This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa File: 7760cdcc-f2fa-35a4-8043-b43fd903c644.roa (raw, json) Hash identifier: I7SzOkWwvTSFFSruTmVxECIm473Z77srHwnSbvtep9k= Subject key identifier: A0:2C:2E:BB:51:53:0A:71:18:3B:96:A0:2E:88:AD:41:45:E4:E4:28 Certificate issuer: /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8 Certificate serial: 010D0C9F4328584AF9D137EEEFFC4F2003BF1D40 Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 10779 IP address blocks: 23.161.104.0/24 maxlen: 24 192.104.136.0/24 maxlen: 24 2602:f590::/36 maxlen: 48 2620:be:a000::/48 maxlen: 48 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:d1:37:ee:ef:fc:4f:20:03:bf:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=593a0ca7-d0c0-46e6-9acf-e3c073a6b129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:18:2b:81:38:e9:8c:56:f4:61:dc:d2:cb: 34:0b:86:6e:82:8f:c8:85:9b:82:ed:5b:7a:04:df: 4a:83:ce:5d:2c:95:bc:65:34:5c:a5:99:f6:06:f5: 00:3e:37:5f:55:5b:7a:cd:43:03:5f:73:de:58:bf: 56:18:26:78:d5:32:02:ca:b9:0d:2d:b5:6c:10:05: 88:91:2c:06:0c:d0:f2:e3:8c:e4:81:5f:bb:4d:84: da:3a:cc:bd:5b:23:87:57:3e:dd:2a:8e:2c:61:e5: cd:5f:2c:6f:ee:97:89:4a:de:8c:1d:1c:0e:e8:a5: cc:a5:69:28:ca:82:78:65:4a:46:ac:2e:9d:bc:ed: 6c:e1:2a:77:be:b3:1f:56:7f:9a:41:43:84:cf:e6: 88:0f:01:09:ac:38:53:c5:1c:b6:7f:8b:10:fa:b7: e5:46:d8:80:5a:fe:86:19:56:62:e5:bc:0a:d8:d5: e3:2b:18:87:33:92:75:ab:06:03:56:d8:3e:83:2a: 67:2c:97:91:a8:73:43:c1:a8:68:fe:14:b9:60:52: 73:05:3d:fb:5a:bc:5e:1c:25:3b:e5:87:be:1f:d6: 3d:38:42:d7:55:af:12:b8:ce:27:dd:92:0e:2e:76: a6:57:81:ef:63:44:f0:18:6d:65:99:cf:14:c8:e9: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:2E:BB:51:53:0A:71:18:3B:96:A0:2E:88:AD:41:45:E4:E4:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/7760cdcc-f2fa-35a4-8043-b43fd903c644.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl X509v3 Authority Key Identifier: keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer sbgp-ipAddrBlock: critical IPv4: 23.161.104.0/24 192.104.136.0/24 IPv6: 2602:f590::/36 2620:be:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ac:76:6c:56:91:59:22:f1:3f:f4:7e:f4:ca:c1:b0:57:e4: ee:62:2d:a0:41:fb:38:60:9a:5f:4f:0f:5b:55:03:7e:e3:d5: 37:3d:34:04:fe:46:6f:46:8a:5d:59:5c:9b:a9:7d:81:6a:c1: 96:a6:fe:59:45:f2:17:01:83:6c:f7:17:6b:b8:f3:e5:48:a3: 29:06:df:19:7a:e0:32:31:a1:13:d2:64:ad:2e:12:b8:71:17: 4e:a3:25:9c:12:81:06:32:be:fb:08:69:4f:86:07:7c:a0:d8: 00:40:6a:c8:9d:c8:69:32:a0:1a:55:06:18:b0:53:1e:c4:66: 64:b5:bb:d5:6a:ad:98:d8:f6:5c:06:ac:69:dd:96:8e:22:b6: 13:3c:08:8c:3a:30:f7:61:c3:2f:32:cb:a9:71:b6:56:a8:5d: a6:37:17:94:20:9d:dd:3b:d6:c1:e8:1d:aa:f5:cc:b7:38:ec: 95:de:4a:b4:2d:c8:5a:fe:eb:df:19:30:3c:60:32:1b:22:5f: 54:2f:1e:6b:98:39:8f:dc:94:ae:45:39:87:e7:6e:b6:9c:f1: 5e:8c:64:ab:a6:e0:d5:90:a5:69:49:e5:18:5d:89:48:6f:7c: a2:28:90:16:5c:f6:dd:4b:43:11:44:07:87:ef:71:ee:3f:c6: cf:30:f6:44 -----BEGIN CERTIFICATE----- MIIGYjCCBUqgAwIBAgIUAQ0Mn0MoWEr50Tfu7/xPIAO/HUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQyMGJhYjEtMTFlZi00ZjQyLWE3MTgtYzBiNzI3ZGZj MmY4MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTkzYTBjYTctZDBjMC00NmU2LTlhY2YtZTNjMDczYTZiMTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfYYK4E46YxW9GHc0ss0C4Zugo/IhZuC7Vt6 BN9Kg85dLJW8ZTRcpZn2BvUAPjdfVVt6zUMDX3PeWL9WGCZ41TICyrkNLbVsEAWI kSwGDNDy44zkgV+7TYTaOsy9WyOHVz7dKo4sYeXNXyxv7peJSt6MHRwO6KXMpWko yoJ4ZUpGrC6dvO1s4Sp3vrMfVn+aQUOEz+aIDwEJrDhTxRy2f4sQ+rflRtiAWv6G GVZi5bwK2NXjKxiHM5J1qwYDVtg+gypnLJeRqHNDwaho/hS5YFJzBT37WrxeHCU7 5Ye+H9Y9OELXVa8SuM4n3ZIOLnamV4HvY0TwGG1lmc8UyOmUowIDAQABo4IDdDCC A3AwHQYDVR0OBBYEFKAsLrtRUwpxGDuWoC6IrUFF5OQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIw YmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3MjdkZmMyZjgvNzc2MGNkY2MtZjJmYS0z NWE0LTgwNDMtYjQzZmQ5MDNjNjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQyMGJhYjEtMTFlZi00ZjQyLWE3 MTgtYzBiNzI3ZGZjMmY4L2FkMjBiYWIxLTExZWYtNGY0Mi1hNzE4LWMwYjcyN2Rm YzJmOC5jcmwwHwYDVR0jBBgwFoAUt/Jr1nLOfEAA2aZun6Gx8MAiAHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3 MjdkZmMyZjguY2VyMD4GCCsGAQUFBwEHAQH/BC8wLTASBAIAATAMAwQAF6FoAwQA wGiIMBcEAgACMBEDBgQmAvWQAAMHACYgAL6gADBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKrHZsVpFZIvE/ 9H70ysGwV+TuYi2gQfs4YJpfTw9bVQN+49U3PTQE/kZvRopdWVybqX2BasGWpv5Z RfIXAYNs9xdruPPlSKMpBt8ZeuAyMaET0mStLhK4cRdOoyWcEoEGMr77CGlPhgd8 oNgAQGrInchpMqAaVQYYsFMexGZktbvVaq2Y2PZcBqxp3ZaOIrYTPAiMOjD3YcMv MsupcbZWqF2mNxeUIJ3dO9bB6B2q9cy3OOyV3kq0Lcha/uvfGTA8YDIbIl9ULx5r mDmP3JSuRTmH5262nPFejGSrpuDVkKVpSeUYXYlIb3yiKJAWXPbdS0MRRAeH73Hu P8bPMPZE -----END CERTIFICATE-----Generated at Thu Dec 18 23:10:20 2025 by rpki-client