This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa File: 0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa (raw, json) Hash identifier: pY+2tVXbXnWAbX4dgnovZT4fXA4UaKogoexHp5U+SKk= Subject key identifier: 39:59:BE:C5:F1:D5:EB:E2:43:22:67:B2:79:5F:CB:A4:75:53:F7:D9 Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584BEF240912CD7919F5D483A420 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa Signing time: Fri 21 Nov 2025 14:18:30 +0000 ROA not before: Fri 21 Nov 2025 14:18:30 +0000 ROA not after: Thu 19 Feb 2026 14:18:30 +0000 asID: 21568 IP address blocks: 170.149.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:24:09:12:cd:79:19:f5:d4:83:a4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Nov 21 14:18:30 2025 GMT Not After : Feb 19 14:18:30 2026 GMT Subject: CN=26bc5e0c-7d85-485a-a704-d4bbe6ed4df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:02:1f:ad:9e:64:30:7b:2e:8a:74:cb:a3:5d: 59:c7:c1:ec:c5:25:aa:3a:ef:7e:e2:f4:3f:60:b5: d4:80:fe:41:e7:6b:9f:37:bd:4f:5d:3e:49:51:53: 05:db:8e:b1:74:91:ba:68:91:7b:b7:e2:96:37:cc: af:8e:dd:00:2d:4f:f0:53:ec:9d:d2:0a:3e:1c:ba: 50:b0:9d:64:bc:eb:4c:68:c1:34:ab:54:aa:c3:fd: 48:63:a5:48:f8:57:ea:57:9e:78:17:55:cf:08:18: a1:4b:eb:ba:b7:73:66:e2:a9:4d:68:53:88:ae:ca: 3d:6c:e1:88:cd:fe:1a:3a:af:62:a7:9e:59:ab:02: ba:45:b5:d2:6d:d6:ae:6d:dc:71:6d:36:94:e6:47: 77:3e:95:92:c1:5f:75:62:c5:50:ff:62:ae:23:07: bc:c3:4b:4f:82:02:1e:d1:11:10:13:47:24:2c:cc: 5c:e5:c7:7f:a3:57:7a:57:21:40:5f:fb:bb:18:86: 3a:b6:f1:db:39:a9:ae:fd:2e:ea:f7:15:54:5d:06: 0d:09:de:90:26:1d:b6:07:65:7a:04:31:2d:41:9c: 67:52:81:0e:b2:14:6a:e7:0f:59:a1:6f:2a:6d:6b: 2d:85:1c:b7:b3:69:f9:77:0a:9e:57:cf:74:c0:1b: eb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:59:BE:C5:F1:D5:EB:E2:43:22:67:B2:79:5F:CB:A4:75:53:F7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:72:95:2c:3b:10:21:db:66:5a:70:ec:82:f5:87:06:cc:50: 5e:74:d4:c7:bb:8b:75:9a:1a:bf:f9:7b:f0:35:dc:45:f4:a6: 79:88:cf:40:1f:b0:8a:55:4f:51:18:2c:fa:64:76:26:5c:1c: 31:51:b3:79:34:fd:6c:d3:d4:a9:80:58:df:86:f7:d9:e4:0c: cb:ea:6c:7c:1e:7a:70:5d:a1:1c:7d:5d:ce:d0:13:14:17:fd: ee:4e:70:7b:0a:48:ef:4a:ed:59:52:72:ff:33:7d:fe:f4:7f: cd:3b:39:1a:15:4b:cd:db:1b:d6:94:a7:26:8b:2c:f7:2c:21: 65:a2:2c:40:9a:38:f3:ee:bd:54:e8:1d:95:ef:a2:c6:c2:04: 17:0b:41:b3:c2:19:7b:a0:65:b7:d2:d5:36:6f:67:04:33:8f: 13:77:3e:6e:58:a7:66:50:e1:7e:b6:b6:6c:67:f5:c3:9c:a9: 17:13:77:92:07:35:1e:db:a7:93:56:61:05:db:c3:f3:ef:fa: 4f:a4:4b:9f:8a:e1:f0:52:6d:98:35:ae:51:85:62:f5:09:5a: 7e:ef:4f:53:80:68:4c:5f:b1:b0:48:b1:4c:7e:1a:99:c2:38: d9:33:10:7a:a7:ba:e3:22:b5:e2:70:0b:8a:74:c5:b0:54:ee: fc:cc:4e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvJAkSzXkZ9dSDpCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI1MTEyMTE0MTgzMFoXDTI2MDIxOTE0MTgzMFowLzEtMCsGA1UEAxMk MjZiYzVlMGMtN2Q4NS00ODVhLWE3MDQtZDRiYmU2ZWQ0ZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwIfrZ5kMHsuinTLo11Zx8HsxSWqOu9+4vQ/ YLXUgP5B52ufN71PXT5JUVMF246xdJG6aJF7t+KWN8yvjt0ALU/wU+yd0go+HLpQ sJ1kvOtMaME0q1Sqw/1IY6VI+FfqV554F1XPCBihS+u6t3Nm4qlNaFOIrso9bOGI zf4aOq9ip55ZqwK6RbXSbdaubdxxbTaU5kd3PpWSwV91YsVQ/2KuIwe8w0tPggIe 0REQE0ckLMxc5cd/o1d6VyFAX/u7GIY6tvHbOamu/S7q9xVUXQYNCd6QJh22B2V6 BDEtQZxnUoEOshRq5w9ZoW8qbWsthRy3s2n5dwqeV890wBvrswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlZvsXx1eviQyJnsnlfy6R1U/fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvMGU1OGI1ZjQtZDIzNS0z MWE5LTg0NjEtOWQ0ZGQ0ZTNhOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqpXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1ylSw7ECHbZlpw7IL1hwbMUF501Me7i3WaGr/5e/A13EX0pnmIz0Af sIpVT1EYLPpkdiZcHDFRs3k0/WzT1KmAWN+G99nkDMvqbHweenBdoRx9Xc7QExQX /e5OcHsKSO9K7VlScv8zff70f807ORoVS83bG9aUpyaLLPcsIWWiLECaOPPuvVTo HZXvosbCBBcLQbPCGXugZbfS1TZvZwQzjxN3Pm5Yp2ZQ4X62tmxn9cOcqRcTd5IH NR7bp5NWYQXbw/Pv+k+kS5+K4fBSbZg1rlGFYvUJWn7vT1OAaExfsbBIsUx+GpnC ONkzEHqnuuMiteJwC4p0xbBU7vzMTos= -----END CERTIFICATE-----Generated at Fri Nov 28 07:52:40 2025 by rpki-client