This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa File: 8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa (raw, json) Hash identifier: 2gccR8Lp8/iWiugSXI+GyLVvQWB1FyNIPARE3yUIiRg= Subject key identifier: FA:35:0D:66:72:5F:F4:9D:A0:63:93:35:61:F9:28:E4:C1:CD:9B:34 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584BF8E08570D4FC47A6B1042280 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa Signing time: Tue 25 Nov 2025 02:00:31 +0000 ROA not before: Tue 25 Nov 2025 02:00:31 +0000 ROA not after: Mon 23 Feb 2026 02:00:31 +0000 asID: 7029 IP address blocks: 170.199.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:85:70:d4:fc:47:a6:b1:04:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 25 02:00:31 2025 GMT Not After : Feb 23 02:00:31 2026 GMT Subject: CN=95298010-ec6c-4db9-be7c-d55323185d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:b2:a2:8f:d0:0d:ef:2b:fd:90:8b:a6:9b: a2:1d:7c:59:24:2a:a7:0f:52:57:c0:60:3d:e4:4a: 74:21:4d:44:4a:41:84:bf:10:f3:e8:9a:d0:32:d3: b8:c3:95:b0:65:95:b3:51:92:82:5c:f4:92:8e:2f: 71:8f:90:5f:d5:fb:61:d8:1a:cf:29:d8:c5:73:e5: 18:ff:e5:32:31:1f:71:cd:e3:a4:75:85:37:9b:d5: cb:f9:cf:ce:15:d5:86:1b:1e:a2:ec:6b:dc:c9:0e: 9f:4d:0d:cb:2c:29:0b:2c:6e:40:f9:93:9b:ff:fb: 70:97:75:cb:c0:40:55:cb:b6:5b:fd:46:fe:57:a2: cc:c4:f7:65:7c:cb:50:f3:88:be:7f:87:a7:e3:ff: 87:25:cb:30:c1:6c:10:78:0f:2d:40:b9:03:f3:76: 15:a7:4b:33:6f:f0:db:47:3c:45:e8:26:29:9f:ec: 7b:09:94:0f:17:a0:bb:7f:c2:7b:99:4f:dd:50:d8: 44:89:2d:a4:62:d6:b3:0a:9e:36:26:65:31:b7:a3: 8f:26:4d:2f:21:8f:ed:53:b1:ea:49:ff:54:1c:06: e0:6a:39:57:65:e8:84:f5:0b:c7:08:08:87:7d:59: 3e:74:4e:c2:4d:9e:e0:74:19:84:ed:cf:49:b3:2e: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:35:0D:66:72:5F:F4:9D:A0:63:93:35:61:F9:28:E4:C1:CD:9B:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8c42e76c-a4e4-3aac-b1cb-82d79097b7b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:56:82:8b:17:79:29:fb:fd:96:0b:fe:ae:a9:f3:bb:9a:6a: f1:15:37:ba:eb:d5:af:1e:95:c6:13:bb:dc:10:cb:d8:ae:67: b2:8b:ca:de:e1:ac:69:5b:52:e3:c2:51:77:4f:29:e4:fe:0b: c6:e5:5c:a3:27:0e:1d:3e:05:20:a8:19:d7:d6:90:e0:4c:02: 9c:b3:04:54:af:45:d6:3f:7e:a0:fc:38:41:60:eb:6e:6f:6b: a4:95:0e:20:97:a7:75:e2:9b:cd:43:27:a1:3c:9a:34:50:92: d6:fe:c6:b9:fc:33:6c:48:c0:3b:8d:40:7d:bf:3b:60:f0:4b: 47:b5:95:1e:90:74:27:3c:8f:6a:b2:c8:5c:ae:75:fa:03:53: ea:a2:cd:1e:2c:b5:38:57:fa:a9:c8:92:18:95:60:e9:36:a4: 93:48:0e:67:f4:ee:10:bb:64:8c:77:0a:a2:17:b3:04:9c:f5: c0:15:7e:89:60:b4:89:4d:5d:35:24:03:36:5f:da:bc:2b:cf: f0:03:ea:1f:cf:e8:ae:6c:f0:ba:9e:57:a5:a2:94:aa:aa:b1: 02:f7:73:07:b7:98:72:a4:e6:77:d4:50:ad:c0:17:77:f0:b0: 24:d1:0e:a4:3a:e2:33:82:06:a7:46:f0:2e:dd:d4:4c:72:29: 57:16:3c:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv44IVw1PxHprEEIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEyNTAyMDAzMVoXDTI2MDIyMzAyMDAzMVowLzEtMCsGA1UEAxMk OTUyOTgwMTAtZWM2Yy00ZGI5LWJlN2MtZDU1MzIzMTg1ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlriyoo/QDe8r/ZCLppuiHXxZJCqnD1JXwGA9 5Ep0IU1ESkGEvxDz6JrQMtO4w5WwZZWzUZKCXPSSji9xj5Bf1fth2BrPKdjFc+UY /+UyMR9xzeOkdYU3m9XL+c/OFdWGGx6i7GvcyQ6fTQ3LLCkLLG5A+ZOb//twl3XL wEBVy7Zb/Ub+V6LMxPdlfMtQ84i+f4en4/+HJcswwWwQeA8tQLkD83YVp0szb/Db RzxF6CYpn+x7CZQPF6C7f8J7mU/dUNhEiS2kYtazCp42JmUxt6OPJk0vIY/tU7Hq Sf9UHAbgajlXZeiE9QvHCAiHfVk+dE7CTZ7gdBmE7c9Jsy6ANQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo1DWZyX/SdoGOTNWH5KOTBzZs0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGM0MmU3NmMtYTRlNC0z YWFjLWIxY2ItODJkNzkwOTdiN2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsfhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM1WgosXeSn7/ZYL/q6p87uaavEVN7rr1a8elcYTu9wQy9iuZ7KLyt7h rGlbUuPCUXdPKeT+C8blXKMnDh0+BSCoGdfWkOBMApyzBFSvRdY/fqD8OEFg625v a6SVDiCXp3Xim81DJ6E8mjRQktb+xrn8M2xIwDuNQH2/O2DwS0e1lR6QdCc8j2qy yFyudfoDU+qizR4stThX+qnIkhiVYOk2pJNIDmf07hC7ZIx3CqIXswSc9cAVfolg tIlNXTUkAzZf2rwrz/AD6h/P6K5s8LqeV6WilKqqsQL3cwe3mHKk5nfUUK3AF3fw sCTRDqQ64jOCBqdG8C7d1ExyKVcWPC4= -----END CERTIFICATE-----Generated at Sat Dec 6 10:25:57 2025 by rpki-client