This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa File: 679e7dc6-943b-3b84-805b-72be1c2428d2.roa (raw, json) Hash identifier: 1NCCLYjKxuz9mC2V8KwpyJJ5/48cvR6TGlyUpoDIs0I= Subject key identifier: 30:6B:3E:D9:37:F1:96:1A:82:2E:B6:9C:23:F5:D3:1D:EC:A7:6D:56 Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584BD1CAFEBD847DEC0F0DBF8180 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 36236 IP address blocks: 64.68.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:fe:bd:84:7d:ec:0f:0d:bf:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=21075520-88d7-499b-9796-290bc2a1da18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:de:db:fe:7f:77:73:4e:70:ec:8b:4e:3d:74: 48:ac:8b:14:75:ae:d1:87:07:0c:9e:59:4f:45:68: bc:02:d0:90:c2:57:ef:71:32:8b:e5:ed:25:43:d1: 58:13:38:ef:07:eb:7f:24:37:a8:63:d1:58:7a:54: dd:e1:ff:69:16:98:cc:fd:5c:c5:29:81:cf:33:85: 27:09:33:92:af:ce:3b:e3:40:8b:c0:4d:2d:c5:8d: 88:18:50:6f:93:64:d6:c0:e1:1a:27:03:b8:b3:25: 56:ef:b8:df:bc:8f:1c:8f:bd:ad:81:5b:59:f2:e4: 48:79:29:26:0b:7a:b9:04:06:33:81:d1:a5:ee:b8: c2:d4:7d:28:ea:2c:34:1e:63:da:60:9c:d8:75:16: cd:09:00:28:34:71:26:96:a8:8d:06:10:13:4f:5a: fd:4e:4b:6e:8e:f5:9a:1e:63:37:53:ee:a7:74:c8: 48:e1:c5:26:bf:86:cc:56:91:df:df:80:82:c3:42: 7d:ef:72:0d:5e:fc:be:67:4d:5c:6c:06:9b:f3:fe: 21:5f:c7:f8:4b:6e:2f:c1:db:ce:a9:88:f3:82:2e: 65:57:96:df:51:27:95:d1:94:24:37:08:f8:3f:88: a4:64:21:74:af:95:28:c9:cb:a8:8f:1b:c2:d9:58: b3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6B:3E:D9:37:F1:96:1A:82:2E:B6:9C:23:F5:D3:1D:EC:A7:6D:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/679e7dc6-943b-3b84-805b-72be1c2428d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:ea:9b:be:87:33:a6:8f:28:84:b5:57:3d:2d:83:b7:c9:06: ae:c4:75:99:b0:f3:9d:b1:e9:b6:20:40:5f:ee:61:55:9f:53: 69:74:2d:e9:34:2f:6c:19:0e:a2:45:6a:61:26:ee:5e:c3:a8: 5f:45:e5:49:01:5d:a7:3e:fb:b6:82:1d:4d:98:bc:e2:4b:cb: db:75:a4:ee:0c:a6:4d:81:51:66:6c:00:98:0f:80:11:42:bf: 89:09:3d:37:8f:7c:da:94:c0:c8:9e:20:ff:98:fe:8b:49:a3: 62:82:6a:01:d9:90:be:e5:8a:98:ce:26:e6:7c:9c:9c:a3:43: b9:e6:e7:b8:68:ab:73:81:aa:b8:b5:39:ff:33:01:0f:98:24: 5a:c2:f9:84:fc:6d:25:5f:aa:3f:7b:7c:a4:09:e5:fe:0e:6d: 5e:f2:7d:a8:b9:c9:b1:26:f5:d9:9d:8c:42:a0:0e:e7:2b:5d: bf:b2:12:c8:be:99:83:b9:8b:ab:4c:e6:7f:5c:34:b0:9b:d3: ef:4c:9a:67:9f:d2:66:c6:c1:9a:b5:54:42:13:fd:9e:bf:13: 55:29:b2:8e:0b:02:06:18:28:57:be:e9:88:f2:a0:f0:f2:ad: e1:80:54:13:79:42:48:7c:a0:9f:bb:bb:eb:f8:8e:68:c9:b5: 1d:e7:df:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyv69hH3sDw2/gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk MjEwNzU1MjAtODhkNy00OTliLTk3OTYtMjkwYmMyYTFkYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN7b/n93c05w7ItOPXRIrIsUda7RhwcMnllP RWi8AtCQwlfvcTKL5e0lQ9FYEzjvB+t/JDeoY9FYelTd4f9pFpjM/VzFKYHPM4Un CTOSr84740CLwE0txY2IGFBvk2TWwOEaJwO4syVW77jfvI8cj72tgVtZ8uRIeSkm C3q5BAYzgdGl7rjC1H0o6iw0HmPaYJzYdRbNCQAoNHEmlqiNBhATT1r9TktujvWa HmM3U+6ndMhI4cUmv4bMVpHf34CCw0J973INXvy+Z01cbAab8/4hX8f4S24vwdvO qYjzgi5lV5bfUSeV0ZQkNwj4P4ikZCF0r5UoycuojxvC2VizgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBrPtk38ZYagi62nCP10x3sp21WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNjc5ZTdkYzYtOTQzYi0z Yjg0LTgwNWItNzJiZTFjMjQyOGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQETEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3qm76HM6aPKIS1Vz0tg7fJBq7EdZmw852x6bYgQF/uYVWfU2l0Lek0 L2wZDqJFamEm7l7DqF9F5UkBXac++7aCHU2YvOJLy9t1pO4Mpk2BUWZsAJgPgBFC v4kJPTePfNqUwMieIP+Y/otJo2KCagHZkL7lipjOJuZ8nJyjQ7nm57hoq3OBqri1 Of8zAQ+YJFrC+YT8bSVfqj97fKQJ5f4ObV7yfai5ybEm9dmdjEKgDucrXb+yEsi+ mYO5i6tM5n9cNLCb0+9Mmmef0mbGwZq1VEIT/Z6/E1Upso4LAgYYKFe+6YjyoPDy reGAVBN5Qkh8oJ+7u+v4jmjJtR3n30I= -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:29 2025 by rpki-client