This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
File: 422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa (raw, json)
Hash identifier: Fm0oeMou3BrhcQLxBCZQ1zRZ3lJRNfQroOpchI9dxlw=
Subject key identifier: 90:C5:36:90:B8:9F:C2:E1:DA:8E:1A:B9:1A:C5:6E:68:EC:B8:23:37
Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial: 010D0C9F4328584C09A09F1FB94C5FAEC8F2C1C0
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
Signing time: Mon 01 Dec 2025 02:00:30 +0000
ROA not before: Mon 01 Dec 2025 02:00:30 +0000
ROA not after: Sun 01 Mar 2026 02:00:30 +0000
asID: 400598
IP address blocks: 192.40.40.0/23 maxlen: 24
2602:faf9::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:09:a0:9f:1f:b9:4c:5f:ae:c8:f2:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Validity
Not Before: Dec 1 02:00:30 2025 GMT
Not After : Mar 1 02:00:30 2026 GMT
Subject: CN=09c86c62-d494-44c2-9d77-fae79406d511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:75:b2:31:98:3e:fc:6d:ff:3c:e4:50:79:
25:48:14:74:ab:e5:e9:f2:9e:61:fd:ca:aa:fc:fa:
56:df:ca:3e:a7:cb:2f:6c:47:77:9f:bf:46:0f:13:
06:1b:6e:2a:f4:b3:6c:0c:ed:37:ef:0a:2e:6e:48:
1b:7f:22:f9:b9:db:d6:f2:41:28:9d:a4:bb:a2:ab:
d2:75:14:bc:55:56:a7:bb:0b:a2:d9:9c:b7:76:cb:
0a:c0:6f:93:a1:d5:56:56:08:c3:f4:ff:e7:20:05:
cc:a4:4f:16:2a:9d:65:7f:ca:85:f0:5d:97:92:3c:
e5:2b:ab:fb:a6:8c:2e:ba:96:41:3a:80:82:21:26:
0e:48:f7:cf:51:e5:1a:dd:c5:e7:9f:cb:c2:e7:a9:
05:a6:48:cf:39:27:ba:ea:e0:7b:e7:d9:a0:aa:14:
79:f8:e2:cd:53:71:59:0e:17:63:e7:45:fe:79:22:
29:50:69:4a:97:e1:f2:59:74:a2:58:c6:a3:56:b9:
9f:17:a5:ae:55:43:02:9e:5d:e6:3a:08:0c:5b:bd:
f1:9f:cd:97:bc:b9:70:c9:c7:9c:63:bc:c4:b8:cc:
d8:91:98:64:f6:79:ba:8d:e4:5b:dd:31:64:fa:9a:
7a:42:8f:a6:a6:2b:2c:67:f3:bf:43:f9:5d:13:d2:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:36:90:B8:9F:C2:E1:DA:8E:1A:B9:1A:C5:6E:68:EC:B8:23:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/422fb5a6-9f2e-3c33-8ba0-7a8127216540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
X509v3 Authority Key Identifier:
keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.40.40.0/23
IPv6:
2602:faf9::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:f3:f4:ef:ba:31:5f:2f:2c:0c:7c:3b:94:4f:2d:62:74:6d:
5f:27:96:b8:70:b3:94:93:a4:7d:e3:9b:7a:43:06:f7:d2:55:
2f:3d:7f:87:48:1a:cc:22:61:ed:d1:e8:de:65:67:cb:b3:f7:
24:63:d5:c2:ec:b5:60:8b:35:b2:98:ec:ff:a3:e3:9d:88:0b:
40:6d:66:44:cb:fa:88:ab:59:79:52:6d:b4:2a:30:56:ec:ef:
dc:fa:5e:be:09:8f:2e:6f:c6:d2:8f:5f:09:c2:c7:06:4f:4e:
a1:e0:be:33:2c:9a:f8:11:f8:c4:f2:7f:96:d1:1d:1c:94:58:
4f:5b:8c:29:21:f0:fd:9e:f1:07:4e:d5:cc:3e:45:fd:28:d0:
75:9e:67:92:03:50:29:24:f8:d7:8b:a2:98:3a:2e:63:d5:87:
53:59:84:36:31:d1:0f:ab:65:0d:72:f0:b0:75:8f:f4:c3:20:
f6:59:17:52:87:8c:0d:3b:de:29:1e:21:3a:5e:7a:bd:02:98:
d2:10:ea:d8:43:f2:cc:6f:46:90:06:4a:b1:dc:80:45:15:69:
42:dc:12:7c:39:b9:fc:bd:f2:18:66:ee:a6:55:a6:b9:d2:3c:
32:b1:c4:61:1e:de:06:db:f4:2f:01:0e:3c:94:72:7c:83:52:
e5:a5:11:b2
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEwJoJ8fuUxfrsjywcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy
YWI4MB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk
MDljODZjNjItZDQ5NC00NGMyLTlkNzctZmFlNzk0MDZkNTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWF1sjGYPvxt/zzkUHklSBR0q+Xp8p5h/cqq
/PpW38o+p8svbEd3n79GDxMGG24q9LNsDO037woubkgbfyL5udvW8kEonaS7oqvS
dRS8VVanuwui2Zy3dssKwG+TodVWVgjD9P/nIAXMpE8WKp1lf8qF8F2XkjzlK6v7
powuupZBOoCCISYOSPfPUeUa3cXnn8vC56kFpkjPOSe66uB759mgqhR5+OLNU3FZ
Dhdj50X+eSIpUGlKl+HyWXSiWMajVrmfF6WuVUMCnl3mOggMW73xn82XvLlwycec
Y7zEuMzYkZhk9nm6jeRb3TFk+pp6Qo+mpissZ/O/Q/ldE9IufwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJDFNpC4n8Lh2o4auRrFbmjsuCM3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh
OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvNDIyZmI1YTYtOWYyZS0z
YzMzLThiYTAtN2E4MTI3MjE2NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3
NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4
MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi
MDA0ODJhYjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBwCgoMA4E
AgACMAgDBgQmAvr5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAk8/TvujFfLywMfDuUTy1idG1fJ5a4cLOU
k6R945t6Qwb30lUvPX+HSBrMImHt0ejeZWfLs/ckY9XC7LVgizWymOz/o+OdiAtA
bWZEy/qIq1l5Um20KjBW7O/c+l6+CY8ub8bSj18JwscGT06h4L4zLJr4EfjE8n+W
0R0clFhPW4wpIfD9nvEHTtXMPkX9KNB1nmeSA1ApJPjXi6KYOi5j1YdTWYQ2MdEP
q2UNcvCwdY/0wyD2WRdSh4wNO94pHiE6Xnq9ApjSEOrYQ/LMb0aQBkqx3IBFFWlC
3BJ8Obn8vfIYZu6mVaa50jwyscRhHt4G2/QvAQ48lHJ8g1LlpRGy
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:16:53 2025 by rpki-client