This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa File: 3c70d43d-85bd-39c4-974b-b26dc07b9073.roa (raw, json) Hash identifier: CZM3jf7DaZKSZqA7oV+5+rzondPiw5iVRyLHvp1yWOw= Subject key identifier: 6B:DB:29:C3:3B:8C:27:A2:15:66:91:73:B7:2B:4A:D0:BE:2A:AD:44 Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d Certificate serial: 010D0C9F4328584BC53B34EC095F100BAD5665C0 Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa Signing time: Thu 06 Nov 2025 14:00:41 +0000 ROA not before: Thu 06 Nov 2025 14:00:41 +0000 ROA not after: Wed 04 Feb 2026 14:00:41 +0000 asID: 398156 IP address blocks: 168.220.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c5:3b:34:ec:09:5f:10:0b:ad:56:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d Validity Not Before: Nov 6 14:00:41 2025 GMT Not After : Feb 4 14:00:41 2026 GMT Subject: CN=8d14f36a-e769-48a4-b0f8-1d8e8331f92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:05:c3:e1:a5:8e:6c:15:da:5c:e3:a9:9d: 01:cc:29:ec:d9:5f:33:9b:9d:2c:58:27:95:cd:f4: be:4f:da:b7:e6:d1:ff:c3:65:03:a7:2b:74:5e:7b: 51:1f:43:2b:02:65:52:e5:6d:00:b2:36:30:04:4d: 4b:2d:e2:6f:96:94:7d:96:d2:4f:62:00:dc:cf:a9: 16:2d:47:3c:b0:66:0f:e2:bd:46:3e:e1:f8:37:1a: b3:66:8d:f0:7a:92:e3:0e:80:8a:18:e7:c7:c1:b9: 3d:c7:54:4e:e5:4e:25:02:87:d3:68:3d:4a:2b:81: a2:6f:a3:23:be:b0:19:74:6d:e9:c8:19:da:33:52: 8f:a3:93:fe:42:aa:70:93:e5:a8:4c:a8:76:e6:ff: 5a:c0:11:9d:55:6e:5d:1d:21:57:da:ad:29:d5:5e: 30:21:f7:6a:c3:b3:5b:bf:82:c7:9e:9e:17:da:c2: 5a:7a:2f:77:cb:23:62:1b:ea:5d:eb:57:8d:87:56: 23:f2:7c:fa:f0:1c:c2:45:8f:62:6a:e6:25:fc:75: c9:4e:7a:52:24:46:39:76:d5:0a:a9:bc:a9:e4:35: 8e:a9:81:2f:85:7d:e9:f8:e6:fe:af:5a:91:47:40: 41:37:d3:ad:90:69:2c:47:e1:14:21:6f:35:02:8b: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:DB:29:C3:3B:8C:27:A2:15:66:91:73:B7:2B:4A:D0:BE:2A:AD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/3c70d43d-85bd-39c4-974b-b26dc07b9073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl X509v3 Authority Key Identifier: keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer sbgp-ipAddrBlock: critical IPv4: 168.220.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:01:b9:83:29:85:a7:93:90:6c:ae:ed:c1:9f:d5:cd:2f:e6: db:f6:e4:24:40:d9:f7:e5:c7:0f:74:f5:5d:bd:40:5b:5f:50: 45:a7:e3:be:20:aa:54:ff:ff:c3:de:04:c4:dd:ce:37:8c:de: d9:33:78:57:46:9d:16:6f:cb:00:59:ea:4e:29:52:74:07:35: 52:51:2a:12:a5:74:99:b6:ca:8c:61:fe:6d:82:6b:c0:b6:9e: 43:31:0f:fc:04:f8:e1:ab:46:00:ad:81:e3:aa:6e:18:7d:00: e3:9e:d9:a7:4a:a6:54:37:e3:3a:8b:21:3c:9e:92:55:4f:c1: a2:bd:76:28:a8:9e:c2:a4:d9:2f:69:2e:b9:ae:7c:8a:05:3e: cc:5f:77:1d:9c:70:90:f9:a6:67:3d:15:38:7f:13:4e:25:71: c4:ad:3b:93:1e:6c:8f:10:cd:3e:55:28:b3:e5:83:ef:cc:76: 47:2d:10:29:b9:30:bf:44:4a:e5:72:6f:2f:6a:95:67:2f:ee: 2d:96:94:6e:8f:7e:be:70:15:d8:db:6a:68:34:e6:53:b3:b7: e1:cc:52:ae:63:4e:74:41:b4:53:c4:ba:48:ca:96:1a:0f:c8: 1e:4d:a2:de:d4:76:73:3a:6e:8e:ad:25:2d:bb:78:f8:9a:3f: 99:fe:97:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvFOzTsCV8QC61WZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm NjZkMB4XDTI1MTEwNjE0MDA0MVoXDTI2MDIwNDE0MDA0MVowLzEtMCsGA1UEAxMk OGQxNGYzNmEtZTc2OS00OGE0LWIwZjgtMWQ4ZTgzMzFmOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxsFw+GljmwV2lzjqZ0BzCns2V8zm50sWCeV zfS+T9q35tH/w2UDpyt0XntRH0MrAmVS5W0AsjYwBE1LLeJvlpR9ltJPYgDcz6kW LUc8sGYP4r1GPuH4NxqzZo3wepLjDoCKGOfHwbk9x1RO5U4lAofTaD1KK4Gib6Mj vrAZdG3pyBnaM1KPo5P+Qqpwk+WoTKh25v9awBGdVW5dHSFX2q0p1V4wIfdqw7Nb v4LHnp4X2sJaei93yyNiG+pd61eNh1Yj8nz68BzCRY9iauYl/HXJTnpSJEY5dtUK qbyp5DWOqYEvhX3p+Ob+r1qRR0BBN9OtkGksR+EUIW81AotLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvbKcM7jCeiFWaRc7crStC+Kq1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvM2M3MGQ0M2QtODViZC0z OWM0LTk3NGItYjI2ZGMwN2I5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2 OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4 MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqNzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoBuYMphaeTkGyu7cGf1c0v5tv25CRA2fflxw909V29QFtfUEWn474g qlT//8PeBMTdzjeM3tkzeFdGnRZvywBZ6k4pUnQHNVJRKhKldJm2yoxh/m2Ca8C2 nkMxD/wE+OGrRgCtgeOqbhh9AOOe2adKplQ34zqLITyeklVPwaK9diionsKk2S9p LrmufIoFPsxfdx2ccJD5pmc9FTh/E04lccStO5MebI8QzT5VKLPlg+/MdkctECm5 ML9ESuVyby9qlWcv7i2WlG6Pfr5wFdjbamg05lOzt+HMUq5jTnRBtFPEukjKlhoP yB5Not7UdnM6bo6tJS27ePiaP5n+l0I= -----END CERTIFICATE-----Generated at Tue Nov 25 08:30:38 2025 by rpki-client