This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa File: dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa (raw, json) Hash identifier: +9PLyDqTGowQA9N3glvrIq+mX82FPx15FhCeWfcu5xc= Subject key identifier: 83:86:C7:C2:65:64:B6:31:14:27:6D:5E:CF:9A:3E:D2:1B:31:45:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C109B7B5B23FEDA3273695980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 4775 IP address blocks: 173.223.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:7b:5b:23:fe:da:32:73:69:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=34d97e92-2e3f-403b-b50d-fe103ac3bf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0e:90:fd:5c:cd:4b:84:07:30:01:8f:71:71: 0e:e5:92:a0:d7:40:fd:61:a7:af:c3:85:12:38:79: e0:94:61:75:91:b0:78:85:c9:6c:5c:07:29:e3:07: ba:ec:ab:ce:4c:7c:95:98:f9:6d:2e:8e:cb:1c:1c: 34:9b:07:06:e3:68:fa:c7:4d:7e:e6:d2:c0:32:ce: 69:68:e0:88:d4:d3:27:41:b6:a0:e0:f3:78:76:96: 47:51:b8:31:e2:a3:65:cd:4b:3e:66:77:c1:3e:0c: 07:77:fc:19:27:b2:94:ac:dc:9c:90:52:10:3e:cd: dd:58:98:81:21:16:7a:a4:95:02:75:6b:af:58:8d: 0d:46:f1:0e:79:07:8a:22:76:fe:42:82:e6:84:1b: eb:3a:49:e7:d2:06:9a:f8:0c:c4:60:b0:b8:aa:fb: 7d:84:fb:de:4a:ee:3e:8b:7a:75:0d:92:b0:81:e6: 7f:d7:99:2f:ac:c1:37:2f:9a:6e:39:ab:6c:2c:e6: 9a:24:be:cb:96:43:84:c6:39:c7:37:95:07:f1:56: 5b:06:10:ab:b7:4c:e2:b5:4f:1a:e6:66:0b:87:f3: 5e:e2:d4:cf:18:49:e5:28:1c:7b:7d:84:30:8d:9e: e4:ab:ba:07:74:dc:74:c3:34:30:32:d3:e0:fe:31: 33:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:86:C7:C2:65:64:B6:31:14:27:6D:5E:CF:9A:3E:D2:1B:31:45:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfa97400-21ee-3e62-92dc-1dacd2c23ae2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1a:d5:29:14:83:9c:16:69:5f:d1:50:94:34:59:ab:0d:3c: 45:a3:29:e1:44:73:ca:67:1a:b7:92:7b:08:71:7c:87:4f:09: 1f:2a:07:32:05:5d:15:af:bd:db:fb:e7:61:f1:0a:4d:4d:a6: aa:1b:3b:96:40:c4:fd:ff:9f:c1:e5:d8:2a:09:fc:bd:18:17: 48:8e:33:62:ba:11:74:c5:9a:d0:a1:7d:04:53:23:34:29:be: a5:1b:ca:0a:2b:2e:f1:fc:b2:e9:97:1a:2d:be:8b:eb:9a:a6: 13:19:e1:c8:88:fe:76:8b:05:1b:bf:29:a2:7d:18:08:be:a8: 1e:a4:f5:7c:2f:0c:77:d0:12:59:df:87:07:f2:f0:d5:a8:76: 86:67:e2:b2:95:52:f5:64:f5:3f:7f:8b:26:fd:9b:47:de:3f: ea:58:4b:bb:82:7b:8e:eb:82:c2:e1:93:4a:28:cf:9c:fd:bd: 19:e9:51:73:a5:fb:39:23:3f:0b:0d:10:ca:57:be:c7:eb:cc: db:e8:f7:01:74:d8:f5:11:96:5d:5d:f8:3a:c1:f6:b0:5c:91: 6d:f6:24:cf:14:0c:b0:4a:e0:f8:31:01:9c:44:0c:c3:16:69: 03:da:61:63:5f:43:43:7f:5b:c9:b3:65:4d:20:86:19:a1:71: ac:d2:99:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm3tbI/7aMnNpWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk MzRkOTdlOTItMmUzZi00MDNiLWI1MGQtZmUxMDNhYzNiZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6A6Q/VzNS4QHMAGPcXEO5ZKg10D9Yaevw4US OHnglGF1kbB4hclsXAcp4we67KvOTHyVmPltLo7LHBw0mwcG42j6x01+5tLAMs5p aOCI1NMnQbag4PN4dpZHUbgx4qNlzUs+ZnfBPgwHd/wZJ7KUrNyckFIQPs3dWJiB IRZ6pJUCdWuvWI0NRvEOeQeKInb+QoLmhBvrOknn0gaa+AzEYLC4qvt9hPveSu4+ i3p1DZKwgeZ/15kvrME3L5puOatsLOaaJL7LlkOExjnHN5UH8VZbBhCrt0zitU8a 5mYLh/Ne4tTPGEnlKBx7fYQwjZ7kq7oHdNx0wzQwMtPg/jEzsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIOGx8JlZLYxFCdtXs+aPtIbMUVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZhOTc0MDAtMjFlZS0z ZTYyLTkyZGMtMWRhY2QyYzIzYWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwa1SkUg5wWaV/RUJQ0WasNPEWjKeFEc8pnGreSewhxfIdPCR8qBzIF XRWvvdv752HxCk1NpqobO5ZAxP3/n8Hl2CoJ/L0YF0iOM2K6EXTFmtChfQRTIzQp vqUbygorLvH8sumXGi2+i+uaphMZ4ciI/naLBRu/KaJ9GAi+qB6k9XwvDHfQElnf hwfy8NWodoZn4rKVUvVk9T9/iyb9m0feP+pYS7uCe47rgsLhk0ooz5z9vRnpUXOl +zkjPwsNEMpXvsfrzNvo9wF02PURll1d+DrB9rBckW32JM8UDLBK4PgxAZxEDMMW aQPaYWNfQ0N/W8mzZU0ghhmhcazSmRg= -----END CERTIFICATE-----Generated at Sat Dec 6 11:57:42 2025 by rpki-client