This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa File: c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa (raw, json) Hash identifier: NQmrHQedOZli+SCu90c4iu0077ipMbTBpU+czJtoAR0= Subject key identifier: E3:8F:B1:C3:73:B1:B0:02:51:00:0B:B3:7F:50:B0:B9:51:27:B6:FE Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Certificate serial: 010D0C9F4328584BD3305F21855B8F7414694438 Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 88 IP address blocks: 204.153.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:5f:21:85:5b:8f:74:14:69:44:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=ff2f175b-fbaa-42f5-af71-13750e92a2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:74:5c:fc:d1:bd:e1:00:06:07:e9:29:b2: 97:72:47:0d:54:2d:4f:35:1f:63:f4:4a:f8:d6:af: 41:a0:bb:d2:af:3c:a1:b5:a8:42:72:40:78:c4:3b: 08:76:c1:12:9d:d6:08:d4:29:c1:9e:c3:f2:b9:37: 00:d4:83:45:ae:13:9b:d1:30:24:55:b6:b0:eb:30: 5d:74:7c:6e:f1:27:7e:72:45:2b:ba:4e:65:75:5d: ae:fe:c5:f6:1d:9c:10:99:f0:b8:81:ad:12:d4:fc: 89:7c:39:51:fa:4a:53:10:b4:15:dc:c2:0b:75:2d: aa:8d:51:f6:2e:1d:0c:3c:3f:b3:33:d4:b7:a8:dc: 26:c1:e4:87:bd:b1:67:20:3e:d1:23:2d:9f:2c:72: b9:68:9b:97:6d:f6:b4:72:2c:6c:21:bd:71:6f:8a: b0:1d:0b:34:e0:75:48:c4:3b:1b:02:a3:ac:37:c3: e5:fb:e9:c5:3f:37:ed:b8:63:04:0f:a2:11:df:f4: 30:35:45:28:f4:5e:93:0d:68:79:74:8a:6d:64:21: 04:aa:17:12:11:04:a1:f4:5f:1c:4e:ee:19:1b:0f: 36:f0:d1:f8:26:14:84:54:51:32:8d:24:8e:06:f2: a6:2f:aa:ec:42:40:6d:c0:a2:2f:d0:d9:34:93:40: f2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:B1:C3:73:B1:B0:02:51:00:0B:B3:7F:50:B0:B9:51:27:B6:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/c2d9f6d9-1fc6-3482-a363-8e3a057cbe67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl X509v3 Authority Key Identifier: keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer sbgp-ipAddrBlock: critical IPv4: 204.153.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b0:2f:be:0a:88:71:ee:70:75:54:5c:10:4f:cb:7f:9e:5b: 90:a7:f9:3c:3f:4d:ee:02:fc:9f:57:57:2e:87:e6:d8:1d:aa: 20:76:66:db:8d:56:f6:1a:83:ff:bd:94:6c:94:c9:42:0c:9d: df:fc:7b:29:7c:dd:ab:ad:34:53:42:96:a1:91:47:3b:79:01: 23:c1:0a:e7:da:7c:c2:3a:e5:83:f5:79:d9:4e:d0:58:dc:82: da:95:83:62:29:94:44:02:dd:f1:1d:da:00:a1:b6:89:9f:a8: bf:c9:84:e7:ec:35:4f:eb:6a:d0:d7:34:a2:85:b5:f3:13:10: 5e:77:76:33:7d:33:91:a7:97:e3:af:41:f8:71:c9:c4:96:8e: 3b:37:2b:af:cc:3c:cf:cf:ee:5f:9e:1c:98:c9:af:60:c0:cf: cc:ea:3d:dc:2e:c9:55:f7:97:97:5d:cb:41:45:26:03:9f:cc: c4:b3:5e:cd:6f:cc:ed:c1:2e:9c:8b:d8:db:07:4d:19:5c:96: 05:0b:bf:ab:f5:47:06:ea:af:e8:fb:38:ce:fb:6b:b2:49:31: ec:12:17:34:98:d7:dd:0f:08:04:a2:a3:80:b4:b3:98:77:84: e0:b5:f9:99:1e:bd:fa:4e:29:b4:f7:96:2e:b5:68:0c:63:b0: 34:38:ca:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMF8hhVuPdBRpRDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkZjM1YzgtZTc5Yi00MzNhLWE5NTAtNmRmMTE4NDli ZmQzMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk ZmYyZjE3NWItZmJhYS00MmY1LWFmNzEtMTM3NTBlOTJhMmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+R0XPzRveEABgfpKbKXckcNVC1PNR9j9Er4 1q9BoLvSrzyhtahCckB4xDsIdsESndYI1CnBnsPyuTcA1INFrhOb0TAkVbaw6zBd dHxu8Sd+ckUruk5ldV2u/sX2HZwQmfC4ga0S1PyJfDlR+kpTELQV3MILdS2qjVH2 Lh0MPD+zM9S3qNwmweSHvbFnID7RIy2fLHK5aJuXbfa0cixsIb1xb4qwHQs04HVI xDsbAqOsN8Pl++nFPzftuGMED6IR3/QwNUUo9F6TDWh5dIptZCEEqhcSEQSh9F8c Tu4ZGw828NH4JhSEVFEyjSSOBvKmL6rsQkBtwKIv0Nk0k0DyUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOPscNzsbACUQALs39QsLlRJ7b+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2Rm MzVjOC1lNzliLTQzM2EtYTk1MC02ZGYxMTg0OWJmZDMvYzJkOWY2ZDktMWZjNi0z NDgyLWEzNjMtOGUzYTA1N2NiZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdkZjM1YzgtZTc5Yi00MzNhLWE5 NTAtNmRmMTE4NDliZmQzL2Q3ZGYzNWM4LWU3OWItNDMzYS1hOTUwLTZkZjExODQ5 YmZkMy5jcmwwHwYDVR0jBBgwFoAUxi/1pjvjkrSWK+6zxq5GPqE7L1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2RmMzVjOC1lNzliLTQzM2EtYTk1MC02ZGYx MTg0OWJmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJkzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGywL74KiHHucHVUXBBPy3+eW5Cn+Tw/Te4C/J9XVy6H5tgdqiB2ZtuN VvYag/+9lGyUyUIMnd/8eyl83autNFNClqGRRzt5ASPBCufafMI65YP1edlO0Fjc gtqVg2IplEQC3fEd2gChtomfqL/JhOfsNU/ratDXNKKFtfMTEF53djN9M5Gnl+Ov QfhxycSWjjs3K6/MPM/P7l+eHJjJr2DAz8zqPdwuyVX3l5ddy0FFJgOfzMSzXs1v zO3BLpyL2NsHTRlclgULv6v1Rwbqr+j7OM77a7JJMewSFzSY190PCASio4C0s5h3 hOC1+ZkevfpOKbT3li61aAxjsDQ4yhE= -----END CERTIFICATE-----Generated at Sat Dec 6 21:16:54 2025 by rpki-client