This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa File: b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa (raw, json) Hash identifier: mMH0yx8jIARIzf1ZCYx2t+xfFs/UFDNcgzAPI/gYFNs= Subject key identifier: 5B:3E:7F:4C:3F:CF:79:B5:92:8B:AB:E7:82:F7:0C:74:55:3F:59:62 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF1E5E8756FF967AA1A5DCC40 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 11290 IP address blocks: 216.228.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e8:75:6f:f9:67:aa:1a:5d:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=b414f822-0753-4a35-91f4-622b55e72838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:f8:c6:42:93:e0:9d:71:7b:26:3c:1b:c0: 89:56:17:90:39:57:de:68:0e:71:7a:12:6e:80:bb: 44:d2:55:c6:78:da:7f:62:1e:f1:93:3a:9d:6d:7d: a7:26:2a:f0:4a:38:db:ad:b5:e6:dd:46:d1:84:27: 30:c5:aa:e0:09:78:3d:fd:c4:cd:44:92:79:cf:d7: 3f:9f:23:2f:f8:43:35:26:00:d7:38:e3:52:65:60: 9f:07:95:44:3d:c3:ae:fe:19:b1:be:e3:0e:19:9e: 9c:6c:fb:e6:c6:71:35:77:a9:d9:c4:66:39:f0:1b: ca:94:b9:16:9d:86:dd:bb:fe:c7:0e:72:0a:92:a9: 55:4c:ae:02:60:17:78:65:6c:03:a3:bf:5a:24:07: 0b:4f:af:8a:42:b7:75:d3:51:f5:4a:85:99:33:f5: e7:5c:0b:0c:d7:a7:d6:54:ed:fa:e6:8f:8a:71:e6: 00:e4:58:d4:c8:cb:f3:3f:08:6c:b5:8b:86:21:12: 12:aa:3a:7c:88:94:7f:36:fa:9b:df:4e:f4:90:6a: 2e:f4:7d:1a:8e:eb:c6:3e:6e:60:ab:90:32:d4:e4: 67:43:87:2e:55:64:96:93:8c:9d:ab:69:a4:55:03: ac:6b:06:20:53:e3:74:2e:37:d2:08:58:9d:b7:2a: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3E:7F:4C:3F:CF:79:B5:92:8B:AB:E7:82:F7:0C:74:55:3F:59:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b2e2fc8a-1f36-314e-9301-ebfc9fbbb48b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 216.228.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:25:22:c2:05:97:9e:03:35:a2:6d:ff:61:2e:1e:34:28:a2: d6:a2:23:46:10:cb:61:eb:cc:3a:cc:15:1c:39:44:7f:a9:4e: 71:5c:b0:d5:76:b0:1e:c1:7d:7b:5c:54:26:a6:aa:9b:e9:be: 10:1b:8f:f9:03:34:9a:5c:18:73:1d:83:e0:6d:ae:2a:71:0b: e7:8e:78:80:df:9c:5d:f0:87:bd:ba:c9:a3:c5:fa:15:7b:7a: b9:e9:ee:68:4a:e3:75:a5:8d:20:eb:c1:98:bc:33:f9:88:9a: 52:ef:b1:db:50:63:5f:57:97:6f:02:d7:44:ff:24:07:f9:4e: 7d:48:f5:e6:c8:24:78:a2:8b:a7:59:45:3f:5a:ae:30:78:66: 63:5e:42:8a:73:bf:ee:cf:b2:c3:30:64:d3:9d:5a:8a:23:41: 67:6f:2a:3c:3a:bd:5a:72:a1:b1:a2:ae:2c:94:ee:a3:af:d5: 2a:e6:d0:0c:37:36:54:c0:1a:48:90:20:3b:29:e9:c4:34:5d: 91:11:e5:50:34:97:f8:0c:1a:2b:46:0a:be:98:b0:ac:f8:5d: 06:7a:32:00:d9:bd:0d:3a:17:43:57:0d:41:3c:fd:b4:47:64: 9a:f6:23:27:79:80:0a:18:54:5f:d8:88:bd:bf:b1:f1:db:d6: 49:c9:5c:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5eh1b/lnqhpdzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk YjQxNGY4MjItMDc1My00YTM1LTkxZjQtNjIyYjU1ZTcyODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne34xkKT4J1xeyY8G8CJVheQOVfeaA5xehJu gLtE0lXGeNp/Yh7xkzqdbX2nJirwSjjbrbXm3UbRhCcwxargCXg9/cTNRJJ5z9c/ nyMv+EM1JgDXOONSZWCfB5VEPcOu/hmxvuMOGZ6cbPvmxnE1d6nZxGY58BvKlLkW nYbdu/7HDnIKkqlVTK4CYBd4ZWwDo79aJAcLT6+KQrd101H1SoWZM/XnXAsM16fW VO365o+KceYA5FjUyMvzPwhstYuGIRISqjp8iJR/Nvqb3070kGou9H0ajuvGPm5g q5Ay1ORnQ4cuVWSWk4ydq2mkVQOsawYgU+N0LjfSCFidtyqRfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs+f0w/z3m1kour54L3DHRVP1liMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjJlMmZjOGEtMWYzNi0z MTRlLTkzMDEtZWJmYzlmYmJiNDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQlIsIFl54DNaJt/2EuHjQootaiI0YQy2HrzDrMFRw5RH+pTnFcsNV2 sB7BfXtcVCamqpvpvhAbj/kDNJpcGHMdg+BtripxC+eOeIDfnF3wh726yaPF+hV7 ernp7mhK43WljSDrwZi8M/mImlLvsdtQY19Xl28C10T/JAf5Tn1I9ebIJHiii6dZ RT9arjB4ZmNeQopzv+7PssMwZNOdWoojQWdvKjw6vVpyobGiriyU7qOv1Srm0Aw3 NlTAGkiQIDsp6cQ0XZER5VA0l/gMGitGCr6YsKz4XQZ6MgDZvQ06F0NXDUE8/bRH ZJr2Iyd5gAoYVF/YiL2/sfHb1knJXHQ= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:51 2025 by rpki-client