This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8e88b925-e4f4-356c-a947-927c2d41da08.roa File: 8e88b925-e4f4-356c-a947-927c2d41da08.roa (raw, json) Hash identifier: VCl7Lj1+HFw1PkpeXq5ZcOpY+f6P5lGV2vbLElESJb8= Subject key identifier: 37:05:2B:79:69:68:50:BB:57:73:D2:97:7B:5C:D2:1A:BF:C2:D5:5F Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584BEF1F85AC896C570D01575D00 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8e88b925-e4f4-356c-a947-927c2d41da08.roa Signing time: Fri 21 Nov 2025 14:09:25 +0000 ROA not before: Fri 21 Nov 2025 14:09:25 +0000 ROA not after: Thu 19 Feb 2026 14:09:25 +0000 asID: 4543 IP address blocks: 170.149.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:1f:85:ac:89:6c:57:0d:01:57:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Nov 21 14:09:25 2025 GMT Not After : Feb 19 14:09:25 2026 GMT Subject: CN=0312d8cb-28aa-4724-a548-4125c4e497a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:82:8b:9f:71:b5:13:85:0f:b4:22:95:34: 32:16:f4:48:b6:15:e0:4a:0c:61:e1:2c:b5:e4:a0: ba:8d:f8:b0:35:c3:08:57:b7:02:8a:48:25:f0:e2: 54:2f:b5:77:18:b8:d1:68:dd:34:9a:68:4e:ac:f1: 07:db:08:e7:64:02:f7:2b:5d:1e:7f:09:86:43:39: 17:3a:cf:8e:99:34:b6:b0:5e:93:b8:a2:e9:77:af: 29:6b:4a:6c:9b:75:11:27:eb:3e:8d:c7:76:7f:a2: f1:ff:47:89:14:9b:77:d3:ca:f9:96:b0:3a:46:ea: 68:23:eb:87:ef:5b:9f:90:ef:06:01:b3:05:cc:f8: c1:a4:bc:23:e7:ea:11:32:7a:f5:ff:6a:c8:c2:da: 89:9c:73:b3:0b:6c:de:56:d4:dd:ff:39:6c:c7:76: 41:7d:ec:66:df:3d:a0:8c:4f:e7:66:b0:d0:be:a5: e2:a3:61:78:2d:61:48:c4:fe:59:da:12:c9:87:6e: b9:31:54:8a:d3:35:f0:03:e3:ce:c2:6a:b0:d9:07: 72:12:5c:08:9f:c3:16:94:4d:ee:8f:97:34:16:eb: 9b:e7:2f:2b:5d:d3:54:02:14:21:fd:e8:c7:94:c6: a7:ef:fc:4e:58:cd:e3:e8:8f:41:09:3b:7c:80:31: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:05:2B:79:69:68:50:BB:57:73:D2:97:7B:5C:D2:1A:BF:C2:D5:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/8e88b925-e4f4-356c-a947-927c2d41da08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ec:65:2d:c8:3e:c2:96:3d:4d:27:2c:f0:71:4a:64:f4:f6: ab:00:50:af:f5:e8:a0:5a:27:1e:da:a4:61:ca:e1:c7:e5:a1: 86:5d:36:1b:cc:00:78:3e:94:17:28:d8:d7:4a:5d:08:04:e8: 0e:ef:f8:0c:04:17:8f:01:b7:fe:c7:dc:80:77:f1:6c:b9:89: 99:4d:6f:07:d7:00:0b:ad:e1:bd:c3:e9:1f:b8:a2:f2:fa:ac: fa:dd:ea:d4:a1:52:75:18:9b:b6:f4:6f:79:b7:5e:d7:44:44: cb:b2:ac:fb:56:27:72:23:02:81:01:c2:ba:6d:4e:5f:de:08: 4d:1b:1e:ae:48:f8:26:39:7d:a8:b2:c3:7f:d3:8c:34:ec:7c: 20:26:b1:93:48:3f:02:19:57:25:ae:18:dd:ec:51:da:f0:99: a6:e4:2f:fc:2c:ae:12:3e:25:97:73:2b:55:cc:1a:3b:8e:84: 60:65:d0:99:eb:fe:39:53:56:f8:c1:9c:29:79:9f:3c:c1:91: 80:7d:5a:2f:3f:73:6d:b6:68:ac:06:59:e9:23:56:b7:e4:72: c7:e0:76:6e:61:e5:a5:15:c1:ec:e4:46:b3:2b:41:fe:54:02: c5:51:af:ce:b2:ee:ab:53:a2:da:48:08:e1:45:2c:e2:d9:f8: 93:dc:7a:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvH4WsiWxXDQFXXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI1MTEyMTE0MDkyNVoXDTI2MDIxOTE0MDkyNVowLzEtMCsGA1UEAxMk MDMxMmQ4Y2ItMjhhYS00NzI0LWE1NDgtNDEyNWM0ZTQ5N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB+Ci59xtROFD7QilTQyFvRIthXgSgxh4Sy1 5KC6jfiwNcMIV7cCikgl8OJUL7V3GLjRaN00mmhOrPEH2wjnZAL3K10efwmGQzkX Os+OmTS2sF6TuKLpd68pa0psm3URJ+s+jcd2f6Lx/0eJFJt308r5lrA6RupoI+uH 71ufkO8GAbMFzPjBpLwj5+oRMnr1/2rIwtqJnHOzC2zeVtTd/zlsx3ZBfexm3z2g jE/nZrDQvqXio2F4LWFIxP5Z2hLJh265MVSK0zXwA+POwmqw2QdyElwIn8MWlE3u j5c0Fuub5y8rXdNUAhQh/ejHlMan7/xOWM3j6I9BCTt8gDGkGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcFK3lpaFC7V3PSl3tc0hq/wtVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvOGU4OGI5MjUtZTRmNC0z NTZjLWE5NDctOTI3YzJkNDFkYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqpVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPsZS3IPsKWPU0nLPBxSmT09qsAUK/16KBaJx7apGHK4cfloYZdNhvM AHg+lBco2NdKXQgE6A7v+AwEF48Bt/7H3IB38Wy5iZlNbwfXAAut4b3D6R+4ovL6 rPrd6tShUnUYm7b0b3m3XtdERMuyrPtWJ3IjAoEBwrptTl/eCE0bHq5I+CY5faiy w3/TjDTsfCAmsZNIPwIZVyWuGN3sUdrwmabkL/wsrhI+JZdzK1XMGjuOhGBl0Jnr /jlTVvjBnCl5nzzBkYB9Wi8/c222aKwGWekjVrfkcsfgdm5h5aUVwezkRrMrQf5U AsVRr86y7qtTotpICOFFLOLZ+JPceq4= -----END CERTIFICATE-----Generated at Fri Nov 28 07:18:08 2025 by rpki-client