This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json) Hash identifier: 8O3eTDb044G6Ij6gJpi4ZwXEK9MiXgIMj8MMGFYXPYA= Subject key identifier: A1:C7:8D:67:FA:B1:BC:A2:78:81:07:CD:E5:67:8F:C3:C4:B8:3E:84 Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Certificate serial: 010D0C9F4328584BC96AE3EB236B41D6B6090600 Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 33040 IP address blocks: 199.48.216.0/21 maxlen: 21 2605:3d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:e3:eb:23:6b:41:d6:b6:09:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=96f4dc75-9b08-4d9b-8336-a7bfc430a039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:9c:d4:7f:98:4b:26:81:27:d3:55:48:c2: de:90:93:e5:6a:0f:30:ab:0c:75:00:81:a5:b0:6a: a5:4b:f7:d3:d2:f3:53:11:43:99:da:13:03:a5:c0: 47:98:39:0c:da:c1:c8:98:84:86:38:5e:6a:6c:4c: 2d:f1:4d:85:7a:93:9b:e8:d6:db:ec:fa:ba:e2:75: fe:70:81:10:0e:49:30:00:4a:80:6c:9d:90:f1:a8: c7:1d:54:0b:02:a4:74:eb:89:c4:36:53:ce:a2:10: 74:25:be:0f:b8:d2:b7:1c:8a:af:77:e5:03:4f:33: 76:99:64:b8:40:99:6a:f3:2f:c5:f9:29:af:f8:b6: bb:33:de:27:be:50:10:97:1e:86:eb:f6:18:70:6a: 3d:27:5c:9d:bf:49:54:1b:b8:46:31:e9:4d:3a:7e: af:a7:79:31:f9:f5:e4:e1:84:5a:1a:78:7d:28:b4: 95:ba:4e:98:cf:bb:b4:8f:63:a3:6f:0a:3f:92:bc: ab:99:0b:67:58:61:10:ae:87:2a:d8:f8:5d:05:bb: 05:4d:ae:26:46:9c:33:29:a3:b8:8b:48:fc:d9:45: 38:b8:ba:36:0d:63:24:ac:9e:19:2f:b8:9d:c8:b1: 2d:e9:de:6e:d0:65:8b:92:d3:13:28:fd:9f:82:8e: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C7:8D:67:FA:B1:BC:A2:78:81:07:CD:E5:67:8F:C3:C4:B8:3E:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl X509v3 Authority Key Identifier: keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:08:a4:5d:a2:81:b8:1e:3f:90:b3:f7:3d:89:4a:74:4a:1e: 32:84:3f:04:d7:9c:98:81:30:2b:d8:50:91:6f:60:14:3b:63: df:55:e7:e0:bf:70:88:f7:1f:21:6f:f5:82:c6:a4:d7:c5:97: f0:2d:21:8e:49:fc:88:7f:d0:35:9e:48:ad:8d:75:0d:e6:e7: ee:b3:4a:21:43:bb:17:2b:56:03:f7:13:41:35:02:81:b4:d2: 7f:a6:68:53:9c:04:10:99:c9:66:93:c5:fb:1c:4f:03:4d:35: 00:9e:c6:c4:ec:54:45:51:c3:89:73:aa:29:2e:57:17:73:d0: 33:9c:ad:11:3d:1b:60:5b:7e:25:bc:10:94:4b:cf:7c:c8:51: fa:ff:06:e6:ec:ed:62:21:f7:57:b2:4b:d6:2a:20:f3:86:09: 26:af:9b:d6:e1:c9:2e:51:da:c7:c0:e4:95:6c:ad:9b:34:c1: 61:64:77:92:e1:49:0f:8d:80:c5:9c:7b:3a:f8:2b:3a:74:ab: dc:11:a4:75:55:64:3b:76:c4:81:14:a7:80:25:ad:bd:88:85: ce:3e:f1:07:e1:79:df:33:c1:ef:b0:45:f7:c2:53:0d:a6:8b: b5:f8:c6:ce:bf:1f:94:f5:7e:c7:84:45:ac:71:42:fc:bf:eb: d3:0a:36:27 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEvJauPrI2tB1rYJBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYx MWU0MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk OTZmNGRjNzUtOWIwOC00ZDliLTgzMzYtYTdiZmM0MzBhMDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA66yc1H+YSyaBJ9NVSMLekJPlag8wqwx1AIGl sGqlS/fT0vNTEUOZ2hMDpcBHmDkM2sHImISGOF5qbEwt8U2FepOb6Nbb7Pq64nX+ cIEQDkkwAEqAbJ2Q8ajHHVQLAqR064nENlPOohB0Jb4PuNK3HIqvd+UDTzN2mWS4 QJlq8y/F+Smv+La7M94nvlAQlx6G6/YYcGo9J1ydv0lUG7hGMelNOn6vp3kx+fXk 4YRaGnh9KLSVuk6Yz7u0j2Ojbwo/kryrmQtnWGEQrocq2PhdBbsFTa4mRpwzKaO4 i0j82UU4uLo2DWMkrJ4ZL7idyLEt6d5u0GWLktMTKP2fgo5t8wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKHHjWf6sbyieIEHzeVnj8PEuD6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJh ODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvZjM4NDllOGEtMzc5YS0z MGU3LWFhZWYtOGQ4NzQ2Yjk5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjBiYTg0YzAtNWQ0NC00NTQ3LWEz NjgtZTU3NGIyMDYxMWU0L2YwYmE4NGMwLTVkNDQtNDU0Ny1hMzY4LWU1NzRiMjA2 MTFlNC5jcmwwHwYDVR0jBBgwFoAUoLsZzufY16pNfOWQOA9KGdh7eiMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0 YjIwNjExZTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDxzDYMA0E AgACMAcDBQAmBT1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACgIpF2igbgeP5Cz9z2JSnRKHjKEPwTXnJiB MCvYUJFvYBQ7Y99V5+C/cIj3HyFv9YLGpNfFl/AtIY5J/Ih/0DWeSK2NdQ3m5+6z SiFDuxcrVgP3E0E1AoG00n+maFOcBBCZyWaTxfscTwNNNQCexsTsVEVRw4lzqiku Vxdz0DOcrRE9G2BbfiW8EJRLz3zIUfr/Bubs7WIh91eyS9YqIPOGCSavm9bhyS5R 2sfA5JVsrZs0wWFkd5LhSQ+NgMWcezr4Kzp0q9wRpHVVZDt2xIEUp4Alrb2Ihc4+ 8Qfhed8zwe+wRffCUw2mi7X4xs6/H5T1fseERaxxQvy/69MKNic= -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:49 2025 by rpki-client