This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa File: d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa (raw, json) Hash identifier: Iv5UeKmgq6xtJxppnmZTVqbspFDHd/fZdBFvL/FS+nY= Subject key identifier: 17:43:57:26:5B:02:41:D1:73:F3:CE:EE:2E:79:87:79:7B:4A:75:AC Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584BCF00470744A7C15256BF0500 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 7311 IP address blocks: 96.125.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:47:07:44:a7:c1:52:56:bf:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=a363d360-137a-470f-aaa6-0bee0d029d69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:a8:fd:23:09:c7:ed:7a:7d:ea:9f:10:7a: e3:62:5e:2e:26:75:96:7c:d8:82:04:03:39:68:68: 99:2b:65:1e:9d:d4:14:99:33:04:26:f9:ae:88:3a: b3:dc:f1:31:cd:41:08:49:ef:a7:72:7c:63:4f:f3: ee:5f:d2:2c:d0:bd:ad:d5:c6:2a:4a:cd:62:0d:a0: a8:bd:fa:eb:59:0f:69:9b:6e:ba:5c:20:4b:af:8f: 7d:9c:98:f9:b3:b7:dc:7a:ec:af:81:e7:4a:73:53: 38:7d:ff:d2:8a:56:46:69:2c:c6:f0:70:08:31:9b: f3:f8:2b:5c:96:bb:06:6a:32:dd:c6:36:29:61:66: 30:e1:17:11:e0:15:36:41:48:da:b4:61:89:ee:43: 71:0c:37:06:7e:7b:77:4d:d5:a3:85:60:08:6c:f6: 36:0e:89:8d:53:f7:69:b2:55:90:89:9d:5b:71:fc: 37:54:17:30:53:aa:c9:c4:e8:4e:d3:80:dd:96:08: 2a:94:da:f2:1e:0a:b0:00:c1:17:66:3d:48:e2:b9: 09:c4:05:79:6c:a6:52:3a:20:5a:c7:b9:11:23:bc: 3b:66:1e:37:f6:e9:fa:b2:4a:5f:8e:dd:f7:ce:11: dc:49:c0:51:c5:10:d2:07:e7:78:e1:0c:a5:0d:6c: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:57:26:5B:02:41:D1:73:F3:CE:EE:2E:79:87:79:7B:4A:75:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d34eb0d8-fa0c-30d6-b322-c61af3045ad1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 96.125.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:fd:00:08:89:2a:f1:08:2e:e0:39:ab:92:7c:53:28:19:90: 84:6d:44:94:d9:10:2b:50:93:79:b9:b9:2e:ed:be:c1:89:a7: 9e:15:80:3b:60:db:40:66:42:16:63:1b:26:83:c2:37:44:a4: d9:db:99:fc:63:ee:b8:6c:f4:b6:84:5d:70:0c:ee:63:fe:44: a0:fd:39:51:18:9b:b3:ba:d7:bc:60:42:55:c3:70:57:1a:c1: b3:7d:cf:2c:f1:0a:b8:29:a9:d9:58:46:dd:37:25:e2:f5:c3: 37:91:97:34:51:a6:b3:46:c9:73:b1:2a:d2:64:77:80:1a:fa: 2e:35:87:57:2d:2e:d7:02:d5:12:aa:52:c9:a3:fd:87:76:25: 7a:5a:02:38:58:de:72:38:77:af:44:bd:38:69:14:f0:84:88: 3a:58:58:12:34:a9:6f:29:16:94:9a:35:4a:f7:3c:ba:6d:ae: 13:1d:d1:15:d9:37:12:3e:74:85:88:52:da:65:0d:54:d9:d7: 2c:6e:60:10:0e:a0:a2:94:81:2e:22:07:be:9c:11:07:15:f4: 5c:c2:d3:06:fa:a6:15:da:10:40:ed:fa:5f:d3:af:a3:21:a0: 22:d3:c0:89:54:66:dc:a9:ad:b7:13:79:6d:c3:93:3f:ed:bd: dc:a2:b3:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAEcHRKfBUla/BQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk YTM2M2QzNjAtMTM3YS00NzBmLWFhYTYtMGJlZTBkMDI5ZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApseo/SMJx+16feqfEHrjYl4uJnWWfNiCBAM5 aGiZK2UendQUmTMEJvmuiDqz3PExzUEISe+ncnxjT/PuX9Is0L2t1cYqSs1iDaCo vfrrWQ9pm266XCBLr499nJj5s7fceuyvgedKc1M4ff/SilZGaSzG8HAIMZvz+Ctc lrsGajLdxjYpYWYw4RcR4BU2QUjatGGJ7kNxDDcGfnt3TdWjhWAIbPY2DomNU/dp slWQiZ1bcfw3VBcwU6rJxOhO04DdlggqlNryHgqwAMEXZj1I4rkJxAV5bKZSOiBa x7kRI7w7Zh439un6skpfjt33zhHcScBRxRDSB+d44QylDWyBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdDVyZbAkHRc/PO7i55h3l7SnWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvZDM0ZWIwZDgtZmEwYy0z MGQ2LWIzMjItYzYxYWYzMDQ1YWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYH2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT9AAiJKvEILuA5q5J8UygZkIRtRJTZECtQk3m5uS7tvsGJp54VgDtg 20BmQhZjGyaDwjdEpNnbmfxj7rhs9LaEXXAM7mP+RKD9OVEYm7O617xgQlXDcFca wbN9zyzxCrgpqdlYRt03JeL1wzeRlzRRprNGyXOxKtJkd4Aa+i41h1ctLtcC1RKq Usmj/Yd2JXpaAjhY3nI4d69EvThpFPCEiDpYWBI0qW8pFpSaNUr3PLptrhMd0RXZ NxI+dIWIUtplDVTZ1yxuYBAOoKKUgS4iB76cEQcV9FzC0wb6phXaEEDt+l/Tr6Mh oCLTwIlUZtyprbcTeW3Dkz/tvdyis5Q= -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:56 2025 by rpki-client