This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa File: 73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa (raw, json) Hash identifier: pGu2n5eqmdfZKzUu8YUQR5TCrNy1v5ckapNYPCfeWHA= Subject key identifier: 12:7B:77:DC:7C:39:15:33:28:65:9C:F3:C7:E8:96:17:55:94:ED:73 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584C0570B28803530532A2B8DF80 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa Signing time: Sat 29 Nov 2025 14:00:39 +0000 ROA not before: Sat 29 Nov 2025 14:00:39 +0000 ROA not after: Fri 27 Feb 2026 14:00:39 +0000 asID: 7018 IP address blocks: 149.143.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:05:70:b2:88:03:53:05:32:a2:b8:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 29 14:00:39 2025 GMT Not After : Feb 27 14:00:39 2026 GMT Subject: CN=b1ba65a4-2e82-475c-8a84-b955974acda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:81:90:bc:a1:cf:85:21:87:a2:ac:df:fd: fd:8e:bd:1f:51:ac:52:6a:46:d1:f3:39:87:90:bc: f8:52:68:18:27:c8:f5:7f:2e:ea:3a:de:c5:e7:50: 83:a9:b8:ec:bb:38:69:f6:78:85:ee:f2:81:f7:b6: b8:df:e2:da:48:63:cb:d5:d3:96:22:a8:11:7b:95: 25:ce:ca:d1:ed:c5:ad:8d:68:bd:3c:34:f8:65:76: be:88:10:6f:58:62:3b:06:e9:e9:e5:95:5e:25:90: cb:a1:8e:c8:b8:45:6c:69:91:c4:d0:aa:ad:ff:1b: 62:b2:5f:1d:9e:80:c1:10:26:10:93:80:c7:2c:7b: 0a:55:9a:d3:c7:68:64:dc:46:61:5b:cb:3e:be:ca: 38:6a:05:e4:a0:d6:50:04:27:cf:b5:c2:ff:ea:b1: 88:14:a6:bd:63:f0:55:5c:71:ba:ad:ff:79:84:eb: 7b:dc:eb:a4:01:c9:f8:63:44:11:2a:88:46:cc:9f: 2a:79:26:9e:2b:e9:61:20:9c:44:13:93:bb:fa:f3: b2:b7:01:eb:77:99:74:1a:36:de:33:9a:c9:1f:0e: 50:ca:b2:80:42:9f:d4:9c:54:e7:df:e6:41:62:16: 71:7b:a4:52:4c:c9:f0:1c:d3:84:4a:44:ee:4e:22: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7B:77:DC:7C:39:15:33:28:65:9C:F3:C7:E8:96:17:55:94:ED:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/73a2c8da-7c2b-3fa0-8c44-3146b6b9d83d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:f5:2c:98:a6:8d:7e:27:80:07:36:1c:f5:ea:b4:2f:96:2a: e3:2a:2d:4d:ff:e6:c6:14:f5:d7:b7:aa:51:bc:0b:cc:c9:9a: 26:9e:b5:d4:c5:05:ee:0a:65:9d:7b:48:63:03:67:ff:5b:44: 30:cb:a7:ef:7f:10:67:28:94:43:73:32:9c:9c:4a:07:4c:ba: 4c:92:00:dc:aa:7f:78:86:77:ba:8d:90:2a:18:00:3b:fb:54: 72:67:ec:cd:df:f5:4c:97:45:97:8f:ab:59:c3:31:48:da:9e: 7b:ca:88:b2:72:6f:65:14:23:67:ab:ce:00:75:6e:a4:0d:0e: 2a:66:c0:8a:9c:df:7e:c7:50:1b:de:eb:38:18:41:fe:06:52: 39:23:ad:77:35:2d:67:06:7b:6a:d6:b4:75:05:bb:31:54:03: ac:9d:77:e5:0e:7b:3a:aa:5f:e1:c7:1d:9f:4c:4e:aa:39:52: 3d:71:3b:f7:06:b7:de:0e:a3:1d:e8:d2:3f:d3:bb:15:1d:12: b8:fe:f1:c6:0f:f5:76:e9:fe:4d:80:af:80:45:27:e0:aa:51: cf:98:70:a0:5e:1c:4d:b9:76:83:27:9e:7e:68:1d:a5:2c:e9: 6b:db:3e:2d:54:1d:0b:dd:6f:00:4c:c5:e5:e8:28:d9:15:0c: c1:17:eb:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwFcLKIA1MFMqK434AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTEyOTE0MDAzOVoXDTI2MDIyNzE0MDAzOVowLzEtMCsGA1UEAxMk YjFiYTY1YTQtMmU4Mi00NzVjLThhODQtYjk1NTk3NGFjZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv+BkLyhz4Uhh6Ks3/39jr0fUaxSakbR8zmH kLz4UmgYJ8j1fy7qOt7F51CDqbjsuzhp9niF7vKB97a43+LaSGPL1dOWIqgRe5Ul zsrR7cWtjWi9PDT4ZXa+iBBvWGI7Bunp5ZVeJZDLoY7IuEVsaZHE0Kqt/xtisl8d noDBECYQk4DHLHsKVZrTx2hk3EZhW8s+vso4agXkoNZQBCfPtcL/6rGIFKa9Y/BV XHG6rf95hOt73OukAcn4Y0QRKohGzJ8qeSaeK+lhIJxEE5O7+vOytwHrd5l0Gjbe M5rJHw5QyrKAQp/UnFTn3+ZBYhZxe6RSTMnwHNOESkTuTiKbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ7d9x8ORUzKGWc88folhdVlO1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzNhMmM4ZGEtN2MyYi0z ZmEwLThjNDQtMzE0NmI2YjlkODNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb1LJimjX4ngAc2HPXqtC+WKuMqLU3/5sYU9de3qlG8C8zJmiaetdTF Be4KZZ17SGMDZ/9bRDDLp+9/EGcolENzMpycSgdMukySANyqf3iGd7qNkCoYADv7 VHJn7M3f9UyXRZePq1nDMUjannvKiLJyb2UUI2erzgB1bqQNDipmwIqc337HUBve 6zgYQf4GUjkjrXc1LWcGe2rWtHUFuzFUA6ydd+UOezqqX+HHHZ9MTqo5Uj1xO/cG t94Oox3o0j/TuxUdErj+8cYP9Xbp/k2Ar4BFJ+CqUc+YcKBeHE25doMnnn5oHaUs 6WvbPi1UHQvdbwBMxeXoKNkVDMEX67g= -----END CERTIFICATE-----Generated at Sat Nov 29 22:31:07 2025 by rpki-client