This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/324e30d3-1151-34cc-9873-657e2ff5ee20.roa File: 324e30d3-1151-34cc-9873-657e2ff5ee20.roa (raw, json) Hash identifier: ZHY4rev34kq9igHWR1R6UsA94yE7clQkDxDyDPWsf2Y= Subject key identifier: DC:1D:FA:8C:FE:5B:34:B0:31:96:91:B0:93:81:E9:25:79:8A:BE:24 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0F633592F43E2EBA78190 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/324e30d3-1151-34cc-9873-657e2ff5ee20.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396614 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:f6:33:59:2f:43:e2:eb:a7:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=c2770c6d-f154-4b24-b611-c79e2cc318f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:30:8e:89:1c:f3:3a:58:d8:93:b0:40:a2:40: 6c:37:d6:11:ac:49:ca:18:16:95:72:a1:7a:ce:71: 08:30:2c:be:09:92:5f:6d:d3:33:fc:00:d4:f8:1a: dc:d8:80:b2:bf:b4:e2:19:75:cc:e8:42:75:3a:d1: 63:08:7c:c8:31:c8:2a:4f:6b:41:c5:dc:b3:12:c9: 18:7f:26:c2:2a:82:4c:cd:91:33:43:28:3a:a7:33: 4f:d5:74:fc:78:8c:c9:2d:e5:54:39:f8:64:e0:7e: 14:55:9a:f9:b5:ed:21:ca:7a:ab:f6:d5:db:97:00: 2f:74:43:24:f0:45:ed:c9:36:fe:c3:a6:8b:c8:46: d1:1e:41:db:1d:ad:0d:45:f8:ef:fb:88:17:e9:b8: 1d:e9:64:8a:bd:a1:c0:12:7b:07:70:7f:b6:5c:66: 91:d2:22:b9:14:ae:59:4e:1d:09:a9:2c:73:e5:a5: 80:c3:5e:1b:60:bf:60:3c:ec:e8:a9:79:01:03:5c: 13:cc:31:52:d8:f5:4c:1f:84:de:59:69:56:52:bd: dc:88:2c:ca:de:78:11:65:45:0e:d6:80:20:5f:59: b9:2f:2d:f1:c1:dc:bc:e1:80:c1:2d:e1:98:ad:50: 12:08:97:50:d0:87:c9:cb:d3:c8:2b:fa:54:b3:34: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1D:FA:8C:FE:5B:34:B0:31:96:91:B0:93:81:E9:25:79:8A:BE:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/324e30d3-1151-34cc-9873-657e2ff5ee20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:db:c4:4c:df:cc:19:45:2a:f4:52:0e:72:0b:24:8f:56:c4: 4d:0b:84:2b:15:36:35:0e:46:dd:1e:15:dd:e8:2c:f1:2a:45: 83:e4:33:e6:b5:6d:4e:69:c3:97:48:66:d5:17:66:35:f9:77: b1:a5:ee:ec:89:4f:ca:99:30:03:88:c2:01:e1:ce:a0:05:fd: 52:61:2c:b8:1b:7d:69:68:5f:f4:c0:05:08:ff:e2:b6:47:80: d9:54:bc:85:79:f1:e4:a3:e7:3c:9b:f2:7c:ad:78:e9:43:29: 73:06:d7:96:e9:23:c6:df:67:a9:90:95:db:f3:e1:4e:ba:af: e8:e2:d1:91:f6:d1:41:4f:d7:a7:35:57:5a:d6:01:e7:c5:d1: 3c:69:a5:31:b0:08:09:ba:ab:82:20:c1:df:e8:e7:35:10:51: ef:76:f3:fd:fb:6a:46:7e:b4:6b:b5:25:e7:2a:ce:59:30:16: 53:b7:39:54:49:e7:62:59:0d:0b:d0:31:8e:81:5b:eb:3e:1e: e2:ec:f0:17:29:7e:66:3d:da:c4:1a:99:6c:a4:ad:19:09:7b: 0d:2f:6d:f0:e3:c1:d4:57:02:4d:02:1a:a6:8f:08:2c:fa:5b: fa:31:8f:bb:35:ca:0a:30:5a:35:9d:02:db:e2:a2:b5:e5:72: 35:0b:3c:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwPYzWS9D4uungZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk YzI3NzBjNmQtZjE1NC00YjI0LWI2MTEtYzc5ZTJjYzMxOGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijCOiRzzOljYk7BAokBsN9YRrEnKGBaVcqF6 znEIMCy+CZJfbdMz/ADU+Brc2ICyv7TiGXXM6EJ1OtFjCHzIMcgqT2tBxdyzEskY fybCKoJMzZEzQyg6pzNP1XT8eIzJLeVUOfhk4H4UVZr5te0hynqr9tXblwAvdEMk 8EXtyTb+w6aLyEbRHkHbHa0NRfjv+4gX6bgd6WSKvaHAEnsHcH+2XGaR0iK5FK5Z Th0JqSxz5aWAw14bYL9gPOzoqXkBA1wTzDFS2PVMH4TeWWlWUr3ciCzK3ngRZUUO 1oAgX1m5Ly3xwdy84YDBLeGYrVASCJdQ0IfJy9PIK/pUszT9BQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNwd+oz+WzSwMZaRsJOB6SV5ir4kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMzI0ZTMwZDMtMTE1MS0z NGNjLTk4NzMtNjU3ZTJmZjVlZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAv28RM38wZRSr0Ug5yCySPVsRNC4QrFTY1DkbdHhXd6CzxKkWD5DPm tW1OacOXSGbVF2Y1+Xexpe7siU/KmTADiMIB4c6gBf1SYSy4G31paF/0wAUI/+K2 R4DZVLyFefHko+c8m/J8rXjpQylzBteW6SPG32epkJXb8+FOuq/o4tGR9tFBT9en NVda1gHnxdE8aaUxsAgJuquCIMHf6Oc1EFHvdvP9+2pGfrRrtSXnKs5ZMBZTtzlU SediWQ0L0DGOgVvrPh7i7PAXKX5mPdrEGplspK0ZCXsNL23w48HUVwJNAhqmjwgs +lv6MY+7NcoKMFo1nQLb4qK15XI1Czwv -----END CERTIFICATE-----Generated at Sun Dec 14 11:50:40 2025 by rpki-client