This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa File: 0d407db7-59d2-30ac-958d-48c3388d3b19.roa (raw, json) Hash identifier: kKhwLxYRwOof3ngzJ9lOfq/ZFz8X8bDAeM5z5idR+F8= Subject key identifier: 71:99:62:7E:F2:F7:61:7F:78:E3:46:72:55:92:9F:0B:4E:E1:9E:68 Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584BEF25474858EB2CF8E533FE40 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa Signing time: Fri 21 Nov 2025 14:21:00 +0000 ROA not before: Fri 21 Nov 2025 14:21:00 +0000 ROA not after: Thu 19 Feb 2026 14:21:00 +0000 asID: 204321 IP address blocks: 170.149.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:25:47:48:58:eb:2c:f8:e5:33:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Nov 21 14:21:00 2025 GMT Not After : Feb 19 14:21:00 2026 GMT Subject: CN=bf104994-b6ba-4e8e-acb1-fed61137caa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:9d:3f:5b:37:c0:53:b8:44:7a:d3:31:cb: ba:26:54:50:e8:35:43:84:52:c5:ff:48:a8:e0:5a: a3:83:75:cb:32:12:a7:45:3d:da:c2:88:8e:78:fb: 2a:87:d1:d8:c2:62:3f:97:1c:6e:f2:87:d5:b0:9c: 04:d3:29:e2:53:87:66:c6:56:d8:a4:73:db:65:ec: 40:d2:b4:f0:43:99:9d:5d:fe:b0:c1:55:49:c5:e5: f6:62:c3:bf:11:89:fe:cb:31:d6:5a:30:10:ba:83: d4:d7:67:e7:78:47:dc:6e:69:54:56:b3:14:40:0a: bf:b6:96:f9:31:c9:6e:1c:b8:23:6c:0c:74:48:c4: c3:9c:c2:45:f5:f2:f9:96:2d:5b:1f:83:9e:16:ab: e4:05:14:ed:b2:8d:83:39:82:ef:d2:4e:1e:6d:ac: 0f:c5:17:8e:eb:06:61:ed:a9:d1:d4:96:8d:a0:1c: a4:ab:ac:5e:69:aa:e9:9d:6d:bc:f8:8b:68:c5:9f: 5e:63:3d:3b:94:8a:ae:93:12:6c:a4:53:5e:9e:2c: f6:5a:e0:5b:93:60:c1:f1:78:aa:04:81:80:c9:8c: 68:22:f7:6e:7e:10:19:31:ca:b0:cd:8e:be:70:fd: 96:72:c8:77:a5:d6:b7:21:8f:26:53:50:5e:b8:3f: 0e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:99:62:7E:F2:F7:61:7F:78:E3:46:72:55:92:9F:0B:4E:E1:9E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:80:4b:37:b6:18:ef:49:0f:c9:7d:67:a4:4a:a4:7f:38:a2: 9d:f9:74:44:e8:2b:11:ad:1b:39:aa:ac:49:d2:0a:9f:d3:c4: cc:ca:10:38:4f:ab:71:71:2c:fd:14:b7:b8:30:ec:66:07:20: 9b:5c:7f:fe:b4:25:8c:df:21:83:58:f4:45:af:27:f4:34:7a: 51:15:47:e0:53:d5:ed:8c:10:14:92:a7:c8:9b:af:6e:5f:8c: 2d:89:d4:a1:43:cb:ad:f4:1b:88:2f:b5:8c:5c:39:2f:16:83: 84:92:17:29:3c:fb:42:51:40:e7:56:99:78:6d:92:da:07:1c: bc:21:18:14:5c:40:1a:81:94:68:b7:09:f1:5c:ce:c0:89:8e: 73:8e:33:a7:a8:35:09:e5:c6:a2:dc:ba:8b:5b:4c:a6:7e:bd: 8f:83:d0:ab:08:6a:a6:ae:da:72:35:54:5d:1e:19:66:95:1b: eb:c6:57:cf:f9:38:f5:c2:f0:13:e6:66:90:5d:6e:04:c5:cb: 53:e4:b6:32:40:eb:20:93:68:ce:b5:74:5b:8b:e2:95:9c:5a: 9f:cd:1e:19:71:5d:d7:5c:6d:2d:de:f6:06:c3:af:79:3c:19: c2:16:ba:ad:68:c5:f9:c6:35:f6:61:87:6c:cc:33:aa:18:42: 30:6f:b4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvJUdIWOss+OUz/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI1MTEyMTE0MjEwMFoXDTI2MDIxOTE0MjEwMFowLzEtMCsGA1UEAxMk YmYxMDQ5OTQtYjZiYS00ZThlLWFjYjEtZmVkNjExMzdjYWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfCdP1s3wFO4RHrTMcu6JlRQ6DVDhFLF/0io 4Fqjg3XLMhKnRT3awoiOePsqh9HYwmI/lxxu8ofVsJwE0yniU4dmxlbYpHPbZexA 0rTwQ5mdXf6wwVVJxeX2YsO/EYn+yzHWWjAQuoPU12fneEfcbmlUVrMUQAq/tpb5 McluHLgjbAx0SMTDnMJF9fL5li1bH4OeFqvkBRTtso2DOYLv0k4ebawPxReO6wZh 7anR1JaNoBykq6xeaarpnW28+ItoxZ9eYz07lIqukxJspFNeniz2WuBbk2DB8Xiq BIGAyYxoIvdufhAZMcqwzY6+cP2Wcsh3pda3IY8mU1BeuD8O6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGZYn7y92F/eONGclWSnwtO4Z5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvMGQ0MDdkYjctNTlkMi0z MGFjLTk1OGQtNDhjMzM4OGQzYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2ASze2GO9JD8l9Z6RKpH84op35dEToKxGtGzmqrEnSCp/TxMzKEDhP q3FxLP0Ut7gw7GYHIJtcf/60JYzfIYNY9EWvJ/Q0elEVR+BT1e2MEBSSp8ibr25f jC2J1KFDy630G4gvtYxcOS8Wg4SSFyk8+0JRQOdWmXhtktoHHLwhGBRcQBqBlGi3 CfFczsCJjnOOM6eoNQnlxqLcuotbTKZ+vY+D0KsIaqau2nI1VF0eGWaVG+vGV8/5 OPXC8BPmZpBdbgTFy1PktjJA6yCTaM61dFuL4pWcWp/NHhlxXddcbS3e9gbDr3k8 GcIWuq1oxfnGNfZhh2zMM6oYQjBvtJk= -----END CERTIFICATE-----Generated at Fri Nov 28 07:18:22 2025 by rpki-client