This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json) Hash identifier: NKrRS7bhCJvhnWC6Uktp1y31vemKZ07NpjNX9VHz9ig= Subject key identifier: 40:F4:85:DE:B9:F2:03:DC:82:4E:B1:B1:B3:46:3F:E2:BB:91:8B:B1 Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Certificate serial: 010D0C9F4328584C14CB6725E46AFB51710960FC Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa Signing time: Fri 05 Dec 2025 02:00:30 +0000 ROA not before: Fri 05 Dec 2025 02:00:30 +0000 ROA not after: Thu 05 Mar 2026 02:00:30 +0000 asID: 40342 IP address blocks: 199.47.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:14:cb:67:25:e4:6a:fb:51:71:09:60:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a Validity Not Before: Dec 5 02:00:30 2025 GMT Not After : Mar 5 02:00:30 2026 GMT Subject: CN=c3f71dd5-b4a4-40aa-a6e9-0b23acbe3ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:cd:03:fb:a3:4f:20:a4:54:ac:dc:ae:cc: 18:f6:ec:ad:cd:17:9d:e0:c0:81:b8:3a:4e:b2:21: 59:01:1c:7d:53:46:07:25:82:cb:5b:68:e4:00:32: 0c:41:c4:53:d7:5a:12:c9:79:ac:31:75:38:e9:3e: 52:23:35:49:3d:5d:c7:35:6c:e2:a7:3e:ab:d2:f8: b0:7b:57:0e:d2:38:3f:8e:01:e4:c3:88:4b:c3:36: 08:28:f6:d4:b9:28:28:90:d0:29:09:a9:c7:76:05: 3b:20:9c:e4:53:55:7b:f9:c5:55:a3:81:b6:b0:3c: 6d:fa:0b:41:0a:23:53:bb:0b:ae:b9:1d:ae:cc:7c: 47:a7:97:ee:19:9c:f9:f0:f2:9a:74:a1:60:bc:07: 7a:20:b6:fc:10:3f:ee:d9:5f:78:3e:7a:2d:40:5b: 40:77:59:26:df:58:60:a1:e2:be:a2:b0:4f:a8:db: ce:1b:c4:64:c6:9f:76:eb:2a:cc:12:b9:c5:33:fa: 0e:fd:78:07:55:30:7d:57:7f:28:10:89:a7:85:fa: cb:75:bf:7b:70:b9:fb:a0:cf:b0:22:00:93:d7:ab: 30:89:97:f6:35:e7:9b:4e:88:83:9e:ef:13:fc:dc: bb:a9:7e:4d:cc:21:11:d9:44:e2:f4:c6:14:a4:5d: b0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F4:85:DE:B9:F2:03:DC:82:4E:B1:B1:B3:46:3F:E2:BB:91:8B:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl X509v3 Authority Key Identifier: keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer sbgp-ipAddrBlock: critical IPv4: 199.47.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:ec:42:de:07:72:b9:a6:8f:3e:11:76:43:73:ca:20:4e:46: 3d:b9:53:ac:bc:43:2f:7f:49:ff:a6:a4:cc:5a:80:1c:25:16: 4f:2a:62:31:14:b7:75:56:c7:d1:dd:b8:d2:91:a2:49:78:f1: fb:c9:b7:47:01:06:da:8a:0a:04:eb:78:34:c9:dd:ad:3a:b9: c3:45:74:9c:07:cc:4c:1f:94:42:57:c7:25:6a:aa:db:2d:a7: cc:2b:79:fb:c2:67:b8:f8:df:80:f2:fe:f1:d8:ff:b0:55:e2: 28:eb:43:49:90:7b:c9:17:50:9f:3d:06:84:bc:93:4b:af:40: aa:a0:79:27:99:53:36:38:ae:6e:34:3b:fe:82:a2:0c:b4:1b: 0f:fc:51:3b:7d:41:fa:2f:9c:48:86:41:e8:19:c5:63:27:ea: 11:02:fb:ae:24:83:72:cf:aa:66:39:a7:18:f9:b7:b8:1e:38: ec:78:07:83:4a:46:a7:8b:c4:ff:68:0b:02:a0:5e:2a:bb:a0: 45:c4:5d:1d:e2:ab:9d:93:e9:67:3f:80:67:e5:2a:ca:3f:00: d3:6f:50:ef:95:c6:f4:d7:49:0f:f0:0e:fc:a2:af:5f:02:fa: bd:5a:03:d8:99:f0:06:25:bc:56:8e:54:a9:3e:2e:86:b5:78: f7:dd:01:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwUy2cl5Gr7UXEJYPwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYwYmZjZGUtZDk1OC00ZTkxLWFmNWQtOWZkMWQzM2E1 ODJhMB4XDTI1MTIwNTAyMDAzMFoXDTI2MDMwNTAyMDAzMFowLzEtMCsGA1UEAxMk YzNmNzFkZDUtYjRhNC00MGFhLWE2ZTktMGIyM2FjYmUzYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxLNA/ujTyCkVKzcrswY9uytzRed4MCBuDpO siFZARx9U0YHJYLLW2jkADIMQcRT11oSyXmsMXU46T5SIzVJPV3HNWzipz6r0viw e1cO0jg/jgHkw4hLwzYIKPbUuSgokNApCanHdgU7IJzkU1V7+cVVo4G2sDxt+gtB CiNTuwuuuR2uzHxHp5fuGZz58PKadKFgvAd6ILb8ED/u2V94PnotQFtAd1km31hg oeK+orBPqNvOG8Rkxp926yrMErnFM/oO/XgHVTB9V38oEImnhfrLdb97cLn7oM+w IgCT16swiZf2NeebToiDnu8T/Ny7qX5NzCER2UTi9MYUpF2wqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED0hd658gPcgk6xsbNGP+K7kYuxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZjBi ZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQxZDMzYTU4MmEvM2MwMjBkZWMtM2I4MS0z Mzg0LThmODQtZmM4ZmI4ZWYwODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGYwYmZjZGUtZDk1OC00ZTkxLWFm NWQtOWZkMWQzM2E1ODJhLzhmMGJmY2RlLWQ5NTgtNGU5MS1hZjVkLTlmZDFkMzNh NTgyYS5jcmwwHwYDVR0jBBgwFoAUqiyJxCp6uKSVUYPDDM/jsPzjzgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84ZjBiZmNkZS1kOTU4LTRlOTEtYWY1ZC05ZmQx ZDMzYTU4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxy+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPsQt4Hcrmmjz4RdkNzyiBORj25U6y8Qy9/Sf+mpMxagBwlFk8qYjEU t3VWx9HduNKRokl48fvJt0cBBtqKCgTreDTJ3a06ucNFdJwHzEwflEJXxyVqqtst p8wrefvCZ7j434Dy/vHY/7BV4ijrQ0mQe8kXUJ89BoS8k0uvQKqgeSeZUzY4rm40 O/6Cogy0Gw/8UTt9QfovnEiGQegZxWMn6hEC+64kg3LPqmY5pxj5t7geOOx4B4NK RqeLxP9oCwKgXiq7oEXEXR3iq52T6Wc/gGflKso/ANNvUO+VxvTXSQ/wDvyir18C +r1aA9iZ8AYlvFaOVKk+Loa1ePfdAeI= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:05 2025 by rpki-client