This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa File: aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa (raw, json) Hash identifier: Nh6sRWBrWX1bKhye4i1u1J1xi6WEdS9g5A+QUmznEvo= Subject key identifier: 58:51:FC:48:56:B6:4C:F9:17:60:CA:5F:D4:19:9F:F3:04:E0:1D:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BFD10BD1529DE1AD60BE99700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 63949 IP address blocks: 172.235.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:10:bd:15:29:de:1a:d6:0b:e9:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=a42fcfda-4d00-4303-9d38-016493ad8425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:96:bc:54:8d:82:9a:66:6d:e0:72:59:d0: 09:40:2e:e4:b9:f8:33:a3:1d:e1:4d:71:38:6c:17: f7:75:41:e8:ec:0c:4f:ad:49:b6:c5:1d:1e:c9:ff: dc:77:94:53:de:8d:c3:3d:53:08:b0:f2:a0:60:74: 8f:c0:2a:a0:68:bb:eb:7c:03:92:31:02:39:c1:63: 73:87:07:2b:49:34:42:05:05:72:af:19:81:20:9e: ee:8e:b1:b0:f7:55:68:03:b1:7b:90:23:f4:29:2d: ec:a5:7f:9c:a9:3b:b7:07:7d:03:0d:ca:e1:17:18: a3:b2:32:9b:1e:89:5a:b0:f1:ea:b0:03:6f:18:d3: 17:4d:9a:07:67:d1:5b:a4:3d:68:5a:ff:7d:9d:f5: b7:c7:5b:2c:2d:db:7a:92:7a:e1:32:c9:9f:69:91: b8:b6:79:85:1d:f1:25:47:52:14:75:83:64:49:26: 51:07:49:ab:37:3c:24:a9:53:d6:bb:44:91:97:72: be:86:d9:8a:96:e4:87:b6:b5:6d:12:7f:89:8b:58: fb:ae:ad:64:f4:cf:77:93:84:df:82:83:b9:ad:67: c4:70:3f:ab:ff:04:88:f9:f4:39:8d:02:31:a5:eb: aa:72:78:39:d8:34:fb:57:0e:54:0f:13:c5:2b:bb: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:51:FC:48:56:B6:4C:F9:17:60:CA:5F:D4:19:9F:F3:04:E0:1D:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e6:b7:0f:1a:ee:2e:c7:04:e0:e5:d8:f6:14:ac:c5:32:6d: a7:73:ca:48:31:43:8d:8a:93:e6:1f:19:b1:cc:8c:ff:70:92: 7d:16:e1:d8:65:b7:4a:78:ce:2c:72:4f:3a:f8:ca:5b:7f:7e: 21:21:1c:85:f7:cb:a3:26:57:50:85:e8:e7:1c:4c:e3:8c:0d: c5:14:4b:3c:15:3e:98:cb:0e:2e:5d:a1:08:65:07:77:7b:c9: 10:75:fd:e7:63:f0:3f:95:ca:7f:ee:da:f7:30:f4:6f:31:c2: 4c:92:3a:97:ed:c1:c4:92:09:a0:25:a6:3c:66:66:7a:92:75: 50:d3:92:f3:1b:7e:8f:43:1f:cf:ac:88:5f:39:00:dd:10:a8: 50:0e:30:80:11:23:0d:76:3e:2f:fa:5f:67:15:b0:b2:7e:ca: e4:ad:b4:90:b5:e1:7e:1d:a2:c7:c4:cc:cd:47:07:bf:53:96: 0d:10:8f:53:3b:42:67:3f:df:ff:80:ee:5b:7d:a0:f9:14:91: 46:c2:ef:74:85:e8:e9:a2:6b:dc:7b:b4:e8:3b:17:e6:3c:73: 5d:cf:c3:cb:4e:46:af:83:84:a1:04:d4:ac:2f:18:28:ff:26: c3:49:9d:3b:06:c9:59:a9:05:db:1c:b1:e4:fc:dd:4e:6c:85: 00:5d:8c:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EL0VKd4a1gvplwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YTQyZmNmZGEtNGQwMC00MzAzLTlkMzgtMDE2NDkzYWQ4NDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JqWvFSNgppmbeByWdAJQC7kufgzox3hTXE4 bBf3dUHo7AxPrUm2xR0eyf/cd5RT3o3DPVMIsPKgYHSPwCqgaLvrfAOSMQI5wWNz hwcrSTRCBQVyrxmBIJ7ujrGw91VoA7F7kCP0KS3spX+cqTu3B30DDcrhFxijsjKb HolasPHqsANvGNMXTZoHZ9FbpD1oWv99nfW3x1ssLdt6knrhMsmfaZG4tnmFHfEl R1IUdYNkSSZRB0mrNzwkqVPWu0SRl3K+htmKluSHtrVtEn+Ji1j7rq1k9M93k4Tf goO5rWfEcD+r/wSI+fQ5jQIxpeuqcng52DT7Vw5UDxPFK7vBtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhR/EhWtkz5F2DKX9QZn/ME4B3VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE0Nzc1YzQtYmIzNS0z NTJjLTlmNTAtNWQ1NGI5NDJmYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLmtw8a7i7HBODl2PYUrMUybadzykgxQ42Kk+YfGbHMjP9wkn0W4dhl t0p4zixyTzr4ylt/fiEhHIX3y6MmV1CF6OccTOOMDcUUSzwVPpjLDi5doQhlB3d7 yRB1/edj8D+Vyn/u2vcw9G8xwkySOpftwcSSCaAlpjxmZnqSdVDTkvMbfo9DH8+s iF85AN0QqFAOMIARIw12Pi/6X2cVsLJ+yuSttJC14X4dosfEzM1HB79Tlg0Qj1M7 Qmc/3/+A7lt9oPkUkUbC73SF6Omia9x7tOg7F+Y8c13Pw8tORq+DhKEE1KwvGCj/ JsNJnTsGyVmpBdscseT83U5shQBdjLI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:14 2025 by rpki-client