This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa File: 3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa (raw, json) Hash identifier: 9KCf/1AaixkRb4++r1OkbTG101KwLBo/Kyq4WoCFZXQ= Subject key identifier: 9C:46:64:5B:18:6C:67:97:D7:6B:B6:58:06:75:5F:43:2D:24:2D:35 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584BFD10B47CC7368F84DA5B3880 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 14618 IP address blocks: 64.17.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:b4:7c:c7:36:8f:84:da:5b:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=0fd9f5d2-9484-4a7e-87fb-c32dcd08ab8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0f:f3:22:d7:9a:80:ea:3c:31:cc:c7:c6:4a: 5d:67:34:5a:b9:7d:7e:40:24:1c:3a:a4:fd:eb:20: e8:b5:7e:65:3d:42:f2:15:aa:4d:98:15:d4:60:a5: cb:0f:7f:d1:96:7e:5b:a8:ba:1f:79:c1:c5:ff:d3: 9c:6a:ed:63:97:b7:7e:45:51:5e:5e:c0:53:9e:d2: 55:7f:19:0c:5f:57:2f:71:c7:b9:e2:33:c8:02:ea: 0e:ca:4a:b0:89:47:dc:56:49:44:a2:fc:c1:6d:3c: f8:e2:8e:2e:6b:d8:ba:12:f4:2b:5f:ce:ae:73:11: 8c:e4:36:82:a6:0b:d5:d6:c9:51:53:f8:8a:1f:51: b1:07:01:06:d8:0e:67:f5:ac:57:cf:f3:95:46:6d: 02:a0:55:ab:9f:e2:98:75:e4:23:04:b4:da:3c:40: be:6f:26:ca:8e:96:6c:32:af:ef:bb:cb:1a:73:00: 31:7f:35:c4:83:a9:e9:80:3e:da:dc:9c:47:6b:19: 5c:39:2d:dd:1f:b7:4b:16:ef:43:51:32:cc:b7:31: 30:9b:c5:15:de:8e:0b:ed:4c:7c:7f:ec:af:46:11: 3f:30:53:58:85:a5:48:75:e4:a3:8b:f6:11:ee:f5: 96:62:b5:2e:fa:ab:86:18:a9:7d:ee:e7:73:46:78: 76:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:46:64:5B:18:6C:67:97:D7:6B:B6:58:06:75:5F:43:2D:24:2D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/3af35d11-a01d-3db6-b395-3c5923ec3c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 64.17.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0d:ae:75:ef:49:30:8d:48:2d:48:88:2c:4d:70:00:f4:16: 4a:65:40:74:e7:c3:af:05:69:01:c6:aa:ad:c8:df:a6:6b:01: e7:53:fe:ec:3e:9f:82:11:6c:0a:0b:36:07:47:a5:a0:1e:a3: 4d:3e:02:f6:3c:e1:3b:1c:bc:a2:c4:42:a0:28:01:64:f1:f5: cd:32:60:9c:6e:2e:79:b5:33:43:89:d9:5f:96:65:88:0c:c1: 48:49:75:8f:b0:c5:5a:98:a2:1c:47:07:49:06:0c:e9:6e:2d: a1:42:14:2f:af:e7:09:99:26:98:93:29:c0:9e:f2:db:ad:69: 73:2d:26:90:58:4d:9f:ea:ff:3e:da:e0:cc:3d:96:c5:fa:14: d1:d6:a2:d2:b2:77:59:04:f0:8d:43:fe:ce:30:a2:0f:30:d3: b0:59:45:2f:21:a0:0e:60:9d:c0:56:08:ed:85:1f:da:65:9c: aa:2b:25:38:03:a6:54:b5:9c:3a:f4:6f:6b:d4:3f:58:5e:cf: 87:ea:df:fb:a6:f4:2a:de:2a:fa:c7:7b:8b:6b:6c:dc:f6:3d: c4:66:82:da:6a:ce:31:a1:95:3b:60:59:c7:27:ee:e4:12:c1: d6:13:fb:a4:6b:db:92:a2:4f:cd:4d:de:5a:6a:1a:d9:5e:83: 85:9e:ba:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9ELR8xzaPhNpbOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk MGZkOWY1ZDItOTQ4NC00YTdlLTg3ZmItYzMyZGNkMDhhYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w/zIteagOo8MczHxkpdZzRauX1+QCQcOqT9 6yDotX5lPULyFapNmBXUYKXLD3/Rln5bqLofecHF/9Ocau1jl7d+RVFeXsBTntJV fxkMX1cvcce54jPIAuoOykqwiUfcVklEovzBbTz44o4ua9i6EvQrX86ucxGM5DaC pgvV1slRU/iKH1GxBwEG2A5n9axXz/OVRm0CoFWrn+KYdeQjBLTaPEC+bybKjpZs Mq/vu8sacwAxfzXEg6npgD7a3JxHaxlcOS3dH7dLFu9DUTLMtzEwm8UV3o4L7Ux8 f+yvRhE/MFNYhaVIdeSji/YR7vWWYrUu+quGGKl97udzRnh2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxGZFsYbGeX12u2WAZ1X0MtJC01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvM2FmMzVkMTEtYTAxZC0z ZGI2LWIzOTUtM2M1OTIzZWMzYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4NrnXvSTCNSC1IiCxNcAD0FkplQHTnw68FaQHGqq3I36ZrAedT/uw+ n4IRbAoLNgdHpaAeo00+AvY84TscvKLEQqAoAWTx9c0yYJxuLnm1M0OJ2V+WZYgM wUhJdY+wxVqYohxHB0kGDOluLaFCFC+v5wmZJpiTKcCe8tutaXMtJpBYTZ/q/z7a 4Mw9lsX6FNHWotKyd1kE8I1D/s4wog8w07BZRS8hoA5gncBWCO2FH9plnKorJTgD plS1nDr0b2vUP1hez4fq3/um9CreKvrHe4trbNz2PcRmgtpqzjGhlTtgWccn7uQS wdYT+6Rr25KiT81N3lpqGtleg4Weulc= -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:54 2025 by rpki-client