This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa File: 0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa (raw, json) Hash identifier: m9SKjFKz1PEr863j3jG9mfCB5VjQntYH8o/OsiP4rAo= Subject key identifier: 7D:91:0E:62:BD:48:6B:BA:39:15:9D:C0:9C:C3:A0:57:93:69:C0:24 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C30B63C0893F2518CEBA83AC0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa Signing time: Mon 15 Dec 2025 02:00:31 +0000 ROA not before: Mon 15 Dec 2025 02:00:31 +0000 ROA not after: Sun 15 Mar 2026 01:00:31 +0000 asID: 33442 IP address blocks: 149.23.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:30:b6:3c:08:93:f2:51:8c:eb:a8:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 15 02:00:31 2025 GMT Not After : Mar 15 01:00:31 2026 GMT Subject: CN=f3940379-db16-4fa5-89c0-2bb998e6b9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:c0:46:50:58:50:d5:18:28:cd:5f:cd:20: d2:bd:7a:d8:91:f9:d3:76:63:fa:e9:3f:90:69:e9: 03:c8:fc:42:77:aa:f8:21:47:b9:09:1c:a3:79:ee: 2f:bc:e5:4d:03:ea:ff:7e:14:f8:34:85:eb:cb:55: 31:43:98:3f:00:f2:10:40:45:e3:f2:c5:9c:e2:a8: 0a:47:25:5b:6a:5f:c2:95:ad:f1:6a:3e:5e:0a:05: ed:90:c4:7c:b1:d9:23:d1:8a:d8:e2:6f:7e:5c:e8: 06:0a:b2:79:55:3e:57:92:34:e9:37:3e:df:0a:38: 23:c1:53:d2:7b:ea:36:d5:7e:d8:55:0b:e9:1b:44: c8:05:73:b4:5c:ca:b5:ab:9b:6a:0f:b0:68:97:fe: 8d:2c:2c:2a:6d:47:16:cf:c6:c2:88:88:b7:0a:00: a9:d3:da:42:9b:e2:7a:20:48:77:17:fc:86:14:d4: cd:21:f3:de:45:ad:15:fd:ce:26:91:9f:af:b8:d4: 9e:28:17:5a:c8:9e:54:a7:e8:6f:8f:e8:b9:05:8e: e9:16:01:2d:03:9c:9e:e8:39:ba:f9:7e:e4:68:05: c7:d7:91:f6:aa:55:82:37:7b:62:36:d0:55:3a:f1: ce:b7:51:8a:99:b1:ff:3b:2d:2d:86:6c:91:19:88: 77:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:91:0E:62:BD:48:6B:BA:39:15:9D:C0:9C:C3:A0:57:93:69:C0:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0a6b9e12-508e-3568-a4d7-afb6ad62cc87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bc:0a:bf:7f:f7:eb:ac:3c:31:a0:37:6d:d2:4f:ba:eb:88: 49:0a:19:3c:d3:ad:b3:c2:73:42:1b:de:cb:82:c2:98:49:50: 30:10:d7:48:30:0f:5c:32:86:69:44:dc:3e:bc:8d:2f:29:37: 07:0f:64:cf:7c:f8:5b:b6:51:ca:5d:eb:68:3a:eb:f2:47:25: 6a:29:db:d2:5e:fb:46:12:63:40:0b:fb:5b:9d:69:1f:ba:9d: 80:cc:61:da:a8:76:65:4d:db:ed:7c:a8:74:23:a1:9d:8f:ea: f5:45:32:39:78:f6:a2:05:6f:11:ea:48:60:4a:df:cb:b3:44: 13:83:b8:a1:57:f7:e2:91:2b:1b:90:93:4a:6c:ce:5c:92:ce: bb:69:36:43:d5:3a:b3:13:99:96:84:ef:db:e3:58:a1:d8:f4: e2:8b:bc:23:61:85:aa:20:05:38:48:68:18:ca:45:1e:7b:15: 41:13:e4:42:e1:11:00:1c:89:f9:fd:33:9c:2b:04:d6:fd:47: 45:a3:2a:d1:38:ed:c2:64:57:59:af:1f:38:84:7f:86:a2:a3: e6:01:24:1a:d8:a4:f2:3f:21:d9:65:17:40:71:14:31:56:28: 1a:e7:8b:bc:d4:ec:ad:29:7a:e2:5d:87:f6:5f:f0:19:1d:a7: a0:55:87:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwwtjwIk/JRjOuoOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIxNTAyMDAzMVoXDTI2MDMxNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjM5NDAzNzktZGIxNi00ZmE1LTg5YzAtMmJiOTk4ZTZiOWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRrARlBYUNUYKM1fzSDSvXrYkfnTdmP66T+Q aekDyPxCd6r4IUe5CRyjee4vvOVNA+r/fhT4NIXry1UxQ5g/APIQQEXj8sWc4qgK RyVbal/Cla3xaj5eCgXtkMR8sdkj0YrY4m9+XOgGCrJ5VT5XkjTpNz7fCjgjwVPS e+o21X7YVQvpG0TIBXO0XMq1q5tqD7Bol/6NLCwqbUcWz8bCiIi3CgCp09pCm+J6 IEh3F/yGFNTNIfPeRa0V/c4mkZ+vuNSeKBdayJ5Up+hvj+i5BY7pFgEtA5ye6Dm6 +X7kaAXH15H2qlWCN3tiNtBVOvHOt1GKmbH/Oy0thmyRGYh3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2RDmK9SGu6ORWdwJzDoFeTacAkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGE2YjllMTItNTA4ZS0z NTY4LWE0ZDctYWZiNmFkNjJjYzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu8Cr9/9+usPDGgN23ST7rriEkKGTzTrbPCc0Ib3suCwphJUDAQ10gw D1wyhmlE3D68jS8pNwcPZM98+Fu2Ucpd62g66/JHJWop29Je+0YSY0AL+1udaR+6 nYDMYdqodmVN2+18qHQjoZ2P6vVFMjl49qIFbxHqSGBK38uzRBODuKFX9+KRKxuQ k0pszlySzrtpNkPVOrMTmZaE79vjWKHY9OKLvCNhhaogBThIaBjKRR57FUET5ELh EQAcifn9M5wrBNb9R0WjKtE47cJkV1mvHziEf4aio+YBJBrYpPI/IdllF0BxFDFW KBrni7zU7K0peuJdh/Zf8Bkdp6BVh1s= -----END CERTIFICATE-----Generated at Tue Dec 16 06:27:40 2025 by rpki-client