This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa File: 27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json) Hash identifier: GBLkPRE3jbZhoNPjJVmK8KmgCQNssTbTSG4TOUai9n8= Subject key identifier: A4:12:B5:37:99:6E:FA:F5:51:9C:AF:A1:6F:50:57:DA:BF:F6:31:E3 Certificate issuer: /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Certificate serial: 010D0C9F4328584BD5FB26C124E024CD8BA91600 Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 393433 IP address blocks: 162.254.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:26:c1:24:e0:24:cd:8b:a9:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=5d331d02-55f2-4fdd-b9f3-defaca30c486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:44:27:26:0a:b0:1b:18:86:c0:d2:7f:54:49: 57:dd:4a:df:bd:47:b1:90:7c:4a:1c:d4:e4:c8:27: 91:b4:2f:f0:ce:b3:75:9d:d2:ad:e4:86:5a:05:00: 2f:27:fd:a0:ae:0e:9b:f0:36:89:0e:13:92:95:dd: 5f:20:99:b1:2e:89:dd:28:6c:b0:5b:7b:ab:6e:88: 48:3c:05:49:5d:f5:08:03:52:49:7a:4e:07:e2:ef: ce:8d:88:f3:6a:c1:e8:b8:b6:cd:18:b1:c5:c5:89: 34:73:97:c0:09:63:83:d1:8e:50:0b:f4:1a:fe:8a: 3c:bd:77:7d:cd:db:e7:39:45:b4:3f:59:2b:6c:59: 50:73:a2:49:4c:27:d3:2c:ec:c0:f1:82:22:12:7a: 85:70:fc:e4:26:8d:c2:92:5b:a4:b4:d9:b7:f3:83: 37:de:95:03:5f:c0:99:52:e2:48:6b:e6:ee:d3:12: ac:df:29:b5:5c:8d:77:e1:3d:05:30:f8:b6:03:c7: 97:cb:96:0a:b6:31:b3:f6:dd:f9:c3:6d:90:b7:1f: 88:46:7e:7e:f4:1c:56:f0:b6:4b:e3:4a:31:c1:1b: f8:d6:b9:75:b8:a9:13:2f:25:b7:16:7f:74:9c:13: 12:ed:e1:74:95:79:79:ea:da:1e:61:4d:2c:3f:7e: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:12:B5:37:99:6E:FA:F5:51:9C:AF:A1:6F:50:57:DA:BF:F6:31:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl X509v3 Authority Key Identifier: keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer sbgp-ipAddrBlock: critical IPv4: 162.254.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bf:2d:d6:04:07:43:71:88:77:3a:c4:5e:cd:d2:cd:da:6a: bb:75:aa:25:42:15:ef:63:e7:d7:8c:df:51:60:0c:ca:e4:76: 44:cf:ea:d5:80:d0:0a:0b:56:63:b6:b6:e5:13:de:52:61:51: df:0c:80:2c:e8:45:63:34:10:ee:fc:a4:1e:53:91:59:09:10: 52:19:fb:fd:91:64:16:1f:56:c8:84:3c:0c:96:5c:ea:51:b8: 2b:bb:38:c9:8b:3c:52:56:90:b3:8e:47:50:8f:31:33:60:bd: 73:54:1d:f0:cd:dd:5f:1a:f9:60:0d:c8:a2:f7:1f:ef:2b:fa: 11:e0:9a:d6:20:c8:4b:0f:8d:86:6c:b0:40:c4:c7:ea:8c:12: c7:87:16:77:4e:69:da:e1:8a:68:ac:1b:7f:a3:f5:e0:5a:4a: 9b:db:bb:51:38:8b:62:a2:98:36:4f:68:f8:be:bf:a5:b2:d3: 43:69:32:67:4b:0f:25:ab:4b:9f:e0:90:82:5c:23:3c:70:53: 6b:a4:0f:ad:96:89:28:55:82:7b:13:4e:e8:c4:b2:4a:f7:f7: aa:dc:45:1d:bf:b9:f5:20:94:d6:3b:39:cf:e3:7c:63:1e:56: be:4f:4d:18:e3:a7:d1:d2:4c:c8:c7:75:99:b9:31:c0:e5:2a: 45:61:a4:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+ybBJOAkzYupFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYxZmFjYjAtZDljOS00ZDliLThiZmEtMTdkNTQxNjhk NDA3MB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk NWQzMzFkMDItNTVmMi00ZmRkLWI5ZjMtZGVmYWNhMzBjNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0QnJgqwGxiGwNJ/VElX3UrfvUexkHxKHNTk yCeRtC/wzrN1ndKt5IZaBQAvJ/2grg6b8DaJDhOSld1fIJmxLondKGywW3urbohI PAVJXfUIA1JJek4H4u/OjYjzasHouLbNGLHFxYk0c5fACWOD0Y5QC/Qa/oo8vXd9 zdvnOUW0P1krbFlQc6JJTCfTLOzA8YIiEnqFcPzkJo3CkluktNm384M33pUDX8CZ UuJIa+bu0xKs3ym1XI134T0FMPi2A8eXy5YKtjGz9t35w22Qtx+IRn5+9BxW8LZL 40oxwRv41rl1uKkTLyW3Fn90nBMS7eF0lXl56toeYU0sP347DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQStTeZbvr1UZyvoW9QV9q/9jHjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NjFm YWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1NDE2OGQ0MDcvMjdkZmEzNGUtZTk5Yi0z YTk1LWFmYWMtZjk4MzM1MGZhMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTYxZmFjYjAtZDljOS00ZDliLThi ZmEtMTdkNTQxNjhkNDA3Lzk2MWZhY2IwLWQ5YzktNGQ5Yi04YmZhLTE3ZDU0MTY4 ZDQwNy5jcmwwHwYDVR0jBBgwFoAUAbAFnXjUQnmVqx96qbqDpnqmwnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NjFmYWNiMC1kOWM5LTRkOWItOGJmYS0xN2Q1 NDE2OGQ0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov70MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm/LdYEB0NxiHc6xF7N0s3aart1qiVCFe9j59eM31FgDMrkdkTP6tWA 0AoLVmO2tuUT3lJhUd8MgCzoRWM0EO78pB5TkVkJEFIZ+/2RZBYfVsiEPAyWXOpR uCu7OMmLPFJWkLOOR1CPMTNgvXNUHfDN3V8a+WANyKL3H+8r+hHgmtYgyEsPjYZs sEDEx+qMEseHFndOadrhimisG3+j9eBaSpvbu1E4i2KimDZPaPi+v6Wy00NpMmdL DyWrS5/gkIJcIzxwU2ukD62WiShVgnsTTujEskr396rcRR2/ufUglNY7Oc/jfGMe Vr5PTRjjp9HSTMjHdZm5McDlKkVhpAs= -----END CERTIFICATE-----Generated at Thu Dec 11 23:14:36 2025 by rpki-client