This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa File: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (raw, json) Hash identifier: XLOhmU7SknP4icBKIDA58CWZ8pNG/YIDCqSDkUckElM= Subject key identifier: 49:CF:62:28:D4:A2:A7:D3:5D:53:C3:B4:FC:86:CF:37:A5:A8:9D:20 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584BD1CAFD373637C757C821FD00 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa Signing time: Tue 11 Nov 2025 02:00:30 +0000 ROA not before: Tue 11 Nov 2025 02:00:30 +0000 ROA not after: Mon 09 Feb 2026 02:00:30 +0000 asID: 7311 IP address blocks: 67.21.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d1:ca:fd:37:36:37:c7:57:c8:21:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Nov 11 02:00:30 2025 GMT Not After : Feb 9 02:00:30 2026 GMT Subject: CN=fe24f4f0-281c-4cb1-b29d-35ad7f555635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b6:97:9a:6f:7c:9b:b7:0b:1b:b9:9e:68:62: 07:37:70:67:79:01:07:97:c2:30:73:21:e3:7c:91: 82:05:e2:66:29:5d:ee:69:23:2a:08:2f:49:c5:21: 8c:e2:d8:7c:6f:9f:22:04:ba:0b:9f:c7:b8:b3:08: ce:01:8d:c0:e9:dd:c1:1e:50:01:07:e3:35:a1:f9: cb:d3:8d:5f:c8:0c:a5:29:ad:50:80:89:6b:91:d4: bb:c4:28:9c:6f:28:11:a7:d2:bb:24:f2:e5:4e:53: da:11:be:99:b2:a3:e2:68:ee:59:69:4f:7c:28:c5: ac:43:f4:5f:14:7a:84:81:04:33:f4:a2:b1:89:6b: 7c:96:b1:d5:f5:9b:ef:04:be:8c:87:65:73:c7:3d: 9e:5f:9f:e6:dd:8c:31:df:a7:37:f4:33:52:b5:18: 54:03:b4:15:d9:f8:c8:03:17:f3:c6:b1:71:d5:f2: a3:24:a8:fa:0e:4a:6c:aa:53:bd:cb:7f:24:db:42: ef:b2:c7:26:b7:f3:6e:54:0c:b7:de:80:6b:16:87: 54:63:5d:c2:09:e5:99:25:cf:e2:44:3e:59:2f:6b: 8a:ec:28:df:5e:5b:62:0b:41:71:33:0b:d3:89:5d: 4d:3c:17:7c:60:25:0d:03:0f:51:ed:2c:5b:a1:ca: 7b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CF:62:28:D4:A2:A7:D3:5D:53:C3:B4:FC:86:CF:37:A5:A8:9D:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:2e:33:d7:28:8c:e1:6a:95:5c:79:c6:9a:5b:fc:d8:75:ee: 8e:f0:2c:a9:87:05:a7:41:da:e1:ad:0a:4b:23:0f:ac:6f:f1: 1a:89:c1:07:27:ad:dc:09:08:66:cd:aa:27:44:b7:8c:92:a0: e7:e8:5f:f4:be:d3:51:fc:df:87:c0:e7:b3:87:40:e4:c1:c7: 2b:c3:a3:ee:00:ea:ab:aa:f7:56:0c:37:54:98:73:2e:d0:bf: bc:50:7c:c0:b5:3f:b3:2c:64:1d:4b:97:aa:5b:1b:a9:c2:2a: c8:de:10:69:da:1a:bc:a0:14:0a:51:f2:c4:ba:96:0a:3a:da: ce:80:33:a6:b5:51:a6:f6:88:02:54:8e:2b:bd:7f:5a:19:a6: d9:d2:d8:3e:c4:d7:78:0b:5b:e7:73:a6:9c:cc:b9:9f:c7:2a: b9:bf:5a:0d:1d:1d:51:c3:44:60:92:1b:cc:5a:93:0e:97:e1: 1a:53:a0:7a:bc:01:dc:e5:60:72:51:9b:8e:32:46:fb:84:30: b9:eb:88:8b:dc:f3:7b:15:74:be:17:e6:0e:63:fc:b9:0c:56: 07:8d:5d:36:e6:dc:ae:14:cb:b5:0a:f2:87:6c:88:12:15:8c: d4:2a:42:e9:5d:78:dc:09:c3:b8:a6:64:f1:77:43:0d:f3:66: a1:c0:b3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvRyv03NjfHV8gh/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MTExMTAyMDAzMFoXDTI2MDIwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZmUyNGY0ZjAtMjgxYy00Y2IxLWIyOWQtMzVhZDdmNTU1NjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbaXmm98m7cLG7meaGIHN3BneQEHl8IwcyHj fJGCBeJmKV3uaSMqCC9JxSGM4th8b58iBLoLn8e4swjOAY3A6d3BHlABB+M1ofnL 041fyAylKa1QgIlrkdS7xCicbygRp9K7JPLlTlPaEb6ZsqPiaO5ZaU98KMWsQ/Rf FHqEgQQz9KKxiWt8lrHV9ZvvBL6Mh2Vzxz2eX5/m3Ywx36c39DNStRhUA7QV2fjI AxfzxrFx1fKjJKj6DkpsqlO9y38k20Lvsscmt/NuVAy33oBrFodUY13CCeWZJc/i RD5ZL2uK7CjfXltiC0FxMwvTiV1NPBd8YCUNAw9R7Sxbocp7zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnPYijUoqfTXVPDtPyGzzelqJ0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvMGVjYjg3OWUtOThjOS0z ODk2LWJjNmQtZjgwMzBhNzE0ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQxWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFouM9cojOFqlVx5xppb/Nh17o7wLKmHBadB2uGtCksjD6xv8RqJwQcn rdwJCGbNqidEt4ySoOfoX/S+01H834fA57OHQOTBxyvDo+4A6quq91YMN1SYcy7Q v7xQfMC1P7MsZB1Ll6pbG6nCKsjeEGnaGrygFApR8sS6lgo62s6AM6a1Uab2iAJU jiu9f1oZptnS2D7E13gLW+dzppzMuZ/HKrm/Wg0dHVHDRGCSG8xakw6X4RpToHq8 AdzlYHJRm44yRvuEMLnriIvc83sVdL4X5g5j/LkMVgeNXTbm3K4Uy7UK8odsiBIV jNQqQuldeNwJw7imZPF3Qw3zZqHAs84= -----END CERTIFICATE-----Generated at Sun Dec 7 04:08:01 2025 by rpki-client