This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa File: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (raw, json) Hash identifier: dIwTeEXCSbWdKGnK64saYf2s+hnOKDEwu8C0hqDsCc4= Subject key identifier: CD:A8:2C:89:65:C8:88:6A:62:09:B9:3C:C9:B1:71:46:08:28:FC:E5 Certificate issuer: /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Certificate serial: 010D0C9F4328584C1630E9BA2A047FD005CD12C0 Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa Signing time: Fri 05 Dec 2025 14:00:38 +0000 ROA not before: Fri 05 Dec 2025 14:00:38 +0000 ROA not after: Thu 05 Mar 2026 14:00:38 +0000 asID: 396982 IP address blocks: 103.66.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:e9:ba:2a:04:7f:d0:05:cd:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec Validity Not Before: Dec 5 14:00:38 2025 GMT Not After : Mar 5 14:00:38 2026 GMT Subject: CN=a070884a-641a-4822-8665-34eb282a4b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:fe:ba:b7:b4:48:32:da:d0:b1:27:f3:57: ce:1a:2b:b7:94:4c:f5:60:66:b9:60:d6:07:18:cb: 61:52:4c:a5:78:6b:ea:6f:e0:39:48:bd:ef:5f:ba: 98:c9:7c:30:6c:82:ca:61:ec:29:84:32:61:d3:0f: a0:b0:6e:5e:5f:b6:a4:95:44:7d:16:92:7c:89:f1: 8a:ec:34:37:d7:88:d2:b7:30:e0:de:f1:ed:7a:42: f2:0c:e2:28:94:a4:53:fa:69:9a:47:92:83:1a:ef: 89:d7:f6:c7:e9:88:d7:b8:f5:e2:fe:9e:db:5c:6f: d4:9d:bb:1c:43:6e:84:94:52:7a:0e:15:3e:0d:71: 62:f5:c2:62:b3:a4:d2:47:45:94:64:e9:e5:4f:66: d6:f0:3d:89:dd:e0:30:e2:61:13:ec:78:8a:de:79: 55:0d:af:2c:09:16:1d:db:1d:6c:24:cf:9a:ad:1c: f1:2f:8a:09:19:60:27:37:ed:ab:b5:0d:2d:41:41: 6c:8c:ff:e6:91:3c:f7:db:80:6d:72:80:00:b7:47: 79:89:8f:e7:45:a4:00:7a:3e:c0:61:7d:b9:7b:b8: 4a:50:94:1c:df:cf:ea:67:f9:5c:01:f4:06:00:b1: 31:91:10:48:70:06:da:11:1f:d3:d5:d0:16:fa:b0: e2:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:2C:89:65:C8:88:6A:62:09:B9:3C:C9:B1:71:46:08:28:FC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl X509v3 Authority Key Identifier: keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer sbgp-ipAddrBlock: critical IPv4: 103.66.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:51:db:41:55:87:49:41:00:44:d1:cd:87:e4:84:8d:b6:ba: 80:5b:31:75:45:0d:ff:a7:14:aa:10:7b:41:9e:b0:00:6f:3f: f5:59:21:f0:8c:b9:45:d4:38:7d:58:4e:fc:81:e7:cf:14:2e: e3:17:ee:0e:dc:52:cf:09:04:e5:cd:ba:27:83:41:a7:a7:42: 75:58:f0:b9:9b:d0:f7:60:c0:bb:84:f5:34:3b:60:18:d3:6e: 84:dd:f5:fa:6d:f5:99:2c:d4:a0:9a:02:71:7e:70:c4:d8:bf: 66:13:f8:1f:80:d7:2f:b5:c1:49:a6:76:ab:6c:8d:e9:06:c4: fc:72:6f:d9:2b:bf:ee:8a:bf:2b:c2:c2:6e:a8:9c:5f:ab:24: 84:5a:02:07:08:a2:b2:8d:3f:4b:0f:10:fb:a5:23:01:82:63: a1:4a:52:02:01:09:48:58:16:b7:8c:2c:6b:4c:2a:00:e8:d1: 1b:6c:4b:ba:9e:bb:3e:6b:f9:45:e8:4f:db:51:11:95:ee:63: fd:46:d4:49:d9:73:46:5b:e8:90:55:0b:f3:db:f9:ab:de:dc: 81:a0:45:1e:c6:b2:0d:50:85:80:82:d0:ec:d4:ad:c1:f8:fc: b0:87:ce:69:41:a1:1d:2f:1d:31:5f:19:38:fe:f3:1b:ed:f6: da:e5:fd:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwWMOm6KgR/0AXNEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyOGRlNTUtZjU5Ny00MGNmLWI1MDgtMGM1ZDczMThi NWVjMB4XDTI1MTIwNTE0MDAzOFoXDTI2MDMwNTE0MDAzOFowLzEtMCsGA1UEAxMk YTA3MDg4NGEtNjQxYS00ODIyLTg2NjUtMzRlYjI4MmE0YjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOv+ure0SDLa0LEn81fOGiu3lEz1YGa5YNYH GMthUkyleGvqb+A5SL3vX7qYyXwwbILKYewphDJh0w+gsG5eX7aklUR9FpJ8ifGK 7DQ314jStzDg3vHtekLyDOIolKRT+mmaR5KDGu+J1/bH6YjXuPXi/p7bXG/Unbsc Q26ElFJ6DhU+DXFi9cJis6TSR0WUZOnlT2bW8D2J3eAw4mET7HiK3nlVDa8sCRYd 2x1sJM+arRzxL4oJGWAnN+2rtQ0tQUFsjP/mkTz324BtcoAAt0d5iY/nRaQAej7A YX25e7hKUJQc38/qZ/lcAfQGALExkRBIcAbaER/T1dAW+rDiywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2oLIllyIhqYgm5PMmxcUYIKPzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4 ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVkNzMxOGI1ZWMvMzM1OGRkN2EtZWE1NS0z MTA3LWI3ZjctZWQyM2UyNzI5YTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmEyOGRlNTUtZjU5Ny00MGNmLWI1 MDgtMGM1ZDczMThiNWVjLzJhMjhkZTU1LWY1OTctNDBjZi1iNTA4LTBjNWQ3MzE4 YjVlYy5jcmwwHwYDVR0jBBgwFoAUhtnzIHbMN/Aa2EgKlFCWFdVY3HswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTI4ZGU1NS1mNTk3LTQwY2YtYjUwOC0wYzVk NzMxOGI1ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhR20FVh0lBAETRzYfkhI22uoBbMXVFDf+nFKoQe0GesABvP/VZIfCM uUXUOH1YTvyB588ULuMX7g7cUs8JBOXNuieDQaenQnVY8Lmb0PdgwLuE9TQ7YBjT boTd9fpt9Zks1KCaAnF+cMTYv2YT+B+A1y+1wUmmdqtsjekGxPxyb9krv+6KvyvC wm6onF+rJIRaAgcIorKNP0sPEPulIwGCY6FKUgIBCUhYFreMLGtMKgDo0RtsS7qe uz5r+UXoT9tREZXuY/1G1EnZc0Zb6JBVC/Pb+ave3IGgRR7Gsg1QhYCC0OzUrcH4 /LCHzmlBoR0vHTFfGTj+8xvt9trl/X4= -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:02 2025 by rpki-client