This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa File: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (raw, json) Hash identifier: 6CFdCWv6E87xD1DpMZaQchj2t0plV2tc/OF3BtEPqRc= Subject key identifier: 15:FD:F2:48:89:2F:A2:64:D4:C2:F7:B1:73:99:8B:17:4D:DC:E0:58 Certificate issuer: /CN=3bb548a9-e172-41a3-925a-609e931d0009 Certificate serial: 010D0C9F4328584BC96AF9F88FB9E2435F465300 Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa Signing time: Sat 08 Nov 2025 02:00:30 +0000 ROA not before: Sat 08 Nov 2025 02:00:30 +0000 ROA not after: Fri 06 Feb 2026 02:00:30 +0000 asID: 40460 IP address blocks: 199.182.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c9:6a:f9:f8:8f:b9:e2:43:5f:46:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009 Validity Not Before: Nov 8 02:00:30 2025 GMT Not After : Feb 6 02:00:30 2026 GMT Subject: CN=bde14a4b-4ca7-4af3-a28c-11dc5af736a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1b:89:23:2e:85:93:e3:cc:51:10:56:31:1b: 61:a2:1e:69:76:04:d9:f3:45:0a:48:07:8d:66:4d: 3d:76:27:42:d2:9c:b7:61:b9:85:9f:4e:6c:ff:6d: 90:02:25:ab:71:dd:59:84:0d:fe:2d:42:e1:1e:41: 99:41:9d:d8:9b:ed:9a:2d:d9:0d:f6:97:48:47:d4: 72:a6:84:2e:9e:8b:2f:97:af:91:9a:36:a2:1e:84: 41:c7:89:91:75:71:45:17:db:84:f0:92:66:a8:3c: a9:f3:13:3b:9f:ce:07:be:be:ea:8f:e8:64:b2:31: 03:b1:7b:ae:99:85:9b:1b:b5:43:94:5b:66:d8:c3: 90:b0:3b:a4:47:60:93:ae:46:8c:b6:44:73:8d:97: e9:29:7b:d0:d7:97:de:9b:0c:1d:a0:2d:0a:75:d2: 9e:e6:c5:b8:8f:8e:16:b2:dd:2b:9f:5c:55:f0:30: 71:fd:30:56:22:c3:34:56:af:c4:f4:a4:78:d3:2d: aa:f6:8b:81:ab:83:75:69:bc:ce:8d:2b:2f:9d:01: b5:de:fb:dc:e5:a7:bf:03:6f:f8:6a:18:11:75:3c: 1c:e5:04:21:f4:51:cd:6f:17:59:f6:e7:22:4f:95: d4:7a:2a:77:04:85:5f:38:2d:fd:24:5a:3e:c3:37: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FD:F2:48:89:2F:A2:64:D4:C2:F7:B1:73:99:8B:17:4D:DC:E0:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl X509v3 Authority Key Identifier: keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer sbgp-ipAddrBlock: critical IPv4: 199.182.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:d0:2e:cd:bd:80:a4:a9:13:82:36:2e:02:e6:88:57:ab:de: 18:88:89:19:45:a2:3b:3e:c5:8e:62:96:65:68:04:70:ad:2b: 7e:41:05:45:a4:01:a0:59:0b:1f:74:9c:f2:fb:9c:c3:39:6e: 38:34:06:27:92:2d:8b:09:32:ba:79:22:12:ea:bf:fb:c9:b9: fa:cf:f0:37:3e:7c:47:bc:12:04:58:cf:c4:ae:a6:70:77:37: 27:8a:ae:d6:88:4a:39:69:8a:28:8d:7b:f5:48:d1:f4:d6:e5: 91:43:57:fa:ef:9e:6f:da:be:4f:61:89:9b:4f:46:78:1f:1c: 7f:18:ec:21:77:3c:e5:18:8d:e0:e1:32:d5:8e:07:83:5f:f0: 06:64:4d:c9:0f:cb:5a:bd:48:3f:9e:bb:66:63:51:5f:ba:2a: b4:cb:22:37:f5:2d:71:f6:50:ab:88:63:50:c8:9d:1f:96:ca: c0:89:64:af:f4:13:91:41:5c:d9:d3:66:53:19:db:a1:b8:d1: e8:28:d1:b2:fe:d6:ce:e7:dc:25:ca:6f:f1:b9:3e:a2:cb:69: f0:24:f1:6a:7c:e8:ba:c8:d3:f8:72:24:b9:72:36:cb:f3:c7: c8:b4:3d:3b:55:7c:62:89:f4:82:a4:5e:c6:d0:62:f1:15:d9: a8:56:e3:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvJavn4j7niQ19GUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JiNTQ4YTktZTE3Mi00MWEzLTkyNWEtNjA5ZTkzMWQw MDA5MB4XDTI1MTEwODAyMDAzMFoXDTI2MDIwNjAyMDAzMFowLzEtMCsGA1UEAxMk YmRlMTRhNGItNGNhNy00YWYzLWEyOGMtMTFkYzVhZjczNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BuJIy6Fk+PMURBWMRthoh5pdgTZ80UKSAeN Zk09didC0py3YbmFn05s/22QAiWrcd1ZhA3+LULhHkGZQZ3Ym+2aLdkN9pdIR9Ry poQunosvl6+RmjaiHoRBx4mRdXFFF9uE8JJmqDyp8xM7n84Hvr7qj+hksjEDsXuu mYWbG7VDlFtm2MOQsDukR2CTrkaMtkRzjZfpKXvQ15femwwdoC0KddKe5sW4j44W st0rn1xV8DBx/TBWIsM0Vq/E9KR40y2q9ouBq4N1abzOjSsvnQG13vvc5ae/A2/4 ahgRdTwc5QQh9FHNbxdZ9uciT5XUeip3BIVfOC39JFo+wzeaewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBX98kiJL6Jk1ML3sXOZixdN3OBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1 NDhhOS1lMTcyLTQxYTMtOTI1YS02MDllOTMxZDAwMDkvZDNjNWRmM2UtZjJlNC0z NjEzLTk2MjYtMjY1YTcyYTZkY2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2JiNTQ4YTktZTE3Mi00MWEzLTky NWEtNjA5ZTkzMWQwMDA5LzNiYjU0OGE5LWUxNzItNDFhMy05MjVhLTYwOWU5MzFk MDAwOS5jcmwwHwYDVR0jBBgwFoAUFkV4gX9FTzzMRxgL5Nkx0UiTiwowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYmI1NDhhOS1lMTcyLTQxYTMtOTI1YS02MDll OTMxZDAwMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7a8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzQLs29gKSpE4I2LgLmiFer3hiIiRlFojs+xY5ilmVoBHCtK35BBUWk AaBZCx90nPL7nMM5bjg0BieSLYsJMrp5IhLqv/vJufrP8Dc+fEe8EgRYz8SupnB3 NyeKrtaISjlpiiiNe/VI0fTW5ZFDV/rvnm/avk9hiZtPRngfHH8Y7CF3POUYjeDh MtWOB4Nf8AZkTckPy1q9SD+eu2ZjUV+6KrTLIjf1LXH2UKuIY1DInR+WysCJZK/0 E5FBXNnTZlMZ26G40ego0bL+1s7n3CXKb/G5PqLLafAk8Wp86LrI0/hyJLlyNsvz x8i0PTtVfGKJ9IKkXsbQYvEV2ahW4+U= -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:28 2025 by rpki-client