This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa File: 3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa (raw, json) Hash identifier: NmCpaVW669rOWP10Kq9uzM4q3iBnsSs/t/ftD9pUOxE= Subject key identifier: FA:8C:E8:D4:76:C1:7B:4F:82:15:28:34:34:26:E8:39:53:B0:E3:88 Certificate issuer: /CN=09c51633-340e-4eac-820c-a36b33746085 Certificate serial: 010D0C9F4328584C28563A9B9BD972799431F440 Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 13928 IP address blocks: 199.21.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:3a:9b:9b:d9:72:79:94:31:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c51633-340e-4eac-820c-a36b33746085 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=630459e2-c6ed-49fa-b7bd-3038b86a5f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:b2:41:81:70:2c:6e:ae:8e:c6:c7:cc:44: e6:5c:a6:30:10:f5:51:fa:af:f7:c8:4e:8e:a9:ad: 5a:46:da:5f:70:56:50:6e:61:65:0f:1a:c4:50:ee: b5:01:4e:1c:29:ef:d6:44:d8:12:13:f1:c1:10:54: 57:ba:e3:d9:b1:b1:26:83:93:15:b6:c5:7f:ca:c3: 43:65:53:6c:9a:48:31:de:1e:70:f2:d3:19:82:7d: 0d:3f:22:1d:15:8b:3a:d5:04:c3:65:b7:7e:18:54: d3:e2:9f:b9:f7:c1:c6:47:8b:b4:1f:15:78:3d:7c: 42:ff:81:41:0e:f5:3a:b8:30:d5:1e:d3:f4:43:a3: 44:91:2d:5c:d3:9d:b9:1b:56:f1:50:7d:33:f7:08: 2c:78:fe:81:aa:68:d1:46:9d:a3:f4:c9:d4:80:23: 14:f5:3e:de:be:0a:3c:01:8a:e8:f0:ce:3b:e5:89: 7b:c3:3a:a0:1a:01:66:83:a1:ea:4b:d8:32:52:d8: 6b:a9:21:f2:fd:f1:9b:82:1b:3b:4a:50:2e:7d:ac: a2:7c:cb:20:94:cc:6a:f3:6d:7e:e4:f1:a9:bf:00: 16:31:ca:a8:87:1d:3f:d7:ea:18:69:bc:7d:0f:85: 1f:db:88:97:58:bd:00:51:7e:38:f3:3c:9e:72:e7: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:E8:D4:76:C1:7B:4F:82:15:28:34:34:26:E8:39:53:B0:E3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl X509v3 Authority Key Identifier: keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer sbgp-ipAddrBlock: critical IPv4: 199.21.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0b:ad:41:e9:c3:bd:3e:35:af:81:3e:9d:1b:56:30:ab:5c: ea:11:7e:a4:50:ca:39:de:1b:cb:cd:9c:74:3d:67:a8:ea:92: 12:2d:db:76:9e:b5:85:a3:b0:91:cb:0a:a0:08:31:82:29:5b: 26:81:65:27:2f:5f:de:bb:c7:99:d3:63:64:a3:a1:e0:e2:8a: 88:c2:fd:a4:e0:90:9b:b5:14:5b:85:d5:e0:c3:48:43:cb:58: 2f:1f:c0:34:b6:bc:bc:58:d5:3b:cc:72:ab:d5:bc:75:76:dd: 5f:07:37:70:1a:e1:c6:51:37:3d:52:8b:1e:47:5d:21:b6:a5: 1d:e0:55:87:05:a9:a1:38:a3:7f:84:d4:f7:bf:0a:8f:d1:9c: aa:bd:f0:3b:43:50:c4:4b:95:01:3f:0f:b1:84:56:01:70:7a: f5:0e:e3:41:de:94:23:77:41:68:b8:b6:04:f0:3e:2f:ed:2e: 47:c3:2e:54:fc:84:45:42:70:92:a6:45:08:9a:00:5e:da:56: 75:43:41:12:01:07:20:71:d3:25:42:fb:d5:3c:b7:81:88:4e: c4:3b:f4:ea:d5:62:08:0a:64:12:94:41:3b:b6:0a:21:88:f3: 1f:a8:ee:3e:03:6b:1c:19:b5:20:3e:82:98:50:c6:be:8d:85: ee:2a:56:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVjqbm9lyeZQx9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDljNTE2MzMtMzQwZS00ZWFjLTgyMGMtYTM2YjMzNzQ2 MDg1MB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NjMwNDU5ZTItYzZlZC00OWZhLWI3YmQtMzAzOGI4NmE1ZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX6yQYFwLG6ujsbHzETmXKYwEPVR+q/3yE6O qa1aRtpfcFZQbmFlDxrEUO61AU4cKe/WRNgSE/HBEFRXuuPZsbEmg5MVtsV/ysND ZVNsmkgx3h5w8tMZgn0NPyIdFYs61QTDZbd+GFTT4p+598HGR4u0HxV4PXxC/4FB DvU6uDDVHtP0Q6NEkS1c0525G1bxUH0z9wgseP6BqmjRRp2j9MnUgCMU9T7evgo8 AYro8M475Yl7wzqgGgFmg6HqS9gyUthrqSHy/fGbghs7SlAufayifMsglMxq821+ 5PGpvwAWMcqohx0/1+oYabx9D4Uf24iXWL0AUX448zyecucUKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqM6NR2wXtPghUoNDQm6DlTsOOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1 MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZiMzM3NDYwODUvM2ZmMmQ2ZjktYzY2Yy0z NjIxLTkyZGYtYjhlYjNlZDBhMzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDljNTE2MzMtMzQwZS00ZWFjLTgy MGMtYTM2YjMzNzQ2MDg1LzA5YzUxNjMzLTM0MGUtNGVhYy04MjBjLWEzNmIzMzc0 NjA4NS5jcmwwHwYDVR0jBBgwFoAUWNtEW2RUCGl6OWNosWnxoviKwTQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wOWM1MTYzMy0zNDBlLTRlYWMtODIwYy1hMzZi MzM3NDYwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxxWDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQLrUHpw70+Na+BPp0bVjCrXOoRfqRQyjneG8vNnHQ9Z6jqkhIt23ae tYWjsJHLCqAIMYIpWyaBZScvX967x5nTY2SjoeDiiojC/aTgkJu1FFuF1eDDSEPL WC8fwDS2vLxY1TvMcqvVvHV23V8HN3Aa4cZRNz1Six5HXSG2pR3gVYcFqaE4o3+E 1Pe/Co/RnKq98DtDUMRLlQE/D7GEVgFwevUO40HelCN3QWi4tgTwPi/tLkfDLlT8 hEVCcJKmRQiaAF7aVnVDQRIBByBx0yVC+9U8t4GITsQ79OrVYggKZBKUQTu2CiGI 8x+o7j4DaxwZtSA+gphQxr6Nhe4qVpg= -----END CERTIFICATE-----Generated at Sun Dec 21 03:51:06 2025 by rpki-client