This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa File: a0241a87-ee63-3ca4-8762-01bd022707da.roa (raw, json) Hash identifier: wVSAol5oImBqDvJ75JpCw5+/fCIvPCnLTqorOUHe54o= Subject key identifier: 21:12:FF:CD:C2:CB:86:FD:D3:3F:6F:15:CB:BD:9E:AF:81:1D:7F:06 Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Certificate serial: 010D0C9F4328584C3388A3F0523D61A676B7C880 Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa Signing time: Sun 30 Nov 2025 14:00:39 +0000 ROA not before: Sun 30 Nov 2025 14:00:39 +0000 ROA not after: Sat 28 Feb 2026 14:00:39 +0000 asID: 8075 IP address blocks: 208.90.236.0/24 maxlen: 24 208.90.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:88:a3:f0:52:3d:61:a6:76:b7:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d Validity Not Before: Nov 30 14:00:39 2025 GMT Not After : Feb 28 14:00:39 2026 GMT Subject: CN=6f603d19-5a12-4586-8282-caf2f5e567c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:54:f2:5c:b8:cc:31:db:c8:5f:ea:b7:9c:ff: 59:5d:ef:54:b8:1b:5b:87:69:10:70:b4:fe:06:8b: d0:57:1f:0e:45:2b:54:66:70:fa:24:fd:eb:41:a7: 76:5f:c6:43:63:0e:14:3f:e9:b8:d7:76:88:26:b9: 51:db:a9:a2:fe:51:6a:0b:2f:a3:cb:63:b8:55:82: 84:99:8c:7a:4c:04:0f:0f:d7:21:45:13:c5:bf:43: bb:17:59:5e:f0:b1:e8:c0:cc:5b:02:55:f0:53:0d: 28:9e:15:21:55:cb:ed:6a:1a:0e:2d:43:32:8e:4c: af:4c:32:70:12:e4:fc:eb:02:ec:0b:bb:8a:56:1d: af:ab:ab:aa:4c:17:55:87:8f:9e:b2:08:c5:e2:31: 18:17:65:c3:53:ae:e3:3e:84:ed:d8:bb:1c:a5:65: d8:4c:c5:3a:7b:05:f7:42:19:c9:ee:ea:8d:d5:d5: aa:87:32:04:df:15:f5:cf:08:13:00:92:87:e9:05: 09:4a:c1:ba:43:8f:be:58:8c:a0:99:cc:1c:1c:1a: e4:d1:84:64:af:b0:3e:e4:f9:bd:fe:af:f7:16:f1: 36:80:1b:be:68:70:56:df:49:82:b2:be:82:12:bc: ca:39:90:a7:16:37:98:11:52:a0:4e:52:90:13:03: 1b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:12:FF:CD:C2:CB:86:FD:D3:3F:6F:15:CB:BD:9E:AF:81:1D:7F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/a0241a87-ee63-3ca4-8762-01bd022707da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl X509v3 Authority Key Identifier: keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer sbgp-ipAddrBlock: critical IPv4: 208.90.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3c:88:a3:e5:0a:e4:b3:24:e7:32:57:b7:4d:5c:a2:58:df: ca:ad:b3:75:fa:34:28:c7:31:5e:7d:f4:a7:cf:7d:26:c6:f6: d7:81:fd:4e:87:8d:0f:57:a5:dd:71:b2:56:0c:ae:58:1a:1b: ca:93:4b:db:52:9e:c1:08:61:73:57:d9:23:d6:24:6c:ad:55: 56:80:63:45:8c:94:b2:43:25:ba:22:0a:ff:75:b1:32:ae:49: 92:7a:61:ca:76:8e:e9:a9:1e:34:b6:32:d1:2e:ef:20:15:59: bc:e7:ea:7b:c3:5f:51:56:4b:cb:12:ca:80:fe:44:85:80:3b: 15:ba:b1:1a:5f:f4:35:46:54:8f:5c:89:73:58:b3:c1:55:99: 6b:1d:22:f3:b1:6c:24:5d:86:98:bb:aa:2a:25:fd:b7:3c:b8: ed:5e:e9:db:21:bc:5b:6c:aa:50:b0:91:e5:ab:cd:9e:06:04: ed:3e:5b:07:54:d8:0a:a5:4c:40:f3:0e:29:de:5e:db:de:f8: 0f:5f:1e:74:1c:5e:ae:8e:0a:89:aa:d7:cd:1b:67:7c:93:a3: 63:3e:07:40:29:61:58:29:01:1b:9b:92:23:1f:b8:95:45:52: 3a:41:6d:3c:8f:e5:0f:f8:0d:f1:73:fd:da:d6:f4:6f:c9:2c: b2:8e:be:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwziKPwUj1hpna3yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwOWUxOTEtMWNiNy00NjUwLTk1ZDYtNGUyNGMwYWVj NjlkMB4XDTI1MTEzMDE0MDAzOVoXDTI2MDIyODE0MDAzOVowLzEtMCsGA1UEAxMk NmY2MDNkMTktNWExMi00NTg2LTgyODItY2FmMmY1ZTU2N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFTyXLjMMdvIX+q3nP9ZXe9UuBtbh2kQcLT+ BovQVx8ORStUZnD6JP3rQad2X8ZDYw4UP+m413aIJrlR26mi/lFqCy+jy2O4VYKE mYx6TAQPD9chRRPFv0O7F1le8LHowMxbAlXwUw0onhUhVcvtahoOLUMyjkyvTDJw EuT86wLsC7uKVh2vq6uqTBdVh4+esgjF4jEYF2XDU67jPoTt2LscpWXYTMU6ewX3 QhnJ7uqN1dWqhzIE3xX1zwgTAJKH6QUJSsG6Q4++WIygmcwcHBrk0YRkr7A+5Pm9 /q/3FvE2gBu+aHBW30mCsr6CErzKOZCnFjeYEVKgTlKQEwMbkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCES/83Cy4b90z9vFcu9nq+BHX8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5 ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0YzBhZWM2OWQvYTAyNDFhODctZWU2My0z Y2E0LTg3NjItMDFiZDAyMjcwN2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2YwOWUxOTEtMWNiNy00NjUwLTk1 ZDYtNGUyNGMwYWVjNjlkL2NmMDllMTkxLTFjYjctNDY1MC05NWQ2LTRlMjRjMGFl YzY5ZC5jcmwwHwYDVR0jBBgwFoAUxw2n13KjMMiPALmYFa7pcm0DGqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZjA5ZTE5MS0xY2I3LTQ2NTAtOTVkNi00ZTI0 YzBhZWM2OWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg8iKPlCuSzJOcyV7dNXKJY38qts3X6NCjHMV599KfPfSbG9teB/U6H jQ9Xpd1xslYMrlgaG8qTS9tSnsEIYXNX2SPWJGytVVaAY0WMlLJDJboiCv91sTKu SZJ6Ycp2jumpHjS2MtEu7yAVWbzn6nvDX1FWS8sSyoD+RIWAOxW6sRpf9DVGVI9c iXNYs8FVmWsdIvOxbCRdhpi7qiol/bc8uO1e6dshvFtsqlCwkeWrzZ4GBO0+WwdU 2AqlTEDzDineXtve+A9fHnQcXq6OComq180bZ3yTo2M+B0ApYVgpARubkiMfuJVF UjpBbTyP5Q/4DfFz/drW9G/JLLKOvmA= -----END CERTIFICATE-----Generated at Sat Dec 20 12:17:43 2025 by rpki-client