This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa File: 1874f955-17d1-3887-9a8e-47cc98129e03.roa (raw, json) Hash identifier: uU3h+TkgdBkCC//lugwhMS9DaRcwb1dbQjswked3hCw= Subject key identifier: A7:DE:68:D4:9E:9A:2E:B9:83:1A:FC:14:37:BB:44:4A:00:7C:2B:C1 Certificate issuer: /CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Certificate serial: 010D0C9F4328584BD33061CF47ED9B499CAF72C8 Authority key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa Signing time: Tue 11 Nov 2025 14:00:38 +0000 ROA not before: Tue 11 Nov 2025 14:00:38 +0000 ROA not after: Mon 09 Feb 2026 14:00:38 +0000 asID: 397026 IP address blocks: 139.64.168.0/22 maxlen: 22 139.64.168.0/23 maxlen: 23 139.64.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d3:30:61:cf:47:ed:9b:49:9c:af:72:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Validity Not Before: Nov 11 14:00:38 2025 GMT Not After : Feb 9 14:00:38 2026 GMT Subject: CN=167f7e6c-1b3d-4dfd-a6a2-1d9596ab3016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:26:ae:47:14:84:af:16:1c:a5:a3:9b:70:4a: 46:41:cc:30:e0:23:72:fd:da:7f:71:99:2c:38:d6: c2:d3:18:d1:f1:a3:a9:19:12:88:8c:cc:f3:91:93: 93:1d:61:d5:da:12:b0:68:d0:57:c9:31:6a:d2:5e: 3e:40:29:42:0a:f5:eb:73:dc:b8:4f:a9:49:37:eb: 8b:91:78:3b:fa:e8:d0:14:9c:47:bf:6b:51:e8:c0: 9c:fb:6d:44:36:98:5f:27:44:47:76:03:bd:cf:bd: ae:52:79:a5:e2:a8:31:08:d7:4c:62:ae:a6:89:86: 87:4e:7a:1e:48:52:70:fc:3d:a8:3e:05:d4:01:41: 5d:9b:2e:f8:db:ae:f6:77:9b:52:5d:f5:53:fc:c2: 05:2d:61:98:53:97:c0:5b:0e:83:3e:79:2f:32:39: b5:1b:b7:04:7b:e0:cf:45:76:30:c4:86:4a:d2:3a: 0f:15:19:6f:c8:14:10:f1:01:e8:32:f0:48:4b:9e: 6b:70:57:0a:58:6c:07:4e:a9:1d:a4:c3:72:8e:80: ed:0f:12:3d:ac:7c:bd:d9:15:42:bc:92:ac:94:2b: a0:4b:0d:78:47:cc:c0:1a:da:de:7a:ba:d2:2e:f7: d0:23:8c:e7:e1:34:75:90:ec:24:66:83:e4:8f:d5: 48:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DE:68:D4:9E:9A:2E:B9:83:1A:FC:14:37:BB:44:4A:00:7C:2B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/1874f955-17d1-3887-9a8e-47cc98129e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.crl X509v3 Authority Key Identifier: keyid:71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer sbgp-ipAddrBlock: critical IPv4: 139.64.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e7:ee:f7:d8:c1:a0:a3:f3:e0:28:2f:cf:31:9a:a0:c2:42: c4:78:4f:51:81:88:2b:f3:c6:e0:b4:c7:41:55:52:47:5b:ab: 61:7c:46:86:14:3f:ec:63:e0:a1:69:ca:ef:f7:49:18:12:c0: f0:cb:a5:5f:64:70:64:da:67:83:d3:06:c8:a1:3d:cf:6f:1b: 78:68:2a:d7:4f:60:d4:3d:94:92:9e:ea:8d:a0:98:de:7f:d7: f4:56:b7:fe:13:bf:79:2f:35:cb:3a:49:c8:45:0a:e9:6e:d4: 71:93:4e:dc:d3:8c:b5:69:de:c9:11:24:67:d7:1a:4d:31:ed: 5d:67:2f:77:cf:26:7a:fa:6b:8f:a9:08:04:90:0e:64:88:f0: 80:9a:5a:88:e4:73:55:92:46:4c:f1:f2:d3:a1:9e:e4:1e:f2: 09:dd:64:3f:ba:5d:67:55:ba:ca:25:43:d0:e2:c3:9c:42:14: eb:9f:1a:f1:79:89:f9:ca:d2:3a:d8:00:de:b4:42:ed:7a:35: 1f:5e:be:72:cd:3e:e0:ba:35:1b:c4:10:9f:60:04:70:b6:b4: 14:f9:c2:4d:b5:4c:04:cc:59:8a:3d:b3:d0:eb:0d:04:2a:90: d4:a4:a2:a3:19:1a:ad:30:f4:94:86:3e:e2:41:10:77:25:a1: 9d:5d:e3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvTMGHPR+2bSZyvcsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBj OTAyMB4XDTI1MTExMTE0MDAzOFoXDTI2MDIwOTE0MDAzOFowLzEtMCsGA1UEAxMk MTY3ZjdlNmMtMWIzZC00ZGZkLWE2YTItMWQ5NTk2YWIzMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCauRxSErxYcpaObcEpGQcww4CNy/dp/cZks ONbC0xjR8aOpGRKIjMzzkZOTHWHV2hKwaNBXyTFq0l4+QClCCvXrc9y4T6lJN+uL kXg7+ujQFJxHv2tR6MCc+21ENphfJ0RHdgO9z72uUnml4qgxCNdMYq6miYaHTnoe SFJw/D2oPgXUAUFdmy742672d5tSXfVT/MIFLWGYU5fAWw6DPnkvMjm1G7cEe+DP RXYwxIZK0joPFRlvyBQQ8QHoMvBIS55rcFcKWGwHTqkdpMNyjoDtDxI9rHy92RVC vJKslCugSw14R8zAGtreerrSLvfQI4zn4TR1kOwkZoPkj9VIRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfeaNSemi65gxr8FDe7REoAfCvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhj ZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMTg3NGY5NTUtMTdkMS0z ODg3LTlhOGUtNDdjYzk4MTI5ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmY4Y2ZiNzYtZDNjZi00ZGE2LWJm ZTAtMzYxZDc3NTBjOTAyL2ZmOGNmYjc2LWQzY2YtNGRhNi1iZmUwLTM2MWQ3NzUw YzkwMi5jcmwwHwYDVR0jBBgwFoAUcTf+y8F0P+MrRxupXh6iaicOSMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFk Nzc1MGM5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCi0CoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzn7vfYwaCj8+AoL88xmqDCQsR4T1GBiCvzxuC0x0FVUkdbq2F8RoYU P+xj4KFpyu/3SRgSwPDLpV9kcGTaZ4PTBsihPc9vG3hoKtdPYNQ9lJKe6o2gmN5/ 1/RWt/4Tv3kvNcs6SchFCulu1HGTTtzTjLVp3skRJGfXGk0x7V1nL3fPJnr6a4+p CASQDmSI8ICaWojkc1WSRkzx8tOhnuQe8gndZD+6XWdVusolQ9Diw5xCFOufGvF5 ifnK0jrYAN60Qu16NR9evnLNPuC6NRvEEJ9gBHC2tBT5wk21TATMWYo9s9DrDQQq kNSkoqMZGq0w9JSGPuJBEHcloZ1d41I= -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:17 2025 by rpki-client