This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa File: 43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa (raw, json) Hash identifier: ocra/xs70cHYJzYY25djcWWJy9OxlcNy/IOj0N+BbiE= Subject key identifier: 46:71:C2:E7:2C:4A:E2:B7:4B:1E:6F:16:D2:97:C3:DC:80:3F:6C:A2 Certificate issuer: /CN=187ea578-167a-4040-baae-c4022f6738f1 Certificate serial: 010D0C9F4328584BA5023F0C2236F2DED59AC200 Authority key identifier: 13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 22789 IP address blocks: 208.69.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:3f:0c:22:36:f2:de:d5:9a:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187ea578-167a-4040-baae-c4022f6738f1 Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=028d852c-c961-417f-a0b8-097d3ce71286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:98:06:66:3b:45:4b:c1:5e:41:e5:30:a4:2b: 01:00:69:9d:f6:4d:66:a5:43:af:ce:fc:62:2b:ce: 59:88:7c:81:d6:ad:5d:63:7b:31:2e:27:26:43:45: 47:3e:fa:b2:d1:4c:11:9d:42:43:bc:2b:13:cd:e8: 60:df:bb:e0:e7:5e:82:1c:31:1e:1b:98:95:ca:94: 42:ad:3a:89:e0:a0:cb:9b:c1:45:ea:7d:56:81:09: be:e1:0c:63:5f:e5:9b:89:b0:1b:50:2f:34:dd:88: b7:ae:71:53:fc:82:6b:d0:c5:35:14:76:c2:99:01: 27:61:1c:7f:28:73:43:c1:d0:0a:d3:04:6c:fe:10: b4:ad:69:13:12:c4:07:94:c1:ee:c4:d7:39:ed:7b: 79:c7:7c:c5:b7:bd:8e:df:ea:39:60:e0:0c:29:dc: 39:dc:92:15:f3:50:ad:97:7e:06:9e:67:6a:12:58: 6b:af:ce:16:05:80:ab:4b:17:40:22:72:5a:92:b3: b9:e4:72:82:4b:7a:01:23:07:07:cb:67:cf:58:98: d5:5c:e7:a8:34:8d:32:b9:6c:90:7c:ee:71:27:54: 41:03:97:d5:03:b8:03:01:b2:ce:12:5b:48:b4:8c: f6:69:31:fa:63:18:46:ca:d7:5b:62:8d:9a:6b:44: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:C2:E7:2C:4A:E2:B7:4B:1E:6F:16:D2:97:C3:DC:80:3F:6C:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl X509v3 Authority Key Identifier: keyid:13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer sbgp-ipAddrBlock: critical IPv4: 208.69.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:04:b2:22:0e:54:54:c4:79:f5:7d:b7:d1:ab:69:7e:1e:1f: 06:cc:b5:f5:49:e2:4a:d9:ae:93:c2:d4:20:c0:be:2a:96:ce: 4e:74:24:1e:80:47:e2:8c:c7:03:21:5c:3d:6d:30:03:d5:cb: ed:d6:7a:7d:cc:d7:d1:a9:04:d6:ae:18:85:74:54:01:d7:23: bf:28:04:0f:7d:ed:03:77:bd:aa:e5:7b:10:b7:93:85:73:7c: be:8f:5d:00:8e:e8:9f:4b:dc:cd:c8:bc:b6:1c:51:e7:d9:94: 7f:30:79:23:87:7b:56:aa:e5:f2:b5:09:92:47:9d:ce:39:de: 1e:2e:72:67:06:15:1e:4c:82:99:25:61:22:d8:bd:dd:cc:4c: 7c:5b:b0:7b:ca:bf:e5:4a:5d:1b:ca:bf:8a:16:a6:94:60:5e: a4:af:9c:fe:f0:09:32:61:1b:b1:ab:5a:6d:9d:04:b9:47:7f: 79:f2:21:c0:bf:ac:eb:8a:99:4c:4e:13:e0:bf:bc:2b:99:3b: 81:4e:30:79:d5:a9:67:cb:ec:72:52:91:0c:bd:5c:6c:df:d7: 04:2b:1a:de:19:df:45:38:71:83:e9:81:99:a9:e8:cd:20:be: fb:28:7f:ed:da:bd:55:e8:d9:7c:bd:43:cb:12:21:b3:0a:0f: b5:21:4e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAj8MIjby3tWawgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg3ZWE1NzgtMTY3YS00MDQwLWJhYWUtYzQwMjJmNjcz OGYxMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk MDI4ZDg1MmMtYzk2MS00MTdmLWEwYjgtMDk3ZDNjZTcxMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75gGZjtFS8FeQeUwpCsBAGmd9k1mpUOvzvxi K85ZiHyB1q1dY3sxLicmQ0VHPvqy0UwRnUJDvCsTzehg37vg516CHDEeG5iVypRC rTqJ4KDLm8FF6n1WgQm+4QxjX+WbibAbUC803Yi3rnFT/IJr0MU1FHbCmQEnYRx/ KHNDwdAK0wRs/hC0rWkTEsQHlMHuxNc57Xt5x3zFt72O3+o5YOAMKdw53JIV81Ct l34GnmdqElhrr84WBYCrSxdAInJakrO55HKCS3oBIwcHy2fPWJjVXOeoNI0yuWyQ fO5xJ1RBA5fVA7gDAbLOEltItIz2aTH6YxhGytdbYo2aa0Qx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZxwucsSuK3Sx5vFtKXw9yAP2yiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xODdl YTU3OC0xNjdhLTQwNDAtYmFhZS1jNDAyMmY2NzM4ZjEvNDNjOWVhNzktNWUwYS0z OThlLWJjYzEtOGNlOGE5YWNlNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTg3ZWE1NzgtMTY3YS00MDQwLWJh YWUtYzQwMjJmNjczOGYxLzE4N2VhNTc4LTE2N2EtNDA0MC1iYWFlLWM0MDIyZjY3 MzhmMS5jcmwwHwYDVR0jBBgwFoAUE3lw+OUrQpSEQW50gQXXt/lQz60wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xODdlYTU3OC0xNjdhLTQwNDAtYmFhZS1jNDAy MmY2NzM4ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsEsiIOVFTEefV9t9GraX4eHwbMtfVJ4krZrpPC1CDAviqWzk50JB6A R+KMxwMhXD1tMAPVy+3Wen3M19GpBNauGIV0VAHXI78oBA997QN3varlexC3k4Vz fL6PXQCO6J9L3M3IvLYcUefZlH8weSOHe1aq5fK1CZJHnc453h4ucmcGFR5Mgpkl YSLYvd3MTHxbsHvKv+VKXRvKv4oWppRgXqSvnP7wCTJhG7GrWm2dBLlHf3nyIcC/ rOuKmUxOE+C/vCuZO4FOMHnVqWfL7HJSkQy9XGzf1wQrGt4Z30U4cYPpgZmp6M0g vvsof+3avVXo2Xy9Q8sSIbMKD7UhTjM= -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:21 2025 by rpki-client