This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa File: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (raw, json) Hash identifier: +2RG2XyqrViC1GJm5KPhMlewX2BZOT+K3skLvQSEgRM= Subject key identifier: C3:C8:74:40:6B:29:09:DC:F9:8C:D4:65:18:20:60:75:BF:0F:5E:3C Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584BD948A8C390B8E4271745BB80 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa Signing time: Thu 13 Nov 2025 18:24:31 +0000 ROA not before: Thu 13 Nov 2025 18:24:31 +0000 ROA not after: Wed 11 Feb 2026 18:24:31 +0000 asID: 399687 IP address blocks: 23.189.240.0/24 maxlen: 24 146.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d9:48:a8:c3:90:b8:e4:27:17:45:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Nov 13 18:24:31 2025 GMT Not After : Feb 11 18:24:31 2026 GMT Subject: CN=52f3fb68-e9e1-4033-9c77-35cd8073b53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cd:d2:70:f4:dd:98:b6:4c:4f:6b:b1:4a:ec: 92:c4:8d:ba:1a:ab:6c:76:db:d0:59:c4:30:1b:5e: 69:a5:75:b1:4c:84:3d:0a:fa:db:89:4f:78:97:1b: 38:f9:96:7d:98:21:2c:7e:73:31:3a:e0:5d:f6:75: 02:45:2b:c4:42:96:2d:f2:fd:d4:88:48:e7:06:a8: ca:5b:35:d7:68:81:ad:6b:17:97:9f:b8:16:2f:6b: 2b:f0:75:d1:57:13:c5:35:47:4b:3d:2b:47:67:bb: 99:c7:75:31:17:11:d4:fb:e4:df:ab:9a:00:99:a7: 55:de:95:4d:c4:9d:68:fc:ac:6d:96:bc:db:1f:70: 88:b7:1d:87:63:69:0c:70:77:0b:89:84:ef:8d:4d: ef:89:21:9f:d7:8d:fb:52:9e:b6:33:59:8b:de:b6: 85:36:d8:b4:e7:52:46:cd:3a:73:30:a5:35:be:ac: 4a:c1:78:20:c9:48:af:ed:0e:e1:d7:f6:56:11:3a: cb:7e:07:dd:61:88:cd:3d:aa:df:f3:84:be:82:23: 78:ef:c1:df:db:bc:b2:a1:9a:52:a0:12:e5:32:78: 8b:91:9d:7d:75:80:62:d8:19:06:d2:3e:3c:42:00: 4c:84:89:0f:f6:94:eb:bb:7e:1e:fb:3a:ed:f0:84: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C8:74:40:6B:29:09:DC:F9:8C:D4:65:18:20:60:75:BF:0F:5E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: 23.189.240.0/24 146.19.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:bb:ac:bf:fe:94:64:f5:56:11:d9:18:69:24:24:bf:e8:9b: 33:39:d2:61:d5:4b:d3:c5:36:bf:33:b8:01:a8:c0:79:f9:33: f8:a1:a4:7f:98:27:bd:38:78:4f:92:61:c2:95:6b:00:a8:f6: e8:85:1b:99:b3:ef:3a:5d:d9:47:a5:fa:7f:27:75:2e:7b:2b: c8:90:33:49:0e:3f:3f:6d:d8:46:6c:74:cf:60:c1:46:c9:70: 1e:10:77:e8:37:5b:2b:cb:c8:2c:26:96:9b:62:d6:3d:e3:32: f3:f0:4d:df:18:0d:91:54:db:15:ec:0c:a0:d4:be:07:d8:93: c7:a7:26:64:df:cd:6e:52:12:23:a8:65:59:3f:2e:f7:6f:88: b7:b5:ad:de:56:4c:2b:9b:18:1a:df:09:fc:c7:82:eb:ed:02: 8c:b6:91:de:53:26:28:20:40:2c:c5:40:11:cb:d9:80:d6:c3: 76:17:5a:6f:d0:b4:cb:72:30:01:18:73:80:7b:eb:24:de:d2: f0:08:8d:b0:6e:da:92:7b:d9:43:eb:6d:b7:d2:e1:d8:06:13: f4:f7:11:5e:91:fa:c0:bd:84:c6:d6:2e:a0:7a:73:53:ab:20: db:2d:d4:8c:f5:a1:43:25:18:53:1a:80:c3:09:6a:d2:2b:a6: ea:16:3b:f5 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvZSKjDkLjkJxdFu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI1MTExMzE4MjQzMVoXDTI2MDIxMTE4MjQzMVowLzEtMCsGA1UEAxMk NTJmM2ZiNjgtZTllMS00MDMzLTljNzctMzVjZDgwNzNiNTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM3ScPTdmLZMT2uxSuySxI26GqtsdtvQWcQw G15ppXWxTIQ9CvrbiU94lxs4+ZZ9mCEsfnMxOuBd9nUCRSvEQpYt8v3UiEjnBqjK WzXXaIGtaxeXn7gWL2sr8HXRVxPFNUdLPStHZ7uZx3UxFxHU++Tfq5oAmadV3pVN xJ1o/KxtlrzbH3CItx2HY2kMcHcLiYTvjU3viSGf1437Up62M1mL3raFNti051JG zTpzMKU1vqxKwXggyUiv7Q7h1/ZWETrLfgfdYYjNParf84S+giN478Hf27yyoZpS oBLlMniLkZ19dYBi2BkG0j48QgBMhIkP9pTru34e+zrt8ITZdQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMPIdEBrKQnc+YzUZRggYHW/D148MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTkwYjdkZDEtNjExYy0z ZWExLWFhZmMtM2Q4M2M3NDA2MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF73wAwQA khMCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAS7rL/+lGT1VhHZGGkkJL/omzM50mHVS9PFNr8zuAGowHn5 M/ihpH+YJ704eE+SYcKVawCo9uiFG5mz7zpd2Uel+n8ndS57K8iQM0kOPz9t2EZs dM9gwUbJcB4Qd+g3WyvLyCwmlpti1j3jMvPwTd8YDZFU2xXsDKDUvgfYk8enJmTf zW5SEiOoZVk/LvdviLe1rd5WTCubGBrfCfzHguvtAoy2kd5TJiggQCzFQBHL2YDW w3YXWm/QtMtyMAEYc4B76yTe0vAIjbBu2pJ72UPrbbfS4dgGE/T3EV6R+sC9hMbW LqB6c1OrINst1Iz1oUMlGFMagMMJatIrpuoWO/U= -----END CERTIFICATE-----Generated at Mon Nov 24 00:09:53 2025 by rpki-client