This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa File: 2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa (raw, json) Hash identifier: mQzcZhFEYsOBnWtIkSuisQL1rgJ5J3cXsiYKWfOSSqw= Subject key identifier: FF:9A:EF:9B:83:6C:B7:F0:30:A4:CC:41:DA:A0:C5:B6:2B:2A:18:84 Certificate issuer: /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Certificate serial: 010D0C9F4328584BCD9B0FB54F9D312773068780 Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 26223 IP address blocks: 162.248.128.0/23 maxlen: 24 192.64.2.0/23 maxlen: 24 192.187.62.0/23 maxlen: 24 192.243.36.0/24 maxlen: 24 199.19.112.0/21 maxlen: 24 199.66.104.0/22 maxlen: 24 199.192.124.0/22 maxlen: 24 204.8.60.0/22 maxlen: 24 204.8.68.0/22 maxlen: 24 207.183.160.0/19 maxlen: 24 216.21.208.0/22 maxlen: 24 216.128.224.0/20 maxlen: 24 217.147.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:0f:b5:4f:9d:31:27:73:06:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=5bda2db4-a65c-468f-88ca-a8458f70788e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:5d:32:98:ee:ff:ea:cf:fe:fb:82:68:60: 65:d3:e0:3a:73:ee:39:ba:b3:e4:cc:78:0b:3f:fe: 62:b4:f2:64:ad:85:a4:a0:25:f9:9d:08:74:58:e3: 47:2e:9b:82:be:3d:af:f6:e1:2e:82:ae:03:07:a2: bc:db:55:2d:d7:16:12:e1:fe:07:b4:16:ee:ed:b3: da:90:ef:8a:79:29:e0:98:1c:1e:4b:9c:08:b2:86: 62:e0:d7:c2:eb:cf:26:b6:ba:8c:d2:82:3d:1c:74: 1b:56:7c:55:3a:e2:0a:1e:a0:5b:76:4e:58:3f:9a: 46:e8:94:22:92:77:44:e3:6f:16:26:46:92:43:45: 3d:4b:d4:e3:7c:ed:3d:0c:3d:30:a5:63:63:1d:42: 5f:6d:f2:c3:cf:da:f6:b8:8f:fa:b6:44:f2:cf:b9: 11:3d:0f:80:83:6f:3a:fb:39:3b:ef:ae:da:ae:49: 28:1b:1e:1f:f8:f7:ee:e1:af:d3:c4:07:2b:00:8a: 0a:0b:e3:69:f9:ad:e7:a2:c5:c3:46:35:76:f9:91: c5:43:68:71:46:f7:e3:c1:58:dd:d3:53:a6:93:12: 0e:a9:6a:d1:13:e5:39:e5:53:7b:e5:61:88:89:02: 8e:b5:98:6e:a1:12:7a:33:09:36:3c:f2:c7:40:6f: 0f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:EF:9B:83:6C:B7:F0:30:A4:CC:41:DA:A0:C5:B6:2B:2A:18:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/2afdd2c8-d609-3c63-98f8-0cfdd0d1d5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl X509v3 Authority Key Identifier: keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer sbgp-ipAddrBlock: critical IPv4: 162.248.128.0/23 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:36:a6:d4:15:ba:2e:d6:4f:dc:3f:5e:80:c9:ac:e9:36:46: b9:39:8c:19:db:28:5c:89:7c:ca:c1:50:5e:1f:5c:8f:ce:16: 50:12:8f:91:e6:bc:e8:b3:66:f1:25:b9:69:a6:1c:5b:2e:98: 14:47:03:26:8e:ef:a6:a3:6b:91:c4:b0:06:47:60:dc:52:11: b2:8d:f6:3b:0c:dc:2e:1a:b5:1c:66:1c:e9:6e:62:89:95:2b: f8:75:e3:e3:3c:2a:8b:f6:e6:23:0c:ad:51:2b:65:45:fb:1a: 68:ff:f6:ce:ab:1b:cf:b7:6c:a8:38:f0:54:eb:28:e0:d9:d2: 80:94:cc:66:82:be:00:71:19:3e:44:55:a8:69:51:a9:40:77: d0:3e:d7:41:d1:03:1c:7a:58:81:83:24:99:bb:ee:2a:e5:72: ac:cd:a1:60:d6:c9:c4:9d:c8:86:cc:9d:8f:67:84:0d:1a:73: 18:a1:ea:b8:0f:6b:38:f6:be:6a:ca:ba:8b:09:d6:90:37:59: 06:a8:c4:9e:52:26:05:4d:22:c9:03:47:71:38:9d:e8:11:2a: 71:bf:d4:5c:57:15:47:f9:b6:61:15:78:aa:20:f2:d6:11:de: bf:28:a3:eb:96:b4:14:6a:50:3b:c6:9f:cc:10:fb:2a:2d:1b: 13:ff:64:02 -----BEGIN CERTIFICATE----- MIIGizCCBXOgAwIBAgIUAQ0Mn0MoWEvNmw+1T50xJ3MGh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm ODJlMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk NWJkYTJkYjQtYTY1Yy00NjhmLTg4Y2EtYTg0NThmNzA3ODhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbhdMpju/+rP/vuCaGBl0+A6c+45urPkzHgL P/5itPJkrYWkoCX5nQh0WONHLpuCvj2v9uEugq4DB6K821Ut1xYS4f4HtBbu7bPa kO+KeSngmBweS5wIsoZi4NfC688mtrqM0oI9HHQbVnxVOuIKHqBbdk5YP5pG6JQi kndE428WJkaSQ0U9S9TjfO09DD0wpWNjHUJfbfLDz9r2uI/6tkTyz7kRPQ+Ag286 +zk7767arkkoGx4f+Pfu4a/TxAcrAIoKC+Np+a3nosXDRjV2+ZHFQ2hxRvfjwVjd 01OmkxIOqWrRE+U55VN75WGIiQKOtZhuoRJ6Mwk2PPLHQG8PAwIDAQABo4IDnTCC A5kwHQYDVR0OBBYEFP+a75uDbLfwMKTMQdqgxbYrKhiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMmFmZGQyYzgtZDYwOS0z YzYzLTk4ZjgtMGNmZGQwZDFkNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2 MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw ZWNmMmY4MmUuY2VyMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBoviAAwQB wEACAwQBwLs+AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQF z7egAwQC2BXQAwQE2IDgAwQD2ZO4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHg2ptQVui7WT9w/XoDJrOk2 Rrk5jBnbKFyJfMrBUF4fXI/OFlASj5HmvOizZvEluWmmHFsumBRHAyaO76aja5HE sAZHYNxSEbKN9jsM3C4atRxmHOluYomVK/h14+M8Kov25iMMrVErZUX7Gmj/9s6r G8+3bKg48FTrKODZ0oCUzGaCvgBxGT5EVahpUalAd9A+10HRAxx6WIGDJJm77irl cqzNoWDWycSdyIbMnY9nhA0acxih6rgPazj2vmrKuosJ1pA3WQaoxJ5SJgVNIskD R3E4negRKnG/1FxXFUf5tmEVeKog8tYR3r8oo+uWtBRqUDvGn8wQ+yotGxP/ZAI= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:09 2025 by rpki-client