This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa File: dd3f5672-56e3-308a-a96f-4014a9782301.roa (raw, json) Hash identifier: +J60nvtenaDrVgWim5WxZhIqQdf9nTcE8W4Cq/haiDk= Subject key identifier: F2:45:88:40:09:2F:FD:B6:39:0A:CD:C1:5E:C1:E0:8E:AC:37:0B:1A Certificate issuer: /CN=1f54df1e-3d93-4ac5-b209-e24261193230 Certificate serial: 010D0C9F4328584C28563319D7C343AAE472E800 Authority key identifier: C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa Signing time: Fri 12 Dec 2025 02:00:30 +0000 ROA not before: Fri 12 Dec 2025 02:00:30 +0000 ROA not after: Thu 12 Mar 2026 01:00:30 +0000 asID: 30211 IP address blocks: 192.161.68.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:28:56:33:19:d7:c3:43:aa:e4:72:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f54df1e-3d93-4ac5-b209-e24261193230 Validity Not Before: Dec 12 02:00:30 2025 GMT Not After : Mar 12 01:00:30 2026 GMT Subject: CN=40318561-eac2-43a0-a79c-8db32e98a192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:16:2f:cd:6d:fe:40:11:56:cd:5b:59:0b: fa:ab:a3:c7:a9:e5:e1:67:4b:47:8f:69:59:9a:bf: 5f:0b:86:55:3a:9f:19:2c:ca:53:b8:4e:10:30:9f: 4b:73:68:cb:65:9e:3f:c4:5e:e9:e6:d7:52:7b:94: 7d:93:bb:be:3d:17:55:e7:3e:51:1a:85:2b:a2:30: 82:e2:20:00:97:45:67:ca:f4:8a:44:88:ab:c6:1f: bc:fa:c2:24:9b:e1:24:b4:01:7b:e7:62:f4:dd:4d: 40:54:0b:da:8c:bc:a9:9b:11:c1:bc:44:d4:4c:24: 7f:c6:5d:29:2d:6e:4e:04:56:09:61:74:1b:7c:36: 85:33:04:be:c4:21:e7:8c:02:8f:37:ad:e0:fa:d3: b6:bd:12:44:7d:05:9c:a9:24:ce:aa:ce:ef:cf:ab: fc:8d:1b:13:18:45:10:9d:83:bd:52:a9:74:2f:57: b8:ed:08:27:79:9e:aa:12:37:a6:3c:39:58:c9:b8: c7:1f:c0:33:91:12:35:2b:20:fe:b9:eb:82:eb:6c: 6d:a2:8a:07:fa:84:04:67:de:25:b6:da:c8:8a:66: 9c:d9:95:7f:d5:18:6c:95:fb:fc:a0:a7:9d:31:99: dd:da:f4:a6:b5:5b:7d:10:1a:2a:24:52:23:78:b1: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:45:88:40:09:2F:FD:B6:39:0A:CD:C1:5E:C1:E0:8E:AC:37:0B:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/dd3f5672-56e3-308a-a96f-4014a9782301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230/1f54df1e-3d93-4ac5-b209-e24261193230.crl X509v3 Authority Key Identifier: keyid:C1:18:CE:85:A0:84:C9:29:0D:E8:36:23:F1:B1:62:A2:EA:B8:74:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1f54df1e-3d93-4ac5-b209-e24261193230.cer sbgp-ipAddrBlock: critical IPv4: 192.161.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:12:bc:bd:ce:bd:aa:a9:c1:2f:ff:da:84:1a:42:98:55:c1: cb:9b:42:71:9f:21:c0:aa:15:d6:10:4e:65:60:75:18:f9:b7: f2:03:22:c6:94:ac:a1:02:1a:0b:21:c7:f8:83:b5:34:f2:70: 86:9f:4d:be:89:5d:00:46:55:8b:e9:92:85:e2:e9:dc:98:ae: 2f:a8:a4:5d:6d:62:78:67:4c:a5:49:11:f5:24:9e:55:6d:9a: 13:8b:9c:f2:95:56:ba:b3:65:36:e9:5d:14:e0:0e:d7:a5:99: 48:0e:ab:fd:27:a1:4c:28:6a:ca:37:c9:3c:c7:9c:25:97:a6: d4:20:43:a4:2f:d3:df:37:53:db:fd:59:e2:fb:03:d4:63:3d: 92:54:99:61:5f:58:24:03:71:e3:e9:05:55:5c:42:8c:00:70: c6:93:26:7d:48:4f:21:ad:7b:96:ed:fc:b9:67:0f:48:75:28: f9:41:a3:05:41:c7:73:7b:3a:ec:27:13:b7:82:1c:63:c9:86: 61:d1:e4:3b:fa:7d:0c:9c:5a:5f:a2:61:db:b7:3d:53:0f:3d: 4e:87:a1:f9:a8:1b:ea:2c:89:a1:ca:e9:e2:00:76:26:e9:11: 14:57:e7:00:e8:9c:d7:b3:91:0d:c8:70:eb:d5:a2:ab:5b:2d: ff:2b:d2:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwoVjMZ18NDquRy6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1NGRmMWUtM2Q5My00YWM1LWIyMDktZTI0MjYxMTkz MjMwMB4XDTI1MTIxMjAyMDAzMFoXDTI2MDMxMjAxMDAzMFowLzEtMCsGA1UEAxMk NDAzMTg1NjEtZWFjMi00M2EwLWE3OWMtOGRiMzJlOThhMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf4WL81t/kARVs1bWQv6q6PHqeXhZ0tHj2lZ mr9fC4ZVOp8ZLMpTuE4QMJ9Lc2jLZZ4/xF7p5tdSe5R9k7u+PRdV5z5RGoUrojCC 4iAAl0VnyvSKRIirxh+8+sIkm+EktAF752L03U1AVAvajLypmxHBvETUTCR/xl0p LW5OBFYJYXQbfDaFMwS+xCHnjAKPN63g+tO2vRJEfQWcqSTOqs7vz6v8jRsTGEUQ nYO9Uql0L1e47QgneZ6qEjemPDlYybjHH8AzkRI1KyD+ueuC62xtoooH+oQEZ94l ttrIimac2ZV/1Rhslfv8oKedMZnd2vSmtVt9EBoqJFIjeLFHrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJFiEAJL/22OQrNwV7B4I6sNwsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0 ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQyNjExOTMyMzAvZGQzZjU2NzItNTZlMy0z MDhhLWE5NmYtNDAxNGE5NzgyMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMWY1NGRmMWUtM2Q5My00YWM1LWIy MDktZTI0MjYxMTkzMjMwLzFmNTRkZjFlLTNkOTMtNGFjNS1iMjA5LWUyNDI2MTE5 MzIzMC5jcmwwHwYDVR0jBBgwFoAUwRjOhaCEySkN6DYj8bFiouq4dPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8xZjU0ZGYxZS0zZDkzLTRhYzUtYjIwOS1lMjQy NjExOTMyMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQSvL3OvaqpwS//2oQaQphVwcubQnGfIcCqFdYQTmVgdRj5t/IDIsaU rKECGgshx/iDtTTycIafTb6JXQBGVYvpkoXi6dyYri+opF1tYnhnTKVJEfUknlVt mhOLnPKVVrqzZTbpXRTgDtelmUgOq/0noUwoaso3yTzHnCWXptQgQ6Qv0983U9v9 WeL7A9RjPZJUmWFfWCQDcePpBVVcQowAcMaTJn1ITyGte5bt/LlnD0h1KPlBowVB x3N7OuwnE7eCHGPJhmHR5Dv6fQycWl+iYdu3PVMPPU6HofmoG+osiaHK6eIAdibp ERRX5wDonNezkQ3IcOvVoqtbLf8r0so= -----END CERTIFICATE-----Generated at Mon Dec 22 03:59:18 2025 by rpki-client