This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa File: fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa (raw, json) Hash identifier: gvDvWUKyrN8Ho/4TsQVtCVhP7pqPgDkEFz37uSPCe8k= Subject key identifier: 2C:B7:47:86:E9:E6:D5:EA:8A:0B:9C:B9:24:E1:84:80:04:D4:EC:87 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584BFD110BC36FEAE4214FAEF580 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa Signing time: Wed 26 Nov 2025 14:00:39 +0000 ROA not before: Wed 26 Nov 2025 14:00:39 +0000 ROA not after: Tue 24 Feb 2026 14:00:39 +0000 asID: 0 IP address blocks: 198.133.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fd:11:0b:c3:6f:ea:e4:21:4f:ae:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Nov 26 14:00:39 2025 GMT Not After : Feb 24 14:00:39 2026 GMT Subject: CN=40e710ed-c3db-4b81-bb73-2db7e0ac3052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:d2:ce:1f:e6:74:2a:db:33:14:f9:6a:cd: 05:07:2f:50:cc:76:ba:19:4e:62:aa:cf:a5:71:12: 01:b2:1d:04:fd:8a:e4:0d:8a:1d:e3:9e:d9:25:00: 14:b2:b1:f2:7c:47:12:d2:8e:8c:6e:b2:26:6c:56: a0:2b:a8:c2:72:02:42:04:2e:21:3c:de:28:95:e1: 6b:80:ba:cf:09:a2:90:2c:21:c3:bd:52:8d:6d:b9: 8c:a1:2f:10:8f:44:d2:3c:a3:b2:95:a8:58:58:57: 3a:14:d1:e7:83:19:8d:76:2d:53:c1:78:9a:d0:7c: 95:cf:96:56:04:cc:f2:ae:09:d7:f3:70:22:45:83: 74:55:ec:9f:45:56:4c:39:64:65:41:dc:9e:c8:16: da:22:bb:10:1d:75:d3:7f:1d:36:9c:81:73:ea:ba: 1f:b0:4a:66:f1:06:7b:69:5b:1b:69:f4:d3:c2:5e: 60:d9:6a:f5:c1:e0:6d:70:7e:39:b1:5b:76:de:29: 0b:db:02:0a:dc:68:c2:8f:34:84:54:ab:8b:aa:bd: ad:36:ed:36:e8:94:12:2a:4e:51:29:f9:61:f9:58: 40:3d:3a:44:68:54:b0:6b:b2:91:10:0d:57:12:13: f3:5c:35:6c:26:bf:3a:f4:88:45:c6:8c:86:9f:ef: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B7:47:86:E9:E6:D5:EA:8A:0B:9C:B9:24:E1:84:80:04:D4:EC:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fa4dc8d0-2d08-36f8-ae48-702a2d92ba08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 198.133.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:e4:19:98:bb:44:c7:e0:3b:63:7e:ac:2e:db:6d:e4:4c:bc: 74:fe:65:d8:7b:4c:26:2d:f4:0e:72:34:20:a0:3f:bc:7c:f0: d8:e6:1a:73:92:46:4f:39:f8:8e:1c:7c:0e:11:89:a2:8f:d1: 78:9b:93:57:de:e2:1d:ef:9c:34:80:45:10:f4:de:80:87:e1: fc:db:68:54:38:6d:9e:80:7e:59:1b:fc:e0:6d:1d:95:b3:0c: 06:7c:15:11:4b:88:2c:30:42:83:b3:c7:88:30:af:5b:c7:8b: 81:4b:7d:6d:60:ae:87:c8:06:e5:18:55:ec:ae:48:31:2b:03: 82:86:ad:20:54:0b:9f:45:6d:ad:09:88:ab:1e:a2:eb:52:fc: 1f:4a:e9:29:62:a7:24:4f:07:6b:54:8b:cd:15:7b:3d:f4:a3: 6a:3a:b8:11:ef:aa:df:ed:20:7a:c2:58:fa:e9:d0:84:d1:f8: ae:5a:b7:de:45:a7:82:95:f3:d1:38:37:01:e8:c0:69:19:41: 1a:42:c5:d5:cb:4c:79:72:2b:38:f7:c5:c8:ab:f1:32:4f:d5: 3a:57:7a:ea:63:bc:0f:7f:e4:ed:03:ae:f9:9c:fe:8b:95:47: 67:cf:46:1e:f9:74:78:7a:6f:37:98:f2:18:69:5a:69:8f:37: 79:b2:a1:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv9EQvDb+rkIU+u9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI1MTEyNjE0MDAzOVoXDTI2MDIyNDE0MDAzOVowLzEtMCsGA1UEAxMk NDBlNzEwZWQtYzNkYi00YjgxLWJiNzMtMmRiN2UwYWMzMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQDSzh/mdCrbMxT5as0FBy9QzHa6GU5iqs+l cRIBsh0E/YrkDYod457ZJQAUsrHyfEcS0o6MbrImbFagK6jCcgJCBC4hPN4oleFr gLrPCaKQLCHDvVKNbbmMoS8Qj0TSPKOylahYWFc6FNHngxmNdi1TwXia0HyVz5ZW BMzyrgnX83AiRYN0VeyfRVZMOWRlQdyeyBbaIrsQHXXTfx02nIFz6rofsEpm8QZ7 aVsbafTTwl5g2Wr1weBtcH45sVt23ikL2wIK3GjCjzSEVKuLqr2tNu026JQSKk5R Kflh+VhAPTpEaFSwa7KREA1XEhPzXDVsJr869IhFxoyGn+9uvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy3R4bp5tXqigucuSThhIAE1OyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmE0ZGM4ZDAtMmQwOC0z NmY4LWFlNDgtNzAyYTJkOTJiYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxoVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7kGZi7RMfgO2N+rC7bbeRMvHT+Zdh7TCYt9A5yNCCgP7x88NjmGnOS Rk85+I4cfA4RiaKP0Xibk1fe4h3vnDSARRD03oCH4fzbaFQ4bZ6Aflkb/OBtHZWz DAZ8FRFLiCwwQoOzx4gwr1vHi4FLfW1grofIBuUYVeyuSDErA4KGrSBUC59Fba0J iKseoutS/B9K6SlipyRPB2tUi80Vez30o2o6uBHvqt/tIHrCWPrp0ITR+K5at95F p4KV89E4NwHowGkZQRpCxdXLTHlyKzj3xcir8TJP1TpXeupjvA9/5O0Drvmc/ouV R2fPRh75dHh6bzeY8hhpWmmPN3myoZg= -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:52 2025 by rpki-client