This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa File: a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa (raw, json) Hash identifier: 4sPahdMbWi8SKr5mAzcMTu4Mfhw25FwfGnhB8wNYEP8= Subject key identifier: A7:08:6B:20:55:71:EC:E0:38:A1:0A:86:DF:DD:44:FA:1B:20:60:52 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584C02A6023CBF251202F2241A80 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa Signing time: Fri 28 Nov 2025 14:00:39 +0000 ROA not before: Fri 28 Nov 2025 14:00:39 +0000 ROA not after: Thu 26 Feb 2026 14:00:39 +0000 asID: 13536 IP address blocks: 208.20.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:02:a6:02:3c:bf:25:12:02:f2:24:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Nov 28 14:00:39 2025 GMT Not After : Feb 26 14:00:39 2026 GMT Subject: CN=fe9ea3f6-b78d-4e61-a28b-7768ecab9790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:07:6b:36:0e:d2:d8:c7:46:e6:82:52:5d:a6: de:b5:2a:75:2e:bf:f1:17:5b:83:02:f0:b4:31:79: 0b:77:49:13:d8:00:c7:8a:4b:61:bd:51:42:01:51: fe:e5:cf:6a:68:ad:3c:d1:f3:da:9f:7e:75:81:3c: 47:27:98:23:e9:f6:1b:85:d4:1d:db:8b:1c:c4:70: a8:99:2a:bf:50:24:2a:11:ed:04:f6:fe:a9:e3:1c: e9:13:a5:d1:12:84:2b:28:14:c3:17:f1:c1:85:3b: c5:0a:96:3a:4a:b8:73:04:00:50:69:56:fd:fd:6b: e6:ab:cb:d2:ec:0e:a2:d0:34:fd:2a:24:46:77:3e: 42:10:22:8e:7b:c3:ed:9b:f2:ff:6c:9b:96:af:2a: 65:fb:79:51:42:bb:e4:c9:54:40:e8:ed:76:49:b3: 25:8f:89:d3:7e:09:8d:48:bd:4e:ae:0d:75:c2:d1: 17:60:d8:3a:9c:45:a2:0e:cd:b3:7b:35:cc:b0:08: d2:b7:13:2e:8b:f1:7c:ef:ce:50:e9:cf:b3:f7:2a: c9:72:fe:94:ea:46:e5:cb:0d:04:f1:7e:1b:dc:dd: 81:92:0a:7b:3a:72:32:f0:91:95:16:27:40:e9:66: 90:23:f6:8c:51:a2:63:c7:f8:36:c0:96:6f:aa:89: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:08:6B:20:55:71:EC:E0:38:A1:0A:86:DF:DD:44:FA:1B:20:60:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/a80f3319-a1a9-3f01-8d00-4f5d083b6ff6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 208.20.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:dc:25:12:1e:28:4c:89:5d:64:b5:9e:04:7d:a1:fe:d0:f3: b7:b2:53:7b:30:a1:25:a5:93:ce:40:74:dd:fa:28:38:22:d7: 7f:d6:1f:80:63:50:be:eb:b2:d4:7c:2c:6d:88:34:81:d8:25: 6e:d7:c4:a1:be:67:a9:05:36:c3:57:42:37:7f:ee:3b:66:3a: 11:ca:40:96:30:16:54:fd:cb:60:02:b4:65:24:3b:b3:a4:f7: 96:4e:ba:c8:1f:fb:75:f8:71:1c:3b:f2:5d:e6:a1:26:c5:94: 44:04:fb:2e:42:e8:fb:5b:20:46:56:71:5a:f8:8c:61:41:53: c0:f9:50:1c:0c:68:78:e5:91:e1:8a:a4:ef:66:13:51:a2:74: c6:69:52:b6:0c:08:77:6c:1b:e5:a9:00:da:fc:ec:49:42:23: d4:40:e5:bf:25:ca:dd:69:56:f5:fb:b1:50:a7:69:f5:de:90: 37:43:7b:f2:d3:00:d2:a9:67:2f:c7:91:99:c3:cc:a0:24:59: 8b:9d:da:81:7d:f8:56:89:ca:ff:fa:97:7f:ad:6c:c8:f6:c8: bf:d1:49:c5:8c:ca:e9:7d:54:4d:cf:2e:3f:58:7c:0e:57:43: f8:af:63:30:52:60:f8:98:fe:3a:78:49:d0:f7:9a:69:82:50: 11:1d:df:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwCpgI8vyUSAvIkGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MTEyODE0MDAzOVoXDTI2MDIyNjE0MDAzOVowLzEtMCsGA1UEAxMk ZmU5ZWEzZjYtYjc4ZC00ZTYxLWEyOGItNzc2OGVjYWI5NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQdrNg7S2MdG5oJSXabetSp1Lr/xF1uDAvC0 MXkLd0kT2ADHikthvVFCAVH+5c9qaK080fPan351gTxHJ5gj6fYbhdQd24scxHCo mSq/UCQqEe0E9v6p4xzpE6XREoQrKBTDF/HBhTvFCpY6SrhzBABQaVb9/Wvmq8vS 7A6i0DT9KiRGdz5CECKOe8Ptm/L/bJuWrypl+3lRQrvkyVRA6O12SbMlj4nTfgmN SL1Org11wtEXYNg6nEWiDs2zezXMsAjStxMui/F8785Q6c+z9yrJcv6U6kblyw0E 8X4b3N2Bkgp7OnIy8JGVFidA6WaQI/aMUaJjx/g2wJZvqokwzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcIayBVcezgOKEKht/dRPobIGBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvYTgwZjMzMTktYTFhOS0z ZjAxLThkMDAtNGY1ZDA4M2I2ZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0BQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJncJRIeKEyJXWS1ngR9of7Q87eyU3swoSWlk85AdN36KDgi13/WH4Bj UL7rstR8LG2INIHYJW7XxKG+Z6kFNsNXQjd/7jtmOhHKQJYwFlT9y2ACtGUkO7Ok 95ZOusgf+3X4cRw78l3moSbFlEQE+y5C6PtbIEZWcVr4jGFBU8D5UBwMaHjlkeGK pO9mE1GidMZpUrYMCHdsG+WpANr87ElCI9RA5b8lyt1pVvX7sVCnafXekDdDe/LT ANKpZy/HkZnDzKAkWYud2oF9+FaJyv/6l3+tbMj2yL/RScWMyul9VE3PLj9YfA5X Q/ivYzBSYPiY/jp4SdD3mmmCUBEd31k= -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:14 2025 by rpki-client