This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa File: 8675e898-b072-3c36-9560-a1fd317bc131.roa (raw, json) Hash identifier: z9GqgRVBHtaEk5lVew38srhItsYjpygssW6rgIqPrfY= Subject key identifier: B9:F3:B9:63:33:F1:A8:38:3F:B8:13:29:2F:4B:56:0E:75:68:51:EB Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BFD11037B5111EA2E8DE4B100 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 701 IP address blocks: 71.242.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:03:7b:51:11:ea:2e:8d:e4:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=ac5a3f94-91ed-45e7-9c2d-aad1aab21bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:79:84:f2:a8:a8:41:22:d2:ec:17:b8:10: f8:5e:ee:de:9e:43:db:09:f5:99:66:eb:28:27:b8: ff:86:b7:b1:56:7a:16:c4:5e:58:e3:43:b5:73:21: db:f2:0f:cb:81:97:db:61:72:b6:c9:90:00:00:e3: e8:10:74:02:40:30:8a:39:0f:c6:70:1a:dc:2b:28: 4e:f6:e8:26:16:b0:7c:73:e6:07:3d:f4:e0:d9:b0: 18:30:fb:c4:87:77:1a:ec:f9:ad:5b:b3:c8:00:14: be:a5:15:34:37:40:98:a8:b0:bd:a6:3e:a3:58:df: 80:0d:fa:95:3a:fb:c6:ea:1c:da:f9:cb:82:f0:df: 86:cc:2e:e8:4d:9e:1b:22:37:0f:51:55:11:75:b0: a4:5b:34:cb:eb:d9:58:4c:12:29:e1:e9:d9:5a:65: 84:25:a4:a5:a4:a8:09:4f:3f:1a:cf:47:7b:b4:31: 61:8d:cd:3a:a1:6e:5a:7a:41:1b:74:27:a0:82:d6: 83:e0:0f:43:4f:c8:55:d6:f1:18:f9:5e:53:ae:80: 13:e5:06:42:5b:8e:d1:b9:2b:85:d3:be:f2:68:31: b5:02:43:13:33:89:ce:89:cd:dd:8c:a9:91:47:e1: 02:f3:2c:00:f3:d9:a0:2d:06:b1:69:17:5d:0a:de: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F3:B9:63:33:F1:A8:38:3F:B8:13:29:2F:4B:56:0E:75:68:51:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8675e898-b072-3c36-9560-a1fd317bc131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 71.242.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a0:10:69:6a:0b:cc:31:d5:e1:b3:22:45:1d:66:51:19:6b: 2f:5b:7e:d1:fe:9a:a3:b7:c4:18:e5:e8:ed:5e:88:de:02:fb: 3e:62:ac:25:ef:58:af:dc:52:16:aa:3e:04:f7:63:35:d7:75: 6e:f5:1e:aa:64:e9:7e:5e:a0:26:0d:a3:35:67:03:58:1e:7a: 60:db:72:41:49:69:52:1a:80:88:cf:c2:80:a5:46:26:d6:db: 46:fc:14:c4:0a:10:8b:bc:e4:8c:f6:15:58:82:4d:43:75:75: 6f:e3:c9:7c:c2:46:46:da:d0:cb:81:ed:3c:ba:af:b1:18:4f: 0f:36:eb:09:4a:d6:6d:b8:f5:18:92:ac:c8:75:7e:25:96:6f: 20:d6:a7:18:50:9b:f6:bb:14:72:e4:25:be:ae:89:e6:96:c4: 1b:7e:06:56:72:92:38:53:1f:65:be:fb:be:63:28:84:64:31: d3:07:c9:55:69:9c:5a:eb:b4:ea:d2:5f:ae:0a:57:9b:9a:44: 89:c8:6e:71:9d:d4:25:bc:9d:7b:29:cf:fa:da:23:01:3c:3f: 6c:54:3a:98:b1:0d:8a:75:47:87:03:6c:13:59:d2:94:74:44: 38:56:b4:cc:23:b6:27:c1:c9:5d:7d:83:fa:d7:2c:20:a7:9b: b8:c7:5d:e1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEv9EQN7URHqLo3ksQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk YWM1YTNmOTQtOTFlZC00NWU3LTljMmQtYWFkMWFhYjIxYmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD95hPKoqEEi0uwXuBD4Xu7enkPbCfWZZuso J7j/hrexVnoWxF5Y40O1cyHb8g/LgZfbYXK2yZAAAOPoEHQCQDCKOQ/GcBrcKyhO 9ugmFrB8c+YHPfTg2bAYMPvEh3ca7PmtW7PIABS+pRU0N0CYqLC9pj6jWN+ADfqV OvvG6hza+cuC8N+GzC7oTZ4bIjcPUVURdbCkWzTL69lYTBIp4enZWmWEJaSlpKgJ Tz8az0d7tDFhjc06oW5aekEbdCeggtaD4A9DT8hV1vEY+V5TroAT5QZCW47RuSuF 077yaDG1AkMTM4nOic3djKmRR+EC8ywA89mgLQaxaRddCt4/cQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLnzuWMz8ag4P7gTKS9LVg51aFHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODY3NWU4OTgtYjA3Mi0z YzM2LTk1NjAtYTFmZDMxN2JjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAR/IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKqAQaWoLzDHV4bMiRR1mURlrL1t+0f6ao7fEGOXo7V6I3gL7PmKsJe9Y r9xSFqo+BPdjNdd1bvUeqmTpfl6gJg2jNWcDWB56YNtyQUlpUhqAiM/CgKVGJtbb RvwUxAoQi7zkjPYVWIJNQ3V1b+PJfMJGRtrQy4HtPLqvsRhPDzbrCUrWbbj1GJKs yHV+JZZvINanGFCb9rsUcuQlvq6J5pbEG34GVnKSOFMfZb77vmMohGQx0wfJVWmc Wuu06tJfrgpXm5pEichucZ3UJbydeynP+tojATw/bFQ6mLENinVHhwNsE1nSlHRE OFa0zCO2J8HJXX2D+tcsIKebuMdd4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:24:48 2025 by rpki-client