This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa File: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (raw, json) Hash identifier: DvUMJ0zP4TkzUZjc0vq3flmzj/0eN6CE1vYAntwA/cY= Subject key identifier: FB:EE:47:69:59:5D:B2:42:12:2A:F5:3A:54:FB:A2:86:A2:27:60:C4 Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584BDCF5B820252F1B92C25AAB70 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 64236 IP address blocks: 66.181.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:b8:20:25:2f:1b:92:c2:5a:ab:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=af9827e0-4aa5-4ac5-8572-258dbdd5860c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:95:1f:44:bf:47:11:94:a6:b6:8e:61:59:6a: ff:06:d5:d6:a5:9c:6f:89:4e:70:8a:fa:95:0b:5f: b2:58:37:79:d4:72:8e:9e:92:6e:78:21:40:16:f5: de:4e:ea:2d:ea:36:91:03:b6:8c:71:93:d4:21:06: 9b:70:7e:90:b9:58:6d:24:fd:70:12:ed:60:84:b7: 9b:ee:88:47:d5:5f:04:e0:57:c1:83:8b:51:52:69: 34:b8:33:15:ae:be:ac:93:53:cb:8e:f2:82:c5:18: f3:ec:f8:6f:b0:52:14:db:64:c3:b7:db:5e:8e:e9: d4:6d:1b:4a:bb:fb:94:15:29:55:71:9d:e4:bb:09: 00:d4:33:46:ee:ac:b8:be:64:cf:22:06:bc:5f:54: 6f:c7:76:2c:0b:aa:a8:42:b7:62:b3:00:bf:38:18: 1d:99:14:81:cb:7c:69:17:84:4d:20:e9:ec:f0:41: 52:1d:7f:d1:4a:8e:3f:8c:26:26:db:27:2a:cc:d3: 4a:ad:1a:02:e7:56:ce:4e:08:45:4a:aa:de:7b:3c: d6:89:44:a8:8c:2d:1d:77:8f:c6:a9:68:51:2a:8e: c9:f7:82:cb:e8:9f:f6:e4:86:be:5f:2d:77:24:15: 66:09:70:e9:73:96:58:51:5d:96:84:ac:82:7d:6f: 59:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EE:47:69:59:5D:B2:42:12:2A:F5:3A:54:FB:A2:86:A2:27:60:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: 66.181.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:49:18:a2:11:cf:fd:6d:94:27:cc:23:b7:c8:f9:12:c9:8f: 7b:b4:26:41:7e:6c:b2:a9:42:22:6d:ce:cc:bf:00:6a:05:b3: b4:32:4a:1d:d5:28:1b:37:2c:3c:cf:34:b7:b5:dd:77:e9:00: 32:fa:10:b1:20:3c:a3:85:61:40:2e:2c:7a:8a:49:fd:d8:af: 5b:9f:ec:13:d0:23:ff:83:09:db:5a:02:53:f4:a1:cc:33:9c: a6:5f:53:b5:9c:b5:4b:90:7f:eb:eb:90:8f:21:42:60:bf:8e: 63:74:25:ff:9b:cc:8b:1f:f9:5a:eb:09:d6:23:8c:24:10:02: f8:24:73:d0:4e:05:7a:a1:9b:1f:67:0b:f5:da:f6:9e:ec:81: 6d:69:6b:ed:d4:23:02:43:4f:ce:97:90:83:40:85:b0:d8:21: 7b:27:e9:31:dd:8d:c4:39:ce:c6:d1:24:eb:5e:84:55:90:db: f0:9d:0d:5e:00:fb:06:76:2b:54:f7:51:a4:f1:18:07:9f:84: 5e:3b:9e:b2:ca:97:4a:d0:a1:96:28:ad:64:b2:45:1d:f2:9e: dc:83:81:7b:cc:17:eb:c5:46:25:65:7f:62:05:30:d5:56:1f: f5:67:59:7d:81:82:ba:65:b9:7a:b8:f0:a6:8d:49:85:b5:f2: b3:8d:a5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9bggJS8bksJaq3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk YWY5ODI3ZTAtNGFhNS00YWM1LTg1NzItMjU4ZGJkZDU4NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpUfRL9HEZSmto5hWWr/BtXWpZxviU5wivqV C1+yWDd51HKOnpJueCFAFvXeTuot6jaRA7aMcZPUIQabcH6QuVhtJP1wEu1ghLeb 7ohH1V8E4FfBg4tRUmk0uDMVrr6sk1PLjvKCxRjz7PhvsFIU22TDt9tejunUbRtK u/uUFSlVcZ3kuwkA1DNG7qy4vmTPIga8X1Rvx3YsC6qoQrdiswC/OBgdmRSBy3xp F4RNIOns8EFSHX/RSo4/jCYm2ycqzNNKrRoC51bOTghFSqreezzWiUSojC0dd4/G qWhRKo7J94LL6J/25Ia+Xy13JBVmCXDpc5ZYUV2WhKyCfW9Z5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvuR2lZXbJCEir1OlT7ooaiJ2DEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvM2JkMjNhNjctNmI0YS0z ZDY4LTgyNTMtZmQ0ODVjOWY2ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQrUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpJGKIRz/1tlCfMI7fI+RLJj3u0JkF+bLKpQiJtzsy/AGoFs7QySh3V KBs3LDzPNLe13XfpADL6ELEgPKOFYUAuLHqKSf3Yr1uf7BPQI/+DCdtaAlP0ocwz nKZfU7WctUuQf+vrkI8hQmC/jmN0Jf+bzIsf+VrrCdYjjCQQAvgkc9BOBXqhmx9n C/Xa9p7sgW1pa+3UIwJDT86XkINAhbDYIXsn6THdjcQ5zsbRJOtehFWQ2/CdDV4A +wZ2K1T3UaTxGAefhF47nrLKl0rQoZYorWSyRR3yntyDgXvMF+vFRiVlf2IFMNVW H/VnWX2BgrpluXq48KaNSYW18rONpVM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:06 2025 by rpki-client