This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa File: ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa (raw, json) Hash identifier: ZSAi8vQucHwNI6isSyyp91tm5Xeib0p+B/EMaY2iJB0= Subject key identifier: 93:48:62:E7:5A:7D:C8:EA:7A:DD:20:B7:19:40:C5:73:A3:4D:E9:09 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584C37B103EEBB375925DFE1D000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa Signing time: Wed 17 Dec 2025 14:00:39 +0000 ROA not before: Wed 17 Dec 2025 14:00:39 +0000 ROA not after: Tue 17 Mar 2026 13:00:39 +0000 asID: 36629 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:b1:03:ee:bb:37:59:25:df:e1:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Dec 17 14:00:39 2025 GMT Not After : Mar 17 13:00:39 2026 GMT Subject: CN=7dc12ea4-32d4-4db1-b845-80af948e2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1d:e2:49:ff:e2:70:fe:b2:15:8f:fe:78:d2: bc:09:35:3b:24:18:ce:b2:4d:4f:19:4c:10:e4:6c: 7e:ab:82:b0:21:80:ae:ab:1d:0a:bc:81:87:f0:a8: 41:6e:65:05:87:40:fc:ea:bb:c2:7e:6e:f6:e3:f7: de:42:d5:0e:45:a6:24:58:c8:92:9c:41:dc:5a:47: e5:4a:47:4d:67:09:fd:33:63:25:d2:37:e6:05:30: 46:5e:51:21:fc:a2:26:45:6d:a3:6a:7c:17:4f:79: 73:67:78:09:80:54:2a:76:c8:91:6b:ad:1a:57:d0: a8:8a:a9:3f:a4:c9:b7:cc:6e:d5:ca:3a:9c:bd:bb: 32:79:67:a1:0b:e0:87:26:ea:f5:48:7a:81:ec:fd: d1:c4:45:c6:44:26:04:53:29:34:8b:92:9c:66:24: 9f:a0:26:bd:71:b4:ca:c8:f8:62:26:c0:a3:17:1b: 2e:f9:14:a8:49:31:90:be:f0:15:3c:f6:df:76:5c: 67:e9:df:5e:de:99:2d:26:12:0d:22:da:ce:65:4e: f3:b6:53:11:23:38:95:9e:52:54:a4:07:61:c8:6d: bc:3e:1d:00:9a:9e:35:98:a2:2a:51:23:d1:d2:99: 28:a8:1a:0b:53:70:30:62:f3:3f:d4:d2:fd:18:69: a8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:48:62:E7:5A:7D:C8:EA:7A:DD:20:B7:19:40:C5:73:A3:4D:E9:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b0:9b:77:87:7c:c4:fb:fd:6e:2e:50:6d:34:5e:50:f0:e9: b5:94:26:6f:50:dc:57:c3:e7:d2:9e:e1:eb:2e:bc:14:82:48: 4c:41:bf:97:fa:da:d9:49:e8:6c:a9:13:a1:51:c8:95:f5:1e: 3d:d7:a0:d2:b5:c6:de:10:06:95:e6:17:40:bf:79:87:29:92: cd:1b:7c:7c:ee:06:80:d1:2d:57:56:65:c5:53:86:cd:7d:1d: 37:32:5a:74:c9:8a:7e:22:82:4c:a1:92:43:a5:93:87:c3:cc: 7a:44:25:e5:6c:a6:26:98:25:f6:75:13:d8:c4:72:2e:aa:5d: 5c:65:b0:25:88:a1:23:c5:7a:51:4b:b0:fa:7b:41:67:f4:13: 66:06:87:42:90:c6:e0:18:a8:0c:dd:d0:b6:0d:df:3d:b5:28: 23:59:bf:54:19:8f:7e:e2:bd:d1:d8:9a:29:3e:f6:c3:4f:7b: 0b:73:17:93:ed:84:72:d6:5a:e5:ac:2c:94:ba:ad:de:41:cf: 11:bb:f2:d5:6b:d0:77:3c:30:d2:0f:15:85:af:6b:f2:df:e8: 8f:e6:ff:ed:76:32:3b:02:c6:65:28:aa:07:aa:79:d9:c2:3b: c2:35:48:38:b5:f3:c4:d7:61:4e:18:8c:33:c2:96:e1:b1:d3: 33:c2:7c:a5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEw3sQPuuzdZJd/h0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTIxNzE0MDAzOVoXDTI2MDMxNzEzMDAzOVowLzEtMCsGA1UEAxMk N2RjMTJlYTQtMzJkNC00ZGIxLWI4NDUtODBhZjk0OGUyYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx3iSf/icP6yFY/+eNK8CTU7JBjOsk1PGUwQ 5Gx+q4KwIYCuqx0KvIGH8KhBbmUFh0D86rvCfm724/feQtUORaYkWMiSnEHcWkfl SkdNZwn9M2Ml0jfmBTBGXlEh/KImRW2janwXT3lzZ3gJgFQqdsiRa60aV9Coiqk/ pMm3zG7VyjqcvbsyeWehC+CHJur1SHqB7P3RxEXGRCYEUyk0i5KcZiSfoCa9cbTK yPhiJsCjFxsu+RSoSTGQvvAVPPbfdlxn6d9e3pktJhINItrOZU7ztlMRIziVnlJU pAdhyG28Ph0Amp41mKIqUSPR0pkoqBoLU3AwYvM/1NL9GGmofQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJNIYudafcjqet0gtxlAxXOjTekJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZlZjQxMWYtN2Q0OC0z ZDMxLWJiZjctNzRkOWQ4ZTVkZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB1sJt3h3zE+/1uLlBtNF5Q8Om1lCZvUNxXw+fSnuHrLrwUgkhMQb+X +trZSehsqROhUciV9R4916DStcbeEAaV5hdAv3mHKZLNG3x87gaA0S1XVmXFU4bN fR03Mlp0yYp+IoJMoZJDpZOHw8x6RCXlbKYmmCX2dRPYxHIuql1cZbAliKEjxXpR S7D6e0Fn9BNmBodCkMbgGKgM3dC2Dd89tSgjWb9UGY9+4r3R2JopPvbDT3sLcxeT 7YRy1lrlrCyUuq3eQc8Ru/LVa9B3PDDSDxWFr2vy3+iP5v/tdjI7AsZlKKoHqnnZ wjvCNUg4tfPE12FOGIwzwpbhsdMzwnyl -----END CERTIFICATE-----Generated at Sat Dec 20 14:43:26 2025 by rpki-client