This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/13b86ecb-89cf-3b0b-9df8-7f67c9ebfca7.roa File: 13b86ecb-89cf-3b0b-9df8-7f67c9ebfca7.roa (raw, json) Hash identifier: GxLp0fr7TVMWiYhNjE7KxgVa5nsLu9CVAHwTADocqlI= Subject key identifier: D4:50:5F:C8:BA:58:18:E9:18:CF:13:B3:20:28:6F:D9:94:9C:99:68 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF1E5EEED8D13D413C990FE20 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/13b86ecb-89cf-3b0b-9df8-7f67c9ebfca7.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 11290 IP address blocks: 204.144.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:ee:ed:8d:13:d4:13:c9:90:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=20b27de7-2426-4bcd-af15-c949c8208f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:bb:15:b3:2a:fd:5b:43:8d:d4:aa:d4:46: 81:9d:b1:a3:3e:26:44:c9:da:33:8c:c5:b4:4a:19: b6:f5:41:af:68:56:04:ee:4b:3d:f6:69:0d:07:3f: 58:ae:3c:d2:37:5b:e2:e5:4f:f3:a4:f1:fe:3c:bf: f8:23:46:61:ab:74:d5:99:1a:af:17:e7:0c:45:c5: ac:22:62:fe:72:55:35:a3:c0:d5:53:19:8d:1c:f9: 88:b8:9b:63:ec:62:b3:29:36:35:e2:d0:e2:e8:24: c9:24:37:da:3d:f0:86:49:16:bc:9a:ea:25:4a:eb: f1:bf:bf:15:59:aa:54:d5:9e:5e:0b:bf:be:f4:b4: b6:6f:1f:95:f0:b6:bb:24:6d:f0:f1:53:b9:03:2c: d1:f1:77:36:71:2e:c5:7e:e5:70:44:50:89:c8:09: c8:49:76:71:81:37:28:a3:72:20:5c:47:50:6b:00: 17:13:01:8f:42:ca:51:85:af:bf:70:63:82:b2:25: 85:f0:80:a6:b6:d8:45:c7:d1:df:b4:72:8a:3d:38: f3:fd:6a:36:5a:0b:b7:fa:62:35:d2:c2:76:6e:e4: 17:12:d7:42:b9:6c:bd:a4:e8:21:78:0a:3f:ea:49: 97:cb:40:f5:8c:89:20:34:f0:20:25:f3:0b:c5:5a: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:5F:C8:BA:58:18:E9:18:CF:13:B3:20:28:6F:D9:94:9C:99:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/13b86ecb-89cf-3b0b-9df8-7f67c9ebfca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 204.144.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f7:a1:4a:53:68:37:be:40:e5:cd:71:e3:40:18:d4:54:4b: 28:fd:f7:67:ac:43:51:e2:f8:af:d4:71:38:bf:25:8d:3a:18: 3b:68:2f:9d:ba:1d:91:3c:9d:35:f0:f9:8d:ea:7b:bc:90:0c: 1b:a0:6b:9e:c3:d5:c7:b8:99:ac:6f:12:3c:bf:3f:a2:1b:9f: f4:e9:76:d8:84:77:1e:6a:1d:3a:6b:1c:6d:46:44:71:83:f6: 8d:1f:bd:ed:cb:25:d3:26:be:46:02:79:1a:1a:6f:04:1e:ff: ac:47:d3:43:5a:47:37:62:7c:3f:2c:03:c5:85:12:d9:c9:67: c3:65:7a:cd:68:89:bb:dc:62:99:66:92:67:8a:5a:3a:30:05: e3:04:7f:97:18:eb:72:a4:77:03:b9:6d:03:17:53:00:bb:e7: 6e:13:35:b2:3b:6c:f3:88:ff:82:ee:58:a0:fc:7d:7c:8a:79: 59:2f:3e:3a:ca:b0:d8:2b:0d:ce:50:5b:50:fd:e9:ba:9e:a8: cd:d6:08:54:c5:bc:00:8f:4f:a7:1f:9d:57:11:1d:94:cc:73: 52:6a:ec:e7:dd:e9:88:77:d2:63:f6:af:eb:20:26:02:22:6b: 4c:e3:15:b9:de:cb:da:63:ee:96:29:88:50:e8:85:7f:c7:c1: 83:7f:67:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5e7tjRPUE8mQ/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk MjBiMjdkZTctMjQyNi00YmNkLWFmMTUtYzk0OWM4MjA4ZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU67FbMq/VtDjdSq1EaBnbGjPiZEydozjMW0 Shm29UGvaFYE7ks99mkNBz9YrjzSN1vi5U/zpPH+PL/4I0Zhq3TVmRqvF+cMRcWs ImL+clU1o8DVUxmNHPmIuJtj7GKzKTY14tDi6CTJJDfaPfCGSRa8muolSuvxv78V WapU1Z5eC7++9LS2bx+V8La7JG3w8VO5AyzR8Xc2cS7FfuVwRFCJyAnISXZxgTco o3IgXEdQawAXEwGPQspRha+/cGOCsiWF8ICmtthFx9HftHKKPTjz/Wo2Wgu3+mI1 0sJ2buQXEtdCuWy9pOgheAo/6kmXy0D1jIkgNPAgJfMLxVqdIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRQX8i6WBjpGM8TsyAob9mUnJloMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMTNiODZlY2ItODljZi0z YjBiLTlkZjgtN2Y2N2M5ZWJmY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/3oUpTaDe+QOXNceNAGNRUSyj992esQ1Hi+K/UcTi/JY06GDtoL526 HZE8nTXw+Y3qe7yQDBuga57D1ce4maxvEjy/P6Ibn/TpdtiEdx5qHTprHG1GRHGD 9o0fve3LJdMmvkYCeRoabwQe/6xH00NaRzdifD8sA8WFEtnJZ8Nles1oibvcYplm kmeKWjowBeMEf5cY63KkdwO5bQMXUwC7524TNbI7bPOI/4LuWKD8fXyKeVkvPjrK sNgrDc5QW1D96bqeqM3WCFTFvACPT6cfnVcRHZTMc1Jq7Ofd6Yh30mP2r+sgJgIi a0zjFbney9pj7pYpiFDohX/HwYN/Z0Y= -----END CERTIFICATE-----Generated at Sun Dec 7 13:10:48 2025 by rpki-client