This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa File: cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa (raw, json) Hash identifier: P3kMhKz1oktR2a/nnYjgtQOcDgBzpJpKmSUi0yFW29M= Subject key identifier: B8:7A:7F:00:3C:6F:32:ED:6F:50:9E:82:F0:10:06:C3:91:5D:47:3E Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584BEF22C1939C6B8644E5206DD0 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa Signing time: Fri 21 Nov 2025 14:15:55 +0000 ROA not before: Fri 21 Nov 2025 14:15:55 +0000 ROA not after: Thu 19 Feb 2026 14:15:55 +0000 asID: 396533 IP address blocks: 170.149.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:22:c1:93:9c:6b:86:44:e5:20:6d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Nov 21 14:15:55 2025 GMT Not After : Feb 19 14:15:55 2026 GMT Subject: CN=bb9fcc05-fd94-428c-9646-d8534d0dd611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:cb:77:b8:cf:f1:61:fe:91:1e:17:a7:b2: b7:03:b6:47:79:d8:7b:86:81:48:ff:4c:0a:cf:13: b8:a9:4f:0e:b5:c0:17:f4:7b:49:33:8c:31:13:4d: 18:af:f7:4e:1c:48:a4:d5:d5:23:d3:f4:af:ce:40: dd:80:56:06:18:89:bf:40:b5:65:a8:8d:f0:9a:cd: 7e:dd:e2:b3:0f:8e:b8:ca:ec:8a:2f:fd:af:c6:d5: 40:58:4a:f5:a8:70:de:d0:85:25:61:47:92:b4:7e: ae:fb:7c:55:1b:6f:92:8c:dd:b6:2c:9e:e6:c2:f5: 7e:5e:8a:92:f7:43:a7:9f:ab:db:80:b9:14:af:c4: 94:77:b4:18:aa:b3:af:b0:c6:44:f3:48:eb:39:3c: 00:eb:57:28:4a:45:96:ee:b7:b1:05:1b:2c:7c:26: 23:67:1b:86:82:3f:45:3d:41:62:5c:4f:83:df:fd: 75:e8:42:e0:6b:13:18:cf:c4:e0:cb:85:38:7c:c9: a3:20:51:db:62:ac:ca:cf:93:d5:89:56:d6:79:ac: 68:a0:84:72:9b:bb:1d:d7:96:6d:2a:d7:1c:f5:2d: ba:55:13:93:55:c3:a5:e4:8b:98:0c:cf:61:b1:e3: e8:be:75:a9:b5:be:48:2c:a6:df:4f:3e:49:0e:dc: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:7F:00:3C:6F:32:ED:6F:50:9E:82:F0:10:06:C3:91:5D:47:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:35:82:28:67:8c:5f:21:b2:e5:da:54:8a:fa:aa:0e:31:7f: 1d:97:4c:ba:63:2c:8f:39:5b:b9:51:4a:5d:40:84:6f:0b:da: 70:43:53:c4:42:17:18:ce:74:ae:ef:34:fc:d6:23:08:80:ac: 64:68:f3:23:49:85:6e:c1:78:e0:9d:e1:0f:45:b9:b0:84:0f: ca:06:3f:90:97:0f:8a:a1:ff:94:a2:af:36:3c:52:dd:95:ca: d0:c2:33:98:36:b5:e3:85:66:34:2f:ad:5a:1f:ce:b3:cc:f9: 6d:26:15:95:4d:79:41:08:6d:1d:ad:0b:1c:50:48:20:90:ef: cf:a4:0c:33:71:3d:6e:6b:bf:3e:49:bb:f7:82:0d:3f:96:14: 76:06:57:9d:f0:93:85:c4:4e:b8:bb:c9:be:cb:f0:2f:ed:d1: 1b:29:cd:fe:4a:a6:d7:4c:f7:35:72:ad:24:71:64:86:5d:e7: f1:52:46:6d:30:6c:9f:69:89:50:9e:09:13:99:09:72:8b:32: 13:c2:53:2c:b1:74:b5:be:f6:95:d3:58:9d:78:01:bb:13:e7: 11:bc:d8:68:b8:c1:f8:d7:5c:b4:f1:ff:04:83:00:a3:a0:63: ed:46:85:e0:b8:d3:86:05:6d:d9:22:78:c0:61:88:2b:08:02: 40:43:c3:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvIsGTnGuGROUgbdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI1MTEyMTE0MTU1NVoXDTI2MDIxOTE0MTU1NVowLzEtMCsGA1UEAxMk YmI5ZmNjMDUtZmQ5NC00MjhjLTk2NDYtZDg1MzRkMGRkNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1bLd7jP8WH+kR4Xp7K3A7ZHedh7hoFI/0wK zxO4qU8OtcAX9HtJM4wxE00Yr/dOHEik1dUj0/SvzkDdgFYGGIm/QLVlqI3wms1+ 3eKzD464yuyKL/2vxtVAWEr1qHDe0IUlYUeStH6u+3xVG2+SjN22LJ7mwvV+XoqS 90Onn6vbgLkUr8SUd7QYqrOvsMZE80jrOTwA61coSkWW7rexBRssfCYjZxuGgj9F PUFiXE+D3/116ELgaxMYz8Tgy4U4fMmjIFHbYqzKz5PViVbWeaxooIRym7sd15Zt Ktcc9S26VROTVcOl5IuYDM9hsePovnWptb5ILKbfTz5JDtzHhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh6fwA8bzLtb1CegvAQBsORXUc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvY2YzZDMzMDEtZjk0NS0z NWM0LTljYjEtMDdmZWU4MmMyYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH01gihnjF8hsuXaVIr6qg4xfx2XTLpjLI85W7lRSl1AhG8L2nBDU8RC FxjOdK7vNPzWIwiArGRo8yNJhW7BeOCd4Q9FubCED8oGP5CXD4qh/5SirzY8Ut2V ytDCM5g2teOFZjQvrVofzrPM+W0mFZVNeUEIbR2tCxxQSCCQ78+kDDNxPW5rvz5J u/eCDT+WFHYGV53wk4XETri7yb7L8C/t0Rspzf5KptdM9zVyrSRxZIZd5/FSRm0w bJ9piVCeCROZCXKLMhPCUyyxdLW+9pXTWJ14AbsT5xG82Gi4wfjXXLTx/wSDAKOg Y+1GheC404YFbdkieMBhiCsIAkBDwzE= -----END CERTIFICATE-----Generated at Fri Nov 28 07:18:04 2025 by rpki-client