This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa File: 054b2fde-6806-352d-be70-ec8e030d1725.roa (raw, json) Hash identifier: /5ekdLP0hgiJenojPBZo/wWYK4MBgOcmkzVn7evXCus= Subject key identifier: 84:E7:96:FF:78:98:0D:BF:96:E5:58:2E:B7:9B:94:67:44:9A:D1:B3 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BCD9B1D364A54EB7817896700 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa Signing time: Sun 09 Nov 2025 14:00:38 +0000 ROA not before: Sun 09 Nov 2025 14:00:38 +0000 ROA not after: Sat 07 Feb 2026 14:00:38 +0000 asID: 139285 IP address blocks: 107.151.236.0/24 maxlen: 24 107.151.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cd:9b:1d:36:4a:54:eb:78:17:89:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Nov 9 14:00:38 2025 GMT Not After : Feb 7 14:00:38 2026 GMT Subject: CN=21df3fb2-75f3-48a2-83a8-ad3258e638b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:c2:79:d0:cf:04:19:c2:b3:2b:81:56:80: 55:37:9a:dc:01:3a:e2:3f:33:08:d1:00:0c:e0:97: 6f:29:ca:a6:71:c2:3b:b9:41:ae:84:f7:a9:bd:13: b4:ad:c2:b7:1a:5e:de:77:92:12:60:41:5a:b0:b8: 34:13:8d:c6:dc:54:2e:f5:95:88:33:aa:82:15:b0: bf:3f:3d:b3:87:13:cf:a3:88:e7:57:54:0c:c7:15: ab:5b:09:31:31:75:80:bc:2b:60:a7:6d:52:d0:ed: 9a:1e:de:08:76:b5:ef:5f:c5:17:7b:51:a1:a8:89: 35:42:e2:23:14:8d:51:1e:f4:ec:b3:a0:dd:9c:40: b7:1f:4b:5d:11:fc:42:a4:d1:6d:ec:03:4c:c8:33: 03:3b:0b:1c:c1:0c:28:c8:45:aa:86:f7:ec:68:f3: 76:55:1b:35:40:1c:1a:18:bb:f2:f2:a8:be:f9:df: 48:d3:fe:f4:3c:7d:86:32:97:02:35:db:8f:44:4a: cf:2e:75:f5:4d:46:51:07:e6:71:96:c6:f3:28:57: f5:38:68:a6:6d:88:da:17:4d:cf:64:d4:ae:95:d2: 85:15:37:85:19:97:a1:8b:fe:4b:c5:0c:c4:b6:92: c1:df:0d:e2:aa:00:26:f9:54:51:cb:fd:d0:ad:a4: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E7:96:FF:78:98:0D:BF:96:E5:58:2E:B7:9B:94:67:44:9A:D1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/054b2fde-6806-352d-be70-ec8e030d1725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:50:01:8e:d9:2c:9d:2a:50:81:ce:d0:0a:a0:f1:5c:9c:02: b8:42:a8:40:87:05:85:56:62:de:71:3b:3a:88:ed:d2:22:5f: 8d:a1:1a:a4:02:c2:ed:77:48:0e:7f:fa:60:b2:ce:2f:98:ff: 49:ef:e1:b1:93:d4:1a:74:eb:62:0e:1b:7a:e1:fc:56:1c:0a: 33:0d:72:47:16:3f:1f:98:da:86:f0:5b:19:b5:f4:2b:94:5e: c9:ae:84:6c:c5:42:8b:1d:b4:ab:d6:3a:a1:ae:a8:71:a7:a9: c0:09:31:1b:6d:36:c6:29:c1:36:60:f5:b1:96:b5:74:4a:bb: c0:84:b7:ec:0a:16:03:f6:5b:59:31:a3:62:b5:5f:34:dd:6f: 53:78:23:94:93:60:20:40:2b:d6:b2:73:ef:13:75:a6:92:9f: d3:b6:df:d0:b4:fc:fe:54:4a:82:c2:f6:7c:1c:34:ab:8d:7f: 6e:63:50:b6:25:d5:9e:77:ef:3b:cf:b2:c8:0d:a3:3a:24:0e: 91:25:0c:f3:b7:b9:ab:d9:32:76:5e:06:23:76:b9:94:b3:cf: b6:0c:a6:c7:0a:4d:1c:83:b5:f3:bf:15:3c:9c:de:0a:50:35: df:5e:10:6b:0d:63:63:84:bf:97:7e:d1:31:bd:fb:da:fb:98: 89:25:5d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvNmx02SlTreBeJZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTEwOTE0MDAzOFoXDTI2MDIwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjFkZjNmYjItNzVmMy00OGEyLTgzYTgtYWQzMjU4ZTYzOGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRjCedDPBBnCsyuBVoBVN5rcATriPzMI0QAM 4JdvKcqmccI7uUGuhPepvRO0rcK3Gl7ed5ISYEFasLg0E43G3FQu9ZWIM6qCFbC/ Pz2zhxPPo4jnV1QMxxWrWwkxMXWAvCtgp21S0O2aHt4IdrXvX8UXe1GhqIk1QuIj FI1RHvTss6DdnEC3H0tdEfxCpNFt7ANMyDMDOwscwQwoyEWqhvfsaPN2VRs1QBwa GLvy8qi++d9I0/70PH2GMpcCNduPRErPLnX1TUZRB+ZxlsbzKFf1OGimbYjaF03P ZNSuldKFFTeFGZehi/5LxQzEtpLB3w3iqgAm+VRRy/3QraTL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITnlv94mA2/luVYLreblGdEmtGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMDU0YjJmZGUtNjgwNi0z NTJkLWJlNzAtZWM4ZTAzMGQxNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFQAY7ZLJ0qUIHO0Aqg8VycArhCqECHBYVWYt5xOzqI7dIiX42hGqQC wu13SA5/+mCyzi+Y/0nv4bGT1Bp062IOG3rh/FYcCjMNckcWPx+Y2obwWxm19CuU XsmuhGzFQosdtKvWOqGuqHGnqcAJMRttNsYpwTZg9bGWtXRKu8CEt+wKFgP2W1kx o2K1XzTdb1N4I5STYCBAK9ayc+8TdaaSn9O239C0/P5USoLC9nwcNKuNf25jULYl 1Z537zvPssgNozokDpElDPO3uavZMnZeBiN2uZSzz7YMpscKTRyDtfO/FTyc3gpQ Nd9eEGsNY2OEv5d+0TG9+9r7mIklXTI= -----END CERTIFICATE-----Generated at Sat Dec 6 04:41:35 2025 by rpki-client