This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa File: 678a1903-456b-3e46-aecb-edfc725741eb.roa (raw, json) Hash identifier: Nu3P+p02HiN4qk2Ym8vMrY2zGY9oVHkInOPxGriGhwE= Subject key identifier: F7:F4:F6:BB:52:BB:C9:E3:FD:07:FA:EF:0A:26:1E:98:BE:D3:44:F5 Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584BEC508504B357C75545E81BE0 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 88 IP address blocks: 128.112.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:85:04:b3:57:c7:55:45:e8:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=49ae2105-b5ea-4109-a1f5-3ce308fbc5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:fd:6e:2b:48:54:05:71:65:f0:44:c5:78: 2e:0c:37:65:e9:a3:3f:b3:6f:e3:9f:8c:fe:44:f7: f9:2e:b3:9d:9b:b0:44:2f:fe:14:73:33:57:51:8f: 75:89:12:83:7e:42:91:36:02:10:52:e7:a3:27:b2: 50:b6:ce:da:63:3b:29:87:28:19:62:94:39:90:90: ef:20:4a:f3:64:05:38:d0:65:cb:93:d8:15:06:b1: 15:f9:9d:0e:37:ec:2d:db:45:26:b7:18:a7:6c:83: f0:1e:1f:48:ef:40:04:15:f1:44:cf:7a:70:cf:16: ec:c1:d0:78:f4:cf:8d:93:6d:b5:da:19:e7:f5:a4: 1a:14:b8:6c:8f:1b:92:4f:46:83:c6:eb:3a:f5:a3: ff:f6:2c:8f:c2:1b:6c:34:e0:a7:8b:2d:46:ed:bb: 49:29:a5:71:76:32:02:4a:03:bd:bd:9b:ae:53:b1: c0:d6:cd:67:f6:6a:fb:9d:aa:d0:90:d8:81:ef:62: 80:3d:da:9b:80:c7:96:5d:05:77:3e:eb:5e:a7:29: 98:c3:b5:c9:94:ab:d7:4a:57:03:f2:15:2d:95:67: 85:f6:16:eb:65:f6:0f:e5:b0:ce:47:70:1d:87:a9: b8:94:7b:54:4a:bb:96:13:05:cf:d7:6f:ed:31:f8: a8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F4:F6:BB:52:BB:C9:E3:FD:07:FA:EF:0A:26:1E:98:BE:D3:44:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/678a1903-456b-3e46-aecb-edfc725741eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b3:4f:10:2d:34:46:39:fb:f6:52:5f:66:48:bb:05:88:68: de:a8:9e:05:62:ad:10:d3:d9:a7:93:39:65:bf:e7:2d:ef:67: 9f:a7:92:af:19:eb:bd:4d:e3:89:01:dd:7f:60:01:b7:2e:c2: 98:cd:81:c7:53:ef:07:3d:b8:5f:76:18:fe:64:91:05:91:db: 45:c6:aa:2b:3a:c1:1c:9c:da:4d:6b:c2:2f:8e:05:48:a4:a4: a0:f8:af:85:45:f1:69:0d:b1:bd:bc:8b:22:10:77:a5:92:ba: 57:dc:d4:6d:86:da:17:67:c1:88:01:ef:90:15:7f:0a:ea:c3: e0:fd:6c:44:65:2c:b7:0c:da:f8:db:57:15:55:03:12:d4:51: d8:aa:36:85:89:46:43:c7:b6:9d:7f:8d:bd:44:19:d8:03:4e: 35:53:16:3f:78:e8:48:ab:4f:86:3a:66:78:ea:7b:b2:64:98: 1a:81:ef:2b:d2:19:1e:8c:43:f1:59:30:37:09:24:9c:c9:17: 8a:ca:92:50:30:98:ca:f5:fd:80:a5:50:5b:52:bf:6e:53:7e: a3:62:77:06:02:5e:98:b8:f9:85:8f:f2:c3:0f:bd:4f:fb:c1: a7:58:ba:c3:a4:07:4e:bb:a8:16:b9:88:ce:f2:51:e3:28:45: 7d:64:90:0b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEvsUIUEs1fHVUXoG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk NDlhZTIxMDUtYjVlYS00MTA5LWExZjUtM2NlMzA4ZmJjNWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkn9bitIVAVxZfBExXguDDdl6aM/s2/jn4z+ RPf5LrOdm7BEL/4UczNXUY91iRKDfkKRNgIQUuejJ7JQts7aYzsphygZYpQ5kJDv IErzZAU40GXLk9gVBrEV+Z0ON+wt20UmtxinbIPwHh9I70AEFfFEz3pwzxbswdB4 9M+Nk2212hnn9aQaFLhsjxuST0aDxus69aP/9iyPwhtsNOCniy1G7btJKaVxdjIC SgO9vZuuU7HA1s1n9mr7narQkNiB72KAPdqbgMeWXQV3PutepymYw7XJlKvXSlcD 8hUtlWeF9hbrZfYP5bDOR3Adh6m4lHtUSruWEwXP12/tMfiodwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPf09rtSu8nj/Qf67womHpi+00T1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvNjc4YTE5MDMtNDU2Yi0z ZTQ2LWFlY2ItZWRmYzcyNTc0MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgHAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAErNPEC00Rjn79lJfZki7BYho3qieBWKtENPZp5M5Zb/nLe9nn6eSrxnr vU3jiQHdf2ABty7CmM2Bx1PvBz24X3YY/mSRBZHbRcaqKzrBHJzaTWvCL44FSKSk oPivhUXxaQ2xvbyLIhB3pZK6V9zUbYbaF2fBiAHvkBV/CurD4P1sRGUstwza+NtX FVUDEtRR2Ko2hYlGQ8e2nX+NvUQZ2ANONVMWP3joSKtPhjpmeOp7smSYGoHvK9IZ HoxD8VkwNwkknMkXisqSUDCYyvX9gKVQW1K/blN+o2J3BgJemLj5hY/yww+9T/vB p1i6w6QHTruoFrmIzvJR4yhFfWSQCw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:15:36 2025 by rpki-client