This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa File: 4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa (raw, json) Hash identifier: XO1i6BkeQ3rp4We77lpKE5xcvYZ5Zy1l7eEEZHhO/ag= Subject key identifier: AA:3A:63:9E:8B:B5:FF:1C:C0:09:28:FF:F2:F8:22:1B:49:D0:B2:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BD8C5C7D4DA3C272C1B96BD40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa Signing time: Thu 13 Nov 2025 14:00:38 +0000 ROA not before: Thu 13 Nov 2025 14:00:38 +0000 ROA not after: Wed 11 Feb 2026 14:00:38 +0000 asID: 16625 IP address blocks: 104.109.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d8:c5:c7:d4:da:3c:27:2c:1b:96:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 13 14:00:38 2025 GMT Not After : Feb 11 14:00:38 2026 GMT Subject: CN=7c0e1e0c-43e4-4c91-b21a-eda95c2c5771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:cf:37:d7:75:dd:e2:1d:c0:bc:ac:00:91: 64:58:98:3c:cf:40:46:8a:c5:4c:8a:85:43:49:08: c8:cf:b0:30:8a:48:16:ef:ca:2a:76:ed:e4:e5:ce: 52:41:48:52:3d:17:5b:83:9a:ec:62:c8:71:fa:65: c2:24:69:c9:45:2e:53:ef:2b:60:a1:8a:1e:4f:15: a6:d5:aa:fd:e0:ff:09:40:47:8c:a4:0d:54:e6:e2: 28:7a:9b:7a:f9:6f:ee:d2:35:37:f9:90:78:3f:92: b8:ca:8a:5e:29:ea:f3:58:1e:8f:11:3f:88:b9:fc: 41:14:13:ca:78:bd:ef:cf:42:a2:db:5f:b6:8d:cb: cd:76:52:09:53:c9:06:c5:d8:28:5b:cb:e1:84:24: fa:e9:9a:74:e0:21:f8:0d:ef:67:71:e6:8e:a1:e9: a8:ab:26:4d:97:b7:d0:a2:31:85:39:62:82:4b:87: ad:fd:45:a4:43:99:70:21:03:69:ac:c6:79:94:ef: 8b:19:83:83:24:b1:be:59:96:81:98:90:91:a4:4d: 6a:e4:82:47:55:ef:7e:7f:83:46:9e:f5:d7:0f:7a: f3:02:c4:bc:69:51:7e:70:98:7d:09:d5:4a:1e:3c: 42:95:3c:bc:75:79:e0:bf:2e:e1:b3:c5:e9:0d:0c: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:3A:63:9E:8B:B5:FF:1C:C0:09:28:FF:F2:F8:22:1B:49:D0:B2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c997959-ed7b-3cc6-b841-e2cd711d0dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.109.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:01:2b:0c:b7:eb:bd:18:44:d4:f1:28:95:50:70:27:ff:cc: 38:55:a5:07:c7:87:85:84:64:fb:fb:10:cb:da:33:1f:ed:ab: fe:59:8e:a6:3d:9f:a1:9e:df:31:a2:0d:33:df:ca:47:78:84: d9:42:ff:be:87:73:28:f4:3f:74:f8:b7:71:ef:c2:c4:a9:39: 32:8e:6d:44:97:6e:fa:91:18:74:f6:e5:5e:e9:94:97:91:df: cc:0a:bf:93:6f:15:e2:34:0e:6a:79:02:d3:b3:03:d4:21:a1: 44:4c:a7:10:ae:36:51:f0:dd:d4:79:f5:91:09:94:7b:6d:00: 9d:55:66:7f:83:18:d1:df:5a:a1:31:93:b2:27:66:29:37:f6: 17:3b:cc:6e:b0:cf:9b:9a:c4:76:e7:47:f7:2e:b4:f3:ba:b5: 2f:b8:67:54:33:12:98:c2:12:f1:6d:91:30:79:af:93:23:17: 86:3b:c1:31:c2:76:5d:5d:a0:8d:8d:06:d1:e1:b2:ae:e9:d8: bb:be:4a:d5:40:a3:15:a9:69:b3:ea:dc:2a:57:05:e1:cc:49: e7:63:a5:59:af:3b:43:44:a0:8a:a3:b8:f8:c9:3d:d8:47:b2: 21:60:7f:e7:c0:32:40:27:2e:7a:66:d4:df:23:46:f1:f5:df: b0:fc:5e:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvYxcfU2jwnLBuWvUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTExMzE0MDAzOFoXDTI2MDIxMTE0MDAzOFowLzEtMCsGA1UEAxMk N2MwZTFlMGMtNDNlNC00YzkxLWIyMWEtZWRhOTVjMmM1NzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrDPN9d13eIdwLysAJFkWJg8z0BGisVMioVD SQjIz7AwikgW78oqdu3k5c5SQUhSPRdbg5rsYshx+mXCJGnJRS5T7ytgoYoeTxWm 1ar94P8JQEeMpA1U5uIoept6+W/u0jU3+ZB4P5K4yopeKerzWB6PET+IufxBFBPK eL3vz0Ki21+2jcvNdlIJU8kGxdgoW8vhhCT66Zp04CH4De9nceaOoemoqyZNl7fQ ojGFOWKCS4et/UWkQ5lwIQNprMZ5lO+LGYODJLG+WZaBmJCRpE1q5IJHVe9+f4NG nvXXD3rzAsS8aVF+cJh9CdVKHjxClTy8dXngvy7hs8XpDQxphwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo6Y56Ltf8cwAko//L4IhtJ0LIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGM5OTc5NTktZWQ3Yi0z Y2M2LWI4NDEtZTJjZDcxMWQwZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaG3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwBKwy3670YRNTxKJVQcCf/zDhVpQfHh4WEZPv7EMvaMx/tq/5ZjqY9 n6Ge3zGiDTPfykd4hNlC/76Hcyj0P3T4t3HvwsSpOTKObUSXbvqRGHT25V7plJeR 38wKv5NvFeI0Dmp5AtOzA9QhoURMpxCuNlHw3dR59ZEJlHttAJ1VZn+DGNHfWqEx k7InZik39hc7zG6wz5uaxHbnR/cutPO6tS+4Z1QzEpjCEvFtkTB5r5MjF4Y7wTHC dl1doI2NBtHhsq7p2Lu+StVAoxWpabPq3CpXBeHMSedjpVmvO0NEoIqjuPjJPdhH siFgf+fAMkAnLnpm1N8jRvH137D8Xnc= -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:15 2025 by rpki-client