This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json) Hash identifier: hFHTZ4tG2Tc6iwGai3E2ddqLlnRFfmBHNbIqhUBLOC8= Subject key identifier: 0A:0A:21:FC:CA:2A:85:10:D7:0E:D1:CF:2B:A6:A8:66:40:28:66:0E Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584BEC50851FCD621BA037433D28 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 88 IP address blocks: 128.112.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:85:1f:cd:62:1b:a0:37:43:3d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=505cb23f-bb53-42b6-9bd1-66ca6240ed67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f0:7d:73:e4:6d:b2:9c:b6:86:0c:88:a3:c5: 1e:fb:a5:ef:1a:16:c4:63:ed:4b:dd:14:8e:19:6b: 10:ec:e7:59:d3:46:d2:b6:83:e1:45:00:0c:3a:ed: 8d:79:d3:8a:2d:66:8b:93:41:7a:eb:47:46:cd:8a: 61:b2:86:0f:8f:ec:56:ac:cf:1f:66:45:6b:5a:35: e2:db:04:28:98:43:15:88:12:58:f9:83:52:ce:5c: 99:23:0e:4e:60:ce:ed:ef:eb:9d:85:32:37:8a:75: 41:8c:c1:98:48:bb:1d:6f:52:ca:ec:52:05:7c:66: be:c0:75:e9:5e:d0:77:d2:3e:a8:f1:09:d6:e8:2a: 59:34:d5:32:b5:91:e9:15:da:88:4a:83:de:64:03: d1:03:18:c2:3c:59:83:a1:c8:0b:37:c3:6e:1f:28: 8d:0c:36:de:74:25:bc:9e:53:64:fc:e6:67:35:11: 34:f9:7b:e4:6a:fd:ea:cb:35:60:05:64:3d:a8:09: 77:45:65:2a:ee:d5:e1:c4:2b:62:2f:03:69:6e:6b: 63:70:c5:0a:b2:28:6b:6a:b4:ab:f9:11:69:2e:c3: 8b:15:96:3c:b0:28:b1:5e:e6:2e:b6:08:4a:fd:ba: bf:fa:53:1c:e9:b0:60:47:a4:ee:e4:a3:64:21:ff: f0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0A:21:FC:CA:2A:85:10:D7:0E:D1:CF:2B:A6:A8:66:40:28:66:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 128.112.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:27:0f:80:d3:57:45:0c:36:9c:81:ce:1b:25:c0:e5:d1:0b: 18:f2:fa:ea:05:ef:3b:f6:7c:6f:39:bb:e8:e3:71:eb:22:7d: e3:bd:a2:1a:a0:5c:d5:91:86:48:84:58:b5:48:ca:80:91:f7: 4e:f8:8c:9f:2a:63:94:aa:52:62:68:af:28:11:0f:47:27:3b: 91:72:d1:49:10:d4:37:ef:36:20:4d:70:80:80:52:80:6c:c4: 9f:7e:00:fd:d7:76:31:32:43:0e:c6:50:0a:49:39:58:ea:b9: c6:5e:1f:3e:31:3d:7a:18:b3:f6:6f:21:0e:91:3c:40:2d:4f: 61:8e:11:d4:b8:37:dd:a1:c7:b0:16:2f:d5:40:c6:55:c8:ec: a4:aa:a9:d6:1c:36:69:e0:e9:82:e2:38:99:8f:5f:54:f8:ac: 57:25:b1:0f:11:49:ee:fd:b8:7a:15:ba:74:20:90:ba:5c:b6: 58:ba:60:90:c2:57:a8:78:1f:a8:88:1e:64:4c:80:f1:51:30: 54:a4:30:e9:ab:f0:49:ce:38:0f:2d:cd:f0:47:d7:b1:4b:57: 58:e5:e2:3e:86:4b:1a:0c:cd:ac:96:47:87:07:c5:82:63:e3: 36:9d:b0:7f:d4:70:eb:c3:75:23:10:9e:e9:93:03:b7:25:f8: ca:d3:de:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUIUfzWIboDdDPSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk NTA1Y2IyM2YtYmI1My00MmI2LTliZDEtNjZjYTYyNDBlZDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvB9c+Rtspy2hgyIo8Ue+6XvGhbEY+1L3RSO GWsQ7OdZ00bStoPhRQAMOu2NedOKLWaLk0F660dGzYphsoYPj+xWrM8fZkVrWjXi 2wQomEMViBJY+YNSzlyZIw5OYM7t7+udhTI3inVBjMGYSLsdb1LK7FIFfGa+wHXp XtB30j6o8QnW6CpZNNUytZHpFdqISoPeZAPRAxjCPFmDocgLN8NuHyiNDDbedCW8 nlNk/OZnNRE0+Xvkav3qyzVgBWQ9qAl3RWUq7tXhxCtiLwNpbmtjcMUKsihrarSr +RFpLsOLFZY8sCixXuYutghK/bq/+lMc6bBgR6Tu5KNkIf/wtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoKIfzKKoUQ1w7RzyumqGZAKGYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvOTAwZjU0NTQtNWE0Yi0z YzcyLWE5ZTYtMDlmMTk2MzBkYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgHACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABknD4DTV0UMNpyBzhslwOXRCxjy+uoF7zv2fG85u+jjcesifeO9ohqg XNWRhkiEWLVIyoCR9074jJ8qY5SqUmJorygRD0cnO5Fy0UkQ1DfvNiBNcICAUoBs xJ9+AP3XdjEyQw7GUApJOVjqucZeHz4xPXoYs/ZvIQ6RPEAtT2GOEdS4N92hx7AW L9VAxlXI7KSqqdYcNmng6YLiOJmPX1T4rFclsQ8RSe79uHoVunQgkLpctli6YJDC V6h4H6iIHmRMgPFRMFSkMOmr8EnOOA8tzfBH17FLV1jl4j6GSxoMzayWR4cHxYJj 4zadsH/UcOvDdSMQnumTA7cl+MrT3jg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:13:16 2025 by rpki-client