This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa File: a343194d-a3fd-3ad5-9596-72ca12e911b4.roa (raw, json) Hash identifier: sQquglAkERVsPnpvLqFqNNSDNsEdBLrBcAaUTfQOlrM= Subject key identifier: C4:B5:66:4C:51:7E:CB:74:19:54:E7:35:3B:A0:9C:E3:D7:53:E7:82 Certificate issuer: /CN=5deff3d1-d421-448c-9f01-4b862c33f101 Certificate serial: 010D0C9F4328584C1BC6215E0DD3A65794448F3C Authority key identifier: FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa Signing time: Sun 07 Dec 2025 14:00:38 +0000 ROA not before: Sun 07 Dec 2025 14:00:38 +0000 ROA not after: Sat 07 Mar 2026 14:00:38 +0000 asID: 25657 IP address blocks: 204.62.114.0/24 maxlen: 27 204.62.115.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1b:c6:21:5e:0d:d3:a6:57:94:44:8f:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5deff3d1-d421-448c-9f01-4b862c33f101 Validity Not Before: Dec 7 14:00:38 2025 GMT Not After : Mar 7 14:00:38 2026 GMT Subject: CN=89f2099a-0a6b-47c3-9e1f-b17e107094f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:95:e1:a0:17:7d:ef:f1:54:6d:a7:0e:f0: 70:11:2c:f3:30:86:1e:d2:18:6e:54:04:f7:10:75: 03:59:4e:92:1e:08:72:3f:fd:c9:2b:60:a6:39:f9: b5:c9:0e:0a:e3:e6:50:5f:3f:49:83:9f:00:f2:63: a2:54:68:17:c3:d9:9e:37:c4:51:c1:94:d6:a8:ec: 05:02:0e:45:2d:9e:31:43:7b:d6:4f:f9:4e:a4:31: 1f:94:85:1d:67:86:2a:20:2f:fc:1e:80:9d:0e:47: a6:66:dd:8e:2a:e9:89:d5:98:ec:c5:60:f0:65:25: 29:a1:1c:88:72:c4:3f:ee:54:79:62:67:8d:4f:0b: 92:2a:d0:f0:21:77:1e:08:70:af:d2:3b:43:1a:27: 61:d9:aa:72:f9:19:84:ba:83:66:fc:c4:2f:29:5b: b5:65:84:79:d6:63:59:49:a3:59:3f:6c:ec:4c:eb: 9d:f2:75:af:9f:33:51:1d:c3:46:ad:dc:21:3a:1a: 4f:b0:65:25:0b:18:8c:8f:44:97:92:83:0c:88:ad: 79:c7:01:ae:50:41:32:64:2e:dc:08:45:cc:31:ea: cc:d8:37:f2:34:02:43:ba:f1:cf:50:46:0f:f1:d1: 06:20:01:ad:e5:5a:59:31:dc:ba:ce:bf:b8:6b:23: 39:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:66:4C:51:7E:CB:74:19:54:E7:35:3B:A0:9C:E3:D7:53:E7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/a343194d-a3fd-3ad5-9596-72ca12e911b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101/5deff3d1-d421-448c-9f01-4b862c33f101.crl X509v3 Authority Key Identifier: keyid:FC:E0:A2:44:24:B7:BD:CD:93:76:35:B7:ED:E9:FE:B6:81:37:25:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff3d1-d421-448c-9f01-4b862c33f101.cer sbgp-ipAddrBlock: critical IPv4: 204.62.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:57:99:74:d8:07:36:ef:0f:cd:1b:55:b9:b0:c0:8e:a4:1b: b9:3b:87:5c:19:3a:1c:47:d9:ab:b2:86:3f:0c:2b:28:25:57: 41:da:de:5d:e3:0c:5e:93:b0:1b:3f:a7:95:7e:d3:c3:4e:14: 98:37:42:38:ed:77:ff:43:e1:49:75:90:54:e4:99:c0:7e:32: f1:e4:c7:d1:b4:b8:41:43:5f:f8:f3:23:fe:d9:47:67:2c:64: 76:ab:0b:26:47:7e:ec:18:66:13:de:84:a1:f9:b5:5f:3b:78: db:9b:43:9d:99:26:8a:65:56:95:18:e0:16:26:4d:79:e3:a0: 29:09:74:cf:0c:34:58:31:b3:da:86:73:4d:ad:58:5f:55:f9: 09:8f:fe:69:6a:69:b0:49:9f:84:59:0e:97:6a:e2:75:d1:0d: 27:7b:ff:19:bd:cb:92:54:7a:2b:f8:f8:de:bc:66:a9:27:a8: 9a:c5:07:2f:57:29:42:26:9c:32:15:bf:71:c4:3a:fb:43:89: 2c:11:40:54:01:43:6e:d7:ae:e9:92:e1:7e:7d:2a:13:e6:13: 32:6a:12:16:c1:d1:eb:a4:d2:c9:c6:58:b1:27:7e:d8:bf:9a: 73:5f:67:d9:69:a3:d9:e9:eb:5e:d7:98:12:9e:c6:68:14:c1: 25:30:37:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwbxiFeDdOmV5REjzwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRlZmYzZDEtZDQyMS00NDhjLTlmMDEtNGI4NjJjMzNm MTAxMB4XDTI1MTIwNzE0MDAzOFoXDTI2MDMwNzE0MDAzOFowLzEtMCsGA1UEAxMk ODlmMjA5OWEtMGE2Yi00N2MzLTllMWYtYjE3ZTEwNzA5NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpyV4aAXfe/xVG2nDvBwESzzMIYe0hhuVAT3 EHUDWU6SHghyP/3JK2CmOfm1yQ4K4+ZQXz9Jg58A8mOiVGgXw9meN8RRwZTWqOwF Ag5FLZ4xQ3vWT/lOpDEflIUdZ4YqIC/8HoCdDkemZt2OKumJ1ZjsxWDwZSUpoRyI csQ/7lR5YmeNTwuSKtDwIXceCHCv0jtDGidh2apy+RmEuoNm/MQvKVu1ZYR51mNZ SaNZP2zsTOud8nWvnzNRHcNGrdwhOhpPsGUlCxiMj0SXkoMMiK15xwGuUEEyZC7c CEXMMerM2DfyNAJDuvHPUEYP8dEGIAGt5VpZMdy6zr+4ayM5bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS1ZkxRfst0GVTnNTugnOPXU+eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGVm ZjNkMS1kNDIxLTQ0OGMtOWYwMS00Yjg2MmMzM2YxMDEvYTM0MzE5NGQtYTNmZC0z YWQ1LTk1OTYtNzJjYTEyZTkxMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWRlZmYzZDEtZDQyMS00NDhjLTlm MDEtNGI4NjJjMzNmMTAxLzVkZWZmM2QxLWQ0MjEtNDQ4Yy05ZjAxLTRiODYyYzMz ZjEwMS5jcmwwHwYDVR0jBBgwFoAU/OCiRCS3vc2TdjW37en+toE3Jc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGVmZjNkMS1kNDIxLTQ0OGMtOWYwMS00Yjg2 MmMzM2YxMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD5yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFXmXTYBzbvD80bVbmwwI6kG7k7h1wZOhxH2auyhj8MKyglV0Ha3l3j DF6TsBs/p5V+08NOFJg3Qjjtd/9D4Ul1kFTkmcB+MvHkx9G0uEFDX/jzI/7ZR2cs ZHarCyZHfuwYZhPehKH5tV87eNubQ52ZJoplVpUY4BYmTXnjoCkJdM8MNFgxs9qG c02tWF9V+QmP/mlqabBJn4RZDpdq4nXRDSd7/xm9y5JUeiv4+N68ZqknqJrFBy9X KUImnDIVv3HEOvtDiSwRQFQBQ27XrumS4X59KhPmEzJqEhbB0euk0snGWLEnfti/ mnNfZ9lpo9np617XmBKexmgUwSUwN+U= -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:39 2025 by rpki-client