This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa File: 301ebb24-b7d4-3833-bc01-534ced8fe634.roa (raw, json) Hash identifier: HGYwCmfGVgHND9vuq2OgS2fuK0bfgyurgXvMq2dGtw8= Subject key identifier: BA:1A:40:3C:D9:72:85:29:61:D7:BE:9D:4D:45:98:50:BF:F7:C9:BA Certificate issuer: /CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Certificate serial: 010D0C9F4328584BEC509DED7BBFB11821FA0200 Authority key identifier: E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 395704 IP address blocks: 199.212.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:9d:ed:7b:bf:b1:18:21:fa:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfa2fe0-57ba-46c4-9d00-41a85cc4e204 Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=c4c09736-4add-4829-a57e-546a314cdaf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:2a:f1:a6:81:73:8b:3b:67:13:2d:d9:b5: 1c:a3:e7:80:2a:6a:66:0d:87:58:b1:c3:50:78:6e: 5b:e4:28:ec:7e:07:bf:08:cf:6b:79:ef:ca:ab:c9: 18:0c:07:94:1b:03:6c:b5:0c:70:a7:f3:63:e0:7e: 26:f1:31:f3:59:7f:4a:94:aa:85:c6:83:d6:ca:d5: 5f:b4:ee:6a:2a:cb:8f:8c:a4:d4:5c:33:19:3f:87: 63:03:1d:51:89:dc:a8:32:52:61:ad:a4:d9:7c:ce: 5f:09:a9:ea:19:d6:7e:51:f8:25:d7:1c:09:6d:13: 0e:e4:39:f7:6a:74:67:9f:be:ed:99:7a:e1:62:35: 55:8b:1a:85:cf:4c:c6:2c:01:45:9e:12:10:89:fd: a9:4d:b8:95:5e:06:43:9c:99:51:2a:92:86:e3:4e: 50:8d:c0:48:0e:09:a0:d7:8a:4f:48:9e:bd:c5:8b: 8f:ba:ff:6b:1d:92:75:de:c0:a9:08:08:de:a9:6d: 59:f8:bd:75:a1:ce:d8:64:cb:2a:df:8e:34:59:c4: cb:cb:e9:88:98:70:2c:84:13:6e:7a:a9:73:b6:46: e8:0d:ed:89:05:ba:1a:8d:ee:19:09:ed:fa:db:9d: c7:83:a4:7d:76:38:37:0e:be:2f:64:64:1a:71:1a: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1A:40:3C:D9:72:85:29:61:D7:BE:9D:4D:45:98:50:BF:F7:C9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/301ebb24-b7d4-3833-bc01-534ced8fe634.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.crl X509v3 Authority Key Identifier: keyid:E8:FE:01:0C:48:FA:5F:78:A8:B5:1C:B3:E6:B7:C1:52:43:0A:24:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0dfa2fe0-57ba-46c4-9d00-41a85cc4e204.cer sbgp-ipAddrBlock: critical IPv4: 199.212.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b0:e8:7f:eb:49:49:94:97:e9:c0:fa:a8:ef:64:d4:d1:18: 7e:43:98:67:d4:05:32:c4:f3:33:3f:25:98:19:66:6e:80:dd: a2:c9:1a:d5:d7:a4:17:7d:e9:98:36:a7:38:7c:70:2e:22:3c: 4b:20:fe:83:fd:e2:0c:28:bd:fa:34:af:0e:cc:7a:26:01:d9: 5f:1a:35:11:78:76:c6:1a:16:e0:40:c7:db:73:0c:e2:78:04: 0e:0e:3d:c9:22:f4:63:6c:a1:83:ff:5b:bf:09:08:a0:17:59: 10:77:48:9b:33:0f:49:e0:92:08:81:e2:45:c4:72:17:2f:55: 9d:3e:c6:0e:9e:ca:f7:f6:f9:d5:19:8d:24:fe:16:52:66:bd: ea:ff:99:66:93:81:3a:ac:35:c5:18:8b:ce:8f:63:e3:f3:e4: 69:d7:46:52:a6:cc:08:86:40:7f:ec:81:70:8a:06:0f:59:8c: b3:fd:76:87:b0:25:02:72:17:ab:0b:0a:90:75:21:cd:e2:00: b4:0b:35:24:c0:f4:05:f4:16:ae:10:0f:6c:51:2a:ad:cd:e4: a6:f3:8f:55:fb:63:73:cf:51:8a:b3:b0:37:af:ea:4e:51:72: 16:c6:c1:ae:34:07:af:73:df:2e:75:30:8b:c0:c6:a1:98:9d: 67:33:a5:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUJ3te7+xGCH6AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGRmYTJmZTAtNTdiYS00NmM0LTlkMDAtNDFhODVjYzRl MjA0MB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk YzRjMDk3MzYtNGFkZC00ODI5LWE1N2UtNTQ2YTMxNGNkYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBAq8aaBc4s7ZxMt2bUco+eAKmpmDYdYscNQ eG5b5Cjsfge/CM9ree/Kq8kYDAeUGwNstQxwp/Nj4H4m8THzWX9KlKqFxoPWytVf tO5qKsuPjKTUXDMZP4djAx1RidyoMlJhraTZfM5fCanqGdZ+Ufgl1xwJbRMO5Dn3 anRnn77tmXrhYjVVixqFz0zGLAFFnhIQif2pTbiVXgZDnJlRKpKG405QjcBIDgmg 14pPSJ69xYuPuv9rHZJ13sCpCAjeqW1Z+L11oc7YZMsq3440WcTLy+mImHAshBNu eqlztkboDe2JBboaje4ZCe36253Hg6R9djg3Dr4vZGQacRrgJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoaQDzZcoUpYde+nU1FmFC/98m6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZh MmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4NWNjNGUyMDQvMzAxZWJiMjQtYjdkNC0z ODMzLWJjMDEtNTM0Y2VkOGZlNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGRmYTJmZTAtNTdiYS00NmM0LTlk MDAtNDFhODVjYzRlMjA0LzBkZmEyZmUwLTU3YmEtNDZjNC05ZDAwLTQxYTg1Y2M0 ZTIwNC5jcmwwHwYDVR0jBBgwFoAU6P4BDEj6X3iotRyz5rfBUkMKJK0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZGZhMmZlMC01N2JhLTQ2YzQtOWQwMC00MWE4 NWNjNGUyMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx9RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCw6H/rSUmUl+nA+qjvZNTRGH5DmGfUBTLE8zM/JZgZZm6A3aLJGtXX pBd96Zg2pzh8cC4iPEsg/oP94gwovfo0rw7MeiYB2V8aNRF4dsYaFuBAx9tzDOJ4 BA4OPcki9GNsoYP/W78JCKAXWRB3SJszD0ngkgiB4kXEchcvVZ0+xg6eyvf2+dUZ jST+FlJmver/mWaTgTqsNcUYi86PY+Pz5GnXRlKmzAiGQH/sgXCKBg9ZjLP9doew JQJyF6sLCpB1Ic3iALQLNSTA9AX0Fq4QD2xRKq3N5Kbzj1X7Y3PPUYqzsDev6k5R chbGwa40B69z3y51MIvAxqGYnWczpfg= -----END CERTIFICATE-----Generated at Tue Dec 16 12:20:44 2025 by rpki-client