This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/3e9994e9-798f-3814-bff8-f85d48a80fac.roa File: 3e9994e9-798f-3814-bff8-f85d48a80fac.roa (raw, json) Hash identifier: L/dVbhtDWonozt1V+/WUqxUvdFj2K3IqaOfUexsl2/U= Subject key identifier: 69:C2:D3:94:94:E3:C5:E5:93:F5:49:42:33:E2:91:9C:A6:AC:4A:9E Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BE6BB1FB5D65BD5B44FBA5A60 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/3e9994e9-798f-3814-bff8-f85d48a80fac.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 14618 IP address blocks: 107.151.224.0/21 maxlen: 21 107.151.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:1f:b5:d6:5b:d5:b4:4f:ba:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=74dabe80-9f6a-4024-a9cc-f90e7d3aff4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:db:a4:22:b4:8e:8d:bb:ae:b7:68:6d:93: d2:ad:d7:b4:5b:7a:0c:e7:60:a4:9d:b1:20:71:b9: 82:7d:d1:2a:24:7c:9d:1a:46:19:9d:50:e6:6c:84: df:69:34:8d:0b:6a:da:a4:c2:2b:bf:fd:32:eb:53: e7:38:62:0e:e0:53:79:ff:8d:f2:2f:2f:95:01:1d: 1f:dc:de:9b:d5:cf:72:3f:3a:bd:1a:4a:96:6c:7a: 61:61:88:50:45:ca:ab:7d:b3:84:08:53:65:37:4e: c6:a5:5c:4f:8e:99:8b:68:51:fc:27:22:db:7d:39: 3f:39:23:02:bd:75:81:63:9f:43:0c:1f:4c:b8:0d: aa:6c:39:6c:79:43:48:73:00:08:0b:b0:21:09:2e: 1e:73:0f:83:0a:cc:4c:4b:95:ce:c2:09:2a:bd:d5: 4e:9c:e3:09:7c:9a:82:ce:bf:28:16:e9:f0:b8:b2: 55:69:c5:38:cf:d9:e0:1b:58:c8:d1:12:d7:12:e4: 35:6f:08:b3:e1:29:50:0d:b2:09:5f:08:0f:70:20: 40:bb:51:50:d5:e7:d9:a8:cf:c6:b5:eb:1c:e8:31: e9:b1:4e:b0:dc:33:ed:5d:c2:21:41:2d:0f:5a:4e: 19:a0:ae:7f:98:83:1c:90:2f:fb:5b:3b:a6:60:9d: d2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C2:D3:94:94:E3:C5:E5:93:F5:49:42:33:E2:91:9C:A6:AC:4A:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/3e9994e9-798f-3814-bff8-f85d48a80fac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:09:c4:b5:dd:a2:8f:1a:e7:e1:be:f5:6b:d0:71:85:44:26: b9:21:38:10:fa:3b:bd:e8:ad:9d:84:21:2c:31:d4:c1:ff:bb: 7d:1e:91:98:c4:96:d5:89:11:d1:60:5a:eb:56:31:45:5c:d7: c7:4d:77:13:04:4b:29:26:df:5f:dc:d7:bb:c7:71:61:74:2b: 33:7b:1e:38:41:e5:66:60:e9:a7:9a:3a:ee:29:f6:90:95:77: 08:43:36:87:34:1d:6b:d8:28:04:5e:05:f6:2d:e6:21:ba:60: dc:cb:72:cb:37:a5:74:ad:d1:84:c4:3b:00:98:cf:e8:c3:3d: bb:5a:29:2c:af:0d:f0:25:fe:3d:ba:f3:27:92:6d:b9:70:19: f9:b9:50:b4:da:f1:3f:9b:9b:30:08:53:d3:85:9e:b1:59:a5: f8:93:84:ef:90:08:65:d2:67:f5:34:49:96:ac:84:fc:5d:d4: d5:06:18:60:18:91:ca:fd:64:0c:4a:39:8a:bb:d3:1b:9a:04: 2e:c0:b8:d8:ea:11:57:b3:70:07:18:7c:47:d5:f5:3d:e7:b1: 59:53:5a:a8:2a:14:e3:03:0f:8d:af:3e:56:4d:30:26:af:80: 3a:13:3c:7b:96:06:74:a6:e7:f9:ce:f7:87:e1:65:45:b5:34: 60:2d:e8:9b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEvmux+11lvVtE+6WmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk NzRkYWJlODAtOWY2YS00MDI0LWE5Y2MtZjkwZTdkM2FmZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkPbpCK0jo27rrdobZPSrde0W3oM52CknbEg cbmCfdEqJHydGkYZnVDmbITfaTSNC2rapMIrv/0y61PnOGIO4FN5/43yLy+VAR0f 3N6b1c9yPzq9GkqWbHphYYhQRcqrfbOECFNlN07GpVxPjpmLaFH8JyLbfTk/OSMC vXWBY59DDB9MuA2qbDlseUNIcwAIC7AhCS4ecw+DCsxMS5XOwgkqvdVOnOMJfJqC zr8oFunwuLJVacU4z9ngG1jI0RLXEuQ1bwiz4SlQDbIJXwgPcCBAu1FQ1efZqM/G tesc6DHpsU6w3DPtXcIhQS0PWk4ZoK5/mIMckC/7WzumYJ3SaQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGnC05SU48Xlk/VJQjPikZymrEqeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvM2U5OTk0ZTktNzk4Zi0z ODE0LWJmZjgtZjg1ZDQ4YTgwZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAewnEtd2ijxrn4b71a9BxhUQmuSE4EPo7veitnYQhLDHU wf+7fR6RmMSW1YkR0WBa61YxRVzXx013EwRLKSbfX9zXu8dxYXQrM3seOEHlZmDp p5o67in2kJV3CEM2hzQda9goBF4F9i3mIbpg3MtyyzeldK3RhMQ7AJjP6MM9u1op LK8N8CX+PbrzJ5JtuXAZ+blQtNrxP5ubMAhT04WesVml+JOE75AIZdJn9TRJlqyE /F3U1QYYYBiRyv1kDEo5irvTG5oELsC42OoRV7NwBxh8R9X1PeexWVNaqCoU4wMP ja8+Vk0wJq+AOhM8e5YGdKbn+c73h+FlRbU0YC3omw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:30:25 2025 by rpki-client