This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa File: 1e592f07-9e8d-314e-a936-c681a7544c06.roa (raw, json) Hash identifier: CCCmC6HlsMtX2/D2YRGeJLYU/Zq3qa0X1gxW8+9FU4U= Subject key identifier: 30:1A:8F:66:88:D7:E0:D3:B7:9F:FE:49:07:F9:A1:B3:4C:9E:8F:7B Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Certificate serial: 010D0C9F4328584C3EABD8238C8EFB720C00F300 Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 992 IP address blocks: 204.52.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:d8:23:8c:8e:fb:72:0c:00:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=9910c55a-aaf2-4e70-b6f0-a5a6ffbd0056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e6:fd:d3:7a:84:c3:af:f7:b3:c3:ce:79:03: 46:8c:10:22:9f:c1:4c:25:ff:bb:5c:0c:5d:69:14: 61:65:02:f9:63:c8:16:86:f7:82:e9:bc:16:98:a9: 02:22:47:c1:73:87:d0:76:a5:fa:37:38:6e:80:33: db:65:bf:58:00:d5:32:97:d6:fd:37:82:40:19:8a: 6d:52:ae:15:5d:e1:f8:b4:6d:84:bd:23:8f:e5:e8: 5d:f9:60:d7:22:c1:55:69:20:f4:94:e1:b0:a9:88: 08:e9:f8:39:c1:67:4b:2f:6f:2b:26:3b:b6:ed:01: f0:ae:5c:6c:3b:2b:d2:94:ef:0f:c3:8a:95:ae:1d: 83:b8:11:03:ca:ef:6e:d3:a6:f4:c4:8f:eb:32:57: e8:eb:12:34:87:1c:76:35:5b:40:b8:ee:6f:d3:d6: df:88:44:0d:2e:8e:f7:f9:ac:51:f1:d6:79:c0:c5: c1:3c:1b:54:4b:83:df:07:79:0b:a3:11:29:43:ce: 55:4c:16:c2:9d:88:0a:41:62:dd:3c:b9:98:9e:5c: 50:0d:20:2d:19:47:3b:c1:36:28:73:2a:b8:ed:ad: 9a:80:54:a8:41:7a:b6:dd:e6:d3:0e:ec:da:3c:5a: 51:d2:9b:7a:e7:2f:ed:7a:d6:ec:40:e4:a1:9e:49: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:1A:8F:66:88:D7:E0:D3:B7:9F:FE:49:07:F9:A1:B3:4C:9E:8F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/1e592f07-9e8d-314e-a936-c681a7544c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl X509v3 Authority Key Identifier: keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer sbgp-ipAddrBlock: critical IPv4: 204.52.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:64:b4:a0:e6:07:d9:6d:f7:79:4c:fd:06:d1:3d:b2:6d:7a: 89:ac:6c:74:01:35:7d:df:09:85:66:12:28:79:a3:84:8e:6f: 34:30:56:3e:b9:42:5d:2e:29:e1:e9:87:73:b7:26:6b:0f:8a: 88:b9:8e:32:a5:41:7c:22:7c:53:9a:81:10:d7:08:a3:5a:57: 84:70:fc:7a:39:c7:57:06:42:7a:19:ba:ab:f8:62:46:a3:38: 6b:90:2c:41:0b:f2:31:96:b5:f1:9c:86:4c:f9:6e:7c:8f:02: c2:d3:18:68:19:34:70:0f:a4:6c:4e:be:12:28:16:1a:8f:4f: 7c:3d:b1:7b:65:b0:11:c9:61:d5:ba:6b:e1:e5:e5:3a:e0:83: 35:64:ca:30:f4:91:bd:6b:ad:5f:8c:39:39:a9:d0:37:f0:74: bb:5d:e4:50:92:90:10:a1:db:3e:b5:e3:3a:c5:eb:fa:08:5d: 49:1e:17:d5:17:c0:04:65:1e:e0:d6:8b:42:21:c2:08:8c:17: 95:86:12:40:54:53:7c:92:58:8e:70:3f:f6:a9:15:7c:72:d9: 18:c0:f2:7b:68:cc:81:32:06:79:a4:ea:a6:7a:2c:88:4e:0c: 6c:d7:3b:af:45:b9:c1:d9:63:71:1e:43:8c:75:22:09:5c:8b: 04:34:23:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q9gjjI77cgwA8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ5NzQyZTgtOGQwYy00MjA5LWI3NmYtNDAzNTU0YjBl NmI0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk OTkxMGM1NWEtYWFmMi00ZTcwLWI2ZjAtYTVhNmZmYmQwMDU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOb903qEw6/3s8POeQNGjBAin8FMJf+7XAxd aRRhZQL5Y8gWhveC6bwWmKkCIkfBc4fQdqX6NzhugDPbZb9YANUyl9b9N4JAGYpt Uq4VXeH4tG2EvSOP5ehd+WDXIsFVaSD0lOGwqYgI6fg5wWdLL28rJju27QHwrlxs OyvSlO8Pw4qVrh2DuBEDyu9u06b0xI/rMlfo6xI0hxx2NVtAuO5v09bfiEQNLo73 +axR8dZ5wMXBPBtUS4PfB3kLoxEpQ85VTBbCnYgKQWLdPLmYnlxQDSAtGUc7wTYo cyq47a2agFSoQXq23ebTDuzaPFpR0pt65y/tetbsQOShnknxvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAaj2aI1+DTt5/+SQf5obNMno97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3 NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1NTRiMGU2YjQvMWU1OTJmMDctOWU4ZC0z MTRlLWE5MzYtYzY4MWE3NTQ0YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ5NzQyZTgtOGQwYy00MjA5LWI3 NmYtNDAzNTU0YjBlNmI0L2Q0OTc0MmU4LThkMGMtNDIwOS1iNzZmLTQwMzU1NGIw ZTZiNC5jcmwwHwYDVR0jBBgwFoAUyXTCOGJ1ZdT2dzWU5jbMl87yC+wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDk3NDJlOC04ZDBjLTQyMDktYjc2Zi00MDM1 NTRiMGU2YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzDTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJktKDmB9lt93lM/QbRPbJteomsbHQBNX3fCYVmEih5o4SObzQwVj65 Ql0uKeHph3O3JmsPioi5jjKlQXwifFOagRDXCKNaV4Rw/Ho5x1cGQnoZuqv4Ykaj OGuQLEEL8jGWtfGchkz5bnyPAsLTGGgZNHAPpGxOvhIoFhqPT3w9sXtlsBHJYdW6 a+Hl5TrggzVkyjD0kb1rrV+MOTmp0DfwdLtd5FCSkBCh2z614zrF6/oIXUkeF9UX wARlHuDWi0IhwgiMF5WGEkBUU3ySWI5wP/apFXxy2RjA8ntozIEyBnmk6qZ6LIhO DGzXO69FucHZY3EeQ4x1IglciwQ0I60= -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:31 2025 by rpki-client