This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa File: fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa (raw, json) Hash identifier: mFH6jEeKUqriGzqGO2UO+ZEw4Lj+SijvU6YJDp3nja0= Subject key identifier: 61:7B:B3:A1:3A:65:F4:8C:DB:A0:87:24:72:B4:DD:F8:22:59:A8:7E Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584C0140CBF1262F1F0A797E7780 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa Signing time: Fri 28 Nov 2025 02:00:30 +0000 ROA not before: Fri 28 Nov 2025 02:00:30 +0000 ROA not after: Thu 26 Feb 2026 02:00:30 +0000 asID: 22652 IP address blocks: 173.231.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:40:cb:f1:26:2f:1f:0a:79:7e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Nov 28 02:00:30 2025 GMT Not After : Feb 26 02:00:30 2026 GMT Subject: CN=294ea77a-9935-40f5-a35c-25deaa6305a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9e:41:a6:73:d1:e3:96:51:bf:79:15:be:dd: 9c:60:40:f0:2c:ec:82:b4:87:60:dd:d9:84:f8:8b: 56:37:31:67:e9:72:82:3a:3b:a9:79:5d:e6:20:06: 8a:38:96:1f:b9:ab:73:e5:6e:f9:a1:f2:bc:d2:1f: cb:97:e1:17:ba:70:2e:db:5b:af:2d:0a:90:a7:8e: bd:34:41:73:4f:30:dd:bf:f9:a3:46:92:70:d2:03: 65:0d:d3:50:d8:4b:d6:13:29:72:34:a1:e4:64:7b: 89:1d:87:2f:d8:8f:8e:59:af:c9:35:89:04:de:7b: 0f:db:94:fc:75:af:5c:ae:8c:09:31:a0:0b:c0:16: 70:bf:93:34:d0:ea:bd:0a:ec:38:ae:c0:c4:eb:59: 79:33:10:bb:68:4b:b6:c4:a0:b1:0d:49:e4:ab:9c: 39:3c:cd:af:6d:c1:74:c3:0c:a5:57:39:5c:40:89: 2f:a1:97:a6:b6:bb:9d:f5:d9:0a:08:dd:49:72:40: e6:ec:75:2f:22:6c:23:7e:60:01:89:c9:44:2f:66: 62:cc:19:24:2f:0b:e1:e6:d8:21:97:68:f9:72:c7: 10:cc:5e:e3:cc:57:59:cb:e5:e0:55:62:aa:a3:f9: 20:1c:a5:6a:58:f2:11:c2:0a:02:3c:88:c2:7d:58: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7B:B3:A1:3A:65:F4:8C:DB:A0:87:24:72:B4:DD:F8:22:59:A8:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/fa448a37-0a21-363e-bef3-2f9ee7dc5630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:35:2f:e4:fb:37:bf:51:ca:e3:1f:5d:e5:28:25:fc:98:8d: 9d:c3:f9:83:63:3d:73:e2:bf:55:b2:dc:66:3b:d1:66:b2:22: a2:b0:2e:45:1e:01:7f:d3:36:d2:05:c0:bb:57:3b:49:0f:ef: 54:e6:d5:72:d8:4e:1c:8d:22:31:73:f0:fd:fe:72:1d:0c:f6: ed:89:7a:8e:28:0d:4c:9f:1b:4a:bd:0d:9a:d7:20:e9:70:4a: 88:b9:5b:02:e3:85:5a:76:af:f0:d7:aa:03:b9:ab:3d:73:36: 8f:68:6e:20:59:ef:97:7d:09:e6:9a:a9:69:04:39:36:8d:1d: fd:7e:cd:21:02:98:e7:06:a7:a9:fc:c8:fc:df:a3:c3:13:36: b6:69:9c:d1:24:5d:67:29:86:37:4b:b5:3c:ff:ae:0c:71:61: 14:64:b9:70:bc:db:7a:f4:ce:08:6a:8d:01:a8:52:28:d2:05: a0:98:4b:7a:69:92:35:c0:52:ca:2b:d3:ff:be:b2:4a:af:f3: c4:f7:62:61:86:c0:25:fe:4f:f7:59:16:03:4f:40:f5:a3:dc: d7:a7:65:b6:97:e5:4b:fc:d4:ff:45:8d:5d:52:c0:ba:44:4f: a2:f7:2a:f4:14:cb:ec:4c:53:92:8c:7d:61:c0:01:5a:46:52: cf:ad:6f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwBQMvxJi8fCnl+d4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI1MTEyODAyMDAzMFoXDTI2MDIyNjAyMDAzMFowLzEtMCsGA1UEAxMk Mjk0ZWE3N2EtOTkzNS00MGY1LWEzNWMtMjVkZWFhNjMwNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ5BpnPR45ZRv3kVvt2cYEDwLOyCtIdg3dmE +ItWNzFn6XKCOjupeV3mIAaKOJYfuatz5W75ofK80h/Ll+EXunAu21uvLQqQp469 NEFzTzDdv/mjRpJw0gNlDdNQ2EvWEylyNKHkZHuJHYcv2I+OWa/JNYkE3nsP25T8 da9crowJMaALwBZwv5M00Oq9Cuw4rsDE61l5MxC7aEu2xKCxDUnkq5w5PM2vbcF0 wwylVzlcQIkvoZemtrud9dkKCN1JckDm7HUvImwjfmABiclEL2ZizBkkLwvh5tgh l2j5cscQzF7jzFdZy+XgVWKqo/kgHKVqWPIRwgoCPIjCfVgpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF7s6E6ZfSM26CHJHK03fgiWah+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZmE0NDhhMzctMGEyMS0z NjNlLWJlZjMtMmY5ZWU3ZGM1NjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAredsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI41L+T7N79RyuMfXeUoJfyYjZ3D+YNjPXPiv1Wy3GY70WayIqKwLkUe AX/TNtIFwLtXO0kP71Tm1XLYThyNIjFz8P3+ch0M9u2Jeo4oDUyfG0q9DZrXIOlw Soi5WwLjhVp2r/DXqgO5qz1zNo9obiBZ75d9CeaaqWkEOTaNHf1+zSECmOcGp6n8 yPzfo8MTNrZpnNEkXWcphjdLtTz/rgxxYRRkuXC823r0zghqjQGoUijSBaCYS3pp kjXAUsor0/++skqv88T3YmGGwCX+T/dZFgNPQPWj3NenZbaX5Uv81P9FjV1SwLpE T6L3KvQUy+xMU5KMfWHAAVpGUs+tb6s= -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:13 2025 by rpki-client