This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa File: e7297b92-13bc-3141-abe3-3ce60a3de965.roa (raw, json) Hash identifier: hbUkzgBcv6IKh5ZWGWKEYyu4kHneFmGZAWecRfsZAnE= Subject key identifier: 74:7F:95:AB:96:E7:07:3F:1C:5A:0A:E4:5E:B4:E9:28:C5:52:07:B5 Certificate issuer: /CN=42a8a836-8100-4561-9bfc-5462d4161596 Certificate serial: 010D0C9F4328584C09A0A4E23A0D0BFA95DC2600 Authority key identifier: 6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa Signing time: Mon 01 Dec 2025 02:00:30 +0000 ROA not before: Mon 01 Dec 2025 02:00:30 +0000 ROA not after: Sun 01 Mar 2026 02:00:30 +0000 asID: 4474 IP address blocks: 24.51.50.0/23 maxlen: 23 24.72.192.0/21 maxlen: 21 24.72.200.0/22 maxlen: 22 24.223.100.0/22 maxlen: 22 67.215.16.0/20 maxlen: 20 72.21.64.0/20 maxlen: 20 96.31.96.0/19 maxlen: 19 104.36.40.0/22 maxlen: 22 162.248.136.0/22 maxlen: 22 2604:8c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:09:a0:a4:e2:3a:0d:0b:fa:95:dc:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42a8a836-8100-4561-9bfc-5462d4161596 Validity Not Before: Dec 1 02:00:30 2025 GMT Not After : Mar 1 02:00:30 2026 GMT Subject: CN=61450550-7b2a-47f2-bf39-b72a433c23ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:15:9b:bd:8d:ab:0a:19:c0:b8:f7:0c:e1: 07:54:7f:5b:24:9c:68:fc:2c:8e:9c:2a:08:9b:7a: 89:2f:c4:e2:ab:97:45:f2:24:6c:97:db:51:ce:fe: e5:73:ab:ce:4b:05:ad:a9:aa:d1:37:a3:69:7d:f7: d3:be:8a:64:82:3c:ab:58:7c:f6:b1:78:1d:9f:04: 6e:c8:a9:8b:78:90:03:60:d9:6e:42:a7:c2:97:22: 3b:87:8e:eb:b3:fa:3c:99:98:3b:5c:b3:39:81:0c: 17:95:55:28:26:0b:79:51:59:92:56:9e:32:70:8d: e6:f8:0d:fa:39:47:ba:bb:43:97:52:f2:c1:54:89: 0b:b8:c6:75:c2:c7:15:b6:80:3f:7c:92:3d:32:3b: 6b:56:dc:7e:99:3c:57:36:ab:79:58:e7:56:c3:4a: ef:a1:bf:c2:0d:e4:81:86:f0:00:96:6e:5f:21:de: 87:d8:13:61:dd:c0:80:35:bc:91:41:d4:93:8d:f3: 5c:08:10:91:93:d3:6d:76:76:2c:d6:5d:7f:19:c0: 38:83:f4:2c:2b:27:00:3e:63:a7:e1:1d:75:67:eb: cc:9a:56:56:8a:4b:65:bd:3d:b5:9b:a0:7d:68:e9: 05:64:16:d6:69:bf:2c:10:7f:ca:2f:04:e5:98:33: 40:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:95:AB:96:E7:07:3F:1C:5A:0A:E4:5E:B4:E9:28:C5:52:07:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/e7297b92-13bc-3141-abe3-3ce60a3de965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596/42a8a836-8100-4561-9bfc-5462d4161596.crl X509v3 Authority Key Identifier: keyid:6D:F4:C8:7A:66:1C:CA:E4:AF:0C:F8:4A:C5:4A:68:0D:E1:83:3F:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/42a8a836-8100-4561-9bfc-5462d4161596.cer sbgp-ipAddrBlock: critical IPv4: 24.51.50.0/23 24.72.192.0-24.72.203.255 24.223.100.0/22 67.215.16.0/20 72.21.64.0/20 96.31.96.0/19 104.36.40.0/22 162.248.136.0/22 IPv6: 2604:8c00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:1b:bc:77:e8:a4:a5:13:b7:35:26:e4:fa:9b:9b:30:b5:2e: 5f:e8:71:c9:60:3c:fb:61:23:c3:ae:c2:af:8b:8b:f4:b8:71: 01:92:12:7b:84:54:05:50:e9:cb:d6:3b:a9:3b:21:c5:b4:ce: 02:f1:bd:1e:33:00:0b:51:26:83:4a:39:43:a6:48:c1:43:ee: 42:8b:37:62:f0:62:52:f7:db:8f:28:64:00:5f:a9:cb:f6:d4: d7:b4:2d:63:4a:e7:85:de:98:e6:86:30:1d:a3:0f:fd:72:bd: e8:ac:28:1d:b0:e0:3f:29:f0:c5:4d:c3:1d:a7:c3:c4:9a:c9: 27:9f:46:20:a3:00:5d:93:7e:46:cb:77:49:a7:78:da:8f:95: c9:bd:8a:f0:14:15:b6:4a:1a:46:6e:e1:c1:18:f0:ed:0f:9a: ee:45:f3:c2:75:59:e6:79:51:2f:55:7e:46:50:a5:1d:8a:3e: e1:c4:85:6f:0e:8b:3c:1a:ec:0f:aa:79:4a:ab:2b:e6:90:87: cf:2e:fb:7b:42:01:c6:fb:cc:b9:fe:da:6b:ab:cb:57:41:0d: 9f:ee:bc:6a:46:ad:a7:e1:86:e3:32:b3:e0:98:5d:5b:45:ca: 44:bb:cb:82:86:1c:51:3b:b9:1b:eb:c3:fc:07:96:c2:bf:39: 1e:d3:b3:c0 -----BEGIN CERTIFICATE----- MIIGhDCCBWygAwIBAgIUAQ0Mn0MoWEwJoKTiOg0L+pXcJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDJhOGE4MzYtODEwMC00NTYxLTliZmMtNTQ2MmQ0MTYx NTk2MB4XDTI1MTIwMTAyMDAzMFoXDTI2MDMwMTAyMDAzMFowLzEtMCsGA1UEAxMk NjE0NTA1NTAtN2IyYS00N2YyLWJmMzktYjcyYTQzM2MyM2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/QVm72NqwoZwLj3DOEHVH9bJJxo/CyOnCoI m3qJL8Tiq5dF8iRsl9tRzv7lc6vOSwWtqarRN6NpfffTvopkgjyrWHz2sXgdnwRu yKmLeJADYNluQqfClyI7h47rs/o8mZg7XLM5gQwXlVUoJgt5UVmSVp4ycI3m+A36 OUe6u0OXUvLBVIkLuMZ1wscVtoA/fJI9MjtrVtx+mTxXNqt5WOdWw0rvob/CDeSB hvAAlm5fId6H2BNh3cCANbyRQdSTjfNcCBCRk9NtdnYs1l1/GcA4g/QsKycAPmOn 4R11Z+vMmlZWiktlvT21m6B9aOkFZBbWab8sEH/KLwTlmDNA9wIDAQABo4IDljCC A5IwHQYDVR0OBBYEFHR/lauW5wc/HFoK5F606SjFUge1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MmE4 YTgzNi04MTAwLTQ1NjEtOWJmYy01NDYyZDQxNjE1OTYvZTcyOTdiOTItMTNiYy0z MTQxLWFiZTMtM2NlNjBhM2RlOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDJhOGE4MzYtODEwMC00NTYxLTli ZmMtNTQ2MmQ0MTYxNTk2LzQyYThhODM2LTgxMDAtNDU2MS05YmZjLTU0NjJkNDE2 MTU5Ni5jcmwwHwYDVR0jBBgwFoAUbfTIemYcyuSvDPhKxUpoDeGDP10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80MmE4YTgzNi04MTAwLTQ1NjEtOWJmYy01NDYy ZDQxNjE1OTYuY2VyMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwQBGDMyMAwD BAYYSMADBAIYSMgDBAIY32QDBARD1xADBARIFUADBAVgH2ADBAJoJCgDBAKi+Igw DQQCAAIwBwMFACYEjAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAyRu8d+ikpRO3NSbk+pubMLUuX+hxyWA8 +2Ejw67Cr4uL9LhxAZISe4RUBVDpy9Y7qTshxbTOAvG9HjMAC1Emg0o5Q6ZIwUPu Qos3YvBiUvfbjyhkAF+py/bU17QtY0rnhd6Y5oYwHaMP/XK96KwoHbDgPynwxU3D HafDxJrJJ59GIKMAXZN+Rst3Sad42o+Vyb2K8BQVtkoaRm7hwRjw7Q+a7kXzwnVZ 5nlRL1V+RlClHYo+4cSFbw6LPBrsD6p5Sqsr5pCHzy77e0IBxvvMuf7aa6vLV0EN n+68akatp+GG4zKz4JhdW0XKRLvLgoYcUTu5G+vD/AeWwr85HtOzwA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:59 2025 by rpki-client