This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa File: 1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa (raw, json) Hash identifier: DrVCylwWFwFpEOY9MxxtiYagdJR/mBDknKKECVz0wjs= Subject key identifier: B2:09:25:6D:C6:F3:0C:C5:68:0C:E8:70:33:11:26:56:69:50:BB:D8 Certificate issuer: /CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Certificate serial: 010D0C9F4328584BC53B32E05C1DD42A116DA3C0 Authority key identifier: F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 62915 IP address blocks: 199.66.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:32:e0:5c:1d:d4:2a:11:6d:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ed3e995-4cff-4a3d-af9b-7728ddaff70d Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=f786cf6f-b84b-4946-a708-0dbec7644f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1a:ad:ee:cb:0c:ad:a1:93:6d:e8:e3:73:04: fa:98:0f:d4:64:6b:af:35:55:48:eb:62:c3:df:7a: 81:0c:6d:88:7a:86:fb:ca:29:59:72:32:c4:fe:49: 25:b5:04:d7:71:9d:f7:d4:12:8c:7b:77:b3:c6:0d: 0b:51:35:e2:82:98:9f:cb:d4:ab:cd:9c:6c:ae:6a: e0:fc:45:fd:c9:2f:47:e4:e8:f0:a0:1c:ed:b4:dc: aa:bc:ff:47:6d:c2:e8:71:2d:7d:13:06:27:57:d2: 66:07:cd:f8:b5:e0:d0:16:91:1e:da:20:a4:9a:75: d5:17:1d:c6:47:f8:85:57:0c:69:73:a4:de:b5:71: 22:78:0c:a7:f6:2b:f4:bc:d7:88:81:48:91:d9:b7: 90:a4:08:75:fb:ac:b3:9b:46:92:84:eb:a5:c6:f1: 01:4b:fe:d8:57:28:63:f6:83:b8:f1:2e:59:98:3b: 50:67:a5:0f:b3:81:39:85:24:e1:05:4a:42:db:92: 48:eb:a9:5e:b3:cc:b1:b5:d6:3b:15:55:25:e9:7b: e2:fc:44:41:e3:72:4e:ce:fa:ab:41:50:3d:06:fd: 28:50:7d:05:da:05:e6:e8:7e:ca:ce:2f:d3:b6:4e: 71:98:38:75:2a:55:38:2b:3e:b0:ca:74:c6:b5:2c: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:25:6D:C6:F3:0C:C5:68:0C:E8:70:33:11:26:56:69:50:BB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/1a475a05-1bff-3e3d-bc59-d988ebc9c4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.crl X509v3 Authority Key Identifier: keyid:F3:75:96:E2:1C:D8:1C:9A:D5:67:D1:E9:54:49:B0:A4:32:C1:A4:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3ed3e995-4cff-4a3d-af9b-7728ddaff70d.cer sbgp-ipAddrBlock: critical IPv4: 199.66.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c9:3c:c5:f0:b4:09:f6:2d:30:02:73:3c:f8:4f:d8:8f:82: 2b:24:0b:3e:80:74:86:25:f4:e6:6e:1c:af:a6:f2:6a:7f:ea: b9:b5:2e:8f:2c:d1:a5:a3:39:2d:59:81:91:3e:fd:7a:d6:26: 45:b8:62:53:db:ea:aa:78:83:34:e1:3a:8c:15:a7:b2:09:d7: fd:ec:bf:61:37:33:61:92:f8:c5:ba:73:f7:9c:7f:a9:76:78: cd:6e:d9:9f:5b:8f:06:aa:e3:94:20:f1:c4:7a:e0:c8:dc:20: ef:e6:5e:44:1e:cd:b9:cf:9c:68:00:b5:e7:d1:1c:e4:02:00: d6:4c:bc:39:d3:ca:4c:76:4d:24:43:5f:15:90:bf:12:8e:92: a4:c9:f9:43:0f:11:4f:c8:17:3a:dc:27:f9:30:71:e3:ba:11: bd:c2:ac:40:5b:68:12:03:61:ae:70:ff:c5:cd:5e:2f:88:27: 6c:bc:8c:2c:2c:ad:dd:d2:f9:96:95:d1:cf:7d:d3:9e:08:25: f0:07:24:4f:9e:b1:45:11:01:7c:d6:29:a5:e8:13:f1:66:0d: 8a:ca:4f:5c:e6:b5:36:c5:30:b2:c5:08:10:a4:20:5d:40:5f: ae:23:66:2f:cd:13:9c:7b:a6:ad:23:10:ee:c7:dc:8a:9d:7c: bf:49:54:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOzLgXB3UKhFto8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2VkM2U5OTUtNGNmZi00YTNkLWFmOWItNzcyOGRkYWZm NzBkMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk Zjc4NmNmNmYtYjg0Yi00OTQ2LWE3MDgtMGRiZWM3NjQ0Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRqt7ssMraGTbejjcwT6mA/UZGuvNVVI62LD 33qBDG2Ieob7yilZcjLE/kkltQTXcZ331BKMe3ezxg0LUTXigpify9SrzZxsrmrg /EX9yS9H5OjwoBzttNyqvP9HbcLocS19EwYnV9JmB834teDQFpEe2iCkmnXVFx3G R/iFVwxpc6TetXEieAyn9iv0vNeIgUiR2beQpAh1+6yzm0aShOulxvEBS/7YVyhj 9oO48S5ZmDtQZ6UPs4E5hSThBUpC25JI66les8yxtdY7FVUl6Xvi/ERB43JOzvqr QVA9Bv0oUH0F2gXm6H7Kzi/Ttk5xmDh1KlU4Kz6wynTGtSx8pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIJJW3G8wzFaAzocDMRJlZpULvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZWQz ZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4ZGRhZmY3MGQvMWE0NzVhMDUtMWJmZi0z ZTNkLWJjNTktZDk4OGViYzljNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2VkM2U5OTUtNGNmZi00YTNkLWFm OWItNzcyOGRkYWZmNzBkLzNlZDNlOTk1LTRjZmYtNGEzZC1hZjliLTc3MjhkZGFm ZjcwZC5jcmwwHwYDVR0jBBgwFoAU83WW4hzYHJrVZ9HpVEmwpDLBpIYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZWQzZTk5NS00Y2ZmLTRhM2QtYWY5Yi03NzI4 ZGRhZmY3MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0JUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7JPMXwtAn2LTACczz4T9iPgiskCz6AdIYl9OZuHK+m8mp/6rm1Lo8s 0aWjOS1ZgZE+/XrWJkW4YlPb6qp4gzThOowVp7IJ1/3sv2E3M2GS+MW6c/ecf6l2 eM1u2Z9bjwaq45Qg8cR64MjcIO/mXkQezbnPnGgAtefRHOQCANZMvDnTykx2TSRD XxWQvxKOkqTJ+UMPEU/IFzrcJ/kwceO6Eb3CrEBbaBIDYa5w/8XNXi+IJ2y8jCws rd3S+ZaV0c99054IJfAHJE+esUURAXzWKaXoE/FmDYrKT1zmtTbFMLLFCBCkIF1A X64jZi/NE5x7pq0jEO7H3IqdfL9JVAI= -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:19 2025 by rpki-client