This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa File: 1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa (raw, json) Hash identifier: KgIuluk2QTwKnp80FR6IUgpgl4qrPkVB7Yc6nuMmYu4= Subject key identifier: 69:42:84:30:08:50:6D:64:B0:B2:AB:7E:26:8F:7B:FF:4C:2E:5E:39 Certificate issuer: /CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Certificate serial: 010D0C9F4328584BEAEB332C6811AD8BC90ECC80 Authority key identifier: 1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 0 IP address blocks: 149.112.0.0/24 maxlen: 32 2001:504:104::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:33:2c:68:11:ad:8b:c9:0e:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5012f96a-2af5-4bb0-9c98-db8b9a8a9c48 Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=a14804a3-55b0-4937-b050-04eeb22bac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:49:96:da:16:46:70:2f:75:1d:9d:cb:3f:da: a8:6c:b2:bb:57:e5:06:30:c3:2a:22:18:6d:0d:2c: 18:c2:00:06:22:6f:28:8a:7e:24:7a:8e:28:c2:70: ed:d8:eb:66:36:94:b8:e4:c3:c3:24:22:6c:e3:9c: 3d:5f:73:9a:6a:f5:53:07:f5:c2:d1:de:1d:0f:b4: 16:d7:de:ba:61:8c:57:86:ed:f5:6d:61:4a:0a:14: e2:63:3b:0e:ef:b0:4c:92:0d:e7:8a:6c:c2:b3:e1: 0c:71:a8:a2:a9:98:15:6d:36:a8:37:fa:e2:04:35: 35:9c:94:cf:a0:30:88:94:3d:10:88:32:53:9b:ec: 94:86:4f:51:75:a2:fe:4a:bb:3f:3c:f8:3d:93:4e: c0:3d:04:12:a2:d3:ba:46:9a:01:4f:55:1d:47:55: 1f:1d:ea:95:a8:24:fc:2f:76:4d:69:2f:6c:05:1c: eb:0f:31:92:73:0b:d8:cd:4b:c5:c2:d0:1c:d0:21: 7c:bd:75:70:8b:79:19:c4:1d:8c:69:c4:a7:de:f7: c2:4e:4a:15:df:80:ac:2b:ce:94:95:7b:ac:40:0b: 38:2f:e6:70:e3:84:df:49:ec:b6:8d:42:c1:bc:aa: a3:46:e7:3a:44:a0:07:35:c0:ae:be:c1:f3:6f:bc: 68:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:42:84:30:08:50:6D:64:B0:B2:AB:7E:26:8F:7B:FF:4C:2E:5E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/1f310779-9b2a-3cc4-aea4-e31521d28f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.crl X509v3 Authority Key Identifier: keyid:1E:5F:8F:54:BB:C2:5B:64:9A:E2:E1:51:2F:E5:36:48:FA:F5:FA:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5012f96a-2af5-4bb0-9c98-db8b9a8a9c48.cer sbgp-ipAddrBlock: critical IPv4: 149.112.0.0/24 IPv6: 2001:504:104::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c2:3b:04:89:0a:a4:b9:6d:f7:41:73:8c:8e:97:f2:9f:42: 82:0a:93:bf:bf:d1:ce:01:d0:73:2f:9b:d4:93:bf:1d:4f:11: 8d:6d:fe:06:5f:8e:3c:de:a7:d0:e7:79:e8:55:58:c4:b2:f5: a3:8a:21:81:00:d7:7d:6d:90:bf:35:ef:a0:c6:60:e0:30:99: 83:ea:25:b2:26:71:76:b0:9d:0c:96:96:40:72:62:c6:6a:dc: df:6a:5b:db:73:e0:a9:60:a2:93:50:59:24:24:69:06:58:da: c3:23:9d:3c:04:bd:4b:03:bb:21:da:eb:32:a5:98:25:a7:a1: 45:6a:6b:c3:84:45:dc:69:ad:79:c7:3c:6a:b9:b3:2d:c7:77: b5:d2:3f:a5:9a:fb:28:32:56:45:3d:de:70:71:8c:02:f5:0d: 6c:6f:1d:10:02:94:72:0d:1c:04:01:b5:40:db:40:d9:fc:46: a9:46:71:a5:a0:c7:69:80:48:33:a8:9a:c7:25:1d:73:cd:9c: 22:7e:29:ed:c0:57:d8:c8:b6:19:b8:05:04:70:4d:e2:db:fe: 57:be:7c:c2:e4:fa:bf:47:5b:cc:cb:91:55:60:06:7c:71:88: 17:1b:fa:ab:70:a2:b2:a9:25:f5:f9:4b:80:b4:40:23:a7:29: 67:f6:63:5a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEvq6zMsaBGti8kOzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAxMmY5NmEtMmFmNS00YmIwLTljOTgtZGI4YjlhOGE5 YzQ4MB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk YTE0ODA0YTMtNTViMC00OTM3LWIwNTAtMDRlZWIyMmJhYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0mW2hZGcC91HZ3LP9qobLK7V+UGMMMqIhht DSwYwgAGIm8oin4keo4ownDt2OtmNpS45MPDJCJs45w9X3OaavVTB/XC0d4dD7QW 1966YYxXhu31bWFKChTiYzsO77BMkg3nimzCs+EMcaiiqZgVbTaoN/riBDU1nJTP oDCIlD0QiDJTm+yUhk9RdaL+Srs/PPg9k07APQQSotO6RpoBT1UdR1UfHeqVqCT8 L3ZNaS9sBRzrDzGScwvYzUvFwtAc0CF8vXVwi3kZxB2MacSn3vfCTkoV34CsK86U lXusQAs4L+Zw44TfSey2jULBvKqjRuc6RKAHNcCuvsHzb7xo5wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGlChDAIUG1ksLKrfiaPe/9MLl45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MDEy Zjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhiOWE4YTljNDgvMWYzMTA3NzktOWIyYS0z Y2M0LWFlYTQtZTMxNTIxZDI4ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTAxMmY5NmEtMmFmNS00YmIwLTlj OTgtZGI4YjlhOGE5YzQ4LzUwMTJmOTZhLTJhZjUtNGJiMC05Yzk4LWRiOGI5YThh OWM0OC5jcmwwHwYDVR0jBBgwFoAUHl+PVLvCW2Sa4uFRL+U2SPr1+i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MDEyZjk2YS0yYWY1LTRiYjAtOWM5OC1kYjhi OWE4YTljNDguY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAAMA8E AgACMAkDBwAgAQUEAQQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAacI7BIkKpLlt90FzjI6X8p9CggqTv7/R zgHQcy+b1JO/HU8RjW3+Bl+OPN6n0Od56FVYxLL1o4ohgQDXfW2QvzXvoMZg4DCZ g+olsiZxdrCdDJaWQHJixmrc32pb23PgqWCik1BZJCRpBljawyOdPAS9SwO7Idrr MqWYJaehRWprw4RF3Gmtecc8armzLcd3tdI/pZr7KDJWRT3ecHGMAvUNbG8dEAKU cg0cBAG1QNtA2fxGqUZxpaDHaYBIM6iaxyUdc82cIn4p7cBX2Mi2GbgFBHBN4tv+ V758wuT6v0dbzMuRVWAGfHGIFxv6q3Cisqkl9flLgLRAI6cpZ/ZjWg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:36 2025 by rpki-client