This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa File: c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa (raw, json) Hash identifier: 2K1PXWKQlI4T6DUJZMs0swzirXOSD/Qiu7AxgjY9Yi4= Subject key identifier: 64:E9:68:40:B0:D4:D9:DF:D0:4D:8A:30:D2:B9:C0:93:93:BF:05:4A Certificate issuer: /CN=ac717083-6970-4d32-8573-0bfa89700c9e Certificate serial: 010D0C9F4328584BC53B09F9AFB45675626DAB00 Authority key identifier: 20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 802 IP address blocks: 198.96.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:09:f9:af:b4:56:75:62:6d:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac717083-6970-4d32-8573-0bfa89700c9e Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=72b07d11-5219-4e26-be90-16ca960373df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:88:5c:bb:fd:80:b4:b1:2c:49:e6:1a:5c:bc: d0:6f:a1:94:86:dd:17:62:d7:31:d7:a1:70:1b:10: d2:4e:73:6b:b7:f7:08:e1:56:44:9c:0e:61:1e:50: b2:b0:1d:7a:5e:46:3a:aa:b5:f2:1b:e2:ea:78:fa: dd:8d:99:43:3e:11:1e:ae:aa:f6:6c:b5:3e:8e:3d: 35:85:f8:cc:7f:04:02:e3:a0:30:fe:87:ac:8b:2a: bb:f7:94:7e:d2:0e:16:d2:2c:a3:78:0c:57:63:26: 2e:e1:c9:e3:75:94:2f:57:91:52:69:9a:c9:b8:4b: 6f:e1:f0:8a:e1:bd:85:15:7a:21:70:65:cc:35:b9: 60:4e:bf:23:70:79:8b:d2:85:be:80:6a:1a:b9:c9: a9:e0:00:c7:04:40:a3:62:c5:f6:e4:55:cb:98:cd: 45:80:77:60:56:0f:41:b6:7b:1a:b3:42:cc:1a:03: 12:8d:9c:c1:66:e1:58:9e:d9:9b:60:57:36:dc:aa: 86:0a:49:81:39:e8:29:71:48:a6:42:f5:02:f3:2a: cb:37:b3:d5:45:28:db:8e:02:b6:78:33:10:35:fd: 66:0e:f4:28:ee:91:5c:90:7a:91:df:ec:20:42:44: f1:3d:62:03:8b:41:1f:85:0c:cb:5a:ab:bd:50:44: 44:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:68:40:B0:D4:D9:DF:D0:4D:8A:30:D2:B9:C0:93:93:BF:05:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/c3f96f2c-52fb-34a3-baed-cb7cd913ee41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e/ac717083-6970-4d32-8573-0bfa89700c9e.crl X509v3 Authority Key Identifier: keyid:20:5F:B3:EA:78:E5:E9:47:0A:C5:56:AE:EA:F5:6D:E0:3D:9E:FD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac717083-6970-4d32-8573-0bfa89700c9e.cer sbgp-ipAddrBlock: critical IPv4: 198.96.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:bc:bf:8a:a5:07:3b:84:28:a6:a4:9d:f6:c0:e8:03:5c:3e: 02:b8:25:a3:20:b3:05:a7:da:d8:d9:64:d7:59:93:d1:a2:d8: 84:87:3f:a3:05:bf:fb:4d:57:3d:17:00:58:3c:dd:70:cc:1e: 74:50:2d:fd:fd:69:e0:69:15:6f:a6:21:35:84:03:fa:1d:a2: 76:ba:48:fb:7d:ce:ce:39:55:7a:5f:1d:50:6b:ce:4e:4d:94: 3e:af:f8:07:ea:b3:e5:83:62:aa:a5:b7:81:c1:fe:4c:c3:8f: 1e:34:46:c5:6a:8a:2f:78:aa:de:50:b1:48:14:41:85:46:b4: f9:0b:de:b9:fa:15:24:0b:69:97:93:db:7c:fd:cf:72:ae:1e: 5c:82:6b:61:e2:e5:31:08:c0:26:3b:a9:66:32:37:41:e5:73: 0b:02:f5:f7:80:50:02:8d:e1:25:0e:a7:b7:92:10:91:fe:d8: 7e:a1:fc:ff:36:60:e2:d0:80:5d:47:dc:f4:50:d4:3e:76:28: 73:54:ff:f5:d0:7e:c1:ed:9c:31:03:82:99:2d:9e:93:a2:9b: 40:dc:09:d4:f8:20:9d:44:37:12:e4:57:96:74:87:33:63:0d: ef:2b:c5:4b:55:33:45:0d:d4:f6:c6:43:64:e3:9a:f3:20:f0: 7b:f6:ce:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOwn5r7RWdWJtqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM3MTcwODMtNjk3MC00ZDMyLTg1NzMtMGJmYTg5NzAw YzllMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NzJiMDdkMTEtNTIxOS00ZTI2LWJlOTAtMTZjYTk2MDM3M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYhcu/2AtLEsSeYaXLzQb6GUht0XYtcx16Fw GxDSTnNrt/cI4VZEnA5hHlCysB16XkY6qrXyG+LqePrdjZlDPhEerqr2bLU+jj01 hfjMfwQC46Aw/oesiyq795R+0g4W0iyjeAxXYyYu4cnjdZQvV5FSaZrJuEtv4fCK 4b2FFXohcGXMNblgTr8jcHmL0oW+gGoaucmp4ADHBECjYsX25FXLmM1FgHdgVg9B tnsas0LMGgMSjZzBZuFYntmbYFc23KqGCkmBOegpcUimQvUC8yrLN7PVRSjbjgK2 eDMQNf1mDvQo7pFckHqR3+wgQkTxPWIDi0EfhQzLWqu9UEREfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTpaECw1Nnf0E2KMNK5wJOTvwVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcx NzA4My02OTcwLTRkMzItODU3My0wYmZhODk3MDBjOWUvYzNmOTZmMmMtNTJmYi0z NGEzLWJhZWQtY2I3Y2Q5MTNlZTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM3MTcwODMtNjk3MC00ZDMyLTg1 NzMtMGJmYTg5NzAwYzllL2FjNzE3MDgzLTY5NzAtNGQzMi04NTczLTBiZmE4OTcw MGM5ZS5jcmwwHwYDVR0jBBgwFoAUIF+z6njl6UcKxVau6vVt4D2e/a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzcxNzA4My02OTcwLTRkMzItODU3My0wYmZh ODk3MDBjOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxmAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM28v4qlBzuEKKaknfbA6ANcPgK4JaMgswWn2tjZZNdZk9Gi2ISHP6MF v/tNVz0XAFg83XDMHnRQLf39aeBpFW+mITWEA/odona6SPt9zs45VXpfHVBrzk5N lD6v+Afqs+WDYqqlt4HB/kzDjx40RsVqii94qt5QsUgUQYVGtPkL3rn6FSQLaZeT 23z9z3KuHlyCa2Hi5TEIwCY7qWYyN0HlcwsC9feAUAKN4SUOp7eSEJH+2H6h/P82 YOLQgF1H3PRQ1D52KHNU//XQfsHtnDEDgpktnpOim0DcCdT4IJ1ENxLkV5Z0hzNj De8rxUtVM0UN1PbGQ2TjmvMg8Hv2zp8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:44 2025 by rpki-client