This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa File: d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa (raw, json) Hash identifier: gR4XpIQAYCn8SGw048g4mrmbUKzEcTXOB6zX5F7MZ9Y= Subject key identifier: 23:76:7C:D0:6D:67:E8:D7:CC:41:BE:F7:36:59:45:38:7D:8F:E3:F4 Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584BF1E5E6E6FFA4B3440943CE40 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa Signing time: Sat 22 Nov 2025 14:00:39 +0000 ROA not before: Sat 22 Nov 2025 14:00:39 +0000 ROA not after: Fri 20 Feb 2026 14:00:39 +0000 asID: 14090 IP address blocks: 64.21.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:e6:e6:ff:a4:b3:44:09:43:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Nov 22 14:00:39 2025 GMT Not After : Feb 20 14:00:39 2026 GMT Subject: CN=9a6819b4-e60b-432f-aa72-0fdda632ebfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:ba:24:66:cb:5c:f4:15:c8:13:71:8b:13: 69:7e:64:67:bb:51:09:f2:05:1b:c5:fc:82:09:fd: fb:37:a8:1f:d7:71:19:99:81:f3:e5:3c:0b:dd:f2: 81:ad:1b:d8:a7:97:ab:29:81:b8:38:77:e9:4c:ab: 48:f9:22:04:e3:4b:cf:14:6e:3d:34:76:d8:de:07: ea:a8:9e:be:bc:5c:14:f0:7d:6e:cd:12:11:04:f2: 41:7a:7e:94:1a:d9:2d:69:87:6c:9c:ec:24:1e:fd: eb:98:59:4a:59:25:3a:4b:2d:be:17:12:28:9e:b9: 17:2f:3e:59:d5:66:2c:51:c1:f7:fd:0c:94:4b:60: 7b:aa:42:48:2a:fa:1c:ca:51:d3:34:cf:75:d9:66: 90:c6:c7:16:3e:c3:0a:6f:c6:32:6e:ae:ca:3f:16: 49:12:32:23:9a:8e:27:61:4a:7a:bd:6d:80:bf:49: e6:32:69:21:06:52:20:e3:b3:b0:89:26:04:38:77: f6:5a:e1:15:5f:ce:88:44:aa:c7:08:eb:7d:ba:e2: 68:2d:7c:e4:02:7b:f2:77:b5:d3:82:5f:4d:3b:80: 1c:fc:7a:6b:c9:39:9e:b6:2e:8a:87:3f:e9:54:f9: f6:86:8b:3e:39:8a:a5:26:34:d1:b9:a9:37:96:62: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:76:7C:D0:6D:67:E8:D7:CC:41:BE:F7:36:59:45:38:7D:8F:E3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/d7cffb20-68b0-3efb-aae8-136dc8e4fbc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 64.21.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:39:9b:d3:e0:32:f9:3f:a9:86:3a:98:d9:07:3a:b7:de:cf: 2d:07:b8:dc:22:02:74:07:fd:dc:a3:ed:86:43:54:4a:94:e4: 02:ef:ae:c3:20:1b:31:b5:8f:e4:f5:43:65:1f:b1:74:fa:5f: 4f:0f:a8:b5:ae:37:0f:db:63:6b:85:88:21:f3:2a:c3:82:ac: 44:e1:a8:99:bf:0e:49:a7:5b:d1:2d:7e:cf:ef:33:7a:52:01: 57:91:31:bf:20:f9:5e:b5:1d:cb:f6:e7:3a:96:4e:a4:6b:9c: 0e:2a:4a:a1:eb:11:e8:5a:eb:d5:b9:ce:7c:d9:e8:78:e2:72: b6:1a:2e:04:31:46:66:06:30:a8:ae:7a:c9:6c:3d:ee:81:f5: b2:5a:2a:fd:a3:c3:48:4e:ec:a1:ca:93:a4:7d:a6:d4:d2:05: 14:7b:f4:aa:c4:63:a5:ba:fe:7b:d3:66:5a:16:1c:31:8b:19: 8d:26:37:cf:13:79:e2:ee:38:3e:64:07:0f:21:83:eb:35:47: ea:ec:ae:db:eb:7b:07:bf:fb:3f:45:d3:8b:44:ce:c9:5d:c2: 21:db:76:56:8d:43:95:cc:e3:9e:06:e5:6c:05:b9:b1:5a:f2: 72:e0:79:bb:17:b8:53:78:19:cc:6b:89:9d:08:ed:6c:cb:d9: 24:88:53:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvx5ebm/6SzRAlDzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI1MTEyMjE0MDAzOVoXDTI2MDIyMDE0MDAzOVowLzEtMCsGA1UEAxMk OWE2ODE5YjQtZTYwYi00MzJmLWFhNzItMGZkZGE2MzJlYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx66JGbLXPQVyBNxixNpfmRnu1EJ8gUbxfyC Cf37N6gf13EZmYHz5TwL3fKBrRvYp5erKYG4OHfpTKtI+SIE40vPFG49NHbY3gfq qJ6+vFwU8H1uzRIRBPJBen6UGtktaYdsnOwkHv3rmFlKWSU6Sy2+FxIonrkXLz5Z 1WYsUcH3/QyUS2B7qkJIKvocylHTNM912WaQxscWPsMKb8Yybq7KPxZJEjIjmo4n YUp6vW2Av0nmMmkhBlIg47OwiSYEOHf2WuEVX86IRKrHCOt9uuJoLXzkAnvyd7XT gl9NO4Ac/HpryTmeti6Khz/pVPn2hos+OYqlJjTRuak3lmIl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCN2fNBtZ+jXzEG+9zZZRTh9j+P0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvZDdjZmZiMjAtNjhiMC0z ZWZiLWFhZTgtMTM2ZGM4ZTRmYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBX5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY5m9PgMvk/qYY6mNkHOrfezy0HuNwiAnQH/dyj7YZDVEqU5ALvrsMg GzG1j+T1Q2UfsXT6X08PqLWuNw/bY2uFiCHzKsOCrEThqJm/DkmnW9Etfs/vM3pS AVeRMb8g+V61Hcv25zqWTqRrnA4qSqHrEeha69W5znzZ6HjicrYaLgQxRmYGMKiu eslsPe6B9bJaKv2jw0hO7KHKk6R9ptTSBRR79KrEY6W6/nvTZloWHDGLGY0mN88T eeLuOD5kBw8hg+s1R+rsrtvrewe/+z9F04tEzsldwiHbdlaNQ5XM454G5WwFubFa 8nLgebsXuFN4GcxriZ0I7WzL2SSIU4Q= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:59 2025 by rpki-client