This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa File: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (raw, json) Hash identifier: Ag5HKlcDq9bdJvM8rV1SSYl8sSdWuIMfK4oKAM68XmQ= Subject key identifier: A2:B9:FD:FE:8C:B3:24:A1:4B:9F:26:CC:BB:15:B1:AD:DC:D1:33:1E Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584BC2704F68246EF79C3B37D600 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 19905 IP address blocks: 155.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:4f:68:24:6e:f7:9c:3b:37:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=40e0ec29-04f9-4551-8385-6abd7e14b010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:a9:05:87:45:71:3b:9b:4e:f7:6e:9b:c7: ba:1e:dd:11:70:1b:9b:54:62:e2:bd:a6:27:40:c3: 9e:dc:e9:34:04:0b:e2:2f:7b:75:fd:cd:c6:3e:4a: 79:40:82:3d:fd:19:39:b6:be:4e:b3:c8:3d:5a:23: 5d:c0:f0:f7:e7:a5:9e:b6:2d:ee:10:02:75:7a:ad: d6:ac:a5:1b:fd:bd:48:12:25:fc:19:66:23:d7:1d: 45:14:b1:c4:c7:e1:b7:99:9c:10:ee:76:76:2c:8c: d9:07:da:d7:a4:d9:84:01:42:97:9b:73:9f:56:40: 13:9d:da:ed:6b:bc:6e:ab:5c:ae:e1:e3:c0:b2:3b: e4:07:d4:10:f6:4f:0b:c6:39:60:23:8b:07:d2:84: c5:84:5d:5f:73:ea:90:4a:30:2d:03:58:50:6f:de: e3:42:70:92:5b:c4:0f:c1:a1:1a:24:91:a5:16:c9: 41:d9:f8:a7:d7:3b:bc:66:cc:2f:73:4f:48:ec:cc: 82:ea:59:c5:62:87:91:91:95:3f:5d:d0:4b:98:58: a5:c0:b4:d5:93:08:97:ee:27:3e:bc:4b:aa:9b:dd: 5a:56:45:0b:53:41:5e:43:e0:ed:17:cd:62:e8:5c: f3:be:98:49:69:b3:c5:43:5e:d6:42:0e:70:de:f0: cc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B9:FD:FE:8C:B3:24:A1:4B:9F:26:CC:BB:15:B1:AD:DC:D1:33:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/42017b9c-7ea7-3f9a-8686-04d01900fd20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 155.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:54:b9:18:11:6f:f5:d7:01:9e:4c:22:1d:76:e1:fc:d3:0c: 04:a4:a6:98:e7:c8:23:a7:30:e6:cb:66:0b:97:69:0d:4c:30: df:eb:b2:7e:6b:72:db:c6:18:f0:0c:6f:22:6d:0c:f4:d0:ed: 51:1e:f3:b3:37:22:20:e5:f0:e3:5f:31:40:24:2f:93:2a:d8: 4c:35:0f:e4:95:75:1d:59:46:d1:22:0f:25:e4:a7:47:0d:ab: 44:8d:15:60:81:2e:b3:14:c3:ef:06:0c:86:56:ea:a7:9e:48: 89:ce:37:84:a1:74:8d:a3:f4:28:aa:9d:38:82:f0:b4:e3:36: 35:ea:d5:c5:f1:5d:af:39:66:d1:7d:ae:bf:0e:9f:48:be:56: ed:5a:f1:65:38:f4:a9:8d:f4:aa:d5:92:24:00:99:64:b0:7d: 5d:00:d2:71:3a:48:bd:de:9b:58:61:60:42:1c:f4:b5:44:11: b0:12:13:71:23:1f:1e:43:90:f3:c2:3d:dd:4f:b4:2a:78:f2: 85:79:d9:95:65:bd:67:29:a1:83:24:0a:c6:65:65:a4:30:34: 9c:72:d6:d0:9d:90:7c:2a:04:90:15:37:8c:18:ce:7e:82:66: b9:ae:bb:1f:65:b8:c0:2a:ce:9b:7d:7e:49:49:e7:3d:d7:37: 32:69:c6:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvCcE9oJG73nDs31gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NDBlMGVjMjktMDRmOS00NTUxLTgzODUtNmFiZDdlMTRiMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIWpBYdFcTubTvdum8e6Ht0RcBubVGLivaYn QMOe3Ok0BAviL3t1/c3GPkp5QII9/Rk5tr5Os8g9WiNdwPD356Weti3uEAJ1eq3W rKUb/b1IEiX8GWYj1x1FFLHEx+G3mZwQ7nZ2LIzZB9rXpNmEAUKXm3OfVkATndrt a7xuq1yu4ePAsjvkB9QQ9k8LxjlgI4sH0oTFhF1fc+qQSjAtA1hQb97jQnCSW8QP waEaJJGlFslB2fin1zu8Zswvc09I7MyC6lnFYoeRkZU/XdBLmFilwLTVkwiX7ic+ vEuqm91aVkULU0FeQ+DtF81i6FzzvphJabPFQ17WQg5w3vDMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKK5/f6MsyShS58mzLsVsa3c0TMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvNDIwMTdiOWMtN2VhNy0z ZjlhLTg2ODYtMDRkMDE5MDBmZDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm/6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5UuRgRb/XXAZ5MIh124fzTDASkppjnyCOnMObLZguXaQ1MMN/rsn5r ctvGGPAMbyJtDPTQ7VEe87M3IiDl8ONfMUAkL5Mq2Ew1D+SVdR1ZRtEiDyXkp0cN q0SNFWCBLrMUw+8GDIZW6qeeSInON4ShdI2j9CiqnTiC8LTjNjXq1cXxXa85ZtF9 rr8On0i+Vu1a8WU49KmN9KrVkiQAmWSwfV0A0nE6SL3em1hhYEIc9LVEEbASE3Ej Hx5DkPPCPd1PtCp48oV52ZVlvWcpoYMkCsZlZaQwNJxy1tCdkHwqBJAVN4wYzn6C Zrmuux9luMAqzpt9fklJ5z3XNzJpxkc= -----END CERTIFICATE-----Generated at Fri Dec 5 22:10:34 2025 by rpki-client