This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa File: 505caf77-22a6-383d-87ff-65fafc12e556.roa (raw, json) Hash identifier: EdYxINLaNa791nOpAlf9eMPthS3ec/JZkWVN5OJmbVs= Subject key identifier: D7:F7:6D:38:39:C5:9F:5A:CE:B8:34:76:5C:97:6E:CC:97:6A:3B:01 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584BFD10ACD02AC07C2952D883C0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 138571 IP address blocks: 128.1.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:ac:d0:2a:c0:7c:29:52:d8:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=0a43fa19-a1f8-4faf-b9d7-c172c8f92959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:21:3c:11:7e:fd:a2:dc:b0:38:08:a4:8d:78: 2f:35:73:61:ac:e3:9d:7b:d0:db:aa:df:9c:b9:8e: c6:d6:9a:56:77:3a:37:89:50:01:a1:cd:0e:65:69: 14:df:c6:29:0b:25:bf:3c:ec:b5:13:d9:a8:0f:b8: f7:dd:9c:10:dd:f3:97:77:ba:28:54:c7:bd:4a:d2: 65:0e:cc:71:65:85:ab:d1:c4:e8:68:87:40:dc:a6: 8f:e4:bd:a7:3a:55:8c:9f:4d:26:73:38:8c:c2:17: 2b:e6:ab:9e:47:7e:7d:40:46:b1:a0:e3:e7:cc:c7: 5c:c8:6b:72:cf:f0:a7:28:8c:af:05:8e:4c:26:4f: e9:ac:75:ea:67:72:3c:b4:a3:81:d2:7e:e6:4d:02: ad:9a:42:de:41:f7:1f:18:b0:31:a5:13:06:03:93: 5a:45:c3:84:e9:67:04:b3:a3:7d:5c:12:8a:53:62: 02:00:57:86:77:99:c0:fc:87:6d:5d:9f:43:0c:04: 5f:f2:6d:20:15:96:35:3f:fa:0f:c3:27:9f:d3:88: 9f:c7:e1:35:c2:b4:cc:b0:69:fb:f6:10:b6:fe:42: 6a:f4:5a:9e:8a:df:9d:37:c8:77:93:53:f1:3d:09: ca:fb:83:2e:8b:ff:a7:98:83:d8:e0:63:2d:a6:6f: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F7:6D:38:39:C5:9F:5A:CE:B8:34:76:5C:97:6E:CC:97:6A:3B:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/505caf77-22a6-383d-87ff-65fafc12e556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 128.1.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:7b:3c:d5:20:5b:dc:75:bf:bd:9d:07:95:42:98:42:fb:92: 5a:29:c3:29:dd:f4:53:d7:14:44:ab:3d:04:40:34:26:01:55: c0:f0:d4:76:23:5b:81:bb:43:6b:42:5e:5b:3a:3f:b0:74:de: 51:8e:96:af:7a:fb:90:38:ec:1d:76:c3:28:0a:e2:50:55:33: fa:9f:a4:f5:ac:66:97:25:d6:66:8f:a8:e6:a7:3d:b5:c1:46: 47:4f:14:88:e9:e8:3e:77:9d:f9:a4:76:9e:99:ba:cb:c7:6a: 75:a6:87:af:83:91:a0:05:c3:a9:8f:1b:c6:46:5d:2c:9d:82: f0:65:0d:85:ff:a2:b8:13:29:cb:cc:43:8d:91:d7:80:9d:e6: 79:6c:53:4b:04:53:1a:3a:89:a2:dd:83:e2:5c:f5:40:a0:e8: 16:ba:a0:75:63:22:b9:89:6e:37:ed:c9:96:78:a2:e9:45:a6: e2:7d:34:bf:61:72:e3:da:52:28:2f:0a:69:40:e0:bc:93:ad: fa:2d:05:ce:dc:bc:c8:b5:6f:c3:fa:f6:fd:a6:90:4c:ac:6d: 5d:3d:b3:73:40:ae:26:91:04:d1:89:6e:bc:1c:15:13:91:94: 8e:d1:f4:61:14:06:b5:f0:00:e0:75:a6:cd:8d:b3:9d:ce:9b: 16:29:44:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EKzQKsB8KVLYg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MGE0M2ZhMTktYTFmOC00ZmFmLWI5ZDctYzE3MmM4ZjkyOTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCE8EX79otywOAikjXgvNXNhrOOde9Dbqt+c uY7G1ppWdzo3iVABoc0OZWkU38YpCyW/POy1E9moD7j33ZwQ3fOXd7ooVMe9StJl DsxxZYWr0cToaIdA3KaP5L2nOlWMn00mcziMwhcr5queR359QEaxoOPnzMdcyGty z/CnKIyvBY5MJk/prHXqZ3I8tKOB0n7mTQKtmkLeQfcfGLAxpRMGA5NaRcOE6WcE s6N9XBKKU2ICAFeGd5nA/IdtXZ9DDARf8m0gFZY1P/oPwyef04ifx+E1wrTMsGn7 9hC2/kJq9Fqeit+dN8h3k1PxPQnK+4Mui/+nmIPY4GMtpm9mFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf3bTg5xZ9azrg0dlyXbsyXajsBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTA1Y2FmNzctMjJhNi0z ODNkLTg3ZmYtNjVmYWZjMTJlNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB17PNUgW9x1v72dB5VCmEL7klopwynd9FPXFESrPQRANCYBVcDw1HYj W4G7Q2tCXls6P7B03lGOlq96+5A47B12wygK4lBVM/qfpPWsZpcl1maPqOanPbXB RkdPFIjp6D53nfmkdp6ZusvHanWmh6+DkaAFw6mPG8ZGXSydgvBlDYX/orgTKcvM Q42R14Cd5nlsU0sEUxo6iaLdg+Jc9UCg6Ba6oHVjIrmJbjftyZZ4oulFpuJ9NL9h cuPaUigvCmlA4LyTrfotBc7cvMi1b8P69v2mkEysbV09s3NAriaRBNGJbrwcFROR lI7R9GEUBrXwAOB1ps2Ns53OmxYpREA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:24 2025 by rpki-client