This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa File: c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa (raw, json) Hash identifier: 4Cgr8ikjw5xDK9U2tfaPRGE4OJeNNLZ0qGuHL0kb4Ck= Subject key identifier: 07:A8:10:4F:B7:BB:D5:11:93:76:0B:88:55:5B:62:F4:8A:CC:E4:15 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BCAD0606F54798F7112793300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa Signing time: Sat 08 Nov 2025 14:00:39 +0000 ROA not before: Sat 08 Nov 2025 14:00:39 +0000 ROA not after: Fri 06 Feb 2026 14:00:39 +0000 asID: 63949 IP address blocks: 172.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ca:d0:60:6f:54:79:8f:71:12:79:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 8 14:00:39 2025 GMT Not After : Feb 6 14:00:39 2026 GMT Subject: CN=209a1c52-90b5-4288-8989-41923ae46748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:93:49:6a:c5:65:4d:d4:c2:3f:ea:c9:d0: 34:20:1f:be:47:e1:b5:87:cf:08:c0:93:ec:ac:de: 2c:be:b4:8f:fc:76:bd:fc:e9:bf:6c:fc:30:1f:9e: 0d:ae:b9:cc:74:c3:e1:ce:08:94:ab:46:32:e6:a4: f8:a4:9e:51:b2:2f:e9:a0:90:01:43:3b:e4:23:b9: 99:bf:cc:20:40:4a:45:db:43:4f:2a:71:97:d7:4a: 33:bc:7b:ed:da:00:b1:5f:5f:07:1d:1e:32:18:56: 0d:72:2e:2c:ba:24:dc:70:70:11:30:d7:d0:e7:b2: e0:86:c3:ce:47:1a:3a:84:ac:2c:b6:41:ff:9e:3f: b1:0b:0c:21:d1:83:93:b2:d3:0b:1b:1e:67:0b:43: eb:9f:0c:d7:14:3f:d0:e7:50:64:cb:ae:ec:57:84: ea:c3:da:e9:ce:00:66:56:18:1e:36:e5:c7:75:a9: e5:d3:26:19:0c:50:69:01:ea:85:b1:0c:05:27:e1: 8d:2e:f9:60:8d:4e:01:7d:05:4f:d9:4c:c2:6f:a2: d4:06:bc:cf:54:3f:fc:57:e8:66:38:5d:36:6c:a6: c1:ed:c3:f8:30:bc:ee:e2:52:b7:aa:6d:d3:fd:9c: d8:c7:14:d5:e1:f9:07:92:50:7a:99:f9:2c:bd:3c: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A8:10:4F:B7:BB:D5:11:93:76:0B:88:55:5B:62:F4:8A:CC:E4:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c333abc3-7ff2-3afb-80ff-6f5f9f257705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ca:e1:f8:1d:95:d2:bb:1a:09:19:7e:c2:a2:23:0b:4e:1e: 9d:ca:5e:1c:33:5b:33:d4:2c:8a:d5:03:52:f4:da:dd:23:6f: 35:0e:2e:9b:e5:3e:da:ba:4d:b9:b3:af:20:c7:58:d2:62:af: a5:d1:b7:a6:1a:f9:9a:98:4d:51:79:73:0c:a5:82:f1:e1:c9: 43:40:83:76:1c:f7:9f:58:f4:be:c5:6a:6e:72:59:18:28:d1: 6f:02:92:1f:b9:e9:95:e2:b4:e6:29:de:fd:8d:03:a6:ce:90: 99:50:e3:ee:fa:65:32:86:7f:f9:09:1e:f7:f1:30:bc:7a:0a: 25:6a:1a:05:fd:e9:90:0b:df:56:12:74:9f:08:69:a9:0f:23: ab:a6:4d:92:78:f8:a0:69:e0:d6:f7:73:42:4d:21:a6:fc:e4: e3:00:08:28:bd:a6:9e:57:ac:8e:d1:fe:af:13:f5:a0:de:7c: b4:fe:f7:7d:21:f6:8a:3a:84:28:fb:51:29:7b:d1:14:64:e8: f7:cc:65:f3:3c:51:a8:33:21:29:3e:54:21:3b:2f:91:e3:37: 3a:4e:e6:0d:91:85:ec:2b:d5:c4:fa:88:13:61:12:cf:33:ae: 34:4f:1b:d1:25:24:d7:d8:e5:eb:35:b2:34:c1:52:1b:db:72: 8c:ea:89:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvK0GBvVHmPcRJ5MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwODE0MDAzOVoXDTI2MDIwNjE0MDAzOVowLzEtMCsGA1UEAxMk MjA5YTFjNTItOTBiNS00Mjg4LTg5ODktNDE5MjNhZTQ2NzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l6TSWrFZU3Uwj/qydA0IB++R+G1h88IwJPs rN4svrSP/Ha9/Om/bPwwH54NrrnMdMPhzgiUq0Yy5qT4pJ5Rsi/poJABQzvkI7mZ v8wgQEpF20NPKnGX10ozvHvt2gCxX18HHR4yGFYNci4suiTccHARMNfQ57LghsPO Rxo6hKwstkH/nj+xCwwh0YOTstMLGx5nC0PrnwzXFD/Q51Bky67sV4Tqw9rpzgBm VhgeNuXHdanl0yYZDFBpAeqFsQwFJ+GNLvlgjU4BfQVP2UzCb6LUBrzPVD/8V+hm OF02bKbB7cP4MLzu4lK3qm3T/ZzYxxTV4fkHklB6mfksvTwYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAeoEE+3u9URk3YLiFVbYvSKzOQVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzMzM2FiYzMtN2ZmMi0z YWZiLTgwZmYtNmY1ZjlmMjU3NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3K4fgdldK7GgkZfsKiIwtOHp3KXhwzWzPULIrVA1L02t0jbzUOLpvl Ptq6TbmzryDHWNJir6XRt6Ya+ZqYTVF5cwylgvHhyUNAg3Yc959Y9L7Fam5yWRgo 0W8Ckh+56ZXitOYp3v2NA6bOkJlQ4+76ZTKGf/kJHvfxMLx6CiVqGgX96ZAL31YS dJ8IaakPI6umTZJ4+KBp4Nb3c0JNIab85OMACCi9pp5XrI7R/q8T9aDefLT+930h 9oo6hCj7USl70RRk6PfMZfM8UagzISk+VCE7L5HjNzpO5g2Rhewr1cT6iBNhEs8z rjRPG9ElJNfY5es1sjTBUhvbcozqiX4= -----END CERTIFICATE-----Generated at Sat Dec 6 10:12:37 2025 by rpki-client