This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa File: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (raw, json) Hash identifier: 3VxujpJC8KKCuGErirZzBu8SkU2DV7o0C5ZEZrZUzeY= Subject key identifier: 6D:2E:9F:26:3E:31:39:E6:BA:FC:77:13:69:AA:BA:95:E2:C1:02:15 Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584C40110B1A72B0D661376B4200 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 395700 IP address blocks: 198.137.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:0b:1a:72:b0:d6:61:37:6b:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=7da869ee-4109-4746-be6c-8d66d11dbaab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:30:2f:4d:87:92:c4:bd:f6:6c:38:2a:03:4a: 5a:ae:ba:7c:49:e0:2c:41:ad:51:74:ad:c5:f4:e9: 1e:7e:b8:c9:44:e3:26:80:2b:18:bb:bc:31:00:51: 6f:16:4f:a2:1b:fd:f4:3d:5c:64:63:a7:a3:d2:84: 0a:63:3e:72:9f:2d:2c:53:db:82:a6:0c:c9:cd:8d: 23:92:ea:c3:5c:88:e5:4e:db:ff:96:94:8e:23:92: 22:d7:61:21:13:10:81:51:b1:ac:41:ed:7c:62:6e: 9e:b4:40:92:01:f3:63:6f:ac:01:43:fd:5b:4d:fd: 4a:b8:ee:24:ef:59:a9:15:9e:21:03:e4:96:10:a4: 9c:69:c2:60:81:ef:0b:bb:74:26:5d:12:70:e8:15: d8:9f:9a:15:5f:1c:53:b0:ad:11:8b:7b:8c:cb:34: 01:95:c3:17:04:8e:e6:51:9e:45:fe:9b:67:06:1c: 28:01:99:70:c0:5c:d5:74:ef:7f:ac:1d:c9:81:07: 44:af:55:e7:80:e5:9c:ce:bd:00:83:79:c4:f2:cc: ab:81:b9:88:6f:99:ae:5d:2b:ae:87:0e:01:b1:59: 70:4e:a0:60:83:84:79:8f:41:e4:5a:f5:85:fa:08: a3:e8:a7:0a:ee:4a:89:eb:8c:c4:ae:13:18:61:2e: 35:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:9F:26:3E:31:39:E6:BA:FC:77:13:69:AA:BA:95:E2:C1:02:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 198.137.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c5:7c:97:13:b8:9a:fa:4f:ee:2b:a6:3b:8a:3e:1a:69:6d: 8a:34:c7:e2:fb:39:38:f1:ec:2c:d1:dc:31:25:99:97:cd:98: c0:9f:8d:ff:c8:80:4f:c5:ef:ae:7e:6a:70:74:48:cf:a9:64: c4:b5:9c:f5:31:54:e2:dc:9a:f9:b0:d6:44:2e:62:d9:a9:c3: 19:38:f1:33:41:bc:ae:61:ac:35:c3:5e:f1:46:8b:c9:d2:e4: c7:da:51:d9:60:23:1c:43:73:92:bb:42:2e:65:d6:87:01:56: f2:93:fa:28:5e:8c:d4:37:49:a2:0c:d4:28:a4:96:16:d8:e3: 55:a0:d4:79:c9:f5:dc:dc:8b:e5:13:8c:ce:65:12:f3:27:d6: 9b:6f:1d:43:f9:b4:17:35:09:2b:e0:6f:e4:1f:6d:60:2d:4f: f4:6a:e5:68:b2:35:f5:d9:c2:3d:f9:df:11:eb:42:6d:96:c3: 77:14:b9:d7:c5:27:c5:7e:4c:79:03:27:43:39:3f:f8:40:87: b5:20:d3:26:83:b4:c4:da:9d:9f:ba:99:80:58:ae:ce:9e:2a: b0:33:81:8b:b2:bc:65:fb:ff:d8:44:73:5c:cc:99:31:97:5e: 70:66:d8:9d:05:11:94:3c:dc:a0:9a:2b:54:70:a7:7b:53:60: 0a:a6:4f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAEQsacrDWYTdrQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk N2RhODY5ZWUtNDEwOS00NzQ2LWJlNmMtOGQ2NmQxMWRiYWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDAvTYeSxL32bDgqA0parrp8SeAsQa1RdK3F 9OkefrjJROMmgCsYu7wxAFFvFk+iG/30PVxkY6ej0oQKYz5yny0sU9uCpgzJzY0j kurDXIjlTtv/lpSOI5Ii12EhExCBUbGsQe18Ym6etECSAfNjb6wBQ/1bTf1KuO4k 71mpFZ4hA+SWEKScacJgge8Lu3QmXRJw6BXYn5oVXxxTsK0Ri3uMyzQBlcMXBI7m UZ5F/ptnBhwoAZlwwFzVdO9/rB3JgQdEr1XngOWczr0Ag3nE8syrgbmIb5muXSuu hw4BsVlwTqBgg4R5j0HkWvWF+gij6KcK7kqJ64zErhMYYS419wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0unyY+MTnmuvx3E2mqupXiwQIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYjM5M2QyZTEtZGZjNy0z OTU1LWJhODMtZTZjM2UwYjZiNzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfFfJcTuJr6T+4rpjuKPhppbYo0x+L7OTjx7CzR3DElmZfNmMCfjf/I gE/F765+anB0SM+pZMS1nPUxVOLcmvmw1kQuYtmpwxk48TNBvK5hrDXDXvFGi8nS 5MfaUdlgIxxDc5K7Qi5l1ocBVvKT+ihejNQ3SaIM1CiklhbY41Wg1HnJ9dzci+UT jM5lEvMn1ptvHUP5tBc1CSvgb+QfbWAtT/Rq5WiyNfXZwj353xHrQm2Ww3cUudfF J8V+THkDJ0M5P/hAh7Ug0yaDtMTanZ+6mYBYrs6eKrAzgYuyvGX7/9hEc1zMmTGX XnBm2J0FEZQ83KCaK1Rwp3tTYAqmTw8= -----END CERTIFICATE-----Generated at Sat Dec 20 22:37:22 2025 by rpki-client