This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa File: 65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa (raw, json) Hash identifier: M1DzsBqJfo3ZRKJ19lnEhA4aG8tLenb6SIUeSuaOsyY= Subject key identifier: 29:42:5D:7E:BD:50:B7:43:BE:75:47:95:BC:E3:8F:04:3C:AE:97:80 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF1E5E84B2BE415249A25FB40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 11290 IP address blocks: 209.169.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e8:4b:2b:e4:15:24:9a:25:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=3055bcee-d9ef-4a5f-b710-5c0600768d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:74:b8:9e:d2:1b:47:c8:9e:47:9a:35:e7: 54:7c:1f:4e:37:a1:44:23:44:ef:ec:c6:0f:51:14: 7f:37:fc:7b:5b:04:a7:59:d7:45:a6:5c:93:b5:0a: ad:23:34:8c:a2:a3:67:79:ee:06:3f:4d:59:f0:04: d6:9b:33:99:6d:22:65:88:9e:62:cb:62:be:4e:53: 70:d3:b1:dd:56:0a:dc:93:40:a7:ff:b9:00:26:b6: e2:97:10:b7:05:6d:6e:7e:95:c3:10:0d:56:45:55: a7:37:60:f6:93:12:0e:96:d8:3d:ab:b0:98:c6:f1: 76:ab:0b:42:3e:b1:15:55:3d:af:02:4c:44:e1:77: 45:6a:0d:66:e4:3b:11:a0:9e:2b:13:19:6d:67:ce: 99:c8:e4:be:5a:6c:76:89:b9:0a:bc:c7:91:a0:cc: 4b:fe:13:c4:07:34:e0:5c:17:28:bd:9c:34:b3:00: f8:58:78:2b:f0:7f:c9:33:ce:de:a1:ca:14:84:eb: 41:e5:65:fa:9b:8a:96:85:20:9a:83:74:a1:ea:81: b9:c6:c1:59:e0:a2:39:df:15:ed:8c:ea:be:9b:ac: 9a:f5:f2:8f:ea:75:4c:95:21:38:15:70:c5:d1:95: 56:a9:1e:e3:1f:c7:62:d0:8d:a1:4a:cb:b6:03:90: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:5D:7E:BD:50:B7:43:BE:75:47:95:BC:E3:8F:04:3C:AE:97:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/65bf8a28-d3a7-3e35-a160-27bfaacde3df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.169.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:d4:db:38:c7:44:36:b1:2c:dc:87:65:0b:0c:3f:1b:25:2a: c8:6c:7d:f6:1e:06:c1:3c:49:e1:94:04:d1:94:b2:e0:42:b1: 7e:92:2a:3b:ef:b5:36:5f:6e:96:5b:2a:bc:24:73:46:65:78: 36:d5:b8:4c:be:35:68:f1:8c:24:7c:52:65:27:a8:b2:66:b5: aa:55:07:97:7b:ad:a9:bd:4a:b0:19:88:dc:c1:9b:f5:b3:9f: 77:5d:62:e4:de:1f:90:4b:33:ba:46:a7:0a:35:80:21:b1:9e: 92:f4:0c:1d:45:dd:92:bc:09:63:6f:10:54:8e:5a:32:88:a0: 9e:56:9f:ea:3b:f5:7a:df:6a:45:8f:18:cc:71:63:af:da:a5: 7e:23:88:19:8b:b5:6e:fa:84:f2:a2:0b:7d:a3:59:e1:30:46: f9:cd:80:12:ef:6b:e2:e0:da:54:b2:7b:5e:e9:f4:ed:5e:e4: 43:51:fe:6e:33:01:9c:5c:35:70:08:a3:0f:0a:f3:b9:17:c7: 67:67:88:64:6c:cf:15:1c:0b:cc:0b:8f:3d:a1:76:ea:f4:c8: 3d:f4:22:58:7e:30:d7:73:bd:d5:9d:18:c9:bc:c4:2b:57:1a: ab:9d:6e:51:50:db:7b:70:21:eb:84:a9:b5:c7:0b:6c:fc:1b: 34:e1:6b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5ehLK+QVJJol+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk MzA1NWJjZWUtZDllZi00YTVmLWI3MTAtNWMwNjAwNzY4ZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB10uJ7SG0fInkeaNedUfB9ON6FEI0Tv7MYP URR/N/x7WwSnWddFplyTtQqtIzSMoqNnee4GP01Z8ATWmzOZbSJliJ5iy2K+TlNw 07HdVgrck0Cn/7kAJrbilxC3BW1ufpXDEA1WRVWnN2D2kxIOltg9q7CYxvF2qwtC PrEVVT2vAkxE4XdFag1m5DsRoJ4rExltZ86ZyOS+Wmx2ibkKvMeRoMxL/hPEBzTg XBcovZw0swD4WHgr8H/JM87eocoUhOtB5WX6m4qWhSCag3Sh6oG5xsFZ4KI53xXt jOq+m6ya9fKP6nVMlSE4FXDF0ZVWqR7jH8di0I2hSsu2A5DUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClCXX69ULdDvnVHlbzjjwQ8rpeAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvNjViZjhhMjgtZDNhNy0z ZTM1LWExNjAtMjdiZmFhY2RlM2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0amAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfU2zjHRDaxLNyHZQsMPxslKshsffYeBsE8SeGUBNGUsuBCsX6SKjvv tTZfbpZbKrwkc0ZleDbVuEy+NWjxjCR8UmUnqLJmtapVB5d7ram9SrAZiNzBm/Wz n3ddYuTeH5BLM7pGpwo1gCGxnpL0DB1F3ZK8CWNvEFSOWjKIoJ5Wn+o79XrfakWP GMxxY6/apX4jiBmLtW76hPKiC32jWeEwRvnNgBLva+Lg2lSye17p9O1e5ENR/m4z AZxcNXAIow8K87kXx2dniGRszxUcC8wLjz2hdur0yD30Ilh+MNdzvdWdGMm8xCtX GqudblFQ23twIeuEqbXHC2z8GzTha70= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:47 2025 by rpki-client