This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa File: a51333c0-b920-37c3-ac71-0834c73fd5c3.roa (raw, json) Hash identifier: aWjlixADE/U6uP67hiqCphk8MofUYiEgJuljqJvdC2A= Subject key identifier: 75:EF:25:E8:3D:76:2B:3C:92:C1:0E:6A:8D:CD:62:43:65:BA:0D:CF Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C22C0CA50D87237EBD9CB7A90 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 396590 IP address blocks: 198.41.0.4/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:ca:50:d8:72:37:eb:d9:cb:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=d9a9bebf-b19c-424e-bed5-0b9e9644d26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d3:40:44:7c:96:1c:d4:11:ad:fc:20:e1:f5: df:4b:53:21:92:64:75:1a:eb:01:fb:49:ef:45:97: fc:9c:e3:bd:5d:04:d6:ac:b3:f5:82:85:93:bb:95: f9:9c:8b:2f:17:de:54:3d:a7:49:93:9a:6d:2a:9a: 2c:ae:cc:ca:78:ec:6f:ff:46:d4:33:02:eb:71:2c: 02:68:dd:9d:06:ce:c0:04:55:04:18:ed:ea:1f:c8: 27:35:2a:43:60:af:a6:cd:80:2d:35:d1:8c:d2:1e: db:1a:5e:e2:29:21:1e:c0:56:27:2a:0b:a8:85:7e: f7:85:d5:33:60:38:82:4b:06:6b:9c:65:5b:93:7b: e1:4e:52:93:90:a4:2d:23:4e:87:e3:4d:4e:0e:d7: 3e:cb:93:d1:f7:dc:fd:4e:c3:51:f1:77:5b:d2:36: 79:26:eb:8c:28:0b:b8:c5:d5:16:d8:19:85:6d:94: 9a:7a:9b:bb:4f:32:5d:a0:94:33:c7:34:04:0f:98: 23:c9:e8:b0:26:16:90:41:22:2a:e9:12:9a:81:ea: ca:77:5c:b8:ff:ea:55:c0:13:fd:8e:f4:c7:0b:7c: 1d:b2:d0:a9:77:a5:59:37:b4:78:74:ae:b1:ba:6d: 86:68:82:0a:e2:d1:d7:3a:d7:5d:00:0d:e6:6b:cb: b6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:25:E8:3D:76:2B:3C:92:C1:0E:6A:8D:CD:62:43:65:BA:0D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a51333c0-b920-37c3-ac71-0834c73fd5c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.4/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ff:3e:5d:4d:d7:a8:41:98:a1:e5:18:5f:73:b0:af:6d:3a: c2:88:f3:e6:75:02:cb:5b:9a:4a:42:ef:f5:bd:1b:9f:e2:f6: 14:83:eb:bd:79:99:33:ad:6f:35:66:ec:18:c2:f0:63:5e:3d: 34:00:01:8f:a4:f7:a5:8c:9d:1f:86:4c:08:53:ea:c4:da:db: 16:12:46:4b:62:0c:ed:7f:b1:ce:07:d7:96:aa:c0:a0:aa:4f: c5:39:99:6e:6d:b4:23:fd:44:02:f6:35:c5:95:55:5d:d1:9e: 4f:ad:ef:04:2d:1b:55:fd:a4:e1:b0:12:39:5b:c0:fe:80:d4: c6:c0:86:e7:8f:a1:27:91:19:27:28:f2:42:ce:b0:21:27:5a: 6f:af:2f:b7:17:64:dc:a2:89:1e:e5:65:1e:2c:75:fd:62:69: 64:2d:52:da:d1:b7:57:4a:55:cf:9b:0d:59:94:37:8d:27:e5: 9b:76:dd:98:9d:8f:bc:67:59:2e:c9:c7:95:67:35:af:1d:5e: ac:1d:4b:28:2c:7c:dd:5e:43:81:69:94:01:0d:bd:47:b7:12: 25:35:b3:d0:f5:5b:94:dc:a7:58:8c:e5:9e:36:8f:0a:88:53: 2a:8f:d3:49:f3:91:11:3a:0b:aa:c3:ee:08:e2:4c:0d:78:22: 18:de:2e:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEwiwMpQ2HI369nLepAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZDlhOWJlYmYtYjE5Yy00MjRlLWJlZDUtMGI5ZTk2NDRkMjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntNARHyWHNQRrfwg4fXfS1MhkmR1GusB+0nv RZf8nOO9XQTWrLP1goWTu5X5nIsvF95UPadJk5ptKposrszKeOxv/0bUMwLrcSwC aN2dBs7ABFUEGO3qH8gnNSpDYK+mzYAtNdGM0h7bGl7iKSEewFYnKguohX73hdUz YDiCSwZrnGVbk3vhTlKTkKQtI06H401ODtc+y5PR99z9TsNR8Xdb0jZ5JuuMKAu4 xdUW2BmFbZSaepu7TzJdoJQzxzQED5gjyeiwJhaQQSIq6RKagerKd1y4/+pVwBP9 jvTHC3wdstCpd6VZN7R4dK6xum2GaIIK4tHXOtddAA3ma8u2owIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHXvJeg9dis8ksEOao3NYkNlug3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTUxMzMzYzAtYjkyMC0z N2MzLWFjNzEtMDgzNGM3M2ZkNWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBL/z5dTdeoQZih5Rhfc7CvbTrCiPPmdQLLW5pKQu/1vRuf4vYUg+u9 eZkzrW81ZuwYwvBjXj00AAGPpPeljJ0fhkwIU+rE2tsWEkZLYgztf7HOB9eWqsCg qk/FOZlubbQj/UQC9jXFlVVd0Z5Pre8ELRtV/aThsBI5W8D+gNTGwIbnj6EnkRkn KPJCzrAhJ1pvry+3F2Tcooke5WUeLHX9YmlkLVLa0bdXSlXPmw1ZlDeNJ+Wbdt2Y nY+8Z1kuyceVZzWvHV6sHUsoLHzdXkOBaZQBDb1HtxIlNbPQ9VuU3KdYjOWeNo8K iFMqj9NJ85EROguqw+4I4kwNeCIY3i5d -----END CERTIFICATE-----Generated at Sun Dec 14 11:49:29 2025 by rpki-client