This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa File: 57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json) Hash identifier: w0GSwvf8ww+wknet5OBX4NbkCI8GN6OHr8y+BjNDGHA= Subject key identifier: 71:B3:2D:84:AE:08:FE:32:26:BA:0F:17:48:EA:9A:80:74:23:CA:FA Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C22C0E8CB4D3C6AD42E1B8910 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 398478 IP address blocks: 107.149.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e8:cb:4d:3c:6a:d4:2e:1b:89:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=fb7d0975-3d68-4bf4-b97e-4226ea0d5bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:5f:4f:79:dd:e5:94:95:68:5b:34:54:9c: 39:02:7b:25:ed:58:ff:01:f7:85:2b:e6:87:7c:ae: db:54:62:11:1d:2b:58:e7:36:ab:e4:46:29:93:1f: d7:6a:59:32:29:77:e8:e3:62:bd:00:fd:c2:71:e7: 76:02:26:37:73:e9:92:d4:a1:81:2f:07:3a:0e:86: 3b:42:80:18:97:d9:51:c5:ce:36:b6:03:a1:26:f4: 45:9c:2c:51:21:37:ef:61:8a:f2:8e:66:05:9f:12: 24:d7:8c:9d:06:c6:c1:ba:b0:05:6c:44:93:97:c2: df:73:9a:26:85:53:12:1c:d9:aa:92:93:c9:29:1d: d3:c8:5a:fa:e2:3a:0f:28:ca:17:07:7c:9a:7b:bb: 28:2e:69:7e:83:60:30:5f:e2:c4:c7:40:d1:ba:44: a2:27:c2:b5:0c:3f:ca:e7:1e:30:d5:2f:e8:26:7a: 52:4d:29:01:fc:60:db:04:6a:21:14:84:65:09:3d: 88:e9:33:0e:57:67:41:cc:d1:a2:7c:ab:32:c4:4f: 33:a5:13:93:3e:d6:92:ed:28:73:0a:09:f6:0d:0c: db:03:35:63:3b:d9:5e:b5:fb:79:a5:86:8e:c4:8e: f8:18:c8:11:7f:1c:d5:0e:61:8c:53:b0:c6:8c:6b: 01:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:B3:2D:84:AE:08:FE:32:26:BA:0F:17:48:EA:9A:80:74:23:CA:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8f:67:22:d5:00:86:6e:d4:52:2d:30:03:73:b0:8a:62:28: 36:54:34:9d:fe:19:51:3d:7a:fc:42:4c:da:e1:fd:9e:f8:6e: 28:b8:17:3a:8b:cf:a6:cd:d0:04:dd:27:c5:3e:c2:05:8d:8a: cb:b3:f8:a8:e3:4d:19:56:e6:68:42:51:2e:32:04:84:f0:52: 19:3e:c4:a5:d7:af:c0:e0:95:aa:43:0e:92:cd:55:0a:f2:c7: 92:f4:cc:40:a6:47:14:a3:79:cc:fc:7a:56:03:40:47:50:46: ed:d2:ef:3f:1f:e3:2f:97:f6:64:df:20:aa:ae:ef:d9:f8:6c: 84:aa:97:66:9c:58:8c:4a:1c:35:ba:cc:6e:f4:6a:44:22:e0: 25:40:0a:fa:b7:44:ba:e7:b8:12:ca:a3:25:0f:fd:df:cb:08: 30:ad:1d:0c:23:6b:f2:e0:a5:29:10:14:f5:1b:c7:10:c6:5b: e8:8e:0d:06:20:a7:02:8b:2f:d8:26:21:b3:a9:c7:45:12:76: 54:30:fb:4b:28:96:9f:84:2c:b1:d7:54:a7:18:36:b8:7c:fc: ff:2b:21:3c:9b:9b:7e:28:2e:56:90:f7:f9:c9:cc:55:ee:a1: 73:1c:80:dd:3a:03:7f:de:ec:a9:f1:14:c7:5e:49:ca:01:35: b5:f9:4a:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOjLTTxq1C4biRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk ZmI3ZDA5NzUtM2Q2OC00YmY0LWI5N2UtNDIyNmVhMGQ1YmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgRfT3nd5ZSVaFs0VJw5Ansl7Vj/AfeFK+aH fK7bVGIRHStY5zar5EYpkx/XalkyKXfo42K9AP3Cced2AiY3c+mS1KGBLwc6DoY7 QoAYl9lRxc42tgOhJvRFnCxRITfvYYryjmYFnxIk14ydBsbBurAFbESTl8Lfc5om hVMSHNmqkpPJKR3TyFr64joPKMoXB3yae7soLml+g2AwX+LEx0DRukSiJ8K1DD/K 5x4w1S/oJnpSTSkB/GDbBGohFIRlCT2I6TMOV2dBzNGifKsyxE8zpROTPtaS7Shz Cgn2DQzbAzVjO9letft5pYaOxI74GMgRfxzVDmGMU7DGjGsB0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGzLYSuCP4yJroPF0jqmoB0I8r6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTdlNTlhODAtMjVkZS0z YTg4LTgzMjktYTYxMmFhYmJmMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyPZyLVAIZu1FItMANzsIpiKDZUNJ3+GVE9evxCTNrh/Z74bii4FzqL z6bN0ATdJ8U+wgWNisuz+KjjTRlW5mhCUS4yBITwUhk+xKXXr8DglapDDpLNVQry x5L0zECmRxSjecz8elYDQEdQRu3S7z8f4y+X9mTfIKqu79n4bISql2acWIxKHDW6 zG70akQi4CVACvq3RLrnuBLKoyUP/d/LCDCtHQwja/LgpSkQFPUbxxDGW+iODQYg pwKLL9gmIbOpx0USdlQw+0solp+ELLHXVKcYNrh8/P8rITybm34oLlaQ9/nJzFXu oXMcgN06A3/e7KnxFMdeScoBNbX5Svs= -----END CERTIFICATE-----Generated at Tue Dec 16 12:18:33 2025 by rpki-client