This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa File: cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa (raw, json) Hash identifier: cp8DwZJJQAs4YX1ERzpw1k46fkvaYbLDRMFPDeSXdWk= Subject key identifier: 06:33:86:B9:BF:13:FE:8B:A3:3D:C7:A8:00:3B:B5:00:17:57:45:E8 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C3916751E27BDBEAE4DB01040 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 396608 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:75:1e:27:bd:be:ae:4d:b0:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=875ea19f-22e4-465c-8e75-e7686c38b920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b4:4e:37:36:a9:2e:b2:af:69:90:f7:d3:ec: bd:69:67:83:31:b7:72:11:69:88:9a:59:59:cd:1a: bd:35:dc:db:44:51:6c:d4:2a:8b:bf:2d:70:c9:57: 39:d3:af:55:7f:86:66:74:b0:80:e9:af:70:e6:5e: 16:d1:98:fd:9a:bf:a1:48:f8:aa:7b:92:47:7e:af: 6b:68:ef:4a:84:b6:cb:ea:37:c5:e6:55:4f:e6:01: d5:1d:30:07:5f:e0:c8:ca:f9:ea:47:2f:4f:18:4a: 6d:77:41:3a:be:a4:49:68:b3:ba:89:57:5d:e2:f7: 12:cb:f3:91:ed:ea:4a:be:ac:c4:75:d7:08:08:54: 40:14:b1:a7:7e:b0:54:fd:86:7e:12:0e:b9:d4:3f: 14:e9:9f:64:69:ef:99:33:1e:3a:32:04:ae:03:b1: fa:b7:c9:12:6f:fc:58:bc:72:9c:af:4a:b6:07:0c: e3:2c:50:6b:91:c0:1b:ef:54:ba:ec:c0:29:b8:61: de:9f:82:ae:ef:3b:99:a3:cf:a1:82:cd:42:37:ee: e5:62:b0:db:a7:06:c2:f3:53:f6:b2:f1:15:a1:a3: 76:04:30:20:05:92:e8:e3:eb:22:d1:7e:38:64:60: d0:c4:1a:05:a9:03:f4:bc:15:35:a9:45:2a:c2:38: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:33:86:B9:BF:13:FE:8B:A3:3D:C7:A8:00:3B:B5:00:17:57:45:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cc8a904c-5bfc-3faf-bc14-f88952fc7251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:5c:f7:e5:a6:e6:25:21:ba:f2:08:fc:20:d7:af:e8:07:a7: ec:07:db:e3:5d:19:c4:04:41:fa:06:ad:1a:64:f8:b5:0e:a4: 88:91:ab:c4:c1:a2:ad:25:2e:71:38:45:44:47:21:e8:79:7a: c7:eb:b5:c3:1e:84:84:62:d8:9a:07:05:ba:bf:bb:90:b9:57: 43:b3:d4:a7:f8:79:80:ac:39:d1:31:12:ad:87:1e:f7:e4:56: 3b:eb:31:81:e1:ab:0a:2b:8e:a3:2d:5b:c4:63:6e:5f:21:72: cf:a4:0a:d5:40:e5:a2:1e:c4:01:17:7c:69:1e:a0:31:3b:5a: 27:12:a9:17:05:38:ff:54:4f:e9:1e:3f:22:16:b3:c4:4a:8c: 92:b6:14:d4:9e:56:10:be:99:75:d3:62:00:4c:1b:41:0f:f7: 1a:a5:76:be:81:6b:1e:65:23:bf:ab:39:bf:e7:d1:61:eb:d5: 83:59:43:ac:8c:e7:d5:38:5d:e8:c5:f1:21:c9:45:b0:28:f3: 53:68:12:b3:06:84:b7:ba:c5:c0:29:34:20:3d:06:71:ab:13: f4:7f:14:75:60:ed:6f:1a:86:24:84:1a:c3:33:2a:aa:51:70: 7f:e0:55:22:fa:c7:1f:14:ef:e9:79:85:5f:19:28:0f:a8:8f: 1c:e6:19:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FnUeJ72+rk2wEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk ODc1ZWExOWYtMjJlNC00NjVjLThlNzUtZTc2ODZjMzhiOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbRONzapLrKvaZD30+y9aWeDMbdyEWmImllZ zRq9NdzbRFFs1CqLvy1wyVc5069Vf4ZmdLCA6a9w5l4W0Zj9mr+hSPiqe5JHfq9r aO9KhLbL6jfF5lVP5gHVHTAHX+DIyvnqRy9PGEptd0E6vqRJaLO6iVdd4vcSy/OR 7epKvqzEddcICFRAFLGnfrBU/YZ+Eg651D8U6Z9kae+ZMx46MgSuA7H6t8kSb/xY vHKcr0q2BwzjLFBrkcAb71S67MApuGHen4Ku7zuZo8+hgs1CN+7lYrDbpwbC81P2 svEVoaN2BDAgBZLo4+si0X44ZGDQxBoFqQP0vBU1qUUqwjgovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYzhrm/E/6Loz3HqAA7tQAXV0XoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2M4YTkwNGMtNWJmYy0z ZmFmLWJjMTQtZjg4OTUyZmM3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVc9+Wm5iUhuvII/CDXr+gHp+wH2+NdGcQEQfoGrRpk+LUOpIiRq8TB oq0lLnE4RURHIeh5esfrtcMehIRi2JoHBbq/u5C5V0Oz1Kf4eYCsOdExEq2HHvfk VjvrMYHhqworjqMtW8Rjbl8hcs+kCtVA5aIexAEXfGkeoDE7WicSqRcFOP9UT+ke PyIWs8RKjJK2FNSeVhC+mXXTYgBMG0EP9xqldr6Bax5lI7+rOb/n0WHr1YNZQ6yM 59U4XejF8SHJRbAo81NoErMGhLe6xcApNCA9BnGrE/R/FHVg7W8ahiSEGsMzKqpR cH/gVSL6xx8U7+l5hV8ZKA+ojxzmGW0= -----END CERTIFICATE-----Generated at Sat Dec 20 16:35:53 2025 by rpki-client