This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa File: 843b57ee-dc89-30f5-976d-312a26a10468.roa (raw, json) Hash identifier: I98MnPauKzvvPTJ9c7qCT8R5tdPFWNx+L9rrXvbANwk= Subject key identifier: D3:AB:9F:FC:64:67:4B:E6:67:97:31:BC:EF:7E:24:BD:5A:22:9A:A8 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C22C0E88563FF900B582D3B40 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa Signing time: Wed 10 Dec 2025 02:00:31 +0000 ROA not before: Wed 10 Dec 2025 02:00:31 +0000 ROA not after: Tue 10 Mar 2026 01:00:31 +0000 asID: 36137 IP address blocks: 107.149.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:c0:e8:85:63:ff:90:0b:58:2d:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Dec 10 02:00:31 2025 GMT Not After : Mar 10 01:00:31 2026 GMT Subject: CN=beaa0e53-c815-4207-8b7d-01887e2a2320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:91:4b:91:4f:10:11:78:c9:b0:56:f3:f0: 2d:b2:cc:30:47:d4:08:fa:d0:f0:54:11:39:ec:47: 97:b7:16:ce:4e:d5:2d:37:7a:42:4a:06:48:30:dd: 8a:cf:85:e6:c7:02:ec:c7:56:b5:ed:f9:d5:f7:c9: 92:42:45:55:ad:73:a5:e5:ad:f1:81:5e:64:38:da: 61:93:0e:47:a4:b8:7c:4e:0d:9b:94:fd:51:74:f7: b1:0a:58:36:6f:f2:6f:27:fe:d5:15:1b:39:5f:25: e8:90:d3:e1:9e:17:d8:1c:1d:02:42:fa:55:92:6d: e5:14:d1:c8:37:a0:af:48:87:86:ea:fb:2c:70:9e: 0d:e9:5f:43:06:4b:ce:22:9e:52:8d:a1:1e:23:bd: d7:82:ef:0b:c6:16:0d:c7:9a:a3:d3:cc:b6:5f:b1: 13:59:0e:83:3d:03:0f:66:59:bd:c1:bc:9d:90:3a: 00:e8:21:5c:29:2e:54:21:f7:d9:b5:df:7a:ae:97: 7a:ae:a0:fe:2d:aa:83:77:81:88:9e:f4:31:cd:f8: e8:d4:61:7b:f3:9d:44:f9:8f:f8:0f:b6:6e:b6:13: 22:45:50:40:5b:61:6b:a6:12:f8:bb:74:b9:8e:9a: be:6a:ce:fa:4c:e4:32:27:f7:c3:73:3c:0d:ad:83: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AB:9F:FC:64:67:4B:E6:67:97:31:BC:EF:7E:24:BD:5A:22:9A:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:82:d2:da:4d:c1:2a:8a:3d:d6:ad:7e:a5:2c:83:3b:cd:78: de:6e:c7:b9:c6:a9:2f:92:88:b6:7d:4a:79:b3:32:2a:3f:bd: 27:76:ae:ac:cc:3d:ce:cf:8f:dd:c6:c8:3f:88:88:36:b3:d7: 19:a0:d4:fb:8d:60:8d:4e:48:b3:37:17:b1:ea:24:e6:63:b1: a1:43:29:cb:cd:c8:d1:79:86:e4:76:68:e1:b9:aa:35:46:90: bf:08:57:b9:f3:6e:25:10:b3:2a:80:00:32:fd:a2:77:a3:d2: be:bf:7b:af:8e:5d:5c:60:41:2c:70:df:5c:6f:b6:de:fa:a7: a9:7f:bb:10:28:43:27:de:85:2e:ce:5a:4c:b6:c8:ba:26:22: 34:ca:a1:ca:11:b7:d6:f4:c5:a4:8f:4c:29:d3:b2:e1:ca:7b: 4f:fd:13:d0:7c:c3:42:97:8d:3e:b1:3c:54:2f:d3:1b:9a:08: a7:b5:65:0a:40:a0:f1:68:96:ef:1d:47:08:ce:5d:74:3b:f1: 72:b4:5b:a7:f0:29:25:cd:c0:15:d0:88:1e:af:aa:35:47:bf: cb:e7:c4:92:12:1e:ba:7e:23:4b:d6:fa:11:be:4b:96:c8:56: 7c:2b:12:54:3b:d5:fb:b6:3a:b3:f5:62:de:a6:d3:6b:0a:63: 78:82:cd:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwiwOiFY/+QC1gtO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTIxMDAyMDAzMVoXDTI2MDMxMDAxMDAzMVowLzEtMCsGA1UEAxMk YmVhYTBlNTMtYzgxNS00MjA3LThiN2QtMDE4ODdlMmEyMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh2RS5FPEBF4ybBW8/AtsswwR9QI+tDwVBE5 7EeXtxbOTtUtN3pCSgZIMN2Kz4XmxwLsx1a17fnV98mSQkVVrXOl5a3xgV5kONph kw5HpLh8Tg2blP1RdPexClg2b/JvJ/7VFRs5XyXokNPhnhfYHB0CQvpVkm3lFNHI N6CvSIeG6vsscJ4N6V9DBkvOIp5SjaEeI73Xgu8LxhYNx5qj08y2X7ETWQ6DPQMP Zlm9wbydkDoA6CFcKS5UIffZtd96rpd6rqD+LaqDd4GInvQxzfjo1GF7851E+Y/4 D7ZuthMiRVBAW2FrphL4u3S5jpq+as76TOQyJ/fDczwNrYMPlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOrn/xkZ0vmZ5cxvO9+JL1aIpqoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODQzYjU3ZWUtZGM4OS0z MGY1LTk3NmQtMzEyYTI2YTEwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGC0tpNwSqKPdatfqUsgzvNeN5ux7nGqS+SiLZ9SnmzMio/vSd2rqzM Pc7Pj93GyD+IiDaz1xmg1PuNYI1OSLM3F7HqJOZjsaFDKcvNyNF5huR2aOG5qjVG kL8IV7nzbiUQsyqAADL9onej0r6/e6+OXVxgQSxw31xvtt76p6l/uxAoQyfehS7O Wky2yLomIjTKocoRt9b0xaSPTCnTsuHKe0/9E9B8w0KXjT6xPFQv0xuaCKe1ZQpA oPFolu8dRwjOXXQ78XK0W6fwKSXNwBXQiB6vqjVHv8vnxJISHrp+I0vW+hG+S5bI VnwrElQ71fu2OrP1Yt6m02sKY3iCzVg= -----END CERTIFICATE-----Generated at Thu Dec 18 20:05:25 2025 by rpki-client