This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa File: c0956932-10e1-36f9-ba96-67345e1ea32e.roa (raw, json) Hash identifier: jWeTcR4CQ3fFPlylwnqwGlORTc1zthPMR487Yjj7jC4= Subject key identifier: 70:20:FA:1F:53:13:E1:DB:1F:6F:6C:33:75:C0:3E:45:63:04:C3:76 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584C3EABA423295DD00B469666A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa Signing time: Sat 20 Dec 2025 02:00:31 +0000 ROA not before: Sat 20 Dec 2025 02:00:31 +0000 ROA not after: Fri 20 Mar 2026 01:00:31 +0000 asID: 852 IP address blocks: 204.191.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:ab:a4:23:29:5d:d0:0b:46:96:66:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Dec 20 02:00:31 2025 GMT Not After : Mar 20 01:00:31 2026 GMT Subject: CN=f5c7a2cb-29c2-40c7-98b7-9f584e28801f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:7b:ca:95:d7:f1:27:26:57:a2:eb:2e:08: 8b:86:79:27:fe:e9:1b:1e:41:15:3e:21:08:21:78: d4:4c:ea:15:cc:c8:75:80:1d:b2:82:f4:64:00:60: b8:5d:a6:4d:65:b6:c5:8b:ba:ae:ab:ef:2e:d0:55: 31:bb:a6:8b:7c:15:d7:71:c5:c6:de:a3:fa:1c:cd: 9f:86:a2:6f:c9:b0:29:3e:70:3f:68:30:31:7d:d7: c4:dc:21:d5:42:40:95:28:9f:32:c1:8a:44:48:0b: 85:58:63:75:96:40:ca:ca:dc:90:8a:d8:53:9a:5f: 01:9a:6d:f1:83:55:66:ad:51:92:54:9f:41:7e:b9: f2:0a:64:e9:fe:f1:0d:b6:dc:4a:75:f4:7b:10:fe: c0:b8:a5:c3:cc:e1:3a:81:cc:ca:09:1e:d5:ed:31: 77:20:ee:c6:ab:fd:71:d8:bc:8b:f8:94:5f:12:31: ea:40:08:7a:1f:24:c9:57:a5:42:d3:39:8b:63:ff: 21:d8:75:51:22:24:85:f2:c9:2f:2d:04:90:a5:ce: 83:04:98:78:0d:81:f7:95:c6:2c:be:89:6d:4c:1e: ec:93:81:85:3b:08:73:cb:ff:a5:f2:79:84:45:f1: 21:da:c2:d3:e1:5d:e2:da:e7:3e:26:3f:05:93:8f: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:FA:1F:53:13:E1:DB:1F:6F:6C:33:75:C0:3E:45:63:04:C3:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c0956932-10e1-36f9-ba96-67345e1ea32e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 204.191.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:6a:77:a5:d3:a4:38:0e:4b:8c:1f:e0:66:66:b5:54:b9:35: 23:2a:58:d4:cb:43:da:19:b2:21:32:23:85:8d:01:40:0b:d1: 8b:22:2a:88:10:cc:14:e9:f4:8f:83:76:e7:d9:c6:29:08:36: 90:1a:87:93:ca:2e:d6:5e:f9:89:bc:59:14:f6:0b:cd:32:d2: b1:a0:dd:5a:1c:5f:c2:c3:72:2e:7f:cb:36:24:d3:cf:39:ef: ff:fc:0c:9b:93:cb:57:59:52:32:75:01:3c:58:73:fe:ed:84: 54:08:d6:71:a4:ac:99:99:cb:c5:24:06:b4:77:6f:76:00:9c: f2:c3:45:cc:2a:0c:c5:d0:88:f8:30:b0:14:72:d3:49:ec:f2: 34:d2:56:02:42:5e:ca:22:cc:2b:c5:bb:d7:94:3b:d1:4d:7b: f1:78:00:7d:ff:57:53:a0:59:b4:a6:32:4c:22:b0:6d:ee:52: 64:17:23:32:9a:97:8c:c8:52:cd:3d:1d:91:07:4f:00:8a:e4: d6:0c:be:8d:e8:49:c5:2e:58:c7:22:a5:65:1c:d7:59:5b:ed: e7:24:19:56:52:aa:ec:a6:c0:2d:3f:bd:3f:3d:d4:44:e9:98: 1c:c8:3b:c0:de:5d:a9:8f:7c:51:9d:d5:31:3f:d3:81:ef:5e: 20:ae:8b:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw+q6QjKV3QC0aWZqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MTIyMDAyMDAzMVoXDTI2MDMyMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjVjN2EyY2ItMjljMi00MGM3LTk4YjctOWY1ODRlMjg4MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuZ7ypXX8ScmV6LrLgiLhnkn/ukbHkEVPiEI IXjUTOoVzMh1gB2ygvRkAGC4XaZNZbbFi7quq+8u0FUxu6aLfBXXccXG3qP6HM2f hqJvybApPnA/aDAxfdfE3CHVQkCVKJ8ywYpESAuFWGN1lkDKytyQithTml8Bmm3x g1VmrVGSVJ9BfrnyCmTp/vENttxKdfR7EP7AuKXDzOE6gczKCR7V7TF3IO7Gq/1x 2LyL+JRfEjHqQAh6HyTJV6VC0zmLY/8h2HVRIiSF8skvLQSQpc6DBJh4DYH3lcYs voltTB7sk4GFOwhzy/+l8nmERfEh2sLT4V3i2uc+Jj8Fk48uzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAg+h9TE+HbH29sM3XAPkVjBMN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzA5NTY5MzItMTBlMS0z NmY5LWJhOTYtNjczNDVlMWVhMzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzL8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhqd6XTpDgOS4wf4GZmtVS5NSMqWNTLQ9oZsiEyI4WNAUAL0YsiKogQ zBTp9I+DdufZxikINpAah5PKLtZe+Ym8WRT2C80y0rGg3VocX8LDci5/yzYk0885 7//8DJuTy1dZUjJ1ATxYc/7thFQI1nGkrJmZy8UkBrR3b3YAnPLDRcwqDMXQiPgw sBRy00ns8jTSVgJCXsoizCvFu9eUO9FNe/F4AH3/V1OgWbSmMkwisG3uUmQXIzKa l4zIUs09HZEHTwCK5NYMvo3oScUuWMcipWUc11lb7eckGVZSquymwC0/vT891ETp mBzIO8DeXamPfFGd1TE/04HvXiCui7A= -----END CERTIFICATE-----Generated at Sat Dec 20 19:06:00 2025 by rpki-client