This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/842f0028-02c7-33c3-93ca-7f8a27973ba8.roa File: 842f0028-02c7-33c3-93ca-7f8a27973ba8.roa (raw, json) Hash identifier: dsPfdZlQtguq+dkUqCWcj/RCWZO/nLBz1KxLFlQ5Kaw= Subject key identifier: 1B:AA:8D:C6:C5:6F:D2:BE:81:1E:2B:DF:F1:D4:9B:44:69:FE:77:6A Certificate issuer: /CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Certificate serial: 010D0C9F4328584BF7D20AA8C7CC97C514147280 Authority key identifier: 3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/842f0028-02c7-33c3-93ca-7f8a27973ba8.roa Signing time: Mon 24 Nov 2025 16:55:34 +0000 ROA not before: Mon 24 Nov 2025 16:55:34 +0000 ROA not after: Sun 22 Feb 2026 16:55:34 +0000 asID: 399461 IP address blocks: 142.249.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:d2:0a:a8:c7:cc:97:c5:14:14:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04ec7da7-14e2-4c06-a815-18072c7f0f47 Validity Not Before: Nov 24 16:55:34 2025 GMT Not After : Feb 22 16:55:34 2026 GMT Subject: CN=b31cea0a-c456-4da0-b5c3-e012ebfd8cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f0:81:cb:f5:c0:67:3b:91:d1:81:f5:16:de: 3a:c0:f3:cb:0f:d3:f8:c1:9a:28:5a:be:d7:66:33: 78:28:5b:49:5f:46:6c:cb:41:3b:e3:b6:22:7e:90: 0e:bd:52:ad:81:2d:89:13:2c:70:c4:fa:0b:68:dc: 9d:28:2e:bd:0d:62:1c:8b:47:30:89:45:59:0c:ef: cb:ea:ba:42:b8:6a:bf:ca:ee:56:ef:9a:ff:9a:72: 77:40:e6:2a:21:58:a2:9b:31:7b:a1:18:78:3a:74: ef:b6:e4:df:a0:a5:91:51:13:56:9f:43:1b:3f:8b: 9a:aa:43:8a:b6:1b:67:83:f5:ac:38:7e:32:77:d7: 50:d8:11:b6:28:29:08:a4:2d:34:8b:7d:d6:24:bd: 12:07:e1:8a:c4:81:31:d9:4a:a9:63:d8:b3:33:cb: 4f:85:6c:f6:3c:7e:29:95:3d:a3:ec:22:14:28:b7: ca:7a:f4:d5:1d:7b:3f:0f:11:80:f9:58:c1:0d:08: fe:e7:41:7b:91:09:ee:f1:55:5e:f4:e4:db:5d:89: 24:c1:33:5b:bf:44:cc:62:80:6f:07:86:16:20:32: 1f:d8:cf:cf:78:1a:c4:e4:1e:f3:e7:17:eb:95:a0: 4a:7a:65:7b:6b:7f:06:8f:9b:c8:44:2c:fa:9b:5b: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AA:8D:C6:C5:6F:D2:BE:81:1E:2B:DF:F1:D4:9B:44:69:FE:77:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/842f0028-02c7-33c3-93ca-7f8a27973ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47/04ec7da7-14e2-4c06-a815-18072c7f0f47.crl X509v3 Authority Key Identifier: keyid:3C:2A:84:99:FA:8C:88:ED:48:2B:96:05:8D:BC:85:C1:30:B2:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/04ec7da7-14e2-4c06-a815-18072c7f0f47.cer sbgp-ipAddrBlock: critical IPv4: 142.249.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:12:33:d2:9b:05:8d:59:99:84:ce:eb:e4:f5:f3:6a:c1:d5: b9:a4:55:ee:f7:bf:57:e2:71:59:65:fe:48:fc:4c:3a:a3:d9: 2c:24:3f:0b:19:8f:9c:6f:c9:5e:23:f1:93:13:c7:85:43:08: 4a:ca:fb:ec:7f:11:40:5f:d3:8b:22:bd:ee:4d:e6:2e:2f:8c: 67:01:86:a0:ef:0f:42:d2:43:0e:da:97:dc:04:52:f5:d9:2c: 60:21:b2:6a:e6:54:93:1e:32:5e:64:31:f0:7d:02:9b:78:9b: f7:0d:7e:db:28:04:42:e3:2f:6a:61:e3:f8:8b:ac:05:b8:96: a5:8a:45:a9:c3:88:f1:32:e9:0d:7e:ee:ff:ad:92:8e:22:be: ee:67:1d:5f:d5:14:fe:14:57:3e:ad:e2:69:48:e4:15:f6:5a: b4:ba:23:9e:04:84:00:8d:a5:c9:eb:a6:72:6d:6b:96:a6:2b: 3c:ae:80:db:3c:f7:0b:17:5c:1c:24:e6:1e:cc:01:5c:cb:ad: 74:e2:e8:ce:3d:92:53:69:6b:15:00:71:2f:3b:5c:5f:df:e4: 94:d3:67:c7:59:be:e7:46:3b:48:66:d1:10:ff:67:bc:b8:20: ca:c7:6c:84:0e:4c:9d:3c:a7:dd:5a:0c:43:35:73:d6:8d:f4: ba:9b:cc:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv30gqox8yXxRQUcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDRlYzdkYTctMTRlMi00YzA2LWE4MTUtMTgwNzJjN2Yw ZjQ3MB4XDTI1MTEyNDE2NTUzNFoXDTI2MDIyMjE2NTUzNFowLzEtMCsGA1UEAxMk YjMxY2VhMGEtYzQ1Ni00ZGEwLWI1YzMtZTAxMmViZmQ4Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfCBy/XAZzuR0YH1Ft46wPPLD9P4wZooWr7X ZjN4KFtJX0Zsy0E747YifpAOvVKtgS2JEyxwxPoLaNydKC69DWIci0cwiUVZDO/L 6rpCuGq/yu5W75r/mnJ3QOYqIViimzF7oRh4OnTvtuTfoKWRURNWn0MbP4uaqkOK thtng/WsOH4yd9dQ2BG2KCkIpC00i33WJL0SB+GKxIEx2UqpY9izM8tPhWz2PH4p lT2j7CIUKLfKevTVHXs/DxGA+VjBDQj+50F7kQnu8VVe9OTbXYkkwTNbv0TMYoBv B4YWIDIf2M/PeBrE5B7z5xfrlaBKemV7a38Gj5vIRCz6m1ueDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuqjcbFb9K+gR4r3/HUm0Rp/ndqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVj N2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3MmM3ZjBmNDcvODQyZjAwMjgtMDJjNy0z M2MzLTkzY2EtN2Y4YTI3OTczYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDRlYzdkYTctMTRlMi00YzA2LWE4 MTUtMTgwNzJjN2YwZjQ3LzA0ZWM3ZGE3LTE0ZTItNGMwNi1hODE1LTE4MDcyYzdm MGY0Ny5jcmwwHwYDVR0jBBgwFoAUPCqEmfqMiO1IK5YFjbyFwTCyjywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wNGVjN2RhNy0xNGUyLTRjMDYtYTgxNS0xODA3 MmM3ZjBmNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIASM9KbBY1ZmYTO6+T182rB1bmkVe73v1ficVll/kj8TDqj2SwkPwsZ j5xvyV4j8ZMTx4VDCErK++x/EUBf04sive5N5i4vjGcBhqDvD0LSQw7al9wEUvXZ LGAhsmrmVJMeMl5kMfB9Apt4m/cNftsoBELjL2ph4/iLrAW4lqWKRanDiPEy6Q1+ 7v+tko4ivu5nHV/VFP4UVz6t4mlI5BX2WrS6I54EhACNpcnrpnJta5amKzyugNs8 9wsXXBwk5h7MAVzLrXTi6M49klNpaxUAcS87XF/f5JTTZ8dZvudGO0hm0RD/Z7y4 IMrHbIQOTJ08p91aDEM1c9aN9LqbzBQ= -----END CERTIFICATE-----Generated at Fri Nov 28 07:21:07 2025 by rpki-client