This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa File: e84cb9af-b706-3cf4-8dd9-7e233014e201.roa (raw, json) Hash identifier: dPDvi3VWlXypuVYLr+Ofv4SWkx5WrN2VRtbugGLAklA= Subject key identifier: F9:BE:E7:A7:BE:95:6D:5A:EE:A5:D3:48:D8:49:B3:41:E7:5F:6A:B5 Certificate issuer: /CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Certificate serial: 010D0C9F4328584BCD9B25A3522104A3125FEF80 Authority key identifier: 5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 3653 IP address blocks: 209.71.32.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:25:a3:52:21:04:a3:12:5f:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c057d9a7-8f3f-4c97-9503-e2a936c27c7b Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=bbb6c946-3509-4445-b9c5-af688e1bfd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:89:e0:56:68:e5:5a:cf:21:60:8a:72:7d:7d: 32:4b:bb:e9:e7:ba:fc:9e:27:7c:f2:6b:fa:05:9c: 59:6f:46:ad:82:82:07:4f:fc:4b:34:d7:b8:e4:7a: f3:d5:67:c1:89:7d:d8:0c:bc:fe:6b:e9:98:ab:ac: 86:00:39:e6:b9:26:81:87:37:03:5c:5e:9e:9e:7f: 90:ff:2d:9d:50:8c:76:2d:da:53:df:9b:f9:f9:96: 32:8d:f7:98:1f:f3:11:16:b6:82:28:b3:26:5d:d8: 6b:8b:50:ff:b5:c2:f0:09:3e:2d:f1:b8:f3:c0:a1: 0e:61:e8:be:4a:be:ea:41:b0:04:7b:1a:1c:cb:5e: 43:dc:c3:cc:25:23:cc:e0:20:90:96:65:34:ce:4a: f4:74:bd:88:a6:e8:ab:14:aa:c8:0c:35:83:3a:73: e0:a2:c2:57:44:7b:5f:3a:62:fd:76:e3:6e:1f:d2: 62:0f:16:00:00:95:70:bb:23:d7:9d:b3:ba:7a:fb: 6e:0c:51:c5:56:b5:5a:8f:fe:c0:39:e1:00:da:9a: ca:ca:7f:2c:66:02:6a:41:24:d4:10:02:03:f1:25: 4e:b4:ac:05:0c:5d:83:d8:28:6e:48:c3:aa:dd:9f: e0:b0:dc:e7:02:34:93:d1:e2:15:0c:83:bd:28:df: 1d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BE:E7:A7:BE:95:6D:5A:EE:A5:D3:48:D8:49:B3:41:E7:5F:6A:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/e84cb9af-b706-3cf4-8dd9-7e233014e201.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.crl X509v3 Authority Key Identifier: keyid:5F:FC:6F:16:2F:93:08:ED:CA:F2:1D:62:E6:3C:59:3D:85:58:13:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c057d9a7-8f3f-4c97-9503-e2a936c27c7b.cer sbgp-ipAddrBlock: critical IPv4: 209.71.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:83:b2:b7:bf:35:40:a2:3f:9e:8c:52:77:ba:2e:a2:5b:dc: 1a:e4:6c:64:d8:77:5d:e0:1c:f4:17:91:ce:7d:d4:c4:bf:21: d2:cc:c7:19:bb:c8:50:e0:87:76:c1:bb:7e:90:b4:76:53:8c: ac:5d:01:64:8e:ab:9d:42:58:a9:88:90:28:b5:aa:dd:d4:ad: e4:93:ee:54:cc:b3:51:d1:55:9c:a4:52:87:37:4d:ab:3a:ae: e9:b5:a2:6b:b0:2d:14:fd:80:92:b5:07:41:bb:da:37:87:ae: e6:00:0b:66:13:a0:6e:a3:1f:2f:63:3f:c7:23:9a:72:b5:a5: 25:3e:5e:19:cb:df:da:07:d1:8f:54:49:21:b2:be:e3:f2:92: 15:27:9c:e7:84:5a:63:b4:3d:2e:6b:56:8c:90:31:27:6c:92: 45:e0:d8:93:12:c2:3c:8e:6f:fd:60:0c:d9:3f:ff:85:ba:1a: 33:db:f7:51:ab:04:9f:5f:a2:73:07:57:ca:ce:d2:eb:13:33: 89:8f:92:23:bc:77:d9:91:36:9e:cf:e3:58:e0:ab:8c:a5:58: 11:d9:61:28:54:f0:c6:cd:f1:29:dd:33:7c:e1:a2:8a:d0:76: 67:e6:b7:de:6b:f7:6e:2d:04:2d:d8:30:61:39:4c:dd:19:30: 37:ca:a3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmyWjUiEEoxJf74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA1N2Q5YTctOGYzZi00Yzk3LTk1MDMtZTJhOTM2YzI3 YzdiMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk YmJiNmM5NDYtMzUwOS00NDQ1LWI5YzUtYWY2ODhlMWJmZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIngVmjlWs8hYIpyfX0yS7vp57r8nid88mv6 BZxZb0atgoIHT/xLNNe45Hrz1WfBiX3YDLz+a+mYq6yGADnmuSaBhzcDXF6enn+Q /y2dUIx2LdpT35v5+ZYyjfeYH/MRFraCKLMmXdhri1D/tcLwCT4t8bjzwKEOYei+ Sr7qQbAEexocy15D3MPMJSPM4CCQlmU0zkr0dL2IpuirFKrIDDWDOnPgosJXRHtf OmL9duNuH9JiDxYAAJVwuyPXnbO6evtuDFHFVrVaj/7AOeEA2prKyn8sZgJqQSTU EAID8SVOtKwFDF2D2ChuSMOq3Z/gsNznAjST0eIVDIO9KN8dqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPm+56e+lW1a7qXTSNhJs0HnX2q1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3 ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5MzZjMjdjN2IvZTg0Y2I5YWYtYjcwNi0z Y2Y0LThkZDktN2UyMzMwMTRlMjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA1N2Q5YTctOGYzZi00Yzk3LTk1 MDMtZTJhOTM2YzI3YzdiL2MwNTdkOWE3LThmM2YtNGM5Ny05NTAzLWUyYTkzNmMy N2M3Yi5jcmwwHwYDVR0jBBgwFoAUX/xvFi+TCO3K8h1i5jxZPYVYE2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDU3ZDlhNy04ZjNmLTRjOTctOTUwMy1lMmE5 MzZjMjdjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0UcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACDsre/NUCiP56MUne6LqJb3BrkbGTYd13gHPQXkc591MS/IdLMxxm7 yFDgh3bBu36QtHZTjKxdAWSOq51CWKmIkCi1qt3UreST7lTMs1HRVZykUoc3Tas6 rum1omuwLRT9gJK1B0G72jeHruYAC2YToG6jHy9jP8cjmnK1pSU+XhnL39oH0Y9U SSGyvuPykhUnnOeEWmO0PS5rVoyQMSdskkXg2JMSwjyOb/1gDNk//4W6GjPb91Gr BJ9fonMHV8rO0usTM4mPkiO8d9mRNp7P41jgq4ylWBHZYShU8MbN8SndM3zhoorQ dmfmt95r924tBC3YMGE5TN0ZMDfKo3E= -----END CERTIFICATE-----Generated at Sat Dec 6 11:18:29 2025 by rpki-client