This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa File: 897adddb-a309-3fc0-b793-ccbf5388c1bb.roa (raw, json) Hash identifier: esJRRdeLEgmFzUs9x4UgMjdiwkzSZF9iKacbFzfIRw8= Subject key identifier: 2C:37:B9:BF:26:E8:57:67:43:B2:DD:89:3E:44:01:7B:25:BF:78:4C Certificate issuer: /CN=643914aa-5306-4352-8a01-3ac381827191 Certificate serial: 010D0C9F4328584C22C0D478C226EE8C9A1C61A0 Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 400442 IP address blocks: 23.133.168.0/24 maxlen: 24 205.236.99.0/24 maxlen: 24 2602:fbc7::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:d4:78:c2:26:ee:8c:9a:1c:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643914aa-5306-4352-8a01-3ac381827191 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=1fa563d4-fbd3-4a6c-9040-c7348ad7e382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:57:03:12:13:60:80:05:63:88:fe:29:e2: 5b:3e:b5:2b:e2:68:2d:cf:8d:fa:a4:ec:44:07:f1: 60:20:24:91:5e:f6:be:4c:73:e3:5f:f5:bb:54:d2: 9c:f2:4f:6a:b8:2b:04:44:69:d4:be:81:1f:e1:ef: 59:4f:e3:eb:af:44:c0:ed:44:0f:df:c2:ff:55:fe: ae:8c:b8:55:e4:f8:8a:dd:27:ce:6a:78:8b:1c:ac: 7f:85:58:bf:25:46:02:ee:dc:6d:6c:16:0f:11:66: dc:02:81:46:a0:29:59:01:09:62:d3:0a:8a:c9:53: fd:85:a2:01:aa:24:22:54:8c:11:a4:40:89:54:60: 4c:0a:d7:8c:05:a4:3d:13:f7:af:cb:ee:b4:26:e0: 3b:4b:dd:db:19:3a:1c:e8:dc:79:c6:0a:e7:52:a0: 40:52:40:0e:00:36:a0:85:a7:2f:d2:7e:af:47:2c: 8d:d7:1e:a4:cb:cd:69:9c:b1:4d:80:f5:37:88:08: 54:52:fb:4c:32:1f:8b:ad:3a:f6:4e:ea:1d:ef:2a: dc:a3:29:17:13:f0:1e:80:f8:33:39:ab:88:e6:62: a9:10:11:e8:1e:ee:7e:76:77:fa:7b:29:19:c1:84: de:93:55:07:47:42:6d:95:84:fd:f2:e9:a5:29:2f: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:37:B9:BF:26:E8:57:67:43:B2:DD:89:3E:44:01:7B:25:BF:78:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/897adddb-a309-3fc0-b793-ccbf5388c1bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl X509v3 Authority Key Identifier: keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer sbgp-ipAddrBlock: critical IPv4: 23.133.168.0/24 205.236.99.0/24 IPv6: 2602:fbc7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5d:03:db:fb:40:d7:e3:c9:9c:a3:7a:b3:5c:3a:e8:be:3d: b5:8d:63:a2:c6:f7:98:b1:64:9f:b9:cb:68:49:c7:1b:8d:7d: 24:62:c5:45:04:57:95:6b:fb:38:ef:93:5d:84:16:3a:46:2a: e8:0f:e6:da:83:52:72:a2:fa:70:b6:54:73:f4:eb:73:73:53: 91:e7:92:fc:b8:7b:c0:d3:a7:77:80:ef:f4:83:5a:d3:4f:be: cc:96:51:65:25:b6:e3:02:7a:75:10:f5:f0:64:24:0f:79:61: 1d:9d:15:f1:46:d5:aa:ba:96:d8:f6:73:61:f2:de:07:d3:71: 6a:88:ad:8b:aa:6f:2f:15:13:d6:d8:21:12:e7:92:33:5b:d7: c0:9f:b2:68:65:7e:36:71:c5:84:03:68:54:83:80:03:97:2f: 5f:26:3e:6c:f0:a5:cc:64:34:40:4b:5b:a9:75:86:a7:1e:8c: 5d:90:37:ff:9c:4f:fb:36:cf:a2:08:cb:ee:16:38:0c:d5:06: 61:41:4f:14:3f:01:47:d8:8d:d6:2b:2f:60:6a:ff:28:bf:5f: 85:e9:ff:81:71:5c:05:15:af:77:e6:cc:42:a9:9d:b6:1f:bd: 24:1e:1d:2c:2b:35:ab:86:77:34:be:59:2c:5c:84:47:81:84: b8:42:dd:c7 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEwiwNR4wibujJocYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzOTE0YWEtNTMwNi00MzUyLThhMDEtM2FjMzgxODI3 MTkxMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk MWZhNTYzZDQtZmJkMy00YTZjLTkwNDAtYzczNDhhZDdlMzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4FXAxITYIAFY4j+KeJbPrUr4mgtz436pOxE B/FgICSRXva+THPjX/W7VNKc8k9quCsERGnUvoEf4e9ZT+Prr0TA7UQP38L/Vf6u jLhV5PiK3SfOaniLHKx/hVi/JUYC7txtbBYPEWbcAoFGoClZAQli0wqKyVP9haIB qiQiVIwRpECJVGBMCteMBaQ9E/evy+60JuA7S93bGToc6Nx5xgrnUqBAUkAOADag hacv0n6vRyyN1x6ky81pnLFNgPU3iAhUUvtMMh+LrTr2Tuod7yrcoykXE/AegPgz OauI5mKpEBHoHu5+dnf6eykZwYTek1UHR0JtlYT98umlKS//TQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFCw3ub8m6FdnQ7LdiT5EAXslv3hMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NDM5 MTRhYS01MzA2LTQzNTItOGEwMS0zYWMzODE4MjcxOTEvODk3YWRkZGItYTMwOS0z ZmMwLWI3OTMtY2NiZjUzODhjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjQzOTE0YWEtNTMwNi00MzUyLThh MDEtM2FjMzgxODI3MTkxLzY0MzkxNGFhLTUzMDYtNDM1Mi04YTAxLTNhYzM4MTgy NzE5MS5jcmwwHwYDVR0jBBgwFoAU6ypHSeXO8IXeGteSyakttOVzF3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NDM5MTRhYS01MzA2LTQzNTItOGEwMS0zYWMz ODE4MjcxOTEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4WoAwQA zexjMA4EAgACMAgDBgAmAvvHADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoXQPb+0DX48mco3qzXDrovj21 jWOixveYsWSfuctoSccbjX0kYsVFBFeVa/s475NdhBY6RiroD+bag1JyovpwtlRz 9Otzc1OR55L8uHvA06d3gO/0g1rTT77MllFlJbbjAnp1EPXwZCQPeWEdnRXxRtWq upbY9nNh8t4H03FqiK2Lqm8vFRPW2CES55IzW9fAn7JoZX42ccWEA2hUg4ADly9f Jj5s8KXMZDRAS1updYanHoxdkDf/nE/7Ns+iCMvuFjgM1QZhQU8UPwFH2I3WKy9g av8ov1+F6f+BcVwFFa935sxCqZ22H70kHh0sKzWrhnc0vlksXIRHgYS4Qt3H -----END CERTIFICATE-----Generated at Sun Dec 21 06:46:01 2025 by rpki-client