This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa File: d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa (raw, json) Hash identifier: 1QdLS3TWrjnKA8XIJ0tjZvF4ouaCjVvOuKMgm7cqVWs= Subject key identifier: 2D:E1:F1:7A:35:6A:56:35:2B:BD:89:B6:44:B1:D4:F1:4D:BE:7C:29 Certificate issuer: /CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Certificate serial: 010D0C9F4328584BD5FB09EFA959ED7C4DC42BE0 Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa Signing time: Wed 12 Nov 2025 14:00:37 +0000 ROA not before: Wed 12 Nov 2025 14:00:37 +0000 ROA not after: Tue 10 Feb 2026 14:00:37 +0000 asID: 22675 IP address blocks: 209.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d5:fb:09:ef:a9:59:ed:7c:4d:c4:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Validity Not Before: Nov 12 14:00:37 2025 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=5a0c5553-abbf-4266-a04a-1923eba83da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:72:b1:ae:39:cf:43:83:02:c6:a7:89:de: 09:71:91:3e:f2:14:3f:25:1f:21:a4:3c:68:81:84: 1b:2d:bd:34:37:10:96:74:5f:4b:af:27:f9:ae:75: ec:a3:8f:c3:59:d7:9b:d8:5b:57:27:2a:57:5d:de: 95:22:d0:06:40:a7:43:bb:12:b4:2e:1b:33:f5:c2: 0f:3f:65:74:ff:7b:d9:18:5d:fb:81:c9:a9:e7:b1: f0:a4:2f:39:3b:d2:26:e3:6e:ad:b5:0d:4e:0c:43: c7:d1:75:26:1c:65:67:52:28:be:f3:c1:7f:65:78: f6:c7:91:a4:5b:ba:39:a4:3b:77:48:d4:ae:31:4d: 4f:3f:40:16:5d:be:88:a3:dc:d7:c1:e5:dd:c9:7b: 49:9f:80:2d:30:99:7f:6d:57:c4:f7:d9:08:d0:9a: 18:98:71:e3:e8:34:b0:6b:84:54:5b:64:61:96:bb: 75:34:77:e3:3b:9f:54:8f:58:be:44:29:71:75:a2: 2e:5b:22:cd:ee:0a:94:68:68:01:f4:b6:bf:73:c7: 31:e6:e1:24:15:e4:be:ac:03:c5:93:35:26:ad:87: 89:2f:fa:e0:3a:0c:ad:e6:65:7f:09:76:42:e4:a7: a2:a1:66:98:94:44:70:1f:3a:07:34:cb:e4:ba:0a: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E1:F1:7A:35:6A:56:35:2B:BD:89:B6:44:B1:D4:F1:4D:BE:7C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl X509v3 Authority Key Identifier: keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer sbgp-ipAddrBlock: critical IPv4: 209.239.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1a:0f:a0:68:31:be:a4:aa:15:6a:7d:4d:43:b7:5e:f3:b8: dc:7e:24:7f:11:d9:c0:67:6d:01:72:9a:f8:d9:48:9b:99:4a: c6:00:03:c8:5a:2d:0d:ee:24:37:5e:ff:e4:07:48:55:15:b3: 84:e2:56:bb:07:48:62:30:4d:29:79:9d:db:0a:c3:02:c6:e6: 2f:25:e9:10:49:71:ac:ff:11:a8:a3:c8:10:df:99:24:c6:8b: d3:6b:f3:34:ff:09:29:8c:e2:ad:ce:f6:10:3b:9e:6f:f4:97: 11:c8:96:1d:a7:91:44:b8:7b:4b:74:e1:7e:c4:3d:7b:33:c2: 14:6f:ac:19:80:2c:89:85:25:fc:bd:d4:c5:74:5e:23:ad:ac: 42:54:43:3d:2b:f3:50:f4:f8:da:df:6c:1e:0b:fe:70:8e:81: 85:42:dc:64:51:67:8b:26:91:25:da:13:67:05:4f:0d:35:11: b9:ee:15:f0:4c:ea:43:02:db:2e:05:a0:37:cd:03:0c:a9:75: b0:8c:eb:c1:6c:f2:da:9d:f8:a6:b1:c8:63:ab:5e:d3:dc:b6: 94:f7:19:8a:2a:9a:4c:08:7a:74:e6:4f:6c:90:aa:0f:ac:46: c8:85:da:6b:de:3c:85:80:57:09:e8:38:9c:2a:7f:f6:e1:d6: 07:2e:5e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvV+wnvqVntfE3EK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0 MjkxMB4XDTI1MTExMjE0MDAzN1oXDTI2MDIxMDE0MDAzN1owLzEtMCsGA1UEAxMk NWEwYzU1NTMtYWJiZi00MjY2LWEwNGEtMTkyM2ViYTgzZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Jysa45z0ODAsanid4JcZE+8hQ/JR8hpDxo gYQbLb00NxCWdF9Lryf5rnXso4/DWdeb2FtXJypXXd6VItAGQKdDuxK0Lhsz9cIP P2V0/3vZGF37gcmp57HwpC85O9Im426ttQ1ODEPH0XUmHGVnUii+88F/ZXj2x5Gk W7o5pDt3SNSuMU1PP0AWXb6Io9zXweXdyXtJn4AtMJl/bVfE99kI0JoYmHHj6DSw a4RUW2Rhlrt1NHfjO59Uj1i+RClxdaIuWyLN7gqUaGgB9La/c8cx5uEkFeS+rAPF kzUmrYeJL/rgOgyt5mV/CXZC5KeioWaYlERwHzoHNMvkugqxQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3h8Xo1alY1K72JtkSx1PFNvnwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1 ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvZDdlNjdiZmMtZGI3ZS0z Y2ViLWE2ZjEtMGVmMDk5YWE3OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1 NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5 NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz YzNlOTQyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcaD6BoMb6kqhVqfU1Dt17zuNx+JH8R2cBnbQFymvjZSJuZSsYAA8ha LQ3uJDde/+QHSFUVs4TiVrsHSGIwTSl5ndsKwwLG5i8l6RBJcaz/EaijyBDfmSTG i9Nr8zT/CSmM4q3O9hA7nm/0lxHIlh2nkUS4e0t04X7EPXszwhRvrBmALImFJfy9 1MV0XiOtrEJUQz0r81D0+NrfbB4L/nCOgYVC3GRRZ4smkSXaE2cFTw01EbnuFfBM 6kMC2y4FoDfNAwypdbCM68Fs8tqd+KaxyGOrXtPctpT3GYoqmkwIenTmT2yQqg+s RsiF2mvePIWAVwnoOJwqf/bh1gcuXoI= -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:57 2025 by rpki-client