This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa File: ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa (raw, json) Hash identifier: uZUXtEoOcfn1ZN74VfxfDEKPHyXhytwuRoRbfk2WKHU= Subject key identifier: FF:77:11:A8:5C:54:4F:E1:74:1A:06:82:5A:E3:BD:57:CC:21:F4:9D Certificate issuer: /CN=213412d0-2e00-4f54-95bc-e72555790689 Certificate serial: 010D0C9F4328584C1E93F2195F16714A31AC1940 Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 40509 IP address blocks: 172.86.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:93:f2:19:5f:16:71:4a:31:ac:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=4f3a807b-a905-4c6a-bf6d-bb28bfb20c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8f:78:4a:5b:2d:04:4b:b6:3a:41:10:7a:76: 50:5c:f9:c6:0f:31:89:fd:64:1f:b0:40:31:d2:fa: 05:15:0f:aa:ee:83:d0:9b:12:9a:22:ac:9c:1f:a3: 63:27:4a:ec:84:82:0e:17:1a:19:16:82:90:91:66: a5:fd:fc:70:84:48:f7:90:b4:e4:9c:5f:5f:e7:49: e3:e5:82:4d:d0:f8:36:70:82:9f:7b:78:20:df:97: be:8d:f9:96:ca:18:bb:4e:26:6d:ae:ad:ac:fd:59: bb:cb:85:6c:ba:68:02:df:e3:98:39:2f:43:3c:04: 1f:02:01:b3:ee:75:f0:26:9f:8c:b2:0a:2f:b4:3e: 9f:89:80:c2:00:5a:39:04:ac:c4:a8:35:ff:8c:34: 01:32:75:d6:22:9c:84:8a:64:be:2e:09:6b:2e:c8: 01:7c:90:bb:bf:8e:31:2b:b2:6c:20:24:40:d1:6b: 7a:e2:90:5c:f9:2a:04:71:f4:14:14:4e:79:85:93: 59:e9:97:e0:d1:24:44:e5:4b:3d:78:50:ee:d7:d3: aa:ee:ee:c4:79:d3:da:cb:04:e2:b0:ea:11:34:0d: b6:77:68:8f:61:92:86:9f:f6:ca:55:df:e9:93:56: e5:a9:11:2f:86:85:e0:79:43:81:fc:e7:96:4e:ea: 2f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:77:11:A8:5C:54:4F:E1:74:1A:06:82:5A:E3:BD:57:CC:21:F4:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/ca67c6ed-51d5-3568-801d-7fd9c913f8bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl X509v3 Authority Key Identifier: keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer sbgp-ipAddrBlock: critical IPv4: 172.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:3b:45:72:f1:02:f4:6f:84:f3:95:3b:18:6b:17:94:bd:49: 18:b0:c1:cc:64:9d:2b:c7:92:c3:0d:ce:d6:6d:01:3c:fd:cc: 9e:ea:a9:38:5f:b8:0f:8a:c7:27:77:de:15:66:64:b5:56:9b: 7e:b3:25:2e:54:fb:45:e0:f4:f0:93:50:55:ed:bc:f2:41:73: 8f:d7:7f:3b:21:b6:94:62:a3:6f:52:4b:74:db:34:5f:77:57: ce:c2:6b:8c:1e:5b:b4:24:ec:69:59:3f:1d:71:11:f7:ec:e7: 77:2b:6d:0a:4b:51:fb:04:8e:da:27:95:3f:4d:db:84:f7:c9: 46:b0:27:6f:61:4b:57:78:dd:f1:26:69:33:bc:b6:e0:56:1c: d9:c8:9a:d9:53:bd:8a:3c:2a:b7:96:bf:f9:bc:d3:7c:42:77: 54:3e:59:fb:64:10:35:0b:e3:67:a2:4a:f3:63:3f:a1:b7:e2: e4:0f:d0:8e:99:c9:9b:42:ab:ac:ba:c8:e7:b9:d2:7c:3c:a1: fa:eb:fd:ab:06:99:7e:3d:b6:68:7b:8c:a5:8e:d9:48:b6:24: d8:2a:74:7c:45:65:0b:ea:1b:57:b8:d5:75:b6:e1:44:eb:89: b2:d0:10:dd:4d:e3:40:39:f9:d6:9e:b6:48:ae:e3:b6:ef:59: a4:cb:3f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwek/IZXxZxSjGsGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEzNDEyZDAtMmUwMC00ZjU0LTk1YmMtZTcyNTU1Nzkw Njg5MB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NGYzYTgwN2ItYTkwNS00YzZhLWJmNmQtYmIyOGJmYjIwYzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY94SlstBEu2OkEQenZQXPnGDzGJ/WQfsEAx 0voFFQ+q7oPQmxKaIqycH6NjJ0rshIIOFxoZFoKQkWal/fxwhEj3kLTknF9f50nj 5YJN0Pg2cIKfe3gg35e+jfmWyhi7TiZtrq2s/Vm7y4VsumgC3+OYOS9DPAQfAgGz 7nXwJp+MsgovtD6fiYDCAFo5BKzEqDX/jDQBMnXWIpyEimS+LglrLsgBfJC7v44x K7JsICRA0Wt64pBc+SoEcfQUFE55hZNZ6Zfg0SRE5Us9eFDu19Oq7u7EedPaywTi sOoRNA22d2iPYZKGn/bKVd/pk1blqREvhoXgeUOB/OeWTuovrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP93EahcVE/hdBoGglrjvVfMIfSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0 MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1NTU3OTA2ODkvY2E2N2M2ZWQtNTFkNS0z NTY4LTgwMWQtN2ZkOWM5MTNmOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjEzNDEyZDAtMmUwMC00ZjU0LTk1 YmMtZTcyNTU1NzkwNjg5LzIxMzQxMmQwLTJlMDAtNGY1NC05NWJjLWU3MjU1NTc5 MDY4OS5jcmwwHwYDVR0jBBgwFoAU0a7KA2zh2AW0BP9zMs1AgPmk4IIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTM0MTJkMC0yZTAwLTRmNTQtOTViYy1lNzI1 NTU3OTA2ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGY7RXLxAvRvhPOVOxhrF5S9SRiwwcxknSvHksMNztZtATz9zJ7qqThf uA+Kxyd33hVmZLVWm36zJS5U+0Xg9PCTUFXtvPJBc4/XfzshtpRio29SS3TbNF93 V87Ca4weW7Qk7GlZPx1xEffs53crbQpLUfsEjtonlT9N24T3yUawJ29hS1d43fEm aTO8tuBWHNnImtlTvYo8KreWv/m803xCd1Q+WftkEDUL42eiSvNjP6G34uQP0I6Z yZtCq6y6yOe50nw8ofrr/asGmX49tmh7jKWO2Ui2JNgqdHxFZQvqG1e41XW24UTr ibLQEN1N40A5+daetkiu47bvWaTLPy8= -----END CERTIFICATE-----Generated at Sat Dec 20 13:42:06 2025 by rpki-client