This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa File: 08b963ee-e094-3e46-84b1-392bbcac2a6b.roa (raw, json) Hash identifier: ESMH3DYuMhSnskSbEA7fJ5pk3kfuweJe+mJZ4ypcd1o= Subject key identifier: 64:99:55:62:A1:75:05:85:9F:B6:6F:63:A5:1F:3E:9D:F7:CF:C1:96 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF8E0AEF291229546E3D57E80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 11290 IP address blocks: 24.122.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:ae:f2:91:22:95:46:e3:d5:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=694858aa-59da-46c6-a36c-4143e5ba3369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3d:e4:2d:7e:0c:61:f7:80:8b:f1:0f:c4:b9: 8f:33:90:28:3a:4a:6c:cc:9e:73:a0:f6:1b:aa:e5: 63:ea:99:ec:9b:d6:73:f5:89:4e:b3:ef:b8:43:70: d1:d9:22:7b:ba:5f:35:c0:e7:42:4d:ba:04:e7:df: 53:f9:6b:3d:46:46:5c:ac:16:ff:33:d2:04:53:ab: 3a:79:25:be:c2:70:59:9d:de:7e:ad:ec:0a:9b:a1: 48:40:b9:cc:06:ff:dd:7d:d3:32:de:6d:c6:69:e8: bc:da:b8:f0:63:3f:39:90:b8:7b:6d:3a:c6:37:e0: a4:4f:16:d5:bb:53:09:24:97:ac:70:2b:56:28:1c: 0b:b1:25:16:a5:e4:c8:d4:3a:21:db:bd:56:af:ac: 48:39:7a:06:26:6b:29:e0:81:91:94:82:65:67:54: 81:04:51:84:f4:65:e2:d2:f1:4c:c8:24:06:0c:a0: bb:65:54:4d:98:a4:ae:d3:f0:66:16:d3:60:04:2b: b4:6c:ca:5b:40:c1:a3:42:7b:7a:ae:b8:5a:0d:16: b7:10:f6:0a:d6:e2:8b:9a:8a:74:57:8e:eb:8d:48: 8e:d5:58:2d:dc:80:b0:db:7d:97:1e:48:9d:18:17: 76:17:ed:a4:eb:a1:6f:8e:01:4e:2c:e9:fc:6a:f9: 75:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:55:62:A1:75:05:85:9F:B6:6F:63:A5:1F:3E:9D:F7:CF:C1:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/08b963ee-e094-3e46-84b1-392bbcac2a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.122.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:df:6e:96:c3:fb:aa:ce:33:da:d5:28:c3:6c:9b:60:6f:62: 1f:58:04:cb:ba:e7:28:70:85:20:5b:5e:ee:51:77:d7:4c:59: d1:0e:3e:3b:47:32:24:53:43:1f:cb:2e:30:dd:4b:77:27:09: 8b:69:9b:aa:7c:27:e2:6f:a4:43:77:21:24:db:89:41:ee:24: 6f:2b:96:0e:c7:4c:1c:55:34:a7:7c:ad:1b:a0:1f:70:1a:6e: 33:2c:e6:a2:6a:43:10:16:66:63:5f:35:a0:f0:7f:9a:53:52: 0a:c2:72:a9:87:a4:4f:7d:7f:b9:16:c3:b2:ce:a8:be:c1:95: b3:48:27:78:71:ba:8c:37:d1:c8:26:35:1c:72:f0:16:36:8a: b5:6d:fe:2a:40:f6:4e:7a:31:f8:35:a1:28:05:52:43:0b:d9: 8c:e3:76:fa:db:55:16:9c:b7:f1:14:87:6e:a8:4a:af:ad:56: 3e:29:dd:96:88:95:5d:0f:72:17:eb:8d:e9:60:d3:a3:b5:ee: 41:1a:40:6b:e2:5b:7d:a7:e6:58:08:33:13:2e:13:e4:d0:ab: 46:83:9f:9e:99:2a:3c:2f:37:90:3d:f2:dc:e8:af:4b:d5:22: 77:a9:58:4f:16:28:be:66:68:5c:ca:87:ce:52:f7:be:c1:b7: da:11:18:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44K7ykSKVRuPVfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk Njk0ODU4YWEtNTlkYS00NmM2LWEzNmMtNDE0M2U1YmEzMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D3kLX4MYfeAi/EPxLmPM5AoOkpszJ5zoPYb quVj6pnsm9Zz9YlOs++4Q3DR2SJ7ul81wOdCTboE599T+Ws9RkZcrBb/M9IEU6s6 eSW+wnBZnd5+rewKm6FIQLnMBv/dfdMy3m3Gaei82rjwYz85kLh7bTrGN+CkTxbV u1MJJJescCtWKBwLsSUWpeTI1Doh271Wr6xIOXoGJmsp4IGRlIJlZ1SBBFGE9GXi 0vFMyCQGDKC7ZVRNmKSu0/BmFtNgBCu0bMpbQMGjQnt6rrhaDRa3EPYK1uKLmop0 V47rjUiO1Vgt3ICw232XHkidGBd2F+2k66FvjgFOLOn8avl1xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSZVWKhdQWFn7ZvY6UfPp33z8GWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMDhiOTYzZWUtZTA5NC0z ZTQ2LTg0YjEtMzkyYmJjYWMyYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGHoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABffbpbD+6rOM9rVKMNsm2BvYh9YBMu65yhwhSBbXu5Rd9dMWdEOPjtH MiRTQx/LLjDdS3cnCYtpm6p8J+JvpEN3ISTbiUHuJG8rlg7HTBxVNKd8rRugH3Aa bjMs5qJqQxAWZmNfNaDwf5pTUgrCcqmHpE99f7kWw7LOqL7BlbNIJ3hxuow30cgm NRxy8BY2irVt/ipA9k56Mfg1oSgFUkML2YzjdvrbVRact/EUh26oSq+tVj4p3ZaI lV0Pchfrjelg06O17kEaQGviW32n5lgIMxMuE+TQq0aDn56ZKjwvN5A98tzor0vV InepWE8WKL5maFzKh85S977Bt9oRGAw= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:52 2025 by rpki-client