This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa File: 3eff0cfa-371f-32f7-9a45-34628c453640.roa (raw, json) Hash identifier: smNzp9i2A1Cv3ramkc+ADdSb30R2FZtAlbiy/Xtc/d4= Subject key identifier: EF:CE:9A:89:CA:BA:74:E2:3F:78:0D:8A:C5:E3:AA:73:7B:6D:71:61 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF4B0A725640D6167C87D6F00 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa Signing time: Sun 23 Nov 2025 14:00:38 +0000 ROA not before: Sun 23 Nov 2025 14:00:38 +0000 ROA not after: Sat 21 Feb 2026 14:00:38 +0000 asID: 11290 IP address blocks: 108.171.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f4:b0:a7:25:64:0d:61:67:c8:7d:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 23 14:00:38 2025 GMT Not After : Feb 21 14:00:38 2026 GMT Subject: CN=0cdc0d6a-9c6f-40ea-be60-55a29ebad682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7f:0e:d4:33:aa:d6:d2:fb:04:f0:a0:95:a8: df:85:1d:ed:3b:cd:ef:e5:fa:5b:4f:88:21:10:fc: 3c:d4:48:b2:7b:0a:fd:21:7b:91:56:dd:6d:84:0c: 3c:da:90:3f:3b:c6:7b:b6:37:38:16:cf:a6:0e:96: 30:1a:a2:88:c0:d8:a8:9d:de:e9:7c:15:a2:ab:e2: 78:47:4e:df:57:12:8b:f3:f6:e9:3a:a8:b5:49:53: 56:41:4a:1e:69:f6:6c:2b:3c:5e:1a:6c:29:4a:45: 94:63:5c:f3:fa:25:0c:d3:34:48:7e:36:3b:60:2e: d3:4c:a1:ae:a8:c7:ff:b7:0e:bd:94:69:55:53:2a: 13:b9:8c:54:e3:3a:a9:bb:73:fa:72:bf:04:22:fd: 3b:7b:83:30:ef:7a:51:4d:74:f7:68:28:b7:6c:ec: 60:a0:81:75:e7:53:65:0d:43:31:c8:83:48:ef:b3: 7f:ff:28:ac:db:3d:77:63:99:b6:81:89:d8:96:e4: 6d:01:1d:65:e4:13:75:1a:02:3b:42:90:a1:6a:72: dd:7d:43:33:54:1c:cc:ad:35:0c:e3:91:b6:4d:9d: b9:a4:36:42:0c:3f:9d:26:1f:2d:35:54:02:21:07: 4f:7d:48:1d:5c:2b:ee:e7:49:51:42:6d:c4:0f:6a: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CE:9A:89:CA:BA:74:E2:3F:78:0D:8A:C5:E3:AA:73:7B:6D:71:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/3eff0cfa-371f-32f7-9a45-34628c453640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 108.171.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ad:0e:c3:8c:18:5e:5c:ac:bf:cb:fa:10:f3:04:16:b7:52: 01:c3:bc:99:a0:a2:a5:6d:a9:8f:0f:d5:86:4d:63:01:09:35: ea:a3:35:2c:6c:31:d6:4d:92:e8:66:08:da:a8:d9:8b:c9:8e: 0b:4d:3f:41:78:2a:34:be:68:63:c8:d7:b9:7a:5d:67:bf:16: 4f:b1:2f:c5:a3:c4:b0:94:b0:92:9c:f3:66:71:0a:54:f1:8a: f4:ba:9d:75:8e:60:82:2e:42:d7:3f:d7:03:64:2f:cb:61:5d: 05:6e:6c:bc:72:48:a0:90:1d:21:d1:92:08:25:b9:9b:b2:ef: 28:2a:eb:ab:b9:8f:c8:d0:f3:1f:c4:3b:f0:b2:67:7f:6b:1c: c1:a8:99:0e:8c:47:05:ce:1f:d1:99:12:c6:17:93:a5:f9:8d: 61:e2:38:8d:2d:65:62:67:64:c6:65:08:e4:50:a0:b5:ef:ee: 00:12:0d:8c:83:2e:4f:d6:c8:ed:34:8d:a8:9d:3f:74:69:b2: 67:6c:2e:11:fc:7a:53:a0:76:e1:75:44:dc:c9:f5:9d:dc:4d: fd:20:20:16:28:f4:8f:ef:6b:45:96:5d:da:b8:c3:6f:06:f2: c9:77:fb:3f:ca:62:1c:79:ff:ac:4e:36:5d:87:47:4d:69:80: 99:9b:a4:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv0sKclZA1hZ8h9bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyMzE0MDAzOFoXDTI2MDIyMTE0MDAzOFowLzEtMCsGA1UEAxMk MGNkYzBkNmEtOWM2Zi00MGVhLWJlNjAtNTVhMjllYmFkNjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq38O1DOq1tL7BPCglajfhR3tO83v5fpbT4gh EPw81Eiyewr9IXuRVt1thAw82pA/O8Z7tjc4Fs+mDpYwGqKIwNiond7pfBWiq+J4 R07fVxKL8/bpOqi1SVNWQUoeafZsKzxeGmwpSkWUY1zz+iUM0zRIfjY7YC7TTKGu qMf/tw69lGlVUyoTuYxU4zqpu3P6cr8EIv07e4Mw73pRTXT3aCi3bOxgoIF151Nl DUMxyINI77N//yis2z13Y5m2gYnYluRtAR1l5BN1GgI7QpChanLdfUMzVBzMrTUM 45G2TZ25pDZCDD+dJh8tNVQCIQdPfUgdXCvu50lRQm3ED2qm5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/OmonKunTiP3gNisXjqnN7bXFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvM2VmZjBjZmEtMzcxZi0z MmY3LTlhNDUtMzQ2MjhjNDUzNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGtDsOMGF5crL/L+hDzBBa3UgHDvJmgoqVtqY8P1YZNYwEJNeqjNSxs MdZNkuhmCNqo2YvJjgtNP0F4KjS+aGPI17l6XWe/Fk+xL8WjxLCUsJKc82ZxClTx ivS6nXWOYIIuQtc/1wNkL8thXQVubLxySKCQHSHRkggluZuy7ygq66u5j8jQ8x/E O/CyZ39rHMGomQ6MRwXOH9GZEsYXk6X5jWHiOI0tZWJnZMZlCORQoLXv7gASDYyD Lk/WyO00jaidP3RpsmdsLhH8elOgduF1RNzJ9Z3cTf0gIBYo9I/va0WWXdq4w28G 8sl3+z/KYhx5/6xONl2HR01pgJmbpJI= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:36 2025 by rpki-client