This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa File: 4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (raw, json) Hash identifier: Jqjens7Dszmkm3sBCTUwdqo8WyVQkwMaJovwnA2ls2Q= Subject key identifier: 20:E5:65:10:4D:D3:1E:BF:B8:B8:C7:8D:F7:11:81:3C:CD:5A:15:F3 Certificate issuer: /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Certificate serial: 010D0C9F4328584BFFDB7EF125E6974924862600 Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa Signing time: Thu 27 Nov 2025 14:00:40 +0000 ROA not before: Thu 27 Nov 2025 14:00:40 +0000 ROA not after: Wed 25 Feb 2026 14:00:40 +0000 asID: 16509 IP address blocks: 199.187.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:7e:f1:25:e6:97:49:24:86:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Validity Not Before: Nov 27 14:00:40 2025 GMT Not After : Feb 25 14:00:40 2026 GMT Subject: CN=be2778df-3068-4835-a9b2-520e6c33a415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:a0:41:ae:ef:bf:61:66:1b:ed:24:cf:5d: 76:63:87:94:ab:b7:b3:39:9e:ee:26:53:28:5a:0b: 1a:3b:71:a8:06:e5:97:03:27:6e:00:e5:8d:04:ce: db:3a:d0:62:33:f9:54:a8:bb:eb:e8:6d:d6:32:c9: 12:fb:d3:ee:5c:5b:78:d7:73:a1:41:63:2a:a3:3f: 4b:da:a0:c7:27:3b:e7:9f:9b:84:b0:67:37:43:fd: fa:46:8e:76:d5:7c:a0:74:be:04:a9:b4:69:ef:27: 46:2f:af:2a:21:63:63:94:3a:75:e5:7b:ea:5f:e1: 1a:d0:f0:2e:46:04:54:d2:c0:83:d6:9c:92:73:8a: 55:a3:f1:15:07:f4:35:32:1a:3f:6f:aa:b4:d8:11: 1f:b1:2c:15:78:5d:53:0f:46:33:e2:1a:53:fd:78: d0:70:01:a7:ed:2b:f4:a4:23:d4:f5:17:87:e6:39: 6d:e8:55:e6:fe:c5:c5:75:2f:bc:09:6e:90:19:1b: 31:3c:23:f9:56:56:06:ff:26:0e:30:52:c8:00:26: 74:c2:2f:5f:5b:13:a0:4a:d7:44:6d:8e:01:16:bb: 9f:75:75:16:11:78:11:a5:fe:f1:c3:ee:4c:22:e1: ce:4d:ba:b9:18:de:6d:8d:63:95:da:a8:a6:db:78: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E5:65:10:4D:D3:1E:BF:B8:B8:C7:8D:F7:11:81:3C:CD:5A:15:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl X509v3 Authority Key Identifier: keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer sbgp-ipAddrBlock: critical IPv4: 199.187.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7e:66:75:61:f2:df:36:02:7d:21:3e:fb:eb:fb:70:70:e6: 30:f3:2a:d0:df:b6:41:5b:0d:06:19:df:23:bf:bc:e0:9d:12: b1:80:7f:de:e3:bb:cd:75:73:d5:84:20:e7:aa:12:c8:d8:fe: ca:88:30:05:b9:e9:7e:ab:97:50:85:93:d0:36:e8:53:dc:8b: 1f:14:a7:a8:38:59:28:e3:ed:47:49:46:32:d0:fc:08:41:49: a4:49:10:8e:eb:24:c3:d8:7b:f8:83:a2:88:aa:3b:1b:21:d3: 53:18:8e:28:27:30:a6:eb:fe:66:f8:6f:93:a7:09:49:a6:b6: d2:68:ea:49:72:d3:95:38:6b:d8:b4:59:33:7b:2d:1e:93:88: c0:0a:d0:1d:1d:b9:5e:bb:0b:c2:a8:37:7c:55:04:84:1a:7a: a4:31:2c:5e:5b:7b:00:57:53:d6:e8:01:8f:75:16:67:1d:38: 5b:ad:42:d8:1d:0f:72:3e:22:44:70:86:31:73:2c:e4:00:4b: 8d:99:12:8c:a6:87:f9:fe:cf:5e:81:61:86:4e:61:df:0a:78: b4:36:e0:7f:e2:35:e7:3c:a0:e1:13:48:99:a4:46:82:83:cc: 05:36:5d:d7:46:7b:16:c4:8d:03:3e:a8:5c:94:c2:f3:4c:46: 51:33:fe:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv/237xJeaXSSSGJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk YTc2MB4XDTI1MTEyNzE0MDA0MFoXDTI2MDIyNTE0MDA0MFowLzEtMCsGA1UEAxMk YmUyNzc4ZGYtMzA2OC00ODM1LWE5YjItNTIwZTZjMzNhNDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKCgQa7vv2FmG+0kz112Y4eUq7ezOZ7uJlMo WgsaO3GoBuWXAyduAOWNBM7bOtBiM/lUqLvr6G3WMskS+9PuXFt413OhQWMqoz9L 2qDHJzvnn5uEsGc3Q/36Ro521XygdL4EqbRp7ydGL68qIWNjlDp15XvqX+Ea0PAu RgRU0sCD1pySc4pVo/EVB/Q1Mho/b6q02BEfsSwVeF1TD0Yz4hpT/XjQcAGn7Sv0 pCPU9ReH5jlt6FXm/sXFdS+8CW6QGRsxPCP5VlYG/yYOMFLIACZ0wi9fWxOgStdE bY4BFrufdXUWEXgRpf7xw+5MIuHOTbq5GN5tjWOV2qim23gMUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDlZRBN0x6/uLjHjfcRgTzNWhXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0 MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvNGIyOWE4ZDktZmY0Zi0z OWEzLThjNjktMTcwZWY1NDRlYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt+ZnVh8t82An0hPvvr+3Bw5jDzKtDftkFbDQYZ3yO/vOCdErGAf97j u811c9WEIOeqEsjY/sqIMAW56X6rl1CFk9A26FPcix8Up6g4WSjj7UdJRjLQ/AhB SaRJEI7rJMPYe/iDooiqOxsh01MYjignMKbr/mb4b5OnCUmmttJo6kly05U4a9i0 WTN7LR6TiMAK0B0duV67C8KoN3xVBIQaeqQxLF5bewBXU9boAY91FmcdOFutQtgd D3I+IkRwhjFzLOQAS42ZEoymh/n+z16BYYZOYd8KeLQ24H/iNec8oOETSJmkRoKD zAU2XddGexbEjQM+qFyUwvNMRlEz/oY= -----END CERTIFICATE-----Generated at Thu Dec 18 16:12:09 2025 by rpki-client