This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa File: 3aa72ed7-e889-35b8-9416-168e2eae8942.roa (raw, json) Hash identifier: 9ZPbuDM1gMsFblm/slFua76vHsIgkQuucU7c474tZ9E= Subject key identifier: 30:F4:13:E1:DB:ED:8F:95:5D:99:C5:B6:63:AF:C9:E5:41:C6:49:3F Certificate issuer: /CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Certificate serial: 010D0C9F4328584BDB9061F11362923D3CD0E400 Authority key identifier: 00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa Signing time: Fri 14 Nov 2025 14:00:37 +0000 ROA not before: Fri 14 Nov 2025 14:00:37 +0000 ROA not after: Thu 12 Feb 2026 14:00:37 +0000 asID: 63083 IP address blocks: 172.99.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:db:90:61:f1:13:62:92:3d:3c:d0:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f1d5ecd-8770-46a2-b7c8-251b564b9e28 Validity Not Before: Nov 14 14:00:37 2025 GMT Not After : Feb 12 14:00:37 2026 GMT Subject: CN=fb712835-c327-41a9-9ca0-70d6527786fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ac:ce:f7:16:95:6a:91:63:42:d2:17:91:44: e1:4f:e7:4c:f0:47:c4:74:ca:0f:fe:3e:57:20:26: 54:1c:a7:ed:27:8c:7b:5e:a5:d2:14:7f:d0:ff:b1: ee:9b:39:52:48:a5:41:c4:50:f2:e3:2f:9d:e0:c1: 6b:88:42:2e:91:eb:86:b3:7c:09:8f:15:bc:fc:9e: f5:b1:67:82:96:a0:b0:40:cb:ae:30:0c:33:fa:db: 03:3b:76:79:0c:76:e3:0b:7d:0e:b8:0c:02:61:9a: 4d:bc:6a:69:de:7b:bf:73:6f:a1:f4:df:43:98:d0: 5e:4a:1a:a2:62:95:24:f7:e6:c7:67:8f:97:d3:b8: b2:f9:56:a3:aa:cf:6c:2b:ea:3e:46:ba:1a:64:a5: 48:b8:89:0f:7d:27:e4:12:67:c4:7f:0e:48:b8:a0: 57:68:12:bf:70:d3:e2:c3:c2:7e:ac:3f:53:46:27: 03:30:37:2a:a7:f0:bc:bf:16:29:1c:c0:91:f5:c4: 8c:34:b2:39:c2:6d:c0:62:db:1e:4c:76:4c:e6:fe: 8e:d6:7d:d4:f3:ef:16:bf:a6:0c:22:55:69:34:e8: 69:0f:00:4f:f4:50:d5:9c:03:b9:9e:55:55:59:ca: a1:8b:93:20:4e:e8:1a:fa:96:71:07:b7:46:8a:c0: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F4:13:E1:DB:ED:8F:95:5D:99:C5:B6:63:AF:C9:E5:41:C6:49:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/3aa72ed7-e889-35b8-9416-168e2eae8942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.crl X509v3 Authority Key Identifier: keyid:00:89:07:A1:F7:83:66:C2:B3:3D:1A:F9:DD:73:98:F6:9A:AC:51:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8f1d5ecd-8770-46a2-b7c8-251b564b9e28.cer sbgp-ipAddrBlock: critical IPv4: 172.99.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:7f:91:b9:68:94:1c:e9:21:66:ed:5e:81:53:1e:b4:76:34: 26:8b:68:74:58:e0:f5:41:fd:ef:41:67:28:35:95:da:be:ca: 0d:0c:61:9a:b3:55:40:ab:81:a7:d1:06:cb:5c:b0:cc:47:6a: ca:45:32:94:b7:53:06:60:77:b9:5f:d5:ee:08:4b:7f:bd:6b: 11:95:f3:2c:f0:43:4b:41:4f:81:65:d0:0e:c3:9b:f0:56:90: bc:b7:ab:97:b8:62:56:82:31:3f:c7:57:b8:c3:89:7f:4e:e8: df:ec:70:02:ab:0a:b1:7a:73:16:fd:3d:2a:31:9a:32:27:9c: d9:44:ff:4f:46:20:9f:df:cf:8d:db:bc:b0:cb:1c:b4:51:81: cb:58:53:65:94:59:a6:6f:3b:42:6b:8a:e3:a7:ec:9c:d5:a4: 38:51:54:e9:2e:67:10:1c:9a:c6:07:d5:61:06:31:6b:ae:a7: 1f:0a:e1:cc:84:c8:23:d9:62:cf:a5:c7:6a:4c:cc:6b:d8:78: 8c:81:b9:04:04:1e:9c:f8:70:26:8a:29:87:30:ae:61:cf:69: 8e:b5:4c:d2:81:aa:a7:59:c6:7e:e0:3c:df:43:8e:84:55:12: d7:ef:af:96:f9:c1:fc:14:2e:de:f1:71:78:2b:6f:56:a5:25: d0:2a:eb:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvbkGHxE2KSPTzQ5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxZDVlY2QtODc3MC00NmEyLWI3YzgtMjUxYjU2NGI5 ZTI4MB4XDTI1MTExNDE0MDAzN1oXDTI2MDIxMjE0MDAzN1owLzEtMCsGA1UEAxMk ZmI3MTI4MzUtYzMyNy00MWE5LTljYTAtNzBkNjUyNzc4NmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgazO9xaVapFjQtIXkUThT+dM8EfEdMoP/j5X ICZUHKftJ4x7XqXSFH/Q/7HumzlSSKVBxFDy4y+d4MFriEIukeuGs3wJjxW8/J71 sWeClqCwQMuuMAwz+tsDO3Z5DHbjC30OuAwCYZpNvGpp3nu/c2+h9N9DmNBeShqi YpUk9+bHZ4+X07iy+Vajqs9sK+o+RroaZKVIuIkPfSfkEmfEfw5IuKBXaBK/cNPi w8J+rD9TRicDMDcqp/C8vxYpHMCR9cSMNLI5wm3AYtseTHZM5v6O1n3U8+8Wv6YM IlVpNOhpDwBP9FDVnAO5nlVVWcqhi5MgTuga+pZxB7dGisBw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD0E+Hb7Y+VXZnFtmOvyeVBxkk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFk NWVjZC04NzcwLTQ2YTItYjdjOC0yNTFiNTY0YjllMjgvM2FhNzJlZDctZTg4OS0z NWI4LTk0MTYtMTY4ZTJlYWU4OTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGYxZDVlY2QtODc3MC00NmEyLWI3 YzgtMjUxYjU2NGI5ZTI4LzhmMWQ1ZWNkLTg3NzAtNDZhMi1iN2M4LTI1MWI1NjRi OWUyOC5jcmwwHwYDVR0jBBgwFoAUAIkHofeDZsKzPRr53XOY9pqsUUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ZjFkNWVjZC04NzcwLTQ2YTItYjdjOC0yNTFi NTY0YjllMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADd/kblolBzpIWbtXoFTHrR2NCaLaHRY4PVB/e9BZyg1ldq+yg0MYZqz VUCrgafRBstcsMxHaspFMpS3UwZgd7lf1e4IS3+9axGV8yzwQ0tBT4Fl0A7Dm/BW kLy3q5e4YlaCMT/HV7jDiX9O6N/scAKrCrF6cxb9PSoxmjInnNlE/09GIJ/fz43b vLDLHLRRgctYU2WUWaZvO0JriuOn7JzVpDhRVOkuZxAcmsYH1WEGMWuupx8K4cyE yCPZYs+lx2pMzGvYeIyBuQQEHpz4cCaKKYcwrmHPaY61TNKBqqdZxn7gPN9DjoRV Etfvr5b5wfwULt7xcXgrb1alJdAq6y0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:50 2025 by rpki-client