This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa File: 2303d566-c21f-3244-8d4c-6d8d314c79c7.roa (raw, json) Hash identifier: nDNFxtODY/qfqQRQgUaKGI0N3NvkBhyvxXMCJ5ufd8E= Subject key identifier: 19:07:C5:1D:5A:DA:51:4E:FC:E0:D2:64:87:B7:E6:BC:4A:59:82:A0 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584C1A356AD5687730D1E69C6480 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa Signing time: Mon 24 Nov 2025 02:00:32 +0000 ROA not before: Mon 24 Nov 2025 02:00:32 +0000 ROA not after: Sun 22 Feb 2026 02:00:32 +0000 asID: 46962 IP address blocks: 64.93.68.0/22 maxlen: 24 66.118.224.0/22 maxlen: 24 104.255.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:35:6a:d5:68:77:30:d1:e6:9c:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Nov 24 02:00:32 2025 GMT Not After : Feb 22 02:00:32 2026 GMT Subject: CN=74744dc9-c406-49f6-a8e5-35c961850ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:b7:8a:75:f5:eb:74:8b:e6:0e:94:64:a2: 26:69:80:a0:9c:41:0e:35:f0:e4:f6:34:18:d3:5e: 18:6a:43:8f:5f:84:3a:ee:1d:ce:87:00:35:5c:a7: 23:2f:bf:d7:ac:c0:c3:3b:80:8a:4b:d7:54:2c:db: 67:1e:de:c5:6e:77:c2:6b:54:af:27:f2:8e:a7:9b: a4:e3:c2:94:a4:3e:e3:4d:b7:52:a3:c2:18:b1:cf: de:d4:16:87:ed:85:22:70:48:ad:47:20:c9:80:e9: 7e:14:db:cd:b4:6c:c1:2c:0f:ad:a5:c2:40:9a:01: 60:c4:a7:5f:ad:94:40:d4:40:05:bb:91:c9:6d:cd: bb:0d:e9:1c:21:e4:a4:89:0b:91:19:82:ad:36:6d: a9:35:9f:cc:7d:00:d2:bb:e5:e4:30:b6:f6:97:a0: 07:4e:40:d4:7b:b1:22:d0:e8:b9:b1:8b:bd:1c:a8: b7:e9:04:d7:26:3d:b0:de:c1:ad:27:19:34:17:49: 89:54:00:1f:ca:18:af:27:1d:3e:8c:59:20:61:c9: 89:83:ce:b0:02:8a:0d:a6:7e:82:ce:a9:78:8d:fe: b5:e2:11:39:f4:1f:e6:43:52:0e:1d:a3:46:52:4c: 41:7a:0e:00:6d:02:04:42:c1:0a:9e:fc:d0:12:ff: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:C5:1D:5A:DA:51:4E:FC:E0:D2:64:87:B7:E6:BC:4A:59:82:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2303d566-c21f-3244-8d4c-6d8d314c79c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 64.93.68.0/22 66.118.224.0/22 104.255.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:33:b4:1c:26:c5:21:3e:19:a0:0b:b0:52:fd:27:be:7b:8c: c4:2f:7b:b9:59:0d:a6:ba:a1:a4:ba:63:c7:83:7d:76:b4:f1: 89:94:48:c9:64:60:70:32:28:29:0e:0e:d9:04:06:5a:f2:93: a3:ea:e3:39:6a:cc:a6:91:f3:53:ab:41:cc:22:8d:7e:ee:f5: 4b:8a:63:94:19:34:6c:dd:6e:1d:1a:d7:74:86:2a:a6:cf:c0: c9:90:4f:24:29:58:a4:9d:1b:0c:50:c2:6b:15:0b:b0:51:e4: 2e:e4:27:c1:33:47:8e:80:f6:98:a6:c0:68:ff:0a:16:6a:8c: ac:a6:45:eb:b2:ab:7a:12:1b:b4:36:3b:f5:5d:19:e9:a6:49: ed:dc:0a:63:1c:c1:02:02:c0:3c:e6:f6:08:66:88:8d:af:a1: 69:44:e5:47:e1:d9:9d:b1:46:5d:96:67:e2:c4:c8:49:e4:b9: 98:74:0e:9d:37:5f:ab:69:81:4c:95:6b:3a:31:9e:81:47:10: 98:4a:da:a3:90:71:43:04:3a:ed:99:fb:8e:c8:75:4c:d1:88: 58:fa:df:a1:08:62:41:43:96:f3:9d:83:9d:08:b0:c1:e0:7c: 4f:4d:2c:ea:63:43:23:36:2b:0c:69:9b:37:59:db:33:6b:af: 8d:06:2a:1d -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEwaNWrVaHcw0eacZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI1MTEyNDAyMDAzMloXDTI2MDIyMjAyMDAzMlowLzEtMCsGA1UEAxMk NzQ3NDRkYzktYzQwNi00OWY2LWE4ZTUtMzVjOTYxODUwY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3d23inX163SL5g6UZKImaYCgnEEONfDk9jQY 014YakOPX4Q67h3OhwA1XKcjL7/XrMDDO4CKS9dULNtnHt7FbnfCa1SvJ/KOp5uk 48KUpD7jTbdSo8IYsc/e1BaH7YUicEitRyDJgOl+FNvNtGzBLA+tpcJAmgFgxKdf rZRA1EAFu5HJbc27DekcIeSkiQuRGYKtNm2pNZ/MfQDSu+XkMLb2l6AHTkDUe7Ei 0Oi5sYu9HKi36QTXJj2w3sGtJxk0F0mJVAAfyhivJx0+jFkgYcmJg86wAooNpn6C zql4jf614hE59B/mQ1IOHaNGUkxBeg4AbQIEQsEKnvzQEv8NIwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBkHxR1a2lFO/ODSZIe35rxKWYKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjMwM2Q1NjYtYzIxZi0z MjQ0LThkNGMtNmQ4ZDMxNGM3OWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQF1EAwQC QnbgAwQCaP+0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACgztBwmxSE+GaALsFL9J757jMQve7lZDaa6oaS6 Y8eDfXa08YmUSMlkYHAyKCkODtkEBlryk6Pq4zlqzKaR81OrQcwijX7u9UuKY5QZ NGzdbh0a13SGKqbPwMmQTyQpWKSdGwxQwmsVC7BR5C7kJ8EzR46A9pimwGj/ChZq jKymReuyq3oSG7Q2O/VdGemmSe3cCmMcwQICwDzm9ghmiI2voWlE5Ufh2Z2xRl2W Z+LEyEnkuZh0Dp03X6tpgUyVazoxnoFHEJhK2qOQcUMEOu2Z+47IdUzRiFj636EI YkFDlvOdg50IsMHgfE9NLOpjQyM2KwxpmzdZ2zNrr40GKh0= -----END CERTIFICATE-----Generated at Mon Dec 22 13:57:49 2025 by rpki-client