This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa File: de847a06-de42-39bb-b42d-d6634e0c9a95.roa (raw, json) Hash identifier: JqYiGw+jENIKLj8M3hxLj2h2XjqAwryV+/h5PxRbhCw= Subject key identifier: 91:C1:93:7E:72:D4:84:E4:38:A2:FE:0B:DB:37:45:31:99:FC:98:AA Certificate issuer: /CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Certificate serial: 010D0C9F4328584C14220E1073777DFD2C1A9440 Authority key identifier: 9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa Signing time: Thu 04 Dec 2025 20:19:25 +0000 ROA not before: Thu 04 Dec 2025 20:19:25 +0000 ROA not after: Wed 04 Mar 2026 20:19:25 +0000 asID: 40214 IP address blocks: 124.197.0.0/20 maxlen: 24 185.111.200.0/22 maxlen: 24 2607:ee40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:22:0e:10:73:77:7d:fd:2c:1a:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bf9628-af4d-4afa-ae79-ac51e8655d32 Validity Not Before: Dec 4 20:19:25 2025 GMT Not After : Mar 4 20:19:25 2026 GMT Subject: CN=f7a95868-7b2a-4e08-bd33-e5e465aef321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b6:4b:ef:63:95:b5:be:9f:fb:dd:2b:63:57: ee:4e:58:f6:cf:4e:e3:26:d4:03:de:b4:22:fc:c4: df:5f:88:95:1d:74:90:07:4a:6a:89:3d:40:ae:69: 38:3d:ed:82:d4:f0:4d:03:29:27:d6:c0:5e:5e:d0: b6:91:a2:ab:e6:bb:11:6a:b8:17:ca:fd:cd:02:38: 19:43:c0:7e:69:31:dd:cb:25:87:86:81:1d:4c:09: 83:97:5c:21:9a:f7:2c:bc:78:f4:8d:55:a6:d5:7d: f7:31:65:7e:ae:66:de:15:6c:71:79:37:bb:14:28: 13:6c:69:bb:fc:e2:2b:ea:19:b6:71:be:8b:2e:6a: 3c:62:c0:19:9a:7c:8a:76:70:22:2f:d5:b8:a9:12: 08:9a:e0:2b:07:4b:5c:11:48:7f:18:7c:f4:57:3a: 37:7f:ce:4d:3b:87:41:ba:3a:8b:98:14:7d:01:62: c3:ce:3c:15:c4:2e:56:78:b7:ac:b5:24:38:fe:ad: de:6a:07:a8:17:e0:ab:09:46:66:53:98:b5:3e:97: 89:aa:0c:c7:2a:ab:f2:8e:4a:9a:c3:32:ca:f9:a8: fb:a0:cc:52:95:3f:d8:92:17:16:4b:b1:54:6d:cc: 73:65:6b:bb:9b:08:87:58:34:96:5e:a0:68:9a:70: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C1:93:7E:72:D4:84:E4:38:A2:FE:0B:DB:37:45:31:99:FC:98:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/de847a06-de42-39bb-b42d-d6634e0c9a95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32/a4bf9628-af4d-4afa-ae79-ac51e8655d32.crl X509v3 Authority Key Identifier: keyid:9A:7A:27:DE:EA:74:07:A6:4B:92:F9:BF:8F:35:A2:E8:71:65:A4:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4bf9628-af4d-4afa-ae79-ac51e8655d32.cer sbgp-ipAddrBlock: critical IPv4: 124.197.0.0/20 185.111.200.0/22 IPv6: 2607:ee40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:25:80:ef:68:d7:3c:bb:e6:55:f8:f6:c5:3a:0e:18:f5:5a: f2:1f:13:4a:6d:4d:c9:74:4e:e1:7f:fa:16:40:a4:31:24:6d: 12:d4:b8:07:50:49:02:ad:69:5f:48:70:0e:52:65:ac:cc:a9: 2a:f5:59:89:15:a7:cc:55:66:bc:bc:0d:aa:77:5a:b6:6b:a3: f6:e6:ab:d4:4a:61:c6:60:03:ab:3c:98:35:ca:c5:dd:19:4a: 42:7c:5d:6b:32:0c:e6:b0:a4:e0:71:14:28:d7:b4:c7:9f:fb: c9:d5:66:23:49:03:ba:4a:6b:ac:f4:d4:bc:02:2f:6b:29:6a: 4b:40:7b:9c:c6:99:ed:01:55:59:56:30:7e:99:b3:7e:70:83: 6b:51:09:45:14:93:c1:dd:aa:3d:f9:7f:a1:46:01:92:8d:6b: 3f:07:4f:38:be:d1:1d:1c:3b:ce:c0:a3:59:49:08:48:f1:1b: 47:79:cd:45:4d:73:cd:d8:ba:6d:d3:d5:6d:0c:3f:32:9f:e6: cc:78:b6:09:bf:c4:17:cf:13:62:32:48:78:47:50:b6:3b:e1: 2f:1a:34:fa:66:1c:6a:a0:29:c5:37:ab:c3:66:be:30:9d:ef: 5d:5f:3c:af:fe:c9:1f:f7:4c:ac:bc:18:23:cd:bb:1b:d9:27: f5:d9:09:5a -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEwUIg4Qc3d9/SwalEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRiZjk2MjgtYWY0ZC00YWZhLWFlNzktYWM1MWU4NjU1 ZDMyMB4XDTI1MTIwNDIwMTkyNVoXDTI2MDMwNDIwMTkyNVowLzEtMCsGA1UEAxMk ZjdhOTU4NjgtN2IyYS00ZTA4LWJkMzMtZTVlNDY1YWVmMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLZL72OVtb6f+90rY1fuTlj2z07jJtQD3rQi /MTfX4iVHXSQB0pqiT1Armk4Pe2C1PBNAykn1sBeXtC2kaKr5rsRargXyv3NAjgZ Q8B+aTHdyyWHhoEdTAmDl1whmvcsvHj0jVWm1X33MWV+rmbeFWxxeTe7FCgTbGm7 /OIr6hm2cb6LLmo8YsAZmnyKdnAiL9W4qRIImuArB0tcEUh/GHz0Vzo3f85NO4dB ujqLmBR9AWLDzjwVxC5WeLestSQ4/q3eageoF+CrCUZmU5i1PpeJqgzHKqvyjkqa wzLK+aj7oMxSlT/YkhcWS7FUbcxzZWu7mwiHWDSWXqBomnCgpQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFJHBk35y1ITkOKL+C9s3RTGZ/JiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJm OTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUxZTg2NTVkMzIvZGU4NDdhMDYtZGU0Mi0z OWJiLWI0MmQtZDY2MzRlMGM5YTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRiZjk2MjgtYWY0ZC00YWZhLWFl NzktYWM1MWU4NjU1ZDMyL2E0YmY5NjI4LWFmNGQtNGFmYS1hZTc5LWFjNTFlODY1 NWQzMi5jcmwwHwYDVR0jBBgwFoAUmnon3up0B6ZLkvm/jzWi6HFlpMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGJmOTYyOC1hZjRkLTRhZmEtYWU3OS1hYzUx ZTg2NTVkMzIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEfMUAAwQC uW/IMA0EAgACMAcDBQAmB+5AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACslgO9o1zy75lX49sU6Dhj1WvIf E0ptTcl0TuF/+hZApDEkbRLUuAdQSQKtaV9IcA5SZazMqSr1WYkVp8xVZry8Dap3 WrZro/bmq9RKYcZgA6s8mDXKxd0ZSkJ8XWsyDOawpOBxFCjXtMef+8nVZiNJA7pK a6z01LwCL2spaktAe5zGme0BVVlWMH6Zs35wg2tRCUUUk8Hdqj35f6FGAZKNaz8H Tzi+0R0cO87Ao1lJCEjxG0d5zUVNc83Yum3T1W0MPzKf5sx4tgm/xBfPE2IySHhH ULY74S8aNPpmHGqgKcU3q8NmvjCd711fPK/+yR/3TKy8GCPNuxvZJ/XZCVo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:14:24 2025 by rpki-client