This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json) Hash identifier: NWMQiloOs9zJrCPympGHTMYdg3qS5CMD+yQhhDWNWO4= Subject key identifier: 73:C3:80:EC:24:FE:8F:E6:3D:BF:3F:CD:F2:E1:16:9E:11:DF:07:C0 Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Certificate serial: 010D0C9F4328584C242650B8B690F58D215FE180 Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 25944 IP address blocks: 23.157.168.0/24 maxlen: 24 2602:814:d000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:50:b8:b6:90:f5:8d:21:5f:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=4f63be23-2866-4818-9842-496cd5150925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:bd:66:3f:60:b4:fb:38:0b:24:9e:5e:a5: 70:bd:c8:c0:aa:85:cc:95:14:e9:e2:ef:06:bc:e2: 2f:32:4f:b3:5b:51:a8:c1:b6:97:f9:49:a8:7b:1f: 77:9c:34:dc:c7:da:9b:b3:04:49:0b:ee:0c:fd:cc: 21:fa:cb:36:c6:20:d5:d8:bd:44:f3:92:85:44:77: eb:60:16:69:13:47:85:30:59:f9:77:e4:a1:12:26: 20:97:90:bd:02:e1:50:20:a1:4c:1d:c8:26:b1:57: 31:3d:f2:aa:e4:9e:ae:33:28:a2:ab:88:ff:d5:5b: 45:9b:ec:e3:62:51:ff:40:5c:a0:88:b1:bc:70:da: 43:45:09:b0:08:1c:bd:29:f4:b7:c2:b7:89:7f:09: b0:e8:14:17:9c:c8:2e:11:70:30:24:54:13:b9:71: 0b:36:1f:d6:0b:4c:e4:37:0b:e7:ab:24:1f:72:60: 89:e8:4b:ae:15:dd:2b:d7:fa:01:fd:8d:ed:e8:9a: ec:04:7a:66:c1:dd:f7:3b:ba:6d:5f:f4:ab:c2:67: 52:e9:6d:88:15:02:c6:5e:f0:6b:9b:26:d0:07:47: 0c:33:8d:f4:e1:39:1e:6f:04:e4:50:3d:6e:1c:6b: 45:0e:f7:08:48:d6:78:b0:69:3c:1a:6b:2f:4d:0b: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C3:80:EC:24:FE:8F:E6:3D:BF:3F:CD:F2:E1:16:9E:11:DF:07:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl X509v3 Authority Key Identifier: keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer sbgp-ipAddrBlock: critical IPv4: 23.157.168.0/24 IPv6: 2602:814:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:58:79:cb:08:df:ed:71:57:c4:17:8c:e8:3e:a8:d2:3b:53: d1:4a:1a:54:26:fd:18:10:e9:eb:0b:67:31:eb:9c:40:08:d1: 99:9d:a3:50:1c:0a:2e:61:e7:57:ce:3b:1b:95:ce:df:15:42: cc:23:ad:01:80:0f:00:6e:82:54:1e:1f:ff:17:01:f6:45:f0: 44:30:32:8a:78:aa:4f:1e:dc:46:1a:00:65:87:df:86:c9:07: 41:1a:2b:5b:75:e2:33:43:02:77:2e:2e:4e:b2:98:9e:46:ab: 21:2e:bd:c2:59:4f:2e:79:94:3e:a9:f0:72:f2:a5:82:7b:59: 2e:70:f7:ba:38:e1:77:b0:83:d0:c1:41:39:c0:7f:65:3f:74: e3:e2:fc:d0:52:90:0a:6f:83:86:9a:32:e2:18:44:2e:bb:69: 99:97:91:a3:76:8d:a1:2d:c2:7f:e4:09:11:f6:b7:c8:3e:a3: 70:4d:0f:44:af:b4:6a:e5:ba:f8:35:29:4d:70:2d:e2:ea:88: 63:b5:a7:e3:70:f8:a8:bc:ce:2e:4c:a4:0c:70:03:38:f6:31: df:93:50:0b:13:c6:1f:7d:9c:61:5d:aa:59:a2:8c:7e:8d:6c: 14:d9:b7:38:41:22:56:04:1a:03:b2:97:0b:a2:60:d8:e3:fe: 4c:c0:aa:dc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEwkJlC4tpD1jSFf4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ4YmYyYzgtN2YyYi00ZTJiLWE2NTMtMWU4OWVkMmNh OGI2MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk NGY2M2JlMjMtMjg2Ni00ODE4LTk4NDItNDk2Y2Q1MTUwOTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbq9Zj9gtPs4CySeXqVwvcjAqoXMlRTp4u8G vOIvMk+zW1GowbaX+Umoex93nDTcx9qbswRJC+4M/cwh+ss2xiDV2L1E85KFRHfr YBZpE0eFMFn5d+ShEiYgl5C9AuFQIKFMHcgmsVcxPfKq5J6uMyiiq4j/1VtFm+zj YlH/QFygiLG8cNpDRQmwCBy9KfS3wreJfwmw6BQXnMguEXAwJFQTuXELNh/WC0zk NwvnqyQfcmCJ6EuuFd0r1/oB/Y3t6JrsBHpmwd33O7ptX/SrwmdS6W2IFQLGXvBr mybQB0cMM4304TkebwTkUD1uHGtFDvcISNZ4sGk8GmsvTQsDpwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHPDgOwk/o/mPb8/zfLhFp4R3wfAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDhi ZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5ZWQyY2E4YjYvMmYxNjBhMGUtYTEyMy0z YTcyLTk5ZTEtZDY2OTQ5NmJkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ4YmYyYzgtN2YyYi00ZTJiLWE2 NTMtMWU4OWVkMmNhOGI2LzQ0OGJmMmM4LTdmMmItNGUyYi1hNjUzLTFlODllZDJj YThiNi5jcmwwHwYDVR0jBBgwFoAUMpzTTWQriq2VApMNbBmQeCPWaY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDhiZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5 ZWQyY2E4YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF52oMA8E AgACMAkDBwQmAggU0AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADlh5ywjf7XFXxBeM6D6o0jtT0UoaVCb9 GBDp6wtnMeucQAjRmZ2jUBwKLmHnV847G5XO3xVCzCOtAYAPAG6CVB4f/xcB9kXw RDAyiniqTx7cRhoAZYffhskHQRorW3XiM0MCdy4uTrKYnkarIS69wllPLnmUPqnw cvKlgntZLnD3ujjhd7CD0MFBOcB/ZT904+L80FKQCm+Dhpoy4hhELrtpmZeRo3aN oS3Cf+QJEfa3yD6jcE0PRK+0auW6+DUpTXAt4uqIY7Wn43D4qLzOLkykDHADOPYx 35NQCxPGH32cYV2qWaKMfo1sFNm3OEEiVgQaA7KXC6Jg2OP+TMCq3A== -----END CERTIFICATE-----Generated at Fri Jan 9 18:49:58 2026 by rpki-client