 IP address blocks: 172.111.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:32:98:e9:29:95:65:08:a2:4e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=8c79c52c-4553-431b-93dd-a76d65d51e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bf:72:e5:15:8c:e2:f4:de:a4:11:40:e9:5b: f0:b8:ef:5b:06:f1:57:ca:cc:48:38:67:a6:93:d4: b5:69:54:28:9a:9e:9c:bc:f1:39:5f:39:c8:c2:d7: ae:f9:34:dd:aa:de:f8:78:86:b0:01:3a:7e:e1:ac: 16:6c:c4:1e:e0:5a:18:3b:88:5e:d0:6a:d0:e6:6b: 6b:b2:1b:32:29:fd:9d:bc:74:6c:eb:0a:7d:cf:f4: e6:0f:bd:09:b9:cb:b1:56:db:a6:3e:d0:17:d2:60: 11:84:ae:d8:a2:e1:78:e7:93:29:50:05:7c:6f:bf: 41:4e:ac:56:4a:c5:01:5b:a8:24:2b:a1:2c:dd:54: 85:0d:40:b4:ff:d0:e2:c1:77:0a:3e:bc:c1:f2:cd: 6c:bb:ac:ef:c0:11:2e:df:7a:ef:63:66:5a:23:1e: cf:6b:a5:6e:67:37:10:fa:cb:1c:42:5b:90:39:fa: 4d:08:78:08:fb:10:22:48:81:94:20:2f:64:6e:05: cc:60:bb:5a:39:e3:44:0c:c1:72:f3:fe:b6:f1:ff: 90:95:f5:bb:2c:80:54:ce:c0:69:76:27:5f:2b:2d: f2:d9:79:00:1b:f3:63:ef:7f:bc:5c:0b:35:59:10: 69:fe:1c:e0:43:80:c8:a6:92:74:b5:61:76:dd:73: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:15:AA:F9:CC:A0:C0:7A:DE:68:51:A8:43:C3:6D:54:DB:61:FD:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9d435f49-9dcd-3273-914a-89e66b8a1f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 172.111.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:07:27:dd:cd:0a:9e:00:9b:09:76:a2:2d:51:78:4d:78:8d: b4:3c:bf:73:f9:5b:88:b0:a9:65:3c:60:9b:83:1c:b3:69:fe: 4c:0a:21:97:d1:74:16:d8:2b:5a:72:4d:03:e1:99:46:48:90: e5:2f:4d:3b:64:3b:7a:4a:49:a8:df:96:17:f5:66:2d:b7:0c: e9:a5:eb:81:14:05:1f:44:f9:34:73:23:e1:a8:e2:64:c9:22: 11:30:3b:3e:b6:ed:64:a6:6a:97:4f:ad:39:d6:44:dc:94:fc: 7d:5c:f6:67:72:11:80:47:92:cf:52:2a:76:ca:4d:9c:26:01: 14:e8:8c:61:b1:76:d4:da:b5:10:7a:a1:3c:4c:73:99:6d:52: 59:45:63:79:3e:a2:b7:28:33:84:57:d8:af:f2:9c:e6:7b:38: 81:86:23:6c:8d:b7:66:24:03:b6:ec:cb:d6:d0:98:4d:97:44: e4:e7:a9:25:40:54:31:dc:cd:48:9b:2f:15:fb:74:4b:bd:c5: 90:2a:8c:dd:44:e2:14:85:61:75:e0:f2:6d:2a:db:4c:59:f2: 01:04:04:a4:ce:14:a8:00:6c:45:8e:3b:32:42:04:0b:62:81: b7:f6:54:7a:2e:d3:19:dd:be:3b:dc:7c:52:05:07:50:24:24: f8:9c:78:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvq6zKY6SmVZQiiTtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk OGM3OWM1MmMtNDU1My00MzFiLTkzZGQtYTc2ZDY1ZDUxZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3r9y5RWM4vTepBFA6VvwuO9bBvFXysxIOGem k9S1aVQomp6cvPE5XznIwteu+TTdqt74eIawATp+4awWbMQe4FoYO4he0GrQ5mtr shsyKf2dvHRs6wp9z/TmD70JucuxVtumPtAX0mARhK7YouF455MpUAV8b79BTqxW SsUBW6gkK6Es3VSFDUC0/9DiwXcKPrzB8s1su6zvwBEu33rvY2ZaIx7Pa6VuZzcQ +sscQluQOfpNCHgI+xAiSIGUIC9kbgXMYLtaOeNEDMFy8/628f+QlfW7LIBUzsBp didfKy3y2XkAG/Nj73+8XAs1WRBp/hzgQ4DIppJ0tWF23XM+GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoVqvnMoMB63mhRqEPDbVTbYf1KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWQ0MzVmNDktOWRjZC0z MjczLTkxNGEtODllNjZiOGExZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4HJ93NCp4Amwl2oi1ReE14jbQ8v3P5W4iwqWU8YJuDHLNp/kwKIZfR dBbYK1pyTQPhmUZIkOUvTTtkO3pKSajflhf1Zi23DOml64EUBR9E+TRzI+Go4mTJ IhEwOz627WSmapdPrTnWRNyU/H1c9mdyEYBHks9SKnbKTZwmARTojGGxdtTatRB6 oTxMc5ltUllFY3k+orcoM4RX2K/ynOZ7OIGGI2yNt2YkA7bsy9bQmE2XROTnqSVA VDHczUibLxX7dEu9xZAqjN1E4hSFYXXg8m0q20xZ8gEEBKTOFKgAbEWOOzJCBAti gbf2VHou0xndvjvcfFIFB1AkJPiceEA= -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:29 2025 by rpki-client