This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa File: 2817e773-8303-342f-9a40-2e654502699d.roa (raw, json) Hash identifier: lYaGgl/16haHqu1twFNWPk935wAFT0WZSk0TTT/d7l0= Subject key identifier: 9E:38:B6:2B:0A:77:32:F2:A3:AB:DE:81:91:B2:EE:6C:37:DE:B0:B3 Certificate issuer: /CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Certificate serial: 010D0C9F4328584C0570ADC787F2700614AAD900 Authority key identifier: 5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 3630 IP address blocks: 199.109.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:ad:c7:87:f2:70:06:14:aa:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b1f557b-efe2-42c3-a4e1-40728dc8387c Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=c17f0070-ced3-4ece-be7f-2b750aff7d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:9f:5e:b9:1a:29:ab:51:70:9e:31:47:d2: 33:c0:5b:79:5c:30:40:59:ed:93:7a:7d:82:9b:e5: cf:ba:1a:39:ad:ff:11:3b:d9:c7:4e:5e:73:46:14: e9:27:39:e7:12:1a:40:73:c5:62:07:f8:76:cb:b0: ef:08:8f:11:29:60:45:68:11:da:eb:9a:95:cd:0b: 9a:b9:08:b8:6b:3c:0b:20:1f:d1:1b:a6:db:87:a2: 70:c8:b7:cb:f1:b4:2c:5c:97:96:86:d8:e7:7e:1b: 2f:f5:41:af:74:be:0a:11:1b:55:5a:82:83:75:93: b7:29:e8:8d:e7:49:b2:66:4a:84:c0:7e:59:bc:44: 84:a4:8f:04:c3:e3:51:48:08:43:ef:92:8c:3f:6a: b5:3b:d6:c6:92:ea:66:8c:cf:ae:4f:b5:d8:64:fe: 26:28:cf:ae:6d:5c:75:9c:77:60:14:b5:9c:bf:49: ef:f0:0f:ef:ef:e6:0a:7a:0f:cf:07:1e:4e:63:3e: b7:db:45:54:49:6e:6f:55:47:44:9e:cf:32:82:70: c8:39:46:bc:d5:ca:97:07:f9:c0:e3:68:ee:28:d9: 38:a0:b8:93:f7:0e:8f:68:ae:24:70:3e:12:63:9f: db:8f:2b:92:9a:48:79:9d:06:fb:b7:5b:30:71:83: 21:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:38:B6:2B:0A:77:32:F2:A3:AB:DE:81:91:B2:EE:6C:37:DE:B0:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/2817e773-8303-342f-9a40-2e654502699d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c/6b1f557b-efe2-42c3-a4e1-40728dc8387c.crl X509v3 Authority Key Identifier: keyid:5E:E2:ED:51:D9:35:D5:0E:6A:51:60:D1:61:BC:DE:92:32:96:D7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b1f557b-efe2-42c3-a4e1-40728dc8387c.cer sbgp-ipAddrBlock: critical IPv4: 199.109.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:75:02:c8:f8:3b:ae:4a:62:02:5b:18:aa:6e:a2:7a:6d:28: 04:20:69:02:98:e7:1e:63:77:a2:7b:ad:c9:a5:e0:d2:4b:f4: fa:05:0d:47:73:4a:a4:55:91:88:de:67:12:be:a9:b6:16:61: fd:54:6a:c0:04:74:da:b2:42:06:70:ad:77:ee:a3:51:60:e6: f4:54:f0:41:df:0d:50:27:b5:e6:ad:f4:ec:dd:c0:18:6e:cb: 50:d7:e4:a0:42:41:5a:5c:1c:03:66:2c:cf:4c:c8:0b:5c:4e: 15:20:53:0a:56:72:ab:5c:79:88:e2:32:b6:4d:44:fd:5f:e8: 2a:16:3c:8b:24:57:43:17:fa:34:40:54:91:8b:14:33:0c:ea: 8a:ab:0d:2e:c2:16:f3:0f:5b:0d:2b:6e:1c:2e:ef:08:da:a2: 87:82:b7:15:36:99:91:a7:2c:4a:0e:28:07:bf:84:90:5d:a6: 33:5c:93:a1:d3:63:4e:18:04:9c:f8:37:12:c7:0f:a4:75:d7: 2a:02:e5:8c:fc:d9:ae:4e:b2:a3:d3:38:ef:e1:61:5e:e1:47: 45:b9:de:37:be:46:17:ee:97:0b:dc:42:51:4c:07:58:c9:11: 93:c7:c1:e9:d4:9a:f4:b4:86:2b:55:53:da:04:c0:8b:81:65: b1:ef:e1:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcK3Hh/JwBhSq2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmIxZjU1N2ItZWZlMi00MmMzLWE0ZTEtNDA3MjhkYzgz ODdjMB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk YzE3ZjAwNzAtY2VkMy00ZWNlLWJlN2YtMmI3NTBhZmY3ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCOfXrkaKatRcJ4xR9IzwFt5XDBAWe2Ten2C m+XPuho5rf8RO9nHTl5zRhTpJznnEhpAc8ViB/h2y7DvCI8RKWBFaBHa65qVzQua uQi4azwLIB/RG6bbh6JwyLfL8bQsXJeWhtjnfhsv9UGvdL4KERtVWoKDdZO3KeiN 50myZkqEwH5ZvESEpI8Ew+NRSAhD75KMP2q1O9bGkupmjM+uT7XYZP4mKM+ubVx1 nHdgFLWcv0nv8A/v7+YKeg/PBx5OYz6320VUSW5vVUdEns8ygnDIOUa81cqXB/nA 42juKNk4oLiT9w6PaK4kcD4SY5/bjyuSmkh5nQb7t1swcYMhzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ44tisKdzLyo6vegZGy7mw33rCzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YjFm NTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcyOGRjODM4N2MvMjgxN2U3NzMtODMwMy0z NDJmLTlhNDAtMmU2NTQ1MDI2OTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmIxZjU1N2ItZWZlMi00MmMzLWE0 ZTEtNDA3MjhkYzgzODdjLzZiMWY1NTdiLWVmZTItNDJjMy1hNGUxLTQwNzI4ZGM4 Mzg3Yy5jcmwwHwYDVR0jBBgwFoAUXuLtUdk11Q5qUWDRYbzekjKW12YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YjFmNTU3Yi1lZmUyLTQyYzMtYTRlMS00MDcy OGRjODM4N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx21jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ1Asj4O65KYgJbGKpuonptKAQgaQKY5x5jd6J7rcml4NJL9PoFDUdz SqRVkYjeZxK+qbYWYf1UasAEdNqyQgZwrXfuo1Fg5vRU8EHfDVAnteat9OzdwBhu y1DX5KBCQVpcHANmLM9MyAtcThUgUwpWcqtceYjiMrZNRP1f6CoWPIskV0MX+jRA VJGLFDMM6oqrDS7CFvMPWw0rbhwu7wjaooeCtxU2mZGnLEoOKAe/hJBdpjNck6HT Y04YBJz4NxLHD6R11yoC5Yz82a5OsqPTOO/hYV7hR0W53je+RhfulwvcQlFMB1jJ EZPHwenUmvS0hitVU9oEwIuBZbHv4bQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:55:31 2025 by rpki-client