This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa File: 8f43b484-80c8-39e0-8d40-3087acda04cc.roa (raw, json) Hash identifier: 7QtLyUcIC6OhdF5MRo/9S652ylKA3LG31/nkji3l1FY= Subject key identifier: 8C:8B:99:BE:47:3D:8F:9C:81:E4:EE:9C:15:A8:3E:EB:9D:42:20:A3 Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584 Certificate serial: 010D0C9F4328584C470BDC0A4243BDA9B192F800 Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa Signing time: Tue 23 Dec 2025 02:00:31 +0000 ROA not before: Tue 23 Dec 2025 02:00:31 +0000 ROA not after: Mon 23 Mar 2026 01:00:31 +0000 asID: 40934 IP address blocks: 141.109.161.0/24 maxlen: 24 159.48.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:0b:dc:0a:42:43:bd:a9:b1:92:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584 Validity Not Before: Dec 23 02:00:31 2025 GMT Not After : Mar 23 01:00:31 2026 GMT Subject: CN=66cfa724-a8cf-4c17-acb0-6c89a900a3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:71:5e:09:19:71:9c:d2:4c:66:d5:30:0d:77: 1a:7d:8f:cc:5b:a9:9c:27:3f:14:eb:c0:25:2b:1f: 01:b2:c6:d7:4a:38:e3:73:04:8e:07:39:a8:c0:2e: bc:74:ea:76:28:9e:d6:0b:ff:1c:bf:92:1e:06:8d: 8e:bd:10:34:c6:37:47:17:36:5c:14:25:34:2b:11: 25:97:ad:39:06:bb:28:83:03:83:b3:1b:19:8b:57: 4a:0a:27:20:90:eb:bf:5b:f1:f8:5d:3d:88:cb:66: e8:9a:44:32:2e:44:95:70:24:44:77:96:48:23:62: b6:6e:89:55:2d:5b:42:5f:b1:32:86:12:37:17:89: 39:18:20:d8:d2:c2:04:8a:7d:6b:8f:55:c1:a3:01: a9:37:dd:fe:c5:54:44:19:0b:d3:ff:9b:a3:f7:df: 9d:c0:d1:32:73:32:bc:41:ff:ac:8a:11:9d:3d:a9: 56:81:ee:32:84:b1:ab:53:e6:19:cd:0c:d5:6e:4c: 9f:22:42:c8:5e:9c:ea:02:05:1c:29:54:41:f1:3e: 75:b6:19:09:04:50:44:26:76:98:bd:30:2a:31:f6: 34:c2:35:dc:e4:00:a5:1a:b5:8c:46:f1:79:69:6b: bf:52:15:8b:19:e5:56:7b:a5:28:43:f0:2a:fb:c8: 7d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8B:99:BE:47:3D:8F:9C:81:E4:EE:9C:15:A8:3E:EB:9D:42:20:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/8f43b484-80c8-39e0-8d40-3087acda04cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl X509v3 Authority Key Identifier: keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer sbgp-ipAddrBlock: critical IPv4: 141.109.161.0/24 159.48.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ba:dc:22:50:ea:b7:fd:ec:6c:76:09:cd:8f:5f:77:27:f0: 90:85:0a:04:19:d6:f5:a6:18:1e:cc:4d:8a:b9:d1:e1:05:38: 2f:b9:d1:56:df:9b:44:26:fb:a5:8a:23:ec:05:dc:4a:97:61: 0d:5f:b6:46:46:11:65:d5:6d:70:9d:70:ee:48:b4:c1:9c:e3: d9:08:88:cd:db:8f:fd:7a:dc:77:94:a5:e1:71:18:84:1f:3a: 75:24:0e:a5:47:51:25:64:8a:9d:14:b2:bf:98:62:c4:74:5b: b1:8c:dc:28:71:bd:a5:ea:ce:da:e9:8e:26:87:3b:0a:49:eb: e7:8e:c2:a5:99:9e:6c:2b:63:7e:34:f5:43:25:37:86:4c:2a: c4:ae:b3:e4:99:e3:c2:46:22:62:ca:2d:cf:f1:18:57:6b:09: 57:9f:1d:07:5f:5d:d3:7e:ab:be:cb:74:6c:20:c9:80:d6:e9: 6a:76:4b:93:fa:1c:22:e3:0d:5a:18:a8:89:19:9f:86:93:74: 73:4b:d2:f6:d3:c1:f8:2f:ef:73:6f:70:6e:f7:77:cf:d3:50: 17:6b:c6:c9:23:61:db:16:59:15:59:fa:6b:3b:6c:34:dd:84: 7d:d9:2a:b0:6d:e7:68:27:a2:de:a8:47:a6:8a:be:29:d9:88: 21:0b:23:f7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWExHC9wKQkO9qbGS+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1 NTg0MB4XDTI1MTIyMzAyMDAzMVoXDTI2MDMyMzAxMDAzMVowLzEtMCsGA1UEAxMk NjZjZmE3MjQtYThjZi00YzE3LWFjYjAtNmM4OWE5MDBhM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnFeCRlxnNJMZtUwDXcafY/MW6mcJz8U68Al Kx8BssbXSjjjcwSOBzmowC68dOp2KJ7WC/8cv5IeBo2OvRA0xjdHFzZcFCU0KxEl l605BrsogwODsxsZi1dKCicgkOu/W/H4XT2Iy2bomkQyLkSVcCREd5ZII2K2bolV LVtCX7EyhhI3F4k5GCDY0sIEin1rj1XBowGpN93+xVREGQvT/5uj99+dwNEyczK8 Qf+sihGdPalWge4yhLGrU+YZzQzVbkyfIkLIXpzqAgUcKVRB8T51thkJBFBEJnaY vTAqMfY0wjXc5AClGrWMRvF5aWu/UhWLGeVWe6UoQ/Aq+8h9lwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIyLmb5HPY+cgeTunBWoPuudQiCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvOGY0M2I0ODQtODBjOC0z OWUwLThkNDAtMzA4N2FjZGEwNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk ZmQ0YTU1ODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjW2hAwQA nzCtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIO63CJQ6rf97Gx2Cc2PX3cn8JCFCgQZ1vWmGB7MTYq50eEF OC+50Vbfm0Qm+6WKI+wF3EqXYQ1ftkZGEWXVbXCdcO5ItMGc49kIiM3bj/163HeU peFxGIQfOnUkDqVHUSVkip0Usr+YYsR0W7GM3ChxvaXqztrpjiaHOwpJ6+eOwqWZ nmwrY3409UMlN4ZMKsSus+SZ48JGImLKLc/xGFdrCVefHQdfXdN+q77LdGwgyYDW 6Wp2S5P6HCLjDVoYqIkZn4aTdHNL0vbTwfgv73NvcG73d8/TUBdrxskjYdsWWRVZ +ms7bDTdhH3ZKrBt52gnot6oR6aKvinZiCELI/c= -----END CERTIFICATE-----Generated at Sat Jan 10 12:23:14 2026 by rpki-client