This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa File: e5e6aa31-b14a-31f9-a13b-828a710daada.roa (raw, json) Hash identifier: 91QRLiJ/YVEDzX5hciuPvMqYWCaCfG567w1Hk/1MpaA= Subject key identifier: 21:C9:55:04:85:29:D7:19:A8:FB:3C:19:FA:EC:68:E0:6D:41:34:9E Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Certificate serial: 010D0C9F4328584C0020BEC4855C45E014E7D6C0 Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa Signing time: Thu 27 Nov 2025 16:18:15 +0000 ROA not before: Thu 27 Nov 2025 16:18:15 +0000 ROA not after: Wed 25 Feb 2026 16:18:15 +0000 asID: 0 IP address blocks: 192.195.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:20:be:c4:85:5c:45:e0:14:e7:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d Validity Not Before: Nov 27 16:18:15 2025 GMT Not After : Feb 25 16:18:15 2026 GMT Subject: CN=35658b95-6b88-4cf0-a27f-a10e6ad744b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:cb:98:09:98:56:39:dd:d6:8d:c9:e0:36: 93:6a:e4:7d:c2:73:fc:b8:81:ce:ff:0e:1b:69:cb: b8:34:7b:7a:25:40:d3:f9:a1:5b:3f:e5:c5:3c:af: f4:7c:83:ef:e1:cb:2b:52:7c:2f:9b:ca:5d:55:78: 2c:0d:d3:3d:72:bc:0e:90:46:ae:99:79:be:38:fe: e1:96:84:cc:22:fc:cc:85:f8:8c:aa:f0:fe:2c:b3: de:d7:11:81:86:a5:9a:6e:b4:76:4e:dc:04:fc:c6: 5d:f7:c0:fb:40:ab:2c:b4:20:fe:f7:93:51:e9:2c: 37:52:03:a3:e7:51:65:5a:b9:b9:d3:c8:fa:c9:d3: 17:df:b8:52:75:83:d0:04:1b:8c:6c:e4:be:04:7c: ce:8e:ef:6c:80:d0:85:4f:f1:6a:72:3f:a3:23:d6: ca:b5:88:19:1e:c2:80:29:64:68:e7:7c:d8:64:20: 93:37:95:bb:b8:95:49:d8:1a:7c:55:b7:bd:52:81: 89:80:2f:48:ad:5a:bc:6c:44:c0:25:06:35:a6:ad: 7b:16:b7:1c:5f:be:25:1a:88:b6:eb:7c:f2:d5:4f: 33:c5:9a:cb:cb:76:8e:21:65:30:ce:c4:f3:fb:be: 8a:6f:40:74:3c:a0:d2:80:9e:67:28:74:f5:52:a5: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C9:55:04:85:29:D7:19:A8:FB:3C:19:FA:EC:68:E0:6D:41:34:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/e5e6aa31-b14a-31f9-a13b-828a710daada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl X509v3 Authority Key Identifier: keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer sbgp-ipAddrBlock: critical IPv4: 192.195.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:57:90:fc:ce:46:62:df:7c:ce:23:98:b3:a9:69:f0:c2:fb: 36:89:08:c5:84:38:5f:57:57:74:70:e9:29:f4:10:5f:d7:7c: 7c:ea:61:10:6b:09:02:95:af:cb:67:ec:1b:1c:6d:f5:7d:e1: 2e:03:66:8d:f6:41:c6:56:e1:92:59:88:af:d3:ab:3f:f1:6c: 0a:b5:c4:5f:07:69:e0:73:30:c4:9c:c6:2d:57:cf:3b:00:e3: 72:86:d1:35:cd:3e:2f:88:0b:70:c0:2e:81:42:92:5f:c1:01: d5:fc:2c:d5:36:d0:2e:60:2c:d3:33:31:62:75:54:68:29:90: 37:21:0f:91:e3:1e:97:14:0a:b6:67:48:4c:f6:8e:27:fa:2d: 5c:f2:f0:c8:6f:3a:e5:1d:ea:f9:c5:4f:02:37:96:d6:1d:9a: a7:09:7c:5f:dc:27:17:50:53:21:3f:c3:36:fc:6c:04:e3:9a: ca:a5:7a:ba:4f:85:c7:a2:94:40:0c:70:b6:85:96:76:4e:27: 5f:a2:89:e0:04:57:46:a3:81:8e:36:5a:59:74:88:ba:45:31: 0d:2c:59:7b:b6:38:86:78:4c:c3:64:c8:b0:03:e3:5a:b0:e7: 55:2c:56:be:d5:05:4f:bc:75:f7:05:24:00:11:24:a0:90:cd: 91:b5:e8:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwAIL7EhVxF4BTn1sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGJmNmI0YWEtOGZlZC00MjFiLWJkNWMtODM4NWMwNTA0 YzFkMB4XDTI1MTEyNzE2MTgxNVoXDTI2MDIyNTE2MTgxNVowLzEtMCsGA1UEAxMk MzU2NThiOTUtNmI4OC00Y2YwLWEyN2YtYTEwZTZhZDc0NGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjvLmAmYVjnd1o3J4DaTauR9wnP8uIHO/w4b acu4NHt6JUDT+aFbP+XFPK/0fIPv4csrUnwvm8pdVXgsDdM9crwOkEaumXm+OP7h loTMIvzMhfiMqvD+LLPe1xGBhqWabrR2TtwE/MZd98D7QKsstCD+95NR6Sw3UgOj 51FlWrm508j6ydMX37hSdYPQBBuMbOS+BHzOju9sgNCFT/Fqcj+jI9bKtYgZHsKA KWRo53zYZCCTN5W7uJVJ2Bp8Vbe9UoGJgC9IrVq8bETAJQY1pq17FrccX74lGoi2 63zy1U8zxZrLy3aOIWUwzsTz+76Kb0B0PKDSgJ5nKHT1UqVsoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHJVQSFKdcZqPs8GfrsaOBtQTSeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2 YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1YzA1MDRjMWQvZTVlNmFhMzEtYjE0YS0z MWY5LWExM2ItODI4YTcxMGRhYWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGJmNmI0YWEtOGZlZC00MjFiLWJk NWMtODM4NWMwNTA0YzFkLzRiZjZiNGFhLThmZWQtNDIxYi1iZDVjLTgzODVjMDUw NGMxZC5jcmwwHwYDVR0jBBgwFoAUcckP4wgdVfg2iOcttJB4J8D0Zh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YmY2YjRhYS04ZmVkLTQyMWItYmQ1Yy04Mzg1 YzA1MDRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwMOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpXkPzORmLffM4jmLOpafDC+zaJCMWEOF9XV3Rw6Sn0EF/XfHzqYRBr CQKVr8tn7BscbfV94S4DZo32QcZW4ZJZiK/Tqz/xbAq1xF8HaeBzMMScxi1XzzsA 43KG0TXNPi+IC3DALoFCkl/BAdX8LNU20C5gLNMzMWJ1VGgpkDchD5HjHpcUCrZn SEz2jif6LVzy8MhvOuUd6vnFTwI3ltYdmqcJfF/cJxdQUyE/wzb8bATjmsqlerpP hceilEAMcLaFlnZOJ1+iieAEV0ajgY42Wll0iLpFMQ0sWXu2OIZ4TMNkyLAD41qw 51UsVr7VBU+8dfcFJAARJKCQzZG16D0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:04 2025 by rpki-client