This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa File: 969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa (raw, json) Hash identifier: 2Nf48j8R+yaBtadqtsi1LdAqg6ccYy+Ph1nqi+al7L8= Subject key identifier: 5F:A5:87:92:C2:B1:CC:62:A5:55:D6:B9:4C:A4:75:D6:A1:96:57:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBD9FCE3A9C4C5E3B16200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 150.195.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:d9:fc:e3:a9:c4:c5:e3:b1:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=881cd9a2-648b-497f-b78f-c003a58bb562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:a4:d0:ba:72:82:98:d2:20:db:73:fb:81: 09:73:8d:c9:96:4c:3b:f1:fd:a4:7b:30:6c:4f:ab: 76:b8:1e:fa:6e:4b:2d:ab:9c:24:3b:d1:59:e3:01: 10:a9:46:53:16:a5:24:47:5c:00:8d:10:fc:72:81: a0:b1:fc:ff:33:4a:b5:27:0d:1e:5b:37:c6:7c:0a: 79:10:8b:8a:06:2b:27:43:08:24:f6:90:c2:04:55: b9:a5:01:73:2b:95:41:28:95:c9:87:68:01:2c:ec: 9c:5a:0a:24:b2:52:f9:d6:cd:af:74:36:15:14:f3: 74:90:17:dd:2a:a5:93:95:a0:59:bc:fe:a4:33:0c: ff:76:7f:c7:ec:d6:74:ca:28:d1:5e:0f:6d:66:11: 17:a8:86:d2:11:a5:e6:82:2d:1f:10:06:db:ea:8b: 86:38:de:b6:29:aa:9d:a0:8a:d7:fe:f0:6a:c2:11: 31:35:37:2d:9c:0e:f7:e1:95:8c:fe:a7:03:2a:aa: 6c:dc:61:35:75:18:72:41:46:bd:fc:6a:29:ca:49: d0:3c:41:91:cc:de:63:84:4d:6a:44:6c:96:62:a6: dc:3c:fd:a2:5b:75:16:52:3b:b0:f1:d7:7e:00:f6: 03:f7:9d:67:69:cd:f8:e7:dc:ff:34:01:ed:5e:7d: 24:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A5:87:92:C2:B1:CC:62:A5:55:D6:B9:4C:A4:75:D6:A1:96:57:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/969e2a2b-4d00-3012-a4bb-0b4f05dd3909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6c:1f:e4:9b:8a:a9:af:22:df:20:18:1d:4e:47:9a:0e:ab: c8:80:73:de:df:fc:f4:db:08:48:c8:7e:67:67:12:44:5a:5d: 88:18:5f:63:bf:30:27:1c:07:81:ba:08:a9:30:d5:0e:c0:54: a1:59:34:34:23:cb:31:6a:13:94:93:92:bb:dd:57:f8:e6:72: e3:eb:42:21:69:02:ba:ad:48:11:7f:09:f0:95:1f:d0:ef:1e: 39:39:f5:c4:a8:d8:4f:47:32:92:e5:48:1e:9d:eb:cc:e7:76: 70:07:9a:69:ea:7e:72:4d:1a:0b:61:f9:96:0d:6d:d8:a1:0f: ba:69:a2:08:fe:6f:83:97:36:7a:7d:f7:77:82:f3:31:4b:b4: 37:1c:13:40:b9:84:0d:aa:3c:68:57:9b:bc:37:04:f3:81:c0: 00:fb:72:29:2f:67:88:4c:5c:e3:e1:34:99:39:3d:09:eb:23: ce:3c:cf:02:f7:8d:d3:24:a4:12:c4:39:41:63:09:1f:8c:4f: 99:2f:d9:93:2d:a5:3c:36:22:d9:34:90:3b:0c:4d:83:a4:f7: 0d:64:9a:65:be:82:9f:db:f6:cb:08:d6:66:3f:1a:27:26:28: d5:f4:23:31:d3:67:90:b5:18:5e:60:12:d3:d9:c3:23:37:ba: 6e:7d:89:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC29n846nExeOxYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk ODgxY2Q5YTItNjQ4Yi00OTdmLWI3OGYtYzAwM2E1OGJiNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAik0LpygpjSINtz+4EJc43Jlkw78f2kezBs T6t2uB76bkstq5wkO9FZ4wEQqUZTFqUkR1wAjRD8coGgsfz/M0q1Jw0eWzfGfAp5 EIuKBisnQwgk9pDCBFW5pQFzK5VBKJXJh2gBLOycWgokslL51s2vdDYVFPN0kBfd KqWTlaBZvP6kMwz/dn/H7NZ0yijRXg9tZhEXqIbSEaXmgi0fEAbb6ouGON62Kaqd oIrX/vBqwhExNTctnA734ZWM/qcDKqps3GE1dRhyQUa9/GopyknQPEGRzN5jhE1q RGyWYqbcPP2iW3UWUjuw8dd+APYD951nac3459z/NAHtXn0kLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+lh5LCscxipVXWuUykddahllcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTY5ZTJhMmItNGQwMC0z MDEyLWE0YmItMGI0ZjA1ZGQzOTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsNDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBsH+SbiqmvIt8gGB1OR5oOq8iAc97f/PTbCEjIfmdnEkRaXYgYX2O/ MCccB4G6CKkw1Q7AVKFZNDQjyzFqE5STkrvdV/jmcuPrQiFpArqtSBF/CfCVH9Dv Hjk59cSo2E9HMpLlSB6d68zndnAHmmnqfnJNGgth+ZYNbdihD7ppogj+b4OXNnp9 93eC8zFLtDccE0C5hA2qPGhXm7w3BPOBwAD7cikvZ4hMXOPhNJk5PQnrI848zwL3 jdMkpBLEOUFjCR+MT5kv2ZMtpTw2Itk0kDsMTYOk9w1kmmW+gp/b9ssI1mY/Gicm KNX0IzHTZ5C1GF5gEtPZwyM3um59iUY= -----END CERTIFICATE-----Generated at Sun Jan 11 15:43:25 2026 by rpki-client