This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa File: ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (raw, json) Hash identifier: eha1Pv0HLqxAT/vADZKGIPbng5Y4wShsfawGfdF/iso= Subject key identifier: F7:DE:A3:1E:2A:2E:BE:1C:8C:E6:CE:33:FF:76:94:07:33:82:9E:0D Certificate issuer: /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Certificate serial: 010D0C9F4328584C14CB6662C87DC172C6937900 Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 46110 IP address blocks: 199.101.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:66:62:c8:7d:c1:72:c6:93:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8 Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=47e5094b-51bb-4357-9e71-335ef6173144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:02:70:53:8f:9f:f6:2b:b9:03:fa:f0:43: 8b:b9:6b:5e:cb:b2:1f:ba:28:db:21:51:b6:d5:b7: 22:a0:ed:8d:34:04:56:28:7f:d8:7e:b3:4a:72:35: e9:42:e9:b7:4f:08:37:ea:ff:ce:6c:46:5a:48:3a: c4:d7:47:01:0d:2d:eb:28:86:61:c6:3d:4f:31:2b: 5b:b8:09:00:59:18:95:3f:4d:98:56:07:cc:53:fb: 9f:8a:7e:c3:c8:f7:5e:95:bf:c9:b2:4a:47:9a:2f: 37:d2:cb:7f:b5:64:88:ef:d6:ff:a3:05:e7:c5:17: ad:16:ce:84:e6:8c:6e:7a:fa:06:72:bd:3c:4d:d5: 70:81:4c:94:e5:27:0a:de:d0:8f:8b:6a:78:77:8c: 3b:62:c5:2a:1a:fd:a7:60:88:6e:95:a0:7a:c9:8e: ee:7e:86:42:3b:a8:41:4c:1c:a2:0d:21:fa:18:57: d9:97:92:d0:1a:1d:74:a8:ef:9f:a2:39:e3:d7:f9: 86:bb:2c:21:10:0d:0f:7f:14:b4:b1:cc:b2:33:9e: 1a:24:49:b1:83:ad:c4:24:fc:b5:84:c7:81:65:fd: fa:f9:f2:e8:ae:ae:ac:85:92:b1:51:2f:e5:2a:1e: b4:b6:03:a9:cb:fb:b0:ca:c0:ce:dc:12:90:eb:87: a0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DE:A3:1E:2A:2E:BE:1C:8C:E6:CE:33:FF:76:94:07:33:82:9E:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl X509v3 Authority Key Identifier: keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer sbgp-ipAddrBlock: critical IPv4: 199.101.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f4:d8:54:be:b4:89:2c:a7:66:00:15:34:58:59:b5:eb:dd: 60:d8:08:23:29:1c:18:92:be:b1:dd:01:cf:0d:26:c7:75:68: 99:9d:c7:3b:97:1f:3a:c0:d4:7c:9f:5f:5f:ff:e6:68:3c:5b: a5:7a:05:be:67:96:9a:ca:5d:42:7b:f1:ab:de:ad:9f:23:23: 80:5e:67:b8:be:ac:89:f3:e3:94:99:b1:20:92:a3:83:3c:a9: b7:21:a5:9b:ba:1b:52:6b:04:7b:90:41:6d:bd:56:ae:e6:e5: 8a:0a:0e:16:a1:e0:d1:5d:03:f7:54:e4:97:7a:df:a9:dc:d4: 19:a8:d2:66:8f:3b:34:1f:1c:9c:fe:21:67:e3:47:51:29:ae: bf:9c:2d:62:ac:a0:2b:9f:53:0e:c8:e8:de:97:97:0b:e4:02: 4a:36:90:41:1c:6b:0b:14:63:2c:16:c2:c1:a4:41:32:9b:f1: cc:9d:af:92:4a:4c:94:84:87:79:20:72:0b:e6:76:f6:60:5d: 09:9d:67:30:10:b6:8f:29:f2:0e:5e:de:a1:24:a1:e8:cf:67: dd:ca:19:3a:e2:8c:fe:ba:e4:d9:27:7f:f6:86:1b:64:ba:62: 9b:fa:0e:b1:f6:bd:23:9b:8f:57:e0:5e:eb:69:ba:c7:e7:18: 7c:00:5b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy2ZiyH3BcsaTeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDlkMDMtZGI0YS00ODA0LTgyZGMtZmMyYzBmZGI5 NGU4MB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk NDdlNTA5NGItNTFiYi00MzU3LTllNzEtMzM1ZWY2MTczMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSACcFOPn/YruQP68EOLuWtey7IfuijbIVG2 1bcioO2NNARWKH/YfrNKcjXpQum3Twg36v/ObEZaSDrE10cBDS3rKIZhxj1PMStb uAkAWRiVP02YVgfMU/ufin7DyPdelb/JskpHmi830st/tWSI79b/owXnxRetFs6E 5oxuevoGcr08TdVwgUyU5ScK3tCPi2p4d4w7YsUqGv2nYIhulaB6yY7ufoZCO6hB TByiDSH6GFfZl5LQGh10qO+fojnj1/mGuywhEA0PfxS0scyyM54aJEmxg63EJPy1 hMeBZf36+fLorq6shZKxUS/lKh60tgOpy/uwysDO3BKQ64egiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfeox4qLr4cjObOM/92lAczgp4NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0 OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJjMGZkYjk0ZTgvY2U3YTZhODUtMzQwMC0z ZTk3LWE2YjYtNjI2NDRmZTJmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmFhNDlkMDMtZGI0YS00ODA0LTgy ZGMtZmMyYzBmZGI5NGU4LzJhYTQ5ZDAzLWRiNGEtNDgwNC04MmRjLWZjMmMwZmRi OTRlOC5jcmwwHwYDVR0jBBgwFoAUL4GD8qhhJFWorV2604WpxuXzKEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yYWE0OWQwMy1kYjRhLTQ4MDQtODJkYy1mYzJj MGZkYjk0ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2UIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn02FS+tIksp2YAFTRYWbXr3WDYCCMpHBiSvrHdAc8NJsd1aJmdxzuX HzrA1HyfX1//5mg8W6V6Bb5nlprKXUJ78averZ8jI4BeZ7i+rInz45SZsSCSo4M8 qbchpZu6G1JrBHuQQW29Vq7m5YoKDhah4NFdA/dU5Jd636nc1Bmo0maPOzQfHJz+ IWfjR1Eprr+cLWKsoCufUw7I6N6XlwvkAko2kEEcawsUYywWwsGkQTKb8cydr5JK TJSEh3kgcgvmdvZgXQmdZzAQto8p8g5e3qEkoejPZ93KGTrijP665Nknf/aGG2S6 Ypv6DrH2vSObj1fgXutpusfnGHwAW8c= -----END CERTIFICATE-----Generated at Sat Dec 6 23:36:17 2025 by rpki-client