This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa File: 69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa (raw, json) Hash identifier: sxAXNzssBb/8OZTLoMlpGs2vFu9lgHhDvMhY8pxV3bo= Subject key identifier: 70:81:11:16:31:D4:2C:A8:69:AE:D4:B5:6D:76:22:27:93:35:1A:F4 Certificate issuer: /CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Certificate serial: 010D0C9F4328584BDFC06ACF74626B5BEF61ED40 Authority key identifier: E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa Signing time: Sun 16 Nov 2025 02:00:31 +0000 ROA not before: Sun 16 Nov 2025 02:00:31 +0000 ROA not after: Sat 14 Feb 2026 02:00:31 +0000 asID: 396163 IP address blocks: 149.248.72.0/22 maxlen: 24 205.142.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:df:c0:6a:cf:74:62:6b:5b:ef:61:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=560b4c54-bd35-46e1-8698-aff50195e1b4 Validity Not Before: Nov 16 02:00:31 2025 GMT Not After : Feb 14 02:00:31 2026 GMT Subject: CN=d9d27a2c-20fa-40e3-a3c0-5ab74b4d63a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6c:2f:18:97:e8:47:50:42:d6:0a:53:1e:48: 8c:30:29:ea:91:c9:46:d0:74:00:69:a5:20:0a:db: ee:2c:36:7d:ed:59:31:f1:a8:64:e0:14:55:a2:95: 61:3b:66:36:35:b6:86:7b:f7:6e:db:32:d3:0d:de: 06:0e:88:95:86:03:5d:a4:7e:e8:e9:ed:c0:1b:3f: e1:a4:0e:da:96:ce:be:a5:b5:59:33:9a:4b:57:86: 42:a5:35:16:55:5f:05:d9:dc:68:19:07:f5:53:ef: f9:33:95:1f:1f:47:94:51:0e:b7:e6:36:49:f8:4d: d7:31:32:8c:1a:fd:c7:8b:37:38:59:7b:32:43:30: a7:9c:36:16:3b:ce:f3:41:d8:2e:ca:f4:d3:ea:67: e1:24:08:1a:8f:bf:76:2c:ad:b9:1e:84:67:8f:e2: 9d:cc:74:29:bb:d9:dd:81:63:f3:e0:9c:d5:df:86: 4e:4b:f9:ee:c9:ae:b7:b5:e3:65:11:4b:11:b8:7d: 31:ef:32:ed:8a:27:7a:85:d3:2b:6d:f4:55:87:fb: 69:44:f4:1c:bf:3d:1a:a9:37:3b:40:fc:53:d0:b3: 57:21:32:6f:59:05:50:f0:d5:cc:dd:5b:43:9d:a8: c8:f5:ee:27:f5:84:7b:c1:d6:c0:c7:47:e5:2d:b2: c7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:81:11:16:31:D4:2C:A8:69:AE:D4:B5:6D:76:22:27:93:35:1A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/69d98e7b-43d7-3bf2-8b7e-556df9259c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4/560b4c54-bd35-46e1-8698-aff50195e1b4.crl X509v3 Authority Key Identifier: keyid:E1:F3:2C:DE:1C:5F:ED:4C:95:9A:78:0D:DE:FA:69:73:DE:95:2F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/560b4c54-bd35-46e1-8698-aff50195e1b4.cer sbgp-ipAddrBlock: critical IPv4: 149.248.72.0/22 205.142.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:b0:37:74:eb:7b:92:ea:5d:60:93:65:54:55:0d:08:80:83: d7:65:a3:cd:9b:7e:2e:98:86:4e:95:31:8a:12:2d:0d:ac:2b: 20:53:19:19:50:02:1d:51:7d:e2:68:13:b4:d4:46:41:c3:35: 32:b7:83:f4:ff:e8:f4:e1:ca:3b:22:3f:29:7c:83:ba:be:98: 5d:a2:be:8a:32:8e:00:0e:26:aa:d3:34:3d:ed:66:4e:89:34: 43:23:34:c5:6e:6f:50:b0:06:4d:84:f3:5f:d7:3a:cb:4d:4a: e8:a8:d8:eb:36:bc:a6:5a:a7:6d:a8:77:46:ac:6d:32:93:f3: 23:ef:a0:a1:7a:28:ff:2f:b1:3c:7e:24:a4:41:14:83:15:92: 3d:18:dc:fb:f9:c8:32:e9:fd:f4:bd:07:ce:bb:ca:b4:ce:9a: 58:af:56:f0:63:bb:29:a9:2c:83:10:4d:f2:23:22:d2:85:2f: d7:64:50:25:c6:74:3a:f3:6f:a0:b1:2f:f7:d4:b1:7c:0a:20: 9f:89:fc:11:41:7f:65:56:c5:a8:f9:a4:ba:11:4a:de:09:9a: b2:ac:87:7b:7d:06:5a:50:03:a3:77:e8:8e:1d:1d:05:2c:85: 95:6c:f9:e5:36:00:e4:8f:ae:62:ba:ac:2a:87:81:dc:ab:1a: 96:00:74:26 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvfwGrPdGJrW+9h7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTYwYjRjNTQtYmQzNS00NmUxLTg2OTgtYWZmNTAxOTVl MWI0MB4XDTI1MTExNjAyMDAzMVoXDTI2MDIxNDAyMDAzMVowLzEtMCsGA1UEAxMk ZDlkMjdhMmMtMjBmYS00MGUzLWEzYzAtNWFiNzRiNGQ2M2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmwvGJfoR1BC1gpTHkiMMCnqkclG0HQAaaUg CtvuLDZ97Vkx8ahk4BRVopVhO2Y2NbaGe/du2zLTDd4GDoiVhgNdpH7o6e3AGz/h pA7als6+pbVZM5pLV4ZCpTUWVV8F2dxoGQf1U+/5M5UfH0eUUQ635jZJ+E3XMTKM Gv3Hizc4WXsyQzCnnDYWO87zQdguyvTT6mfhJAgaj792LK25HoRnj+KdzHQpu9nd gWPz4JzV34ZOS/nuya63teNlEUsRuH0x7zLtiid6hdMrbfRVh/tpRPQcvz0aqTc7 QPxT0LNXITJvWQVQ8NXM3VtDnajI9e4n9YR7wdbAx0flLbLHvwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHCBERYx1Cyoaa7UtW12IieTNRr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NjBi NGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1MDE5NWUxYjQvNjlkOThlN2ItNDNkNy0z YmYyLThiN2UtNTU2ZGY5MjU5YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTYwYjRjNTQtYmQzNS00NmUxLTg2 OTgtYWZmNTAxOTVlMWI0LzU2MGI0YzU0LWJkMzUtNDZlMS04Njk4LWFmZjUwMTk1 ZTFiNC5jcmwwHwYDVR0jBBgwFoAU4fMs3hxf7UyVmngN3vppc96VL8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81NjBiNGM1NC1iZDM1LTQ2ZTEtODY5OC1hZmY1 MDE5NWUxYjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClfhIAwQB zY7yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKywN3Tre5LqXWCTZVRVDQiAg9dlo82bfi6Yhk6VMYoSLQ2s KyBTGRlQAh1RfeJoE7TURkHDNTK3g/T/6PThyjsiPyl8g7q+mF2ivooyjgAOJqrT ND3tZk6JNEMjNMVub1CwBk2E81/XOstNSuio2Os2vKZap22od0asbTKT8yPvoKF6 KP8vsTx+JKRBFIMVkj0Y3Pv5yDLp/fS9B867yrTOmlivVvBjuympLIMQTfIjItKF L9dkUCXGdDrzb6CxL/fUsXwKIJ+J/BFBf2VWxaj5pLoRSt4JmrKsh3t9BlpQA6N3 6I4dHQUshZVs+eU2AOSPrmK6rCqHgdyrGpYAdCY= -----END CERTIFICATE-----Generated at Tue Nov 25 09:12:59 2025 by rpki-client