This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa File: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (raw, json) Hash identifier: uvpjb0Mf/J5AI4Sv5qvatJp61CGlnuJxFAv6UzH4Ux8= Subject key identifier: 97:F3:6A:C1:AC:45:56:56:CF:5A:BE:F0:E6:B5:08:B3:64:E0:2C:59 Certificate issuer: /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Certificate serial: 010D0C9F4328584BD8C5BDFFE5F1BE372760AB80 Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 398210 IP address blocks: 168.220.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:bd:ff:e5:f1:be:37:27:60:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=bc53dee9-67d3-4bfd-aab0-9ee00666e156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:90:99:e7:79:2c:3d:fd:c4:7e:bb:ea:7f:75: 09:6c:0f:11:1e:a7:2b:49:8b:cf:60:53:5b:91:85: 01:e5:aa:44:82:71:72:7a:72:4a:6f:8e:cd:80:c4: 96:23:83:ae:a7:33:c2:aa:38:07:93:1a:d7:87:4b: 27:9b:8e:18:30:04:e3:b1:28:9e:8c:a2:54:15:8f: d0:2e:dc:a4:42:60:2a:65:f4:0f:44:a5:cd:b9:c0: 40:15:64:6d:ad:51:df:ca:79:2d:ee:e8:5e:cd:ea: b2:e8:93:33:cb:53:02:35:62:f4:54:a6:21:e4:3e: 03:25:89:41:33:52:c3:50:03:fa:c2:3a:d0:a9:a7: d0:20:2d:b8:8c:1e:19:e4:84:db:ee:74:56:3e:2b: 15:e1:3d:79:c2:3c:e4:44:13:bc:cd:d4:1a:cd:87: 60:85:b2:bc:8d:86:c7:c4:67:27:a1:e3:4a:46:60: 90:46:7a:fb:a0:49:2e:30:ac:9d:e2:b3:59:90:47: 8f:3a:54:f4:75:40:28:ba:b1:f0:b8:6d:40:d8:e4: f5:54:b5:db:56:ba:01:aa:d7:fa:47:2d:a6:c4:b9: de:ef:66:bb:49:44:ea:d3:da:3f:f8:d4:11:61:44: e4:29:a3:98:89:a6:5a:30:b0:20:0c:e2:8d:b3:9e: de:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F3:6A:C1:AC:45:56:56:CF:5A:BE:F0:E6:B5:08:B3:64:E0:2C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/039241b2-b599-30f0-bcc6-07b9fed5d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl X509v3 Authority Key Identifier: keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer sbgp-ipAddrBlock: critical IPv4: 168.220.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8d:a8:2e:6b:4a:71:85:48:59:aa:c6:4a:d9:d9:a8:25:24: 62:e7:d9:2b:36:ae:37:1c:e1:4f:77:f6:b3:67:d7:34:d1:a8: 71:16:3b:11:89:24:31:6b:64:39:0e:ab:a3:dc:80:dd:94:3e: 71:39:83:0f:3d:9c:e1:b4:66:44:84:93:15:6a:4b:d7:33:fc: 03:e2:b8:74:96:52:5b:4c:70:d1:46:28:a1:e5:cc:5e:02:cd: ef:aa:f4:ce:b8:bf:41:8b:85:cb:70:6b:00:5a:48:9a:eb:8c: c6:15:b2:f7:19:79:bc:b7:f4:f5:91:f1:ee:a8:85:45:92:79: 6c:2e:92:b6:f8:7d:0a:6c:38:2f:6e:46:b7:83:93:b3:8a:80: 49:a5:ff:27:49:ba:36:9e:92:ac:cc:ae:38:65:c7:e3:3b:27: 38:45:78:5e:4c:9e:40:3d:15:40:d3:b4:b5:c4:1c:86:ec:e4: 2a:9e:1c:36:9d:37:39:a5:1e:0a:a3:5f:e9:a3:18:21:c8:42: 3b:76:2b:50:9b:0b:47:ad:cf:8f:4d:61:0b:bd:22:31:37:5c: cc:27:9a:65:a1:ba:c1:21:bf:ee:4a:83:84:1a:10:4c:b6:d7: d0:99:49:80:d0:7f:c2:c6:1e:08:ad:0a:2b:33:b1:94:7f:31: c7:29:b7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxb3/5fG+Nydgq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw ZmFhMB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk YmM1M2RlZTktNjdkMy00YmZkLWFhYjAtOWVlMDA2NjZlMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZCZ53ksPf3Efrvqf3UJbA8RHqcrSYvPYFNb kYUB5apEgnFyenJKb47NgMSWI4OupzPCqjgHkxrXh0snm44YMATjsSiejKJUFY/Q LtykQmAqZfQPRKXNucBAFWRtrVHfynkt7uhezeqy6JMzy1MCNWL0VKYh5D4DJYlB M1LDUAP6wjrQqafQIC24jB4Z5ITb7nRWPisV4T15wjzkRBO8zdQazYdghbK8jYbH xGcnoeNKRmCQRnr7oEkuMKyd4rNZkEePOlT0dUAourHwuG1A2OT1VLXbVroBqtf6 Ry2mxLne72a7SUTq09o/+NQRYUTkKaOYiaZaMLAgDOKNs57ePwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfzasGsRVZWz1q+8Oa1CLNk4CxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4 YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvMDM5MjQxYjItYjU5OS0z MGYwLWJjYzYtMDdiOWZlZDVkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2 YzU4MDBmYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKNqC5rSnGFSFmqxkrZ2aglJGLn2Ss2rjcc4U939rNn1zTRqHEWOxGJ JDFrZDkOq6PcgN2UPnE5gw89nOG0ZkSEkxVqS9cz/APiuHSWUltMcNFGKKHlzF4C ze+q9M64v0GLhctwawBaSJrrjMYVsvcZeby39PWR8e6ohUWSeWwukrb4fQpsOC9u RreDk7OKgEml/ydJujaekqzMrjhlx+M7JzhFeF5MnkA9FUDTtLXEHIbs5CqeHDad NzmlHgqjX+mjGCHIQjt2K1CbC0etz49NYQu9IjE3XMwnmmWhusEhv+5Kg4QaEEy2 19CZSYDQf8LGHgitCiszsZR/Mccpt/M= -----END CERTIFICATE-----Generated at Sat Dec 6 14:15:31 2025 by rpki-client