This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa File: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (raw, json) Hash identifier: ofhqYb/finzm4Gx2B+dQzWWyFr5UGefuTkLJGHZd1Q8= Subject key identifier: 53:21:3B:01:2F:EF:F6:60:43:CF:0F:76:92:21:88:1A:2A:50:F9:B1 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584BEF1B373EEF210CF14FFC4C00 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa Signing time: Fri 21 Nov 2025 14:00:38 +0000 ROA not before: Fri 21 Nov 2025 14:00:38 +0000 ROA not after: Thu 19 Feb 2026 14:00:38 +0000 asID: 13849 IP address blocks: 173.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1b:37:3e:ef:21:0c:f1:4f:fc:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Nov 21 14:00:38 2025 GMT Not After : Feb 19 14:00:38 2026 GMT Subject: CN=31c764a8-fcd0-4f56-bace-7ad6aa45046b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:f1:35:32:a1:cf:e5:55:b6:f0:54:17:72: d1:52:d2:4d:37:ea:5e:45:35:76:9d:9d:d6:49:79: 68:ee:ce:f5:c6:de:88:c6:58:15:72:a1:eb:7a:cc: 92:fc:6d:c4:de:78:42:ff:e4:80:c4:79:a2:50:62: 6d:56:dc:ec:dc:10:5b:f2:40:df:28:be:b5:d2:d5: 04:4f:68:1d:c8:70:2c:8b:c9:50:d9:52:73:27:1f: 25:3c:94:6a:6a:0f:f2:0a:2f:ac:d6:78:77:5c:b6: 7f:e6:3f:5f:29:08:4d:00:6d:d0:57:88:dc:27:94: 18:20:14:e7:22:06:43:56:a7:c7:d0:fc:91:e9:af: c1:51:1b:a8:6c:ee:3a:e0:16:df:af:3f:9e:5a:a8: 62:de:b8:23:be:4e:60:06:18:42:66:8b:db:46:29: e1:3b:d2:60:bc:05:e4:bc:27:e6:81:c5:81:ab:ae: 3b:51:db:3c:e8:e4:0e:bc:9b:38:7a:f1:76:d9:d8: f8:ed:d8:96:72:d8:93:84:31:fd:d2:9e:dc:eb:8c: 6e:5a:f5:1b:7e:59:3a:72:c5:2e:64:c2:9d:92:8e: 17:40:54:a1:8c:96:21:c9:f7:ce:76:80:5d:2b:9c: 0a:88:c7:46:c4:5f:f0:1f:2a:c9:50:d2:32:bc:9a: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:21:3B:01:2F:EF:F6:60:43:CF:0F:76:92:21:88:1A:2A:50:F9:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 173.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:da:d9:e7:9e:e0:4a:30:b9:a5:1d:41:aa:a1:09:2c:49:8d: 10:f5:e1:e8:e9:47:f2:9b:5d:36:e6:b9:6e:f9:2d:23:b0:e5: a7:1a:40:77:69:36:04:4f:a5:ed:b6:41:da:76:d4:a1:a2:8a: b9:51:dc:57:1d:86:62:01:5a:8d:d8:bb:53:10:cc:cc:0b:35: 1b:a4:11:ee:c0:ea:7d:85:4d:78:85:b8:20:62:ee:1e:da:f6: 14:f0:36:0a:51:85:e7:2f:99:da:ce:64:37:02:3e:bd:68:87: b6:00:91:54:13:f0:75:7b:bd:55:73:24:d1:bd:d4:f5:b7:32: 53:01:45:af:8b:65:43:0d:a2:c5:46:c8:46:76:8c:69:55:02: 83:8f:56:8f:c8:c1:f2:4d:60:81:0f:d4:38:70:ee:0d:57:79: 1f:a7:44:44:7d:08:4e:67:24:bf:e8:ee:2d:a2:4a:b4:ee:a3: 33:05:ea:aa:a7:25:60:60:68:2e:ac:50:c3:9d:99:aa:9b:ea: cc:95:d0:cb:b6:17:0c:7c:ab:29:51:a0:36:24:cc:8d:cd:44: 66:8e:d3:9a:73:81:97:e7:b5:74:0d:2d:c9:2d:46:aa:b8:f4: cf:59:7f:08:1d:6d:2f:bc:03:2f:bd:98:be:88:c3:0c:50:e7: c8:11:0d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvGzc+7yEM8U/8TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MTEyMTE0MDAzOFoXDTI2MDIxOTE0MDAzOFowLzEtMCsGA1UEAxMk MzFjNzY0YTgtZmNkMC00ZjU2LWJhY2UtN2FkNmFhNDUwNDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF3xNTKhz+VVtvBUF3LRUtJNN+peRTV2nZ3W SXlo7s71xt6IxlgVcqHresyS/G3E3nhC/+SAxHmiUGJtVtzs3BBb8kDfKL610tUE T2gdyHAsi8lQ2VJzJx8lPJRqag/yCi+s1nh3XLZ/5j9fKQhNAG3QV4jcJ5QYIBTn IgZDVqfH0PyR6a/BURuobO464Bbfrz+eWqhi3rgjvk5gBhhCZovbRinhO9JgvAXk vCfmgcWBq647Uds86OQOvJs4evF22dj47diWctiThDH90p7c64xuWvUbflk6csUu ZMKdko4XQFShjJYhyffOdoBdK5wKiMdGxF/wHyrJUNIyvJoTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMhOwEv7/ZgQ88PdpIhiBoqUPmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvZmFlYWEzNWEtM2QwMy0z YzczLTliZWEtYTZlODk5MGFlYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHa2eee4EowuaUdQaqhCSxJjRD14ejpR/KbXTbmuW75LSOw5acaQHdp NgRPpe22Qdp21KGiirlR3FcdhmIBWo3Yu1MQzMwLNRukEe7A6n2FTXiFuCBi7h7a 9hTwNgpRhecvmdrOZDcCPr1oh7YAkVQT8HV7vVVzJNG91PW3MlMBRa+LZUMNosVG yEZ2jGlVAoOPVo/IwfJNYIEP1Dhw7g1XeR+nRER9CE5nJL/o7i2iSrTuozMF6qqn JWBgaC6sUMOdmaqb6syV0Mu2Fwx8qylRoDYkzI3NRGaO05pzgZfntXQNLcktRqq4 9M9ZfwgdbS+8Ay+9mL6IwwxQ58gRDcs= -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:28 2025 by rpki-client