This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa File: 20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa (raw, json) Hash identifier: Ax9z4Lirg53OdXIqL8piHLDyLlXvl0a0AQBnGYD1w+8= Subject key identifier: 22:D9:BA:88:4C:FA:D4:0B:D1:34:E7:D8:44:B6:B4:18:B9:AF:1F:63 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584C083B64401AF18C347C241100 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 7018 IP address blocks: 172.96.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:08:3b:64:40:1a:f1:8c:34:7c:24:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=dd32fb0e-d714-4c59-a316-88dcd35b1826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:38:74:7b:0b:95:f8:d0:fd:ae:cc:c8:e1: dc:76:b8:bf:be:f2:0e:19:94:96:91:e8:9a:66:ae: 33:57:5a:95:82:61:60:11:ce:ff:83:e4:7e:5f:7a: 16:f2:1b:19:80:25:0c:2f:50:85:c4:aa:80:6f:c5: 8c:c1:50:1e:68:d4:a2:ff:df:56:c8:4f:e9:75:be: 48:07:a9:e3:a6:ad:78:70:bf:b5:58:65:0f:30:0b: 44:85:f4:d5:e8:34:51:1f:60:71:03:88:ef:9c:56: 5b:45:09:61:37:b3:9d:78:38:ee:90:fe:19:8d:b2: 9b:bf:de:d3:04:a6:a8:bf:ed:54:07:e3:e5:a9:79: e5:86:9c:20:0f:e3:3d:e7:02:19:6a:cd:9f:03:de: 42:be:d5:d5:cb:a2:77:28:10:ae:5f:14:55:a4:8b: 9d:5e:b8:d3:1e:67:5c:79:06:7c:92:63:07:39:1b: dc:2c:a5:67:d8:86:d9:9e:d4:81:16:d9:90:0d:79: d4:bc:ad:7c:3c:ae:ca:0c:bf:60:ba:5d:46:66:2f: fd:ba:ec:f0:2d:8e:3a:bc:c6:24:c1:6c:25:7e:e7: 58:31:5d:75:ed:be:92:69:25:60:2b:cb:98:ff:30: bb:e6:da:23:88:88:f0:55:10:88:48:d5:38:79:c7: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:BA:88:4C:FA:D4:0B:D1:34:E7:D8:44:B6:B4:18:B9:AF:1F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/20c1838b-eb75-3b4a-a0dc-855d2ecba960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:31:e3:d9:d3:9f:d7:60:1e:38:03:9c:19:7c:30:ac:e5:d4: ed:5c:1a:e9:c2:ad:95:e4:b4:a5:12:61:e5:a0:3d:d6:3d:ef: 84:d6:5a:3a:53:28:16:cc:f0:2f:bb:ee:62:5e:f8:03:fa:1c: e8:a6:6b:72:f0:4e:a3:bb:70:92:1d:e9:3b:01:b2:28:38:93: b5:4b:3a:d1:c5:6b:f4:f1:dd:b2:43:cb:23:81:a6:9d:75:95: 89:10:18:c2:a6:43:3f:96:a6:6c:7c:8e:48:1f:a1:ce:d3:4c: 1f:9c:d4:bc:d3:36:a1:aa:c6:32:24:b2:e9:b8:b2:1f:25:3d: 2a:41:0e:9d:2f:03:2e:e6:c5:6a:6a:05:e2:ca:19:1d:52:e1: 6f:3d:bb:66:d4:e0:8c:c9:c9:b9:8a:69:52:6c:ad:99:0f:33: cf:3c:7e:08:68:d4:6e:fd:62:38:b3:4e:33:90:a0:9e:29:f8: 59:c5:34:cb:ed:28:24:1b:d3:bf:9f:a9:e5:1c:be:a5:3c:06: 39:92:4e:cf:73:b9:7d:31:63:de:22:b4:b5:a1:84:88:ea:1c: 22:f3:1b:59:78:e0:4a:56:94:fe:2e:65:72:97:af:11:f5:bd: 46:52:4d:24:b0:86:52:20:69:52:b5:88:0b:43:18:e4:b5:e0: 40:f8:d8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwIO2RAGvGMNHwkEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk ZGQzMmZiMGUtZDcxNC00YzU5LWEzMTYtODhkY2QzNWIxODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28U4dHsLlfjQ/a7MyOHcdri/vvIOGZSWkeia Zq4zV1qVgmFgEc7/g+R+X3oW8hsZgCUML1CFxKqAb8WMwVAeaNSi/99WyE/pdb5I B6njpq14cL+1WGUPMAtEhfTV6DRRH2BxA4jvnFZbRQlhN7OdeDjukP4ZjbKbv97T BKaov+1UB+PlqXnlhpwgD+M95wIZas2fA95CvtXVy6J3KBCuXxRVpIudXrjTHmdc eQZ8kmMHORvcLKVn2IbZntSBFtmQDXnUvK18PK7KDL9gul1GZi/9uuzwLY46vMYk wWwlfudYMV117b6SaSVgK8uY/zC75tojiIjwVRCISNU4ecc0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZuohM+tQL0TTn2ES2tBi5rx9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjBjMTgzOGItZWI3NS0z YjRhLWEwZGMtODU1ZDJlY2JhOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsx49nTn9dgHjgDnBl8MKzl1O1cGunCrZXktKUSYeWgPdY974TWWjpT KBbM8C+77mJe+AP6HOima3LwTqO7cJId6TsBsig4k7VLOtHFa/Tx3bJDyyOBpp11 lYkQGMKmQz+Wpmx8jkgfoc7TTB+c1LzTNqGqxjIksum4sh8lPSpBDp0vAy7mxWpq BeLKGR1S4W89u2bU4IzJybmKaVJsrZkPM888fgho1G79YjizTjOQoJ4p+FnFNMvt KCQb07+fqeUcvqU8BjmSTs9zuX0xY94itLWhhIjqHCLzG1l44EpWlP4uZXKXrxH1 vUZSTSSwhlIgaVK1iAtDGOS14ED42Po= -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:29 2025 by rpki-client