This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/a3aa0e56-fbe7-37e1-923d-519b0519828b.roa File: a3aa0e56-fbe7-37e1-923d-519b0519828b.roa (raw, json) Hash identifier: Vg2gDHkvaam6Ux0d1SaW/q3mp+RSqapl0taxnaETsrE= Subject key identifier: 22:4E:E1:97:97:8B:B5:38:6E:A1:15:74:78:72:AA:06:C6:98:ED:05 Certificate issuer: /CN=8b3000e8-1e0f-482a-991d-e2358c249593 Certificate serial: 010D0C9F4328584C0B064663552EE95F6EECA000 Authority key identifier: 78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/a3aa0e56-fbe7-37e1-923d-519b0519828b.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 203963 IP address blocks: 206.168.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:46:63:55:2e:e9:5f:6e:ec:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b3000e8-1e0f-482a-991d-e2358c249593 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=1cd894e9-fb60-46c7-9ad9-35d1544906fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:72:23:c3:cf:45:93:aa:73:f0:52:4d:56: dc:03:74:2f:70:a2:d7:11:9c:a5:d9:62:01:39:06: e1:c9:74:61:b0:4f:84:73:72:6a:c9:30:19:18:e3: 9a:80:e6:a3:ab:17:9d:84:85:99:1e:d0:2f:a2:eb: 45:97:64:52:1b:b2:bd:d9:e1:1e:3d:79:22:45:19: b4:30:67:a2:0c:dc:76:72:03:ab:56:4d:aa:eb:29: 38:60:98:a9:8e:57:15:e9:08:a2:f5:79:2b:72:7b: 00:dc:7b:2c:c2:9c:13:0f:71:de:4f:eb:5d:73:ab: 56:44:8b:3a:69:e6:a6:e9:de:e1:c4:69:ed:d3:dd: 14:ed:37:76:f8:ac:43:0c:28:c6:a0:0f:fc:c1:8c: 8f:f9:b4:14:d3:83:15:94:22:43:7b:39:fe:e0:af: 79:e4:10:3e:4c:b7:b4:39:a1:72:6d:bb:8e:ef:30: c6:a6:7c:ea:be:72:0d:b5:1f:4a:d2:33:6f:fb:2a: 96:2b:72:9a:81:7f:fe:82:70:25:95:18:f2:8d:e3: 4f:fc:d1:76:7d:bf:d4:2d:35:59:94:0d:e2:80:37: ad:29:e8:b7:75:b4:15:6a:60:c9:9f:63:6d:09:1e: 4a:e7:9f:8c:30:c6:bf:70:15:f3:6c:de:ed:61:08: 27:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:E1:97:97:8B:B5:38:6E:A1:15:74:78:72:AA:06:C6:98:ED:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/a3aa0e56-fbe7-37e1-923d-519b0519828b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593/8b3000e8-1e0f-482a-991d-e2358c249593.crl X509v3 Authority Key Identifier: keyid:78:D3:A4:19:FA:42:EF:0F:DA:59:C8:8F:EF:4F:C4:28:D9:7F:77:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b3000e8-1e0f-482a-991d-e2358c249593.cer sbgp-ipAddrBlock: critical IPv4: 206.168.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:4e:b2:2d:19:01:1e:de:ec:41:62:18:83:9e:e1:ab:32:b8: 69:47:5f:a7:e8:76:a3:a2:b2:9e:45:15:cf:d8:0f:38:a8:80: d1:8f:66:43:4b:c4:eb:01:99:14:04:9c:f4:0b:af:07:14:a7: 42:c1:28:9d:40:44:36:1c:b0:7d:98:45:a1:9f:9c:df:4d:ce: 1b:42:90:56:10:44:dc:32:92:fd:0b:30:a2:17:03:aa:66:49: fb:a6:8b:15:b6:c6:9d:f2:a9:5a:ce:bb:41:55:5e:12:7b:7f: 21:20:e9:4d:02:c4:10:2d:08:c9:d8:24:e1:09:7c:88:cd:de: f2:91:4d:17:dc:da:73:c3:bb:a6:27:3c:be:f4:ce:b0:7c:63: ff:6d:61:28:02:9a:68:20:67:f2:0c:ee:59:60:96:70:a4:36: b4:22:9a:b8:6f:6d:11:3c:47:b0:e4:0c:e1:e4:81:5b:5d:2a: 88:8a:11:e2:90:6f:cf:85:74:8d:05:eb:c0:84:0e:b0:61:e8: 10:28:7a:b4:cf:f7:34:61:78:2e:d8:83:ba:a1:9e:7e:70:0d: 8e:22:cc:48:d3:dd:68:b2:0b:54:24:1b:cb:45:80:91:1c:54: 7b:ff:3d:0e:5b:d0:da:3b:89:eb:95:6b:53:2d:32:b7:08:01: 1e:57:79:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwLBkZjVS7pX27soAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIzMDAwZTgtMWUwZi00ODJhLTk5MWQtZTIzNThjMjQ5 NTkzMB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk MWNkODk0ZTktZmI2MC00NmM3LTlhZDktMzVkMTU0NDkwNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVyI8PPRZOqc/BSTVbcA3QvcKLXEZyl2WIB OQbhyXRhsE+Ec3JqyTAZGOOagOajqxedhIWZHtAvoutFl2RSG7K92eEePXkiRRm0 MGeiDNx2cgOrVk2q6yk4YJipjlcV6Qii9XkrcnsA3HsswpwTD3HeT+tdc6tWRIs6 aeam6d7hxGnt090U7Td2+KxDDCjGoA/8wYyP+bQU04MVlCJDezn+4K955BA+TLe0 OaFybbuO7zDGpnzqvnINtR9K0jNv+yqWK3KagX/+gnAllRjyjeNP/NF2fb/ULTVZ lA3igDetKei3dbQVamDJn2NtCR5K55+MMMa/cBXzbN7tYQgnFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJO4ZeXi7U4bqEVdHhyqgbGmO0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjMw MDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1OGMyNDk1OTMvYTNhYTBlNTYtZmJlNy0z N2UxLTkyM2QtNTE5YjA1MTk4MjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGIzMDAwZTgtMWUwZi00ODJhLTk5 MWQtZTIzNThjMjQ5NTkzLzhiMzAwMGU4LTFlMGYtNDgyYS05OTFkLWUyMzU4YzI0 OTU5My5jcmwwHwYDVR0jBBgwFoAUeNOkGfpC7w/aWciP70/EKNl/dzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjMwMDBlOC0xZTBmLTQ4MmEtOTkxZC1lMjM1 OGMyNDk1OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdOsi0ZAR7e7EFiGIOe4asyuGlHX6fodqOisp5FFc/YDziogNGPZkNL xOsBmRQEnPQLrwcUp0LBKJ1ARDYcsH2YRaGfnN9NzhtCkFYQRNwykv0LMKIXA6pm SfumixW2xp3yqVrOu0FVXhJ7fyEg6U0CxBAtCMnYJOEJfIjN3vKRTRfc2nPDu6Yn PL70zrB8Y/9tYSgCmmggZ/IM7llglnCkNrQimrhvbRE8R7DkDOHkgVtdKoiKEeKQ b8+FdI0F68CEDrBh6BAoerTP9zRheC7Yg7qhnn5wDY4izEjT3WiyC1QkG8tFgJEc VHv/PQ5b0No7ieuVa1MtMrcIAR5XeUI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:40 2025 by rpki-client