This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/4f9a42e4-a83e-3e34-8be5-673ecddae37b.roa File: 4f9a42e4-a83e-3e34-8be5-673ecddae37b.roa (raw, json) Hash identifier: QbiPYB2CHcIJHdmZxC3/mQweYCxlSNz6xAsbyoTegzk= Subject key identifier: 47:F8:5A:91:E7:DF:7A:77:6D:42:4E:18:FC:57:89:A6:A2:10:7F:D7 Certificate issuer: /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Certificate serial: 010D0C9F4328584C05A5A570D44A8B1982A36680 Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/4f9a42e4-a83e-3e34-8be5-673ecddae37b.roa Signing time: Sat 29 Nov 2025 15:47:26 +0000 ROA not before: Sat 29 Nov 2025 15:47:26 +0000 ROA not after: Fri 27 Feb 2026 15:47:26 +0000 asID: 400298 IP address blocks: 216.75.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:a5:a5:70:d4:4a:8b:19:82:a3:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08 Validity Not Before: Nov 29 15:47:26 2025 GMT Not After : Feb 27 15:47:26 2026 GMT Subject: CN=286e028b-e8db-4140-87f8-f6eb054742f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:5c:d7:c8:b2:29:38:a6:ae:48:c6:ed:59: 92:70:c7:53:5b:5c:ab:99:d7:ae:60:c8:cf:58:7a: 0e:8b:b7:7a:fd:80:b4:fd:59:46:72:7d:3a:68:dd: a0:4c:2b:e5:1b:6b:6f:66:fb:7f:db:d1:5b:cf:75: db:1a:0b:e7:90:44:d7:1a:5e:78:c7:4a:80:56:06: f5:25:6d:95:1a:ff:22:7f:fc:43:b5:e2:2b:f2:38: 1a:11:92:b6:4a:a8:02:86:84:b7:86:81:6e:f9:da: 2e:fd:79:86:5c:3f:71:61:ec:5b:86:b3:62:20:ba: 62:3b:52:47:90:06:db:cd:d5:11:d2:fc:8e:be:32: 1c:53:33:d3:c3:d6:85:e8:8b:b2:a3:92:09:f7:ff: 94:44:89:39:7c:6c:72:8c:53:a6:78:2b:10:ed:49: 3b:f9:56:c0:a0:49:cc:56:df:bf:ef:78:ee:5d:8e: 33:15:c3:24:f0:9f:02:ba:24:f7:f8:23:ce:a2:87: 02:b0:80:4d:6d:91:85:c1:ec:17:72:8b:46:57:99: 40:cd:47:1f:43:c5:6a:3b:b0:77:bf:1c:53:2d:f3: 86:61:5a:ab:3b:60:63:f4:26:43:6e:49:aa:09:0d: d9:e0:72:3e:98:ca:63:8c:8f:ee:ea:e7:e7:cb:36: 4e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:5A:91:E7:DF:7A:77:6D:42:4E:18:FC:57:89:A6:A2:10:7F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/4f9a42e4-a83e-3e34-8be5-673ecddae37b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl X509v3 Authority Key Identifier: keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer sbgp-ipAddrBlock: critical IPv4: 216.75.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:86:f4:a7:98:ea:c9:a7:77:7a:b6:87:03:6d:ab:78:6a:b7: 9a:cc:4b:9e:e0:4b:ba:a0:0d:b1:dc:62:c4:e4:d4:cd:7d:d1: 50:e4:cd:01:a5:d1:e4:51:b8:cf:69:a4:2f:f9:75:5d:33:64: 45:3d:8a:56:1f:e1:f8:ba:70:0a:e7:7d:67:0b:88:8a:fa:7a: a3:23:f6:3a:b1:a5:5c:b1:65:87:1d:23:a1:49:2b:98:57:fe: 69:e3:72:f2:6e:cc:8e:1f:82:26:56:aa:b9:fa:0a:98:de:44: a5:7f:52:69:63:1a:9b:f1:cf:2f:d1:ce:8f:65:09:02:26:c1: 0a:80:56:1b:cf:a7:49:30:3f:5e:67:d5:36:1b:09:56:0a:b3: 4c:dc:ce:0b:3e:a8:e2:95:3a:1e:01:ed:70:29:20:cd:f5:cc: a3:3f:dc:da:0b:ce:17:da:d5:3c:4f:38:53:80:aa:bf:1e:8d: 8a:44:cc:7f:f4:d9:d4:7d:de:d5:88:ed:2a:fc:6d:fd:c5:82: eb:28:93:c8:1d:46:7e:3c:a6:eb:bd:7b:78:5b:6d:dc:87:15: cd:ad:d9:79:17:c6:9f:9c:f4:14:d8:72:b6:59:a9:34:c5:6f: 41:54:68:e0:91:d2:e2:86:17:7e:31:89:60:3b:20:36:30:09: b4:1b:b1:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFpaVw1EqLGYKjZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmMjEwOWUtNjFmNy00NDZkLTg4MzMtYzdiZDFjMzVl YTA4MB4XDTI1MTEyOTE1NDcyNloXDTI2MDIyNzE1NDcyNlowLzEtMCsGA1UEAxMk Mjg2ZTAyOGItZThkYi00MTQwLTg3ZjgtZjZlYjA1NDc0MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgBc18iyKTimrkjG7VmScMdTW1yrmdeuYMjP WHoOi7d6/YC0/VlGcn06aN2gTCvlG2tvZvt/29Fbz3XbGgvnkETXGl54x0qAVgb1 JW2VGv8if/xDteIr8jgaEZK2SqgChoS3hoFu+dou/XmGXD9xYexbhrNiILpiO1JH kAbbzdUR0vyOvjIcUzPTw9aF6Iuyo5IJ9/+URIk5fGxyjFOmeCsQ7Uk7+VbAoEnM Vt+/73juXY4zFcMk8J8CuiT3+CPOoocCsIBNbZGFwewXcotGV5lAzUcfQ8VqO7B3 vxxTLfOGYVqrO2Bj9CZDbkmqCQ3Z4HI+mMpjjI/u6ufnyzZOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEf4WpHn33p3bUJOGPxXiaaiEH/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYy MTA5ZS02MWY3LTQ0NmQtODgzMy1jN2JkMWMzNWVhMDgvNGY5YTQyZTQtYTgzZS0z ZTM0LThiZTUtNjczZWNkZGFlMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2JmMjEwOWUtNjFmNy00NDZkLTg4 MzMtYzdiZDFjMzVlYTA4LzNiZjIxMDllLTYxZjctNDQ2ZC04ODMzLWM3YmQxYzM1 ZWEwOC5jcmwwHwYDVR0jBBgwFoAUfwVIU5F9kLt8DVKzUCNCjX1w5+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYmYyMTA5ZS02MWY3LTQ0NmQtODgzMy1jN2Jk MWMzNWVhMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWG9KeY6smnd3q2hwNtq3hqt5rMS57gS7qgDbHcYsTk1M190VDkzQGl 0eRRuM9ppC/5dV0zZEU9ilYf4fi6cArnfWcLiIr6eqMj9jqxpVyxZYcdI6FJK5hX /mnjcvJuzI4fgiZWqrn6CpjeRKV/UmljGpvxzy/Rzo9lCQImwQqAVhvPp0kwP15n 1TYbCVYKs0zczgs+qOKVOh4B7XApIM31zKM/3NoLzhfa1TxPOFOAqr8ejYpEzH/0 2dR93tWI7Sr8bf3Fgusok8gdRn48puu9e3hbbdyHFc2t2XkXxp+c9BTYcrZZqTTF b0FUaOCR0uKGF34xiWA7IDYwCbQbscc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:39:24 2025 by rpki-client