This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa File: 9888496b-db63-3363-bfab-e35ab2a737a4.roa (raw, json) Hash identifier: F4Y+LpAak8Jl7dWgkn3NMPNZYYoFr3LSqj0ugK+rwXs= Subject key identifier: E2:7E:C5:1F:76:A0:1C:74:BE:33:86:EB:87:1E:07:95:31:96:51:D9 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF8E0ADD3C79FAA072840C400 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 11290 IP address blocks: 24.204.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:ad:d3:c7:9f:aa:07:28:40:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=a5939363-dcab-4a0c-b853-0ef498765505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:33:36:60:be:3b:a3:ab:51:22:04:76:e6:31: bf:01:df:50:23:d9:79:0a:1a:2b:d8:96:b3:fc:f1: 4c:d6:f2:2c:81:fa:13:bc:86:fa:0c:c6:13:33:6d: 51:27:3e:4c:51:03:e5:9a:3a:53:5d:c8:b9:bd:a8: 86:c4:fe:a2:6e:cb:a9:e6:d0:2c:f5:b8:77:04:d6: c5:c0:1e:f3:c1:4a:41:c4:c4:7a:5f:e6:a9:d6:5b: f4:b5:92:df:f5:89:d7:a9:1e:c4:78:2b:d2:dc:b9: 1f:18:be:71:ee:3a:e3:aa:f3:18:86:ce:11:ee:ba: 9a:0e:0a:15:b3:a6:3f:96:e0:e8:31:42:30:73:ec: 32:be:60:ca:31:0e:44:7c:cd:df:cd:fe:ab:ba:33: cc:93:68:33:3d:16:2d:dc:e5:3c:b6:d0:1f:33:78: 1e:7b:df:c7:2e:f8:3d:23:25:f3:9a:fc:32:17:8d: 92:f2:c8:33:1e:2a:03:68:00:21:18:f2:86:40:ca: 7f:29:59:ef:7e:64:b8:5e:1a:9b:e7:83:3b:7c:d8: 3c:f0:1c:5d:a1:b9:a7:bf:1a:d3:9e:9c:60:2d:9e: c5:aa:39:a5:b4:e4:2b:df:6b:07:ed:16:83:5f:bc: 5b:49:61:48:55:63:c7:1b:e3:ca:ea:f8:46:b1:d3: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:7E:C5:1F:76:A0:1C:74:BE:33:86:EB:87:1E:07:95:31:96:51:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/9888496b-db63-3363-bfab-e35ab2a737a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.204.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b0:9a:a2:c2:8a:78:26:9a:74:32:7e:09:3c:75:aa:0c:c5: ca:69:73:b5:be:a4:8c:dc:a8:d8:aa:9d:2c:2c:46:85:99:02: d4:c4:64:21:4f:fe:53:c9:29:98:6e:db:0e:bd:1a:bf:b0:bf: fa:55:a8:61:92:7f:c9:85:6a:51:79:7b:9d:ea:ca:a5:eb:17: 5e:e5:48:68:c4:25:f1:d3:d0:17:12:e1:07:77:0f:cd:65:fc: 22:cd:04:e4:df:a6:6f:f0:95:c1:ad:cd:23:e8:4e:dd:e8:f9: 15:69:ec:9e:7e:05:1c:13:9c:17:87:72:2f:bd:da:b0:61:9b: a9:90:6b:01:bf:ae:21:46:94:d4:8b:a4:81:2f:a5:8c:03:3b: 8e:16:e7:13:3b:ae:d5:a2:80:4e:86:fb:59:36:6a:c3:0b:b4: 9f:ab:02:f6:7c:17:4c:82:80:31:ca:8c:46:a6:a9:bf:62:09: c7:62:3f:3e:c4:2f:2a:c7:4e:71:53:2a:46:c1:88:76:b9:3d: 8a:b2:ca:26:eb:19:6e:e2:d9:58:09:83:75:06:17:14:1a:cd: 25:b8:9f:d0:cc:e0:be:fd:38:b5:6c:b1:fc:f6:08:ee:84:2a: 06:07:fe:be:e4:02:5a:a2:d2:83:5f:4b:88:be:9c:c1:d5:fb: c0:36:84:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44K3Tx5+qByhAxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk YTU5MzkzNjMtZGNhYi00YTBjLWI4NTMtMGVmNDk4NzY1NTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDM2YL47o6tRIgR25jG/Ad9QI9l5Chor2Jaz /PFM1vIsgfoTvIb6DMYTM21RJz5MUQPlmjpTXci5vaiGxP6ibsup5tAs9bh3BNbF wB7zwUpBxMR6X+ap1lv0tZLf9YnXqR7EeCvS3LkfGL5x7jrjqvMYhs4R7rqaDgoV s6Y/luDoMUIwc+wyvmDKMQ5EfM3fzf6rujPMk2gzPRYt3OU8ttAfM3gee9/HLvg9 IyXzmvwyF42S8sgzHioDaAAhGPKGQMp/KVnvfmS4Xhqb54M7fNg88BxdobmnvxrT npxgLZ7FqjmltOQr32sH7RaDX7xbSWFIVWPHG+PK6vhGsdN1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJ+xR92oBx0vjOG64ceB5UxllHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvOTg4ODQ5NmItZGI2My0z MzYzLWJmYWItZTM1YWIyYTczN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGMyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOwmqLCingmmnQyfgk8daoMxcppc7W+pIzcqNiqnSwsRoWZAtTEZCFP /lPJKZhu2w69Gr+wv/pVqGGSf8mFalF5e53qyqXrF17lSGjEJfHT0BcS4Qd3D81l /CLNBOTfpm/wlcGtzSPoTt3o+RVp7J5+BRwTnBeHci+92rBhm6mQawG/riFGlNSL pIEvpYwDO44W5xM7rtWigE6G+1k2asMLtJ+rAvZ8F0yCgDHKjEamqb9iCcdiPz7E LyrHTnFTKkbBiHa5PYqyyibrGW7i2VgJg3UGFxQazSW4n9DM4L79OLVssfz2CO6E KgYH/r7kAlqi0oNfS4i+nMHV+8A2hC0= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:37 2025 by rpki-client