This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa File: dafff672-519a-347d-980e-8ae7d32a641e.roa (raw, json) Hash identifier: +hnToAhtvIoVP4cS7+8QTHZE8mbku1a9ds4pYGchmCs= Subject key identifier: 62:79:B5:EB:04:CF:27:2E:04:F6:A2:6A:41:FF:A7:A8:EA:18:8D:DF Certificate issuer: /CN=f962bda9-74d1-450f-9fe9-e8b75952543b Certificate serial: 010D0C9F4328584C339FD2A16C71548419EFB380 Authority key identifier: 36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa Signing time: Tue 16 Dec 2025 03:02:53 +0000 ROA not before: Tue 16 Dec 2025 03:02:53 +0000 ROA not after: Mon 16 Mar 2026 02:02:53 +0000 asID: 174 IP address blocks: 199.89.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:9f:d2:a1:6c:71:54:84:19:ef:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f962bda9-74d1-450f-9fe9-e8b75952543b Validity Not Before: Dec 16 03:02:53 2025 GMT Not After : Mar 16 02:02:53 2026 GMT Subject: CN=cb5d1976-8dcc-480b-b6e9-12debc3c30a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:4f:31:e8:5c:02:38:5b:f7:42:bb:0d:50: 50:31:e5:6b:2b:67:92:2c:fb:51:bd:b3:7d:9d:ae: 88:0d:a2:3b:5a:7a:76:61:e6:8c:24:12:49:ae:b1: da:c1:2c:b8:20:48:e3:cc:ff:f3:17:0e:81:89:d8: 7c:e8:c4:9d:50:f2:74:48:70:64:46:65:8d:6d:7b: c5:55:cc:43:f7:ac:ae:26:a1:f1:17:d7:94:e5:88: ba:63:9a:58:44:c4:28:46:aa:ad:ea:61:ed:e9:68: c7:18:d3:61:7b:66:7f:72:cb:ea:37:4e:83:1c:cd: 1c:43:af:92:a1:58:ab:ec:cb:6b:b0:09:ff:8c:04: 59:12:73:26:29:7b:8c:22:13:cd:18:a5:37:18:5b: b6:32:37:97:5d:f5:5b:45:ec:23:8a:08:7b:cf:6e: 1f:bd:58:d0:cb:6e:77:50:b5:c3:18:40:2b:03:35: 76:ea:79:80:ed:73:51:14:32:b7:a1:cb:cc:9b:f4: 95:05:b2:ae:25:4c:29:bf:0a:d5:19:19:69:44:7e: 39:c6:15:da:bd:9b:c9:26:c7:27:9e:fe:fd:0d:61: 3c:6e:b3:22:38:eb:22:4f:48:b9:c9:e6:8b:de:b7: 96:ac:53:70:85:fe:a2:1e:0f:e4:b0:6f:9c:4c:3b: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:79:B5:EB:04:CF:27:2E:04:F6:A2:6A:41:FF:A7:A8:EA:18:8D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/dafff672-519a-347d-980e-8ae7d32a641e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b/f962bda9-74d1-450f-9fe9-e8b75952543b.crl X509v3 Authority Key Identifier: keyid:36:14:15:B6:3C:F9:48:FC:92:2D:2F:89:E5:04:12:0A:EF:F6:8B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f962bda9-74d1-450f-9fe9-e8b75952543b.cer sbgp-ipAddrBlock: critical IPv4: 199.89.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:be:4a:ba:96:57:79:77:87:66:e7:e4:bc:8b:96:3b:4f:77: 99:30:c9:11:44:f8:ee:53:16:99:a4:0b:9c:0e:cf:fb:80:9d: 55:26:38:32:0d:be:61:86:15:c4:ce:7f:b3:06:60:ed:22:ed: b0:73:c6:e9:cb:a0:c3:98:d4:a0:b0:b8:9a:53:fb:1b:e5:10: 61:69:75:9d:27:37:8d:2c:9f:9e:88:5e:79:2e:82:f7:44:f6: 5d:fa:80:6b:25:25:8a:c7:9c:78:b6:d3:01:47:8d:5f:a5:27: c4:c2:9c:56:c4:8f:ba:f5:13:39:52:f5:2e:b6:5c:79:73:16: 1d:4e:4f:41:29:df:ca:60:49:b0:3d:91:fd:dc:90:9d:7b:3b: 75:ab:cc:51:e4:8b:63:f7:7a:a4:0b:43:82:ee:81:6c:6e:9e: 98:4d:b7:d7:bc:5e:61:a8:8e:ce:8c:4c:b4:11:88:dc:e4:23: 3d:6b:a3:ee:74:5e:f9:8a:48:e4:3d:48:be:8b:0f:0c:99:2e: 11:aa:70:1d:d7:d9:4a:a9:29:ae:90:db:68:3b:90:25:4e:ef: 74:18:4a:45:85:18:0c:6b:78:26:ea:8a:cc:ca:95:ba:77:f8: 1b:06:7c:5b:16:06:b1:cf:ce:87:d8:32:dd:8d:8e:60:c3:47: b7:e3:be:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzn9KhbHFUhBnvs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2MmJkYTktNzRkMS00NTBmLTlmZTktZThiNzU5NTI1 NDNiMB4XDTI1MTIxNjAzMDI1M1oXDTI2MDMxNjAyMDI1M1owLzEtMCsGA1UEAxMk Y2I1ZDE5NzYtOGRjYy00ODBiLWI2ZTktMTJkZWJjM2MzMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV9PMehcAjhb90K7DVBQMeVrK2eSLPtRvbN9 na6IDaI7Wnp2YeaMJBJJrrHawSy4IEjjzP/zFw6Bidh86MSdUPJ0SHBkRmWNbXvF VcxD96yuJqHxF9eU5Yi6Y5pYRMQoRqqt6mHt6WjHGNNhe2Z/csvqN06DHM0cQ6+S oVir7MtrsAn/jARZEnMmKXuMIhPNGKU3GFu2MjeXXfVbRewjigh7z24fvVjQy253 ULXDGEArAzV26nmA7XNRFDK3ocvMm/SVBbKuJUwpvwrVGRlpRH45xhXavZvJJscn nv79DWE8brMiOOsiT0i5yeaL3reWrFNwhf6iHg/ksG+cTDvEUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJ5tesEzycuBPaiakH/p6jqGI3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYy YmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3NTk1MjU0M2IvZGFmZmY2NzItNTE5YS0z NDdkLTk4MGUtOGFlN2QzMmE2NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjk2MmJkYTktNzRkMS00NTBmLTlm ZTktZThiNzU5NTI1NDNiL2Y5NjJiZGE5LTc0ZDEtNDUwZi05ZmU5LWU4Yjc1OTUy NTQzYi5jcmwwHwYDVR0jBBgwFoAUNhQVtjz5SPySLS+J5QQSCu/2i9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mOTYyYmRhOS03NGQxLTQ1MGYtOWZlOS1lOGI3 NTk1MjU0M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1kDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG+SrqWV3l3h2bn5LyLljtPd5kwyRFE+O5TFpmkC5wOz/uAnVUmODIN vmGGFcTOf7MGYO0i7bBzxunLoMOY1KCwuJpT+xvlEGFpdZ0nN40sn56IXnkugvdE 9l36gGslJYrHnHi20wFHjV+lJ8TCnFbEj7r1EzlS9S62XHlzFh1OT0Ep38pgSbA9 kf3ckJ17O3WrzFHki2P3eqQLQ4LugWxunphNt9e8XmGojs6MTLQRiNzkIz1ro+50 XvmKSOQ9SL6LDwyZLhGqcB3X2UqpKa6Q22g7kCVO73QYSkWFGAxreCbqiszKlbp3 +BsGfFsWBrHPzofYMt2NjmDDR7fjvmc= -----END CERTIFICATE-----Generated at Fri Dec 19 23:36:28 2025 by rpki-client