This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa File: 3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa (raw, json) Hash identifier: PugC8YEnUZLLD75NiE3QtDvi8CIqLnw2SHgu341/BdA= Subject key identifier: 7D:03:B5:BB:70:CB:B1:2A:39:03:60:4D:6A:C2:35:B0:FF:64:74:4A Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F4328584BABFD07090562A9200DC65C7D Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 54249 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:07:09:05:62:a9:20:0d:c6:5c:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=16768ffa-2a98-4264-8f05-790ce462bf33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:44:68:ab:ef:8d:48:c2:b4:38:f8:b7:c7:f7: a6:7b:e3:66:a1:b6:ea:06:8b:64:2f:d3:0b:35:51: f4:7a:cd:30:4d:4a:78:f8:ec:d4:f8:21:fd:5b:d2: 38:97:ae:3d:ea:04:cd:0a:a0:18:5a:9b:c8:17:69: 2e:f6:e0:97:11:86:7b:e7:3f:00:02:7d:a7:37:d6: 31:de:6a:e7:67:d3:6d:7b:9e:df:bf:26:13:10:16: b9:2a:12:7b:4b:53:62:13:3a:21:28:1d:75:0d:95: ef:56:32:9d:12:44:62:93:2a:0d:86:ac:c1:ee:26: 9c:fb:30:e6:78:12:56:57:3e:ab:f8:25:e9:1d:53: c8:be:c0:e6:0e:e1:96:a5:b6:be:1c:a4:7f:ab:40: 3f:00:3c:1a:44:18:30:63:bb:04:1c:19:07:71:d3: 00:22:a1:00:58:9f:a0:5b:ff:df:ba:a0:80:42:e6: 43:f2:3c:df:b7:8b:8c:54:3d:cf:42:6b:72:dd:41: 8c:43:d8:d1:12:87:11:d4:93:c5:b8:1d:b4:b4:1b: b5:6e:b8:63:bc:8e:da:98:47:a5:7c:c1:1a:b0:ee: 09:73:05:52:2a:53:58:e4:db:1f:25:c7:65:9b:59: 50:f9:ce:65:45:6d:a6:0d:2e:41:11:3e:a5:98:8c: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:03:B5:BB:70:CB:B1:2A:39:03:60:4D:6A:C2:35:B0:FF:64:74:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8c:c4:88:26:1c:a6:51:df:cb:01:d5:3f:73:40:33:24:d4: 35:29:cb:08:d7:7d:ec:96:eb:d1:b0:12:94:53:75:66:dc:e8: 70:e3:14:cb:02:46:4a:c0:74:f6:d8:04:ec:a1:c0:35:72:90: d2:2a:11:25:cd:bb:49:19:83:13:9c:52:b3:4e:91:a2:de:ae: 19:15:d2:4f:93:59:4a:01:c2:9d:42:f5:57:da:75:fb:04:09: 24:bf:7c:f1:99:8b:2f:03:0a:8f:f1:a6:b0:a2:57:c1:97:40: 2c:33:9b:e9:b2:3b:64:35:44:57:46:c2:e2:cc:dc:cd:e6:a6: ca:4a:07:6e:2f:d1:b8:7f:78:a0:cc:53:ef:f6:20:6d:9b:1e: 50:dc:91:08:f4:eb:fc:4a:07:4b:bf:ea:bc:e4:8c:f9:0b:1d: 76:78:f0:c1:59:ee:d7:d1:70:e3:74:98:95:6f:07:82:82:22: 0a:c5:14:20:43:e2:60:c2:49:4f:81:6f:70:38:10:98:99:41: c5:07:cc:70:cf:19:54:04:4c:ea:bc:2c:77:f3:b9:da:59:79: b2:67:09:8b:c0:9d:69:e8:fb:38:97:d6:52:9f:d0:e6:76:3f: 3e:34:3d:42:ba:66:1d:7e:1a:31:d6:6f:78:f9:61:cc:78:16: 7e:ed:35:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/QcJBWKpIA3GXH0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk MTY3NjhmZmEtMmE5OC00MjY0LThmMDUtNzkwY2U0NjJiZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkRoq++NSMK0OPi3x/eme+NmobbqBotkL9ML NVH0es0wTUp4+OzU+CH9W9I4l6496gTNCqAYWpvIF2ku9uCXEYZ75z8AAn2nN9Yx 3mrnZ9Nte57fvyYTEBa5KhJ7S1NiEzohKB11DZXvVjKdEkRikyoNhqzB7iac+zDm eBJWVz6r+CXpHVPIvsDmDuGWpba+HKR/q0A/ADwaRBgwY7sEHBkHcdMAIqEAWJ+g W//fuqCAQuZD8jzft4uMVD3PQmty3UGMQ9jREocR1JPFuB20tBu1brhjvI7amEel fMEasO4JcwVSKlNY5NsfJcdlm1lQ+c5lRW2mDS5BET6lmIzrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0Dtbtwy7EqOQNgTWrCNbD/ZHRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMzEyM2RkODctNDkzMS0z ZGNmLTg3ZWEtYmZhMTI2ZTEwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2MxIgmHKZR38sB1T9zQDMk1DUpywjXfeyW69GwEpRTdWbc6HDjFMsC RkrAdPbYBOyhwDVykNIqESXNu0kZgxOcUrNOkaLerhkV0k+TWUoBwp1C9VfadfsE CSS/fPGZiy8DCo/xprCiV8GXQCwzm+myO2Q1RFdGwuLM3M3mpspKB24v0bh/eKDM U+/2IG2bHlDckQj06/xKB0u/6rzkjPkLHXZ48MFZ7tfRcON0mJVvB4KCIgrFFCBD 4mDCSU+Bb3A4EJiZQcUHzHDPGVQETOq8LHfzudpZebJnCYvAnWno+ziX1lKf0OZ2 Pz40PUK6Zh1+GjHWb3j5Ycx4Fn7tNT4= -----END CERTIFICATE-----Generated at Sat Dec 6 17:07:48 2025 by rpki-client