This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa File: d00cc37e-552d-3224-b706-528c3bb75b85.roa (raw, json) Hash identifier: Uqa8wfMZqw0QKQGWXzeXs4HUJWL/nNSMLp4TmVLCsMI= Subject key identifier: 99:14:60:70:56:A2:2C:CF:9F:A3:DF:45:17:A7:5D:98:2F:3E:4D:A1 Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584BEF2221F5295CE2DD1FAF1380 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa Signing time: Fri 21 Nov 2025 14:14:40 +0000 ROA not before: Fri 21 Nov 2025 14:14:40 +0000 ROA not after: Thu 19 Feb 2026 14:14:40 +0000 asID: 204322 IP address blocks: 170.149.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:22:21:f5:29:5c:e2:dd:1f:af:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Nov 21 14:14:40 2025 GMT Not After : Feb 19 14:14:40 2026 GMT Subject: CN=c92aafa9-2591-4e5f-8f91-2fc4052bf63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:9e:0d:5e:aa:ff:5a:40:14:f8:6c:65:4c: ff:51:40:1c:51:7f:59:b3:b8:3d:b2:24:3d:c2:4c: 6c:4b:ac:d4:7f:57:dc:61:8d:59:6c:f4:e3:1e:d8: 45:fb:ee:60:54:9e:7f:fe:f6:50:05:57:aa:0a:3d: 07:9e:e5:e9:6d:cf:0b:f2:33:45:f8:bf:b9:54:26: fa:02:88:7c:17:dc:24:b0:8e:24:3c:6c:fb:43:cb: 47:00:33:78:7e:6b:b2:17:9c:89:07:70:9b:dc:7a: 15:88:b1:3f:2f:51:9d:e4:7e:9d:69:88:96:b3:b0: 48:07:f3:3c:4c:cd:42:f5:31:33:83:77:45:1f:c7: 70:10:44:00:66:b4:43:8d:ee:0c:4a:0f:93:c7:92: 2d:e9:28:96:71:a0:50:fe:37:08:0c:6a:5c:bc:b1: 7e:a6:b5:e7:32:70:99:8b:cb:cd:20:bf:20:09:51: 95:74:2b:86:89:4c:32:00:2d:a4:7f:8b:75:a4:ae: 1e:85:43:0d:0c:9e:58:05:dd:eb:02:f8:69:c5:15: 3d:df:aa:d6:86:b6:13:3d:46:48:65:98:a0:4a:d9: fc:7f:ff:40:5b:cd:bb:19:83:a2:05:df:d8:4e:b2: 54:e5:7e:41:e9:1b:83:26:d0:8a:ef:a0:22:31:d5: 70:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:14:60:70:56:A2:2C:CF:9F:A3:DF:45:17:A7:5D:98:2F:3E:4D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:74:d8:d0:c3:1c:a5:85:01:90:60:4e:ee:d8:a9:4a:66:fd: 9f:20:13:f6:60:0d:fe:38:52:f7:59:52:8d:5c:97:06:13:1e: 76:a9:8d:04:cc:15:ef:78:80:4b:06:d7:bd:24:24:16:96:c6: 86:54:71:e3:52:52:76:e9:c1:0a:91:ec:fa:80:2b:f3:55:bc: 00:17:f6:83:77:9a:58:7d:89:1d:82:e4:75:82:ef:fa:be:10: df:e8:42:cd:40:a7:93:0f:fe:2e:e3:aa:d5:4d:6e:b1:82:be: 3d:79:a4:ad:ca:6d:20:9b:7b:75:96:a6:55:4e:cc:6f:d5:cc: 9a:87:44:aa:bd:75:a6:da:4d:be:64:c5:3d:10:da:9f:39:44: c4:f6:7b:24:6d:51:27:85:2f:d4:df:b5:4a:3c:76:ae:92:f1: 76:e8:ed:2c:e5:37:5c:c7:84:98:41:d7:39:9e:ee:d8:a2:57: 86:01:da:ba:c9:bf:3f:c7:4a:b4:eb:13:c3:95:57:91:b9:27: 50:c7:12:2d:20:21:56:25:14:b9:37:71:27:d5:7e:23:26:a4: 06:12:3e:30:31:de:32:40:62:0e:1b:81:e5:00:37:e9:77:e2: 2a:a9:54:cf:6e:18:92:70:f1:41:27:81:7d:8f:ba:cc:7a:a8: 0a:e8:99:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvvIiH1KVzi3R+vE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI1MTEyMTE0MTQ0MFoXDTI2MDIxOTE0MTQ0MFowLzEtMCsGA1UEAxMk YzkyYWFmYTktMjU5MS00ZTVmLThmOTEtMmZjNDA1MmJmNjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopaeDV6q/1pAFPhsZUz/UUAcUX9Zs7g9siQ9 wkxsS6zUf1fcYY1ZbPTjHthF++5gVJ5//vZQBVeqCj0HnuXpbc8L8jNF+L+5VCb6 Aoh8F9wksI4kPGz7Q8tHADN4fmuyF5yJB3Cb3HoViLE/L1Gd5H6daYiWs7BIB/M8 TM1C9TEzg3dFH8dwEEQAZrRDje4MSg+Tx5It6SiWcaBQ/jcIDGpcvLF+prXnMnCZ i8vNIL8gCVGVdCuGiUwyAC2kf4t1pK4ehUMNDJ5YBd3rAvhpxRU936rWhrYTPUZI ZZigStn8f/9AW827GYOiBd/YTrJU5X5B6RuDJtCK76AiMdVwnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkUYHBWoizPn6PfRRenXZgvPk2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvZDAwY2MzN2UtNTUyZC0z MjI0LWI3MDYtNTI4YzNiYjc1Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId02NDDHKWFAZBgTu7YqUpm/Z8gE/ZgDf44UvdZUo1clwYTHnapjQTM Fe94gEsG170kJBaWxoZUceNSUnbpwQqR7PqAK/NVvAAX9oN3mlh9iR2C5HWC7/q+ EN/oQs1Ap5MP/i7jqtVNbrGCvj15pK3KbSCbe3WWplVOzG/VzJqHRKq9dabaTb5k xT0Q2p85RMT2eyRtUSeFL9TftUo8dq6S8Xbo7SzlN1zHhJhB1zme7tiiV4YB2rrJ vz/HSrTrE8OVV5G5J1DHEi0gIVYlFLk3cSfVfiMmpAYSPjAx3jJAYg4bgeUAN+l3 4iqpVM9uGJJw8UEngX2Pusx6qAromXc= -----END CERTIFICATE-----Generated at Fri Nov 28 07:18:21 2025 by rpki-client