This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa File: 509e4ddf-df6f-34cc-83d4-959041c0d418.roa (raw, json) Hash identifier: tktONbSeA6x8QodDMma0BwXjxyUFhv4aV3dLLctrXzk= Subject key identifier: 9E:80:A3:72:7C:C1:97:92:00:96:1A:0A:93:13:61:AD:0C:A9:32:45 Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Certificate serial: 010D0C9F4328584BEC50909E555E7EFD7FFE0450 Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 16575 IP address blocks: 192.200.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:90:9e:55:5e:7e:fd:7f:fe:04:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=b84d7c26-56a4-41d3-a072-765507e32038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:ce:cd:c1:4a:34:7a:a5:1a:d4:ac:05:7a: 85:c5:97:e0:16:d2:6f:7c:8e:70:9f:e2:0b:f7:90: 0a:93:72:71:fb:1e:98:9c:20:65:8f:a0:cb:80:7a: 86:0e:d0:2a:05:51:1e:e9:3a:a1:06:8f:d4:10:ba: e3:4c:c0:ce:e4:6b:c7:09:c3:19:60:28:49:7f:1c: a4:d4:e8:06:d8:5f:4f:8e:e8:d1:97:b2:0a:1a:a4: d0:83:4e:ec:db:b8:c3:2b:22:d2:15:ee:d4:93:c6: ff:d4:56:59:7d:a3:b2:a0:79:4f:51:14:25:9a:b6: d0:23:75:d4:aa:2c:7e:6b:91:4e:fd:a4:62:60:8c: a1:c4:2b:45:65:34:97:4d:e3:8e:96:34:a8:3c:21: 86:36:d9:7c:74:fe:1b:8a:88:39:5a:bd:fd:c2:bc: 6d:46:b7:55:ba:ab:4f:c6:ea:1a:1c:19:87:b6:65: 77:58:67:28:23:c3:29:7b:00:c6:cd:4f:5c:13:13: 08:3f:c0:04:6e:ee:24:c7:a7:8e:4b:d3:02:bc:5a: d7:fa:7f:46:0c:74:c7:b3:dd:ca:8f:24:3c:9d:d2: a4:b9:5f:45:c0:aa:d6:ff:87:04:5c:25:42:4a:55: e2:13:56:58:5e:b9:56:7d:95:f3:2a:04:9b:49:f4: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:80:A3:72:7C:C1:97:92:00:96:1A:0A:93:13:61:AD:0C:A9:32:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/509e4ddf-df6f-34cc-83d4-959041c0d418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl X509v3 Authority Key Identifier: keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer sbgp-ipAddrBlock: critical IPv4: 192.200.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:38:08:1a:21:18:d0:b5:54:42:5f:05:3b:ca:40:12:72:95: 85:98:c7:a8:69:b6:53:e0:fd:70:fe:1c:5a:76:e3:40:ba:33: 07:87:6c:a3:65:8a:18:af:1e:01:6d:00:5b:e9:27:c2:79:fe: e3:30:d6:b6:c9:7d:ec:c1:24:14:15:d7:5f:5c:64:76:07:c1: 90:f0:ae:eb:95:d1:fd:78:e0:92:a1:82:f3:e1:53:9b:4c:3c: 7a:f6:91:4c:0d:bc:13:16:a5:bb:17:d2:ce:91:89:ec:88:49: 3f:8b:3b:f7:1e:99:21:0f:02:2d:96:9b:42:1b:56:cb:b5:98: 35:5f:50:42:a6:c0:d7:24:01:aa:b5:86:cc:77:8f:95:78:d7: f0:5a:bd:36:94:62:92:84:05:f5:9e:ca:68:83:e5:e0:f8:41: 08:96:80:60:96:a7:53:3e:fd:06:2d:89:38:c1:fa:51:0e:12: b8:bd:7e:f9:bf:65:e4:35:68:14:49:70:59:3d:63:5e:d2:bc: 03:03:7f:ef:73:09:41:72:62:e3:10:92:9d:cc:fc:78:ed:0e: 21:41:ad:de:2f:f0:72:ee:ec:1c:a3:84:27:25:fe:7d:d6:ab: e1:f1:00:f6:6f:38:c4:db:94:b3:ff:26:e5:95:0a:43:42:8f: a3:17:8f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUJCeVV5+/X/+BFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1 YTRmMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk Yjg0ZDdjMjYtNTZhNC00MWQzLWEwNzItNzY1NTA3ZTMyMDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD3OzcFKNHqlGtSsBXqFxZfgFtJvfI5wn+IL 95AKk3Jx+x6YnCBlj6DLgHqGDtAqBVEe6TqhBo/UELrjTMDO5GvHCcMZYChJfxyk 1OgG2F9PjujRl7IKGqTQg07s27jDKyLSFe7Uk8b/1FZZfaOyoHlPURQlmrbQI3XU qix+a5FO/aRiYIyhxCtFZTSXTeOOljSoPCGGNtl8dP4biog5Wr39wrxtRrdVuqtP xuoaHBmHtmV3WGcoI8MpewDGzU9cExMIP8AEbu4kx6eOS9MCvFrX+n9GDHTHs93K jyQ8ndKkuV9FwKrW/4cEXCVCSlXiE1ZYXrlWfZXzKgSbSfR78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6Ao3J8wZeSAJYaCpMTYa0MqTJFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNTA5ZTRkZGYtZGY2Zi0z NGNjLTgzZDQtOTU5MDQxYzBkNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ4CBohGNC1VEJfBTvKQBJylYWYx6hptlPg/XD+HFp240C6MweHbKNl ihivHgFtAFvpJ8J5/uMw1rbJfezBJBQV119cZHYHwZDwruuV0f144JKhgvPhU5tM PHr2kUwNvBMWpbsX0s6RieyIST+LO/cemSEPAi2Wm0IbVsu1mDVfUEKmwNckAaq1 hsx3j5V41/BavTaUYpKEBfWeymiD5eD4QQiWgGCWp1M+/QYtiTjB+lEOEri9fvm/ ZeQ1aBRJcFk9Y17SvAMDf+9zCUFyYuMQkp3M/HjtDiFBrd4v8HLu7ByjhCcl/n3W q+HxAPZvOMTblLP/JuWVCkNCj6MXj44= -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:36 2025 by rpki-client