This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa File: ff94971f-87dc-357c-99a9-98110a2d1389.roa (raw, json) Hash identifier: AVNmz2xtEPIqWFwKeaZx3fTKYkD7weDoCeC68Uio8uw= Subject key identifier: BE:3C:EB:5A:3D:52:A1:1B:0D:95:29:C1:81:F4:BC:9B:9F:82:C5:40 Certificate issuer: /CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Certificate serial: 010D0C9F4328584C215B901F423F7D86162EC080 Authority key identifier: 64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 53548 IP address blocks: 170.39.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:90:1f:42:3f:7d:86:16:2e:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d71aad6-87bb-4b95-b81e-5f6d95d05f03 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=dfe69911-2019-4df2-b3e6-0130a6dc8d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:66:87:b8:28:1f:fb:5e:db:47:05:ea:4f:01: 3b:d2:dd:2c:99:5a:6a:c0:e1:e4:e1:88:99:0e:a1: fd:3c:7a:3a:51:b1:e4:3e:52:44:83:88:05:3f:6c: a6:27:c1:f9:1e:3b:77:26:70:09:61:79:34:1a:be: 38:5e:72:ba:81:f0:9d:3d:02:c2:81:68:da:01:aa: 40:7c:03:98:59:e3:00:88:70:30:25:25:f3:60:f9: dd:b3:cc:53:e4:d6:20:82:3d:84:44:13:61:74:c8: ba:40:42:ea:2b:13:cc:b0:5f:58:3e:54:0a:ba:6a: e5:79:f7:24:8c:97:ab:c6:92:3a:ea:c0:7c:11:a0: 2e:22:2b:2f:02:54:20:e7:b5:07:2e:50:b8:43:34: ce:92:bd:0b:71:94:4c:13:75:df:b9:f5:c8:47:7e: dc:c3:b0:49:4c:67:85:4b:14:55:75:ea:93:9c:97: cb:83:fa:0f:5d:e7:17:a8:7a:f6:d6:64:38:6d:20: 0f:18:e5:2f:07:43:76:04:bf:d9:a8:2d:79:8f:f3: fc:0b:c5:d7:c6:89:e1:14:59:6a:03:1f:ee:60:2b: d1:39:1d:0d:d6:04:c3:bd:49:10:86:dd:7b:fc:b1: 99:61:6b:1b:0e:04:cf:ed:5d:94:af:c8:63:eb:cf: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:EB:5A:3D:52:A1:1B:0D:95:29:C1:81:F4:BC:9B:9F:82:C5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/ff94971f-87dc-357c-99a9-98110a2d1389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.crl X509v3 Authority Key Identifier: keyid:64:EB:9A:E0:63:A7:1F:14:5A:3B:C2:09:12:04:E7:85:81:F6:88:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d71aad6-87bb-4b95-b81e-5f6d95d05f03.cer sbgp-ipAddrBlock: critical IPv4: 170.39.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ea:53:fc:9a:bf:a0:1c:f4:2a:ce:87:0e:13:24:5d:e1:d0:98: 89:af:d7:a5:45:df:25:b9:e1:d0:96:69:c2:73:7d:41:88:ba: 5a:92:22:db:88:6e:82:31:8f:08:b7:f2:b8:be:74:e0:1b:63: f2:77:4c:f0:a3:e9:97:8f:9b:ae:4e:4d:58:b7:f1:bc:8b:7c: b2:59:5a:e6:06:3d:12:37:00:7d:31:0c:7b:ee:42:a4:66:b3: 30:64:2f:4d:01:8c:7c:d0:dd:49:08:ac:08:38:f0:de:9d:47: c9:e3:2a:c0:5b:01:6e:73:b3:f8:fa:48:0d:9a:e1:1a:e6:6a: 92:fa:ba:49:21:85:ae:4f:5c:d3:4e:79:b7:6d:16:7d:70:6b: 0c:e5:20:1e:a4:79:dc:46:6d:58:0d:67:fb:95:d7:46:f8:23: d7:f7:26:91:e9:5f:3b:e1:ea:58:22:10:6c:80:da:fb:48:a7: 3f:6f:3e:b4:cc:8c:6a:03:f4:5c:02:1a:3a:cf:94:28:f0:d9: 1c:10:3d:ab:d6:b5:6a:f1:97:cc:ba:06:9c:c7:af:2e:a2:81: a5:ec:74:fd:81:fb:6e:74:f0:49:cb:2c:a1:51:92:65:9b:3e: b4:b3:e2:1a:2c:63:3e:75:0f:89:74:b1:47:66:5d:7d:9c:4c: d5:79:52:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW5AfQj99hhYuwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3MWFhZDYtODdiYi00Yjk1LWI4MWUtNWY2ZDk1ZDA1 ZjAzMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk ZGZlNjk5MTEtMjAxOS00ZGYyLWIzZTYtMDEzMGE2ZGM4ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2aHuCgf+17bRwXqTwE70t0smVpqwOHk4YiZ DqH9PHo6UbHkPlJEg4gFP2ymJ8H5Hjt3JnAJYXk0Gr44XnK6gfCdPQLCgWjaAapA fAOYWeMAiHAwJSXzYPnds8xT5NYggj2ERBNhdMi6QELqKxPMsF9YPlQKumrlefck jJerxpI66sB8EaAuIisvAlQg57UHLlC4QzTOkr0LcZRME3XfufXIR37cw7BJTGeF SxRVdeqTnJfLg/oPXecXqHr21mQ4bSAPGOUvB0N2BL/ZqC15j/P8C8XXxonhFFlq Ax/uYCvROR0N1gTDvUkQht17/LGZYWsbDgTP7V2Ur8hj688DnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4861o9UqEbDZUpwYH0vJufgsVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcx YWFkNi04N2JiLTRiOTUtYjgxZS01ZjZkOTVkMDVmMDMvZmY5NDk3MWYtODdkYy0z NTdjLTk5YTktOTgxMTBhMmQxMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWQ3MWFhZDYtODdiYi00Yjk1LWI4 MWUtNWY2ZDk1ZDA1ZjAzLzFkNzFhYWQ2LTg3YmItNGI5NS1iODFlLTVmNmQ5NWQw NWYwMy5jcmwwHwYDVR0jBBgwFoAUZOua4GOnHxRaO8IJEgTnhYH2iG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZDcxYWFkNi04N2JiLTRiOTUtYjgxZS01ZjZk OTVkMDVmMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqifwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOpT/Jq/oBz0Ks6HDhMkXeHQmImv16VF3yW54dCWacJzfUGIulqSItuI boIxjwi38ri+dOAbY/J3TPCj6ZePm65OTVi38byLfLJZWuYGPRI3AH0xDHvuQqRm szBkL00BjHzQ3UkIrAg48N6dR8njKsBbAW5zs/j6SA2a4RrmapL6ukkhha5PXNNO ebdtFn1wawzlIB6kedxGbVgNZ/uV10b4I9f3JpHpXzvh6lgiEGyA2vtIpz9vPrTM jGoD9FwCGjrPlCjw2RwQPavWtWrxl8y6BpzHry6igaXsdP2B+2508EnLLKFRkmWb PrSz4hosYz51D4l0sUdmXX2cTNV5Ug8= -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:23 2025 by rpki-client