This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa File: b5f5f32e-5188-314d-a26e-19c0504c484c.roa (raw, json) Hash identifier: oYbTqcBuXGUF3+5XrAqZ79sYxKQGXMjLZ/vJdipJ5PA= Subject key identifier: B1:E2:79:F9:66:24:D1:73:69:2A:E0:AD:57:97:69:41:30:A4:6D:35 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F4328584BF1E5E837A55E3AE46DE82F80 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 11290 IP address blocks: 209.54.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e8:37:a5:5e:3a:e4:6d:e8:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=438cfac4-0f4a-4211-9722-d7fa41c46615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:95:35:d0:d2:d6:88:81:3e:d7:61:92:01: 32:f6:f9:09:45:72:7e:72:9b:e6:b6:25:f4:0b:18: ef:5e:25:be:11:46:c6:33:73:b3:82:4a:87:77:fe: 2b:78:a4:ec:05:68:f7:a5:15:2e:89:7b:db:8c:94: b4:6d:bd:e9:1a:27:a5:c7:3d:13:d1:1b:85:d6:d9: ca:d7:f7:c1:d8:da:f6:64:c4:9d:71:2c:07:2a:bb: 59:46:54:bc:27:f9:8e:8d:f2:be:32:29:f8:ff:44: 22:0f:a8:c5:28:51:d5:a6:78:55:30:b2:f5:44:e4: 2d:86:b2:62:ef:78:7e:3e:b0:01:1b:10:1c:fe:00: f0:b9:1d:71:a2:17:46:db:df:fc:9a:7e:c9:1e:9a: d3:26:ce:e3:ca:ad:75:df:e0:77:6f:63:47:44:22: ad:0e:02:1c:e2:79:c5:4c:5a:02:6f:e0:05:a1:8f: 80:3c:f8:41:8e:93:d7:ee:7b:16:fa:9d:73:d8:2f: f9:2f:ad:f2:f3:8b:bc:8a:85:65:bf:2e:05:db:e3: eb:48:12:0c:ba:cd:b0:71:eb:af:56:59:a5:d0:2a: f0:74:d6:99:6e:54:db:ba:e0:97:af:08:65:de:c4: 8b:57:04:31:6d:d4:2e:8d:62:20:b4:30:77:5f:6a: ea:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:79:F9:66:24:D1:73:69:2A:E0:AD:57:97:69:41:30:A4:6D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/b5f5f32e-5188-314d-a26e-19c0504c484c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 209.54.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:20:22:77:e4:62:95:82:7d:d6:b4:ad:c1:57:0e:c2:a1:b5: 45:91:46:39:30:6c:78:a9:4b:7c:a1:83:de:27:1c:1a:9a:b9: 5d:5b:5f:95:1c:55:79:c3:ab:bc:a9:a7:11:b5:12:96:2a:59: 49:38:5e:78:7d:88:f3:8a:41:ee:91:45:3e:40:14:15:56:8d: 65:27:50:ba:78:ea:90:fa:23:68:cf:6e:6f:e2:2b:63:d7:91: 37:5d:5b:a0:cb:7b:a5:b0:7f:99:80:e5:d7:0d:b1:c6:cc:c7: 63:6d:03:56:19:e0:4b:1d:0d:be:cc:fa:e4:a4:0d:81:ef:62: 48:20:a1:ae:b1:93:57:3f:05:4a:73:36:b7:4e:e8:8c:92:97: bb:42:6e:90:38:4c:02:55:12:dc:f2:70:e4:64:2c:f8:17:bb: 17:e2:59:24:de:22:f7:27:ae:c9:55:3b:12:d6:4e:29:33:f7: a1:b0:b3:78:e8:a3:58:26:a0:c9:db:ee:ff:5b:36:06:ef:3c: 0d:26:6f:f3:58:74:1d:06:99:fc:18:3c:c4:a6:5a:59:bf:0b: de:96:9e:01:9d:d3:11:0a:6a:fb:6b:27:0a:33:49:9d:2d:90: d9:d1:1e:74:fc:37:8f:47:8d:1b:4b:7d:b1:a0:c4:3a:5f:8d: b3:6b:9c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5eg3pV465G3oL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk NDM4Y2ZhYzQtMGY0YS00MjExLTk3MjItZDdmYTQxYzQ2NjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0iVNdDS1oiBPtdhkgEy9vkJRXJ+cpvmtiX0 CxjvXiW+EUbGM3OzgkqHd/4reKTsBWj3pRUuiXvbjJS0bb3pGielxz0T0RuF1tnK 1/fB2Nr2ZMSdcSwHKrtZRlS8J/mOjfK+Min4/0QiD6jFKFHVpnhVMLL1ROQthrJi 73h+PrABGxAc/gDwuR1xohdG29/8mn7JHprTJs7jyq113+B3b2NHRCKtDgIc4nnF TFoCb+AFoY+APPhBjpPX7nsW+p1z2C/5L63y84u8ioVlvy4F2+PrSBIMus2wceuv Vlml0CrwdNaZblTbuuCXrwhl3sSLVwQxbdQujWIgtDB3X2rq/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHieflmJNFzaSrgrVeXaUEwpG01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvYjVmNWYzMmUtNTE4OC0z MTRkLWEyNmUtMTljMDUwNGM0ODRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0TZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkgInfkYpWCfda0rcFXDsKhtUWRRjkwbHipS3yhg94nHBqauV1bX5Uc VXnDq7yppxG1EpYqWUk4Xnh9iPOKQe6RRT5AFBVWjWUnULp46pD6I2jPbm/iK2PX kTddW6DLe6Wwf5mA5dcNscbMx2NtA1YZ4EsdDb7M+uSkDYHvYkggoa6xk1c/BUpz NrdO6IySl7tCbpA4TAJVEtzycORkLPgXuxfiWSTeIvcnrslVOxLWTikz96Gws3jo o1gmoMnb7v9bNgbvPA0mb/NYdB0GmfwYPMSmWlm/C96WngGd0xEKavtrJwozSZ0t kNnRHnT8N49HjRtLfbGgxDpfjbNrnJQ= -----END CERTIFICATE-----Generated at Sun Dec 7 13:04:35 2025 by rpki-client