This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json)
Hash identifier: +MN+NbvLDbbQbZEnVX5s2QX2UfySGlYHVnS+LqzGfA8=
Subject key identifier: C6:D6:72:1F:AA:5F:AA:90:05:9B:59:7E:90:3C:83:15:17:C0:1A:89
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584C22C0E8974720B664863D34C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
Signing time: Wed 10 Dec 2025 02:00:31 +0000
ROA not before: Wed 10 Dec 2025 02:00:31 +0000
ROA not after: Tue 10 Mar 2026 01:00:31 +0000
asID: 398823
IP address blocks: 107.149.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Dec 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:22:c0:e8:97:47:20:b6:64:86:3d:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Dec 10 02:00:31 2025 GMT
Not After : Mar 10 01:00:31 2026 GMT
Subject: CN=a3366587-3a3e-43f4-9d0f-23eeb47bae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:3b:a5:0c:0a:a1:44:96:ec:5b:61:16:16:
4f:67:24:24:8f:21:f8:6b:98:1b:0e:d7:2a:ed:b2:
38:6c:e5:1f:ef:21:ac:3e:3e:c2:fe:34:88:5c:f0:
55:69:d4:e8:ee:b5:6f:b9:97:c3:50:15:49:90:56:
c2:44:43:66:e5:91:81:42:ec:ab:8a:61:74:b7:ba:
e6:ea:b6:f0:38:78:03:50:b7:1c:15:e4:b8:f2:a3:
3c:15:03:6f:73:61:e1:d6:b4:0e:b3:bc:31:f5:8f:
27:10:8e:e9:4e:29:73:1b:08:96:cc:ab:03:3d:8c:
4b:cc:d3:a7:7b:7d:33:b8:26:a4:27:f9:2c:e5:8c:
d3:31:2c:7c:70:7b:9c:06:79:a2:c6:42:70:b2:68:
d9:0b:cb:9d:f0:af:5f:7e:73:20:bf:05:f5:12:ef:
ad:a4:41:d2:51:ea:5e:15:00:45:45:25:0b:6f:1b:
0b:42:a7:f2:b2:78:04:e2:d2:31:aa:48:41:37:46:
f2:f1:31:d6:75:36:42:07:a2:73:62:b0:4f:c1:bb:
ae:34:b7:82:d8:c3:a8:24:07:a2:fa:0f:95:45:0f:
29:b8:1f:02:44:b6:34:db:2b:92:6b:9a:2b:2e:cc:
ea:fb:68:6f:29:89:d1:af:23:c8:34:06:3d:8b:3a:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D6:72:1F:AA:5F:AA:90:05:9B:59:7E:90:3C:83:15:17:C0:1A:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:fa:cf:6e:91:52:55:ab:cc:74:59:2f:65:6c:a9:27:17:ef:
70:7c:f7:6c:b8:14:d3:bd:dc:22:c2:c3:5f:d1:8e:a6:b2:bd:
2e:09:71:df:59:6b:fd:56:c2:b9:56:1b:ec:74:c6:80:fd:4f:
14:1a:04:f7:71:f6:3d:46:d8:39:a6:cb:a6:9e:17:ed:91:53:
cf:97:1b:f5:3e:20:ff:e0:b8:d2:26:5b:48:80:20:67:89:7c:
58:c2:a1:a5:ec:6d:b3:f6:d3:35:57:d9:a5:fd:43:aa:bf:8a:
87:c9:e6:f5:aa:00:15:db:40:ed:e7:cc:1a:8f:c2:48:40:9a:
b9:2c:2a:f4:03:eb:07:9a:d1:29:52:82:45:0b:df:72:2b:d9:
ba:38:5e:86:eb:61:9c:32:57:62:ea:9b:95:52:d0:38:fa:73:
fd:1a:cc:8a:b9:16:fe:4e:ed:99:34:cc:02:85:56:82:ad:3c:
21:6f:27:8d:65:12:29:32:c7:58:55:2f:13:84:4f:05:fe:e0:
1f:77:52:87:11:a6:0d:df:3e:66:c2:24:dd:01:38:b5:d7:0a:
57:b4:d1:d9:ff:45:64:53:89:b8:52:a4:db:c7:32:64:ee:92:
86:4c:52:13:04:77:0a:94:f6:d7:c6:e4:e5:e7:14:fd:f7:8f:
0d:67:bd:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOiXRyC2ZIY9NMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk
YTMzNjY1ODctM2EzZS00M2Y0LTlkMGYtMjNlZWI0N2JhZTM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3I7pQwKoUSW7FthFhZPZyQkjyH4a5gbDtcq
7bI4bOUf7yGsPj7C/jSIXPBVadTo7rVvuZfDUBVJkFbCRENm5ZGBQuyrimF0t7rm
6rbwOHgDULccFeS48qM8FQNvc2Hh1rQOs7wx9Y8nEI7pTilzGwiWzKsDPYxLzNOn
e30zuCakJ/ks5YzTMSx8cHucBnmixkJwsmjZC8ud8K9ffnMgvwX1Eu+tpEHSUepe
FQBFRSULbxsLQqfysngE4tIxqkhBN0by8THWdTZCB6JzYrBPwbuuNLeC2MOoJAei
+g+VRQ8puB8CRLY02yuSa5orLszq+2hvKYnRryPINAY9izrx+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMbWch+qX6qQBZtZfpA8gxUXwBqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzUzM2Y1Y2QtYzhjZi0z
OTU2LThjYjgtNTg4N2E0YzNlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJv6z26RUlWrzHRZL2VsqScX73B892y4FNO93CLCw1/RjqayvS4Jcd9Z
a/1WwrlWG+x0xoD9TxQaBPdx9j1G2Dmmy6aeF+2RU8+XG/U+IP/guNImW0iAIGeJ
fFjCoaXsbbP20zVX2aX9Q6q/iofJ5vWqABXbQO3nzBqPwkhAmrksKvQD6wea0SlS
gkUL33Ir2bo4XobrYZwyV2Lqm5VS0Dj6c/0azIq5Fv5O7Zk0zAKFVoKtPCFvJ41l
Eikyx1hVLxOETwX+4B93UocRpg3fPmbCJN0BOLXXCle00dn/RWRTibhSpNvHMmTu
koZMUhMEdwqU9tfG5OXnFP33jw1nvXQ=
-----END CERTIFICATE-----
Generated at Fri Dec 19 02:30:04 2025 by rpki-client