This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/0628b940-7cd6-35c0-94ef-5783a4466762.roa File: 0628b940-7cd6-35c0-94ef-5783a4466762.roa (raw, json) Hash identifier: EFfLflzh1s35zih7x7989HHj0+foWK3eU+uYOqpONPs= Subject key identifier: BE:DF:B8:9B:F2:7C:62:87:57:60:DF:F5:C2:04:6F:1D:62:61:9B:92 Certificate issuer: /CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Certificate serial: 010D0C9F4328584C0B0629234B3EA4AF8138E240 Authority key identifier: 71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/0628b940-7cd6-35c0-94ef-5783a4466762.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 53616 IP address blocks: 70.42.212.0/24 maxlen: 24 70.42.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:29:23:4b:3e:a4:af:81:38:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380e678f-a53e-4fa7-8c2f-15f6fca7c8f9 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=6395eb73-556e-40fe-a46a-06026850db51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:48:b1:8f:a7:a4:a9:d8:b0:d0:7f:21:ed:0f: b8:31:28:0d:ff:4b:84:99:44:27:c3:b9:70:e1:dc: cd:36:b7:d5:84:23:65:a2:0d:fa:47:40:bd:38:93: c0:45:c7:84:36:59:52:ca:b3:ec:79:41:06:eb:b1: a5:2a:71:57:73:1d:0b:1b:44:f6:80:df:9d:f7:3d: 62:ad:7a:5c:a9:09:84:b3:e4:e3:45:cc:f6:8c:5a: 82:b5:41:56:f3:ed:07:d5:41:d5:e6:ec:16:98:f9: bc:19:87:8d:c1:ad:48:e3:e2:ae:e3:e9:4d:d4:b3: 43:2f:3c:81:6c:79:0f:d8:b2:3a:d3:b0:8c:8e:59: b3:dc:55:0c:a5:25:9c:19:83:45:4a:82:35:18:66: 74:0c:0c:43:9d:c9:33:a5:45:17:61:03:70:af:6c: c9:ca:6b:18:1a:50:93:a9:c9:bc:c2:76:fb:7f:89: c1:81:37:ef:5e:9b:db:7f:60:fa:ca:aa:37:4b:8b: 2f:8f:63:2f:72:69:6c:37:37:7f:85:70:bd:5f:10: e1:08:3e:ae:ac:db:e4:00:0f:07:93:0e:cf:d9:6f: 82:55:30:3e:2c:cb:21:40:20:a1:eb:4c:9c:3f:9f: 99:49:de:e5:16:32:c4:23:a1:5b:fe:61:24:27:13: 89:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DF:B8:9B:F2:7C:62:87:57:60:DF:F5:C2:04:6F:1D:62:61:9B:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/0628b940-7cd6-35c0-94ef-5783a4466762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.crl X509v3 Authority Key Identifier: keyid:71:E2:18:12:C7:06:61:45:DF:F7:A1:DA:01:23:23:5A:5C:02:E9:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/380e678f-a53e-4fa7-8c2f-15f6fca7c8f9.cer sbgp-ipAddrBlock: critical IPv4: 70.42.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:b5:30:77:16:30:22:f8:d2:09:8c:42:eb:58:f4:25:91:75: 42:75:1a:d0:5f:fb:1b:91:9c:99:8f:d1:da:7c:3a:e2:8d:c8: 91:8e:23:11:bc:ed:64:58:cd:9b:65:0a:98:3b:63:3b:19:08: f5:49:55:71:87:f6:4a:8e:01:27:df:8d:1b:b1:ca:27:3e:05: 99:6c:fb:76:d8:e8:43:48:19:ad:82:59:8a:50:f1:2f:73:f6: 9f:19:83:3d:ea:a3:23:9b:df:83:95:35:bb:14:fd:2f:57:a9: 0d:49:52:f3:8b:01:6f:37:b5:47:f0:6a:dc:67:fe:36:09:5e: 64:ae:cf:76:77:d5:7d:cf:92:d9:bb:4a:30:df:25:9e:c2:70: 6b:da:6c:c6:ff:2d:ed:dc:74:77:43:9f:ed:20:0f:d0:90:f0: b3:33:15:5d:d3:3f:82:f2:e5:a7:02:01:8d:8f:f4:13:a2:b8: 5e:71:01:c3:dc:60:b3:de:11:15:93:56:13:e3:00:5b:71:95: f8:80:ca:5d:1d:5a:ca:20:1c:d7:d0:24:c8:e6:91:96:25:8d: b5:f5:73:3f:95:70:23:78:2e:25:6a:d8:5c:59:87:01:5a:64: e2:6f:37:d1:3a:71:2f:e3:fa:53:d3:e5:08:fa:c4:bf:04:31: 0d:43:35:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBikjSz6kr4E44kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzgwZTY3OGYtYTUzZS00ZmE3LThjMmYtMTVmNmZjYTdj OGY5MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NjM5NWViNzMtNTU2ZS00MGZlLWE0NmEtMDYwMjY4NTBkYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEixj6ekqdiw0H8h7Q+4MSgN/0uEmUQnw7lw 4dzNNrfVhCNlog36R0C9OJPARceENllSyrPseUEG67GlKnFXcx0LG0T2gN+d9z1i rXpcqQmEs+TjRcz2jFqCtUFW8+0H1UHV5uwWmPm8GYeNwa1I4+Ku4+lN1LNDLzyB bHkP2LI607CMjlmz3FUMpSWcGYNFSoI1GGZ0DAxDnckzpUUXYQNwr2zJymsYGlCT qcm8wnb7f4nBgTfvXpvbf2D6yqo3S4svj2MvcmlsNzd/hXC9XxDhCD6urNvkAA8H kw7P2W+CVTA+LMshQCCh60ycP5+ZSd7lFjLEI6Fb/mEkJxOJ7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7fuJvyfGKHV2Df9cIEbx1iYZuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODBl Njc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2ZmNhN2M4ZjkvMDYyOGI5NDAtN2NkNi0z NWMwLTk0ZWYtNTc4M2E0NDY2NzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgwZTY3OGYtYTUzZS00ZmE3LThj MmYtMTVmNmZjYTdjOGY5LzM4MGU2NzhmLWE1M2UtNGZhNy04YzJmLTE1ZjZmY2E3 YzhmOS5jcmwwHwYDVR0jBBgwFoAUceIYEscGYUXf96HaASMjWlwC6WUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODBlNjc4Zi1hNTNlLTRmYTctOGMyZi0xNWY2 ZmNhN2M4ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRirUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALK1MHcWMCL40gmMQutY9CWRdUJ1GtBf+xuRnJmP0dp8OuKNyJGOIxG8 7WRYzZtlCpg7YzsZCPVJVXGH9kqOASffjRuxyic+BZls+3bY6ENIGa2CWYpQ8S9z 9p8Zgz3qoyOb34OVNbsU/S9XqQ1JUvOLAW83tUfwatxn/jYJXmSuz3Z31X3Pktm7 SjDfJZ7CcGvabMb/Le3cdHdDn+0gD9CQ8LMzFV3TP4Ly5acCAY2P9BOiuF5xAcPc YLPeERWTVhPjAFtxlfiAyl0dWsogHNfQJMjmkZYljbX1cz+VcCN4LiVq2FxZhwFa ZOJvN9E6cS/j+lPT5Qj6xL8EMQ1DNRc= -----END CERTIFICATE-----Generated at Sat Dec 6 20:54:15 2025 by rpki-client