This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa File: ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa (raw, json) Hash identifier: SpeKb/R7dVvAi54LVy6ouaFvShIQcQoB8/xx+l/TCyI= Subject key identifier: 69:42:E2:20:DD:B6:DB:93:B2:0B:38:78:F3:BA:E0:62:62:23:00:FB Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584BDA2B0BAC451078F6E7B7C280 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa Signing time: Fri 14 Nov 2025 02:00:30 +0000 ROA not before: Fri 14 Nov 2025 02:00:30 +0000 ROA not after: Thu 12 Feb 2026 02:00:30 +0000 asID: 6079 IP address blocks: 172.99.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:da:2b:0b:ac:45:10:78:f6:e7:b7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Nov 14 02:00:30 2025 GMT Not After : Feb 12 02:00:30 2026 GMT Subject: CN=0b4e617c-1679-4069-b89d-43afa8001f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2c:9a:80:c6:c3:c4:f6:3c:3e:d9:9a:44:fd: fc:45:24:be:a0:0c:b0:c2:91:97:13:b6:9c:ff:a7: 7a:13:af:48:7c:5f:94:b0:74:14:a7:33:85:29:54: 38:80:04:04:42:25:b3:29:58:34:03:d0:b2:39:ba: 6c:ed:8b:be:84:9b:3b:53:f4:68:15:0b:7c:65:b4: 8b:bc:ab:11:f4:2c:4b:09:ca:75:85:48:6a:9e:38: 24:ec:28:a8:d2:fe:7a:09:a0:f0:a3:38:e8:5b:c4: 31:2e:10:78:41:a7:4c:b7:7f:55:79:47:71:60:e7: b3:1c:27:c0:36:a0:3b:e9:73:3b:c4:47:bd:25:67: 1c:40:89:2d:f4:78:70:70:bf:a7:a9:70:e6:03:01: 45:75:d6:e1:a0:ee:26:60:e3:e3:1c:af:06:f2:66: 78:62:be:47:f6:a0:71:a9:8f:d6:a4:91:92:4d:98: 5f:b1:c4:02:68:3e:be:25:b3:8e:c8:5b:b1:45:41: 61:dc:2a:66:21:2a:20:4e:69:99:bc:09:ee:0c:58: 8b:45:69:02:74:65:5a:b2:43:33:10:b6:8b:40:8d: 9e:2c:b3:a5:14:e4:9f:c0:96:fe:b7:cb:13:f9:9a: 38:d2:df:0d:e9:5c:e4:48:bf:bf:17:4f:27:25:ba: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:E2:20:DD:B6:DB:93:B2:0B:38:78:F3:BA:E0:62:62:23:00:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/ae689f65-5df9-3697-9711-2fdf70b4ca5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 172.99.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:66:98:34:e0:ca:fa:18:af:d0:04:9f:6a:88:42:aa:7d:b6: af:bf:3d:b3:28:1a:ff:a2:e8:d5:16:86:ab:2b:a1:cd:cd:70: e4:8c:ea:37:25:1a:57:cd:48:da:f6:ba:15:cf:17:5a:3d:43: 27:df:3a:2e:32:f5:05:fd:f1:d1:f5:2a:e2:58:e9:3d:16:af: 6d:25:1b:c1:a7:64:ba:cd:94:72:0b:69:98:9d:11:92:af:ac: 03:c5:44:1e:08:70:d4:0d:0e:57:e0:b4:1b:11:11:c2:87:a6: 40:b7:46:91:fa:6c:e1:bc:23:2f:e3:bf:bd:6b:bf:b8:2f:49: 38:5c:60:88:0b:77:de:cb:a0:2b:b6:7f:10:09:c9:5e:d9:0b: 35:c4:a1:7d:12:f9:ee:7d:e1:e6:0f:2d:5c:df:ee:23:ef:bf: 9d:75:76:91:a8:f3:46:a1:be:62:13:1a:30:eb:1e:7d:c2:8c: 8b:6f:54:5b:25:a5:75:d6:bd:ca:ed:ac:89:65:e1:af:2a:c3: 56:b1:f7:db:08:34:8a:24:08:fc:46:c7:7c:47:80:09:92:e1: 3a:e7:78:0d:af:53:1b:0e:46:11:81:8a:16:9b:8c:2d:99:de: 63:6d:4f:d7:69:2b:73:58:be:fa:27:b1:df:ef:39:67:c5:4f: 62:61:d0:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvaKwusRRB49ue3woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI1MTExNDAyMDAzMFoXDTI2MDIxMjAyMDAzMFowLzEtMCsGA1UEAxMk MGI0ZTYxN2MtMTY3OS00MDY5LWI4OWQtNDNhZmE4MDAxZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiyagMbDxPY8PtmaRP38RSS+oAywwpGXE7ac /6d6E69IfF+UsHQUpzOFKVQ4gAQEQiWzKVg0A9CyObps7Yu+hJs7U/RoFQt8ZbSL vKsR9CxLCcp1hUhqnjgk7Cio0v56CaDwozjoW8QxLhB4QadMt39VeUdxYOezHCfA NqA76XM7xEe9JWccQIkt9HhwcL+nqXDmAwFFddbhoO4mYOPjHK8G8mZ4Yr5H9qBx qY/WpJGSTZhfscQCaD6+JbOOyFuxRUFh3CpmISogTmmZvAnuDFiLRWkCdGVaskMz ELaLQI2eLLOlFOSfwJb+t8sT+Zo40t8N6VzkSL+/F08nJbpZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlC4iDdttuTsgs4ePO64GJiIwD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvYWU2ODlmNjUtNWRmOS0z Njk3LTk3MTEtMmZkZjcwYjRjYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdmmDTgyvoYr9AEn2qIQqp9tq+/PbMoGv+i6NUWhqsroc3NcOSM6jcl GlfNSNr2uhXPF1o9QyffOi4y9QX98dH1KuJY6T0Wr20lG8GnZLrNlHILaZidEZKv rAPFRB4IcNQNDlfgtBsREcKHpkC3RpH6bOG8Iy/jv71rv7gvSThcYIgLd97LoCu2 fxAJyV7ZCzXEoX0S+e594eYPLVzf7iPvv511dpGo80ahvmITGjDrHn3CjItvVFsl pXXWvcrtrIll4a8qw1ax99sINIokCPxGx3xHgAmS4TrneA2vUxsORhGBihabjC2Z 3mNtT9dpK3NYvvonsd/vOWfFT2Jh0Jg= -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:51 2025 by rpki-client