This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa File: 0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa (raw, json) Hash identifier: +dpl2pyXHpr1Jh6GDxU9DBzB35AQM65VuwGahLiSJ7s= Subject key identifier: 16:73:67:5B:0E:07:D9:F6:B8:F5:36:CC:18:AF:DA:36:73:39:4A:F9 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584BC53B315A9AB9E2EFC148AD80 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:31:5a:9a:b9:e2:ef:c1:48:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=4c25e16f-e58d-4316-b469-8ae65e0c76e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:86:db:ed:32:b3:13:10:b5:d4:b7:bf:d4:42: eb:a2:94:f1:51:6d:e9:47:a4:a8:16:0a:c4:2e:e7: 63:87:df:46:f9:7b:1e:bb:ee:c0:b6:14:25:0c:a7: d9:34:15:29:34:38:b4:76:6a:c8:17:f7:c6:b6:44: 43:90:8d:e6:e5:db:c2:39:cd:bb:c2:39:b2:dc:97: 2d:0c:0e:8b:89:04:f2:4e:83:bf:98:3e:13:6f:bf: 04:2f:b4:d7:21:be:ae:4a:9b:e8:7c:3a:11:f5:61: 26:7d:d7:15:14:e3:fb:4b:5a:12:2b:85:25:68:0e: fa:d3:33:0e:19:cb:36:46:b3:ba:ec:04:47:30:61: be:78:ff:93:18:87:42:d7:b2:bc:3e:51:9c:1c:58: 2f:78:30:4e:e7:ef:94:e1:09:fa:36:cc:67:bd:32: 6c:30:f8:d6:c5:fd:e1:fd:44:15:29:c5:e4:bc:f5: f5:11:e0:d0:6d:45:1c:16:6a:61:32:8f:a4:ae:73: f8:78:15:89:72:15:d4:c4:7e:65:5b:f5:2c:b8:00: af:1e:f8:3b:c3:b2:06:0b:dd:86:d0:18:87:63:57: 6b:c4:04:d7:77:1f:9e:0a:ee:08:54:c7:15:87:c2: 9b:c5:6e:82:c1:0e:6a:28:fb:ee:9e:b4:1d:bd:ac: cd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:73:67:5B:0E:07:D9:F6:B8:F5:36:CC:18:AF:DA:36:73:39:4A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/0fce95b6-3bf6-3ef8-988c-fd2cb7cae388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:56:4f:f7:2a:7e:d9:4b:c8:2d:14:31:d2:23:9d:9f:dc:44: 71:b3:54:10:00:af:cf:81:e8:25:9b:ae:b7:89:b7:9b:85:89: 57:0c:48:27:7e:45:d3:9d:62:0f:d9:63:76:7d:4a:7d:7b:fe: e7:21:c8:82:2f:49:77:77:db:75:61:96:07:98:02:08:c5:f9: c9:f7:2d:3b:31:16:a8:8c:da:e3:a0:8f:9d:95:25:b9:30:98: aa:50:9f:f2:db:75:06:30:10:d0:2d:b0:67:ec:1b:51:26:fc: e8:86:36:4a:f5:32:2a:ff:51:54:98:c5:31:da:fa:43:09:4e: b1:a3:a0:5a:08:68:0d:dc:1e:99:66:43:2b:53:7c:47:67:4b: 62:c0:39:51:91:9b:9a:02:bc:0c:c8:bd:66:23:1b:23:0a:0c: 42:1d:d4:5e:cd:fc:b4:78:39:cd:73:9f:60:80:9f:e9:52:32: af:60:5e:f1:99:8c:fd:36:6c:02:c0:b1:82:8b:b8:ae:27:0a: 01:8d:eb:30:8e:69:bb:1a:05:4d:b5:e0:84:7f:fc:b4:f5:17: 4e:32:3c:d4:96:61:f6:02:38:cc:7c:ee:6e:cd:80:01:10:37: 29:6f:db:87:83:cc:35:de:73:e7:25:69:5c:8f:20:2f:64:ae: 9f:bd:fd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOzFamrni78FIrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NGMyNWUxNmYtZTU4ZC00MzE2LWI0NjktOGFlNjVlMGM3NmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4bb7TKzExC11Le/1ELropTxUW3pR6SoFgrE Ludjh99G+Xseu+7AthQlDKfZNBUpNDi0dmrIF/fGtkRDkI3m5dvCOc27wjmy3Jct DA6LiQTyToO/mD4Tb78EL7TXIb6uSpvofDoR9WEmfdcVFOP7S1oSK4UlaA760zMO Gcs2RrO67ARHMGG+eP+TGIdC17K8PlGcHFgveDBO5++U4Qn6NsxnvTJsMPjWxf3h /UQVKcXkvPX1EeDQbUUcFmphMo+krnP4eBWJchXUxH5lW/UsuACvHvg7w7IGC92G 0BiHY1drxATXdx+eCu4IVMcVh8KbxW6CwQ5qKPvunrQdvazN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZzZ1sOB9n2uPU2zBiv2jZzOUr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvMGZjZTk1YjYtM2JmNi0z ZWY4LTk4OGMtZmQyY2I3Y2FlMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtWT/cqftlLyC0UMdIjnZ/cRHGzVBAAr8+B6CWbrreJt5uFiVcMSCd+ RdOdYg/ZY3Z9Sn17/uchyIIvSXd323VhlgeYAgjF+cn3LTsxFqiM2uOgj52VJbkw mKpQn/LbdQYwENAtsGfsG1Em/OiGNkr1Mir/UVSYxTHa+kMJTrGjoFoIaA3cHplm QytTfEdnS2LAOVGRm5oCvAzIvWYjGyMKDEId1F7N/LR4Oc1zn2CAn+lSMq9gXvGZ jP02bALAsYKLuK4nCgGN6zCOabsaBU214IR//LT1F04yPNSWYfYCOMx87m7NgAEQ Nylv24eDzDXec+claVyPIC9krp+9/ZI= -----END CERTIFICATE-----Generated at Tue Nov 25 08:29:14 2025 by rpki-client