This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa File: 673f4a2a-5656-3dbd-a855-f30cadf48404.roa (raw, json) Hash identifier: vq0RRykeurS+W4845+jvhnOwCfexHrr8gjfTa7xy6EM= Subject key identifier: 9A:75:A9:33:A5:F4:0A:78:96:25:90:2B:C5:DD:C6:2A:01:35:8C:52 Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584C55011DB7E28668DC573C3F00 Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa Signing time: Sun 28 Dec 2025 02:00:30 +0000 ROA not before: Sun 28 Dec 2025 02:00:30 +0000 ROA not after: Sat 28 Mar 2026 01:00:30 +0000 asID: 399613 IP address blocks: 23.141.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:01:1d:b7:e2:86:68:dc:57:3c:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Dec 28 02:00:30 2025 GMT Not After : Mar 28 01:00:30 2026 GMT Subject: CN=ea0a7144-51cc-480a-94d9-22231dcd57a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:59:03:b1:e4:72:a4:55:7e:a7:44:5c:3f:71: 79:b4:01:4b:14:e8:57:3d:fc:46:11:cc:c9:14:5a: 20:b4:0e:68:84:a3:ed:6d:1e:63:21:18:9a:70:dd: 01:19:27:0f:51:b1:03:6c:69:80:2a:85:7c:72:76: 96:5c:83:e7:b6:bc:06:48:db:ab:d4:8d:f3:56:b9: ea:cc:b1:41:7c:1f:38:88:a0:0f:43:23:d8:7b:5f: 8b:be:9c:8d:e7:15:06:00:2a:a1:1d:ba:3e:66:2f: 26:c5:c1:37:11:36:15:f4:79:90:8e:b9:f5:02:3b: ef:57:70:a4:05:4b:ee:40:54:e6:cf:c5:c4:4e:6c: ee:fc:e8:c4:e0:05:be:05:9a:c6:98:f2:af:f0:3a: 2b:0b:27:9c:71:06:fb:5f:6c:9f:b7:cd:ba:21:56: dc:3f:0f:56:6e:b2:5f:b9:32:ec:96:2b:e0:2e:48: 7c:84:3e:83:69:0f:ed:b9:c3:af:40:7a:b3:48:87: 7b:fa:00:19:1f:75:4a:9a:57:d3:46:b0:90:00:c4: ca:4f:10:a6:02:48:8a:b4:86:8a:ed:85:ce:a1:8d: 8b:be:b6:e7:07:4b:cc:91:42:f1:45:76:2c:d1:6b: a0:e3:ba:0b:07:2e:b1:b8:c9:7e:6f:90:34:49:55: e7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:75:A9:33:A5:F4:0A:78:96:25:90:2B:C5:DD:C6:2A:01:35:8C:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv4: 23.141.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a1:63:e2:0e:58:56:75:c0:be:01:3d:5b:cc:6d:59:71:fe: bf:71:a8:33:6e:77:db:d4:42:08:4c:c2:98:5b:23:de:9f:24: 2d:31:8a:91:ee:43:4e:5d:ea:82:72:50:55:3d:6a:ec:57:eb: b4:4f:fe:48:23:7b:bf:b2:42:bb:66:a5:81:59:ef:ea:eb:0c: 4f:74:38:15:8a:02:2d:82:1d:7e:ac:3a:02:e8:dd:a6:81:e4: bf:82:3b:8d:26:35:b2:1e:a1:ab:9e:59:29:be:66:a3:b6:8b: 19:28:20:a4:1f:6a:df:8a:9a:96:82:cf:07:1d:a3:3f:64:d1: d9:b2:e5:ef:fa:05:88:ef:a6:f4:62:f9:c3:d2:72:8e:82:fa: 6c:53:f4:d1:c9:b5:b7:19:60:b0:c2:fc:56:d4:0e:b8:ec:27: 36:48:ed:88:b4:06:3f:af:56:73:81:a5:2f:ab:a6:b8:aa:08: e9:57:e2:ba:fb:b6:9b:e3:64:e9:cf:07:8b:dc:2a:0b:e6:21: a9:ac:57:96:23:14:d7:27:bd:2b:ee:dd:36:f0:0f:a7:21:83: d3:b3:bb:43:80:36:a9:5f:95:50:5c:04:a5:e0:da:32:f0:fc: da:27:17:19:c7:f4:fb:50:a5:7b:01:2f:31:1e:19:71:ed:a6: 81:b7:38:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVAR234oZo3Fc8PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI1MTIyODAyMDAzMFoXDTI2MDMyODAxMDAzMFowLzEtMCsGA1UEAxMk ZWEwYTcxNDQtNTFjYy00ODBhLTk0ZDktMjIyMzFkY2Q1N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1kDseRypFV+p0RcP3F5tAFLFOhXPfxGEczJ FFogtA5ohKPtbR5jIRiacN0BGScPUbEDbGmAKoV8cnaWXIPntrwGSNur1I3zVrnq zLFBfB84iKAPQyPYe1+LvpyN5xUGACqhHbo+Zi8mxcE3ETYV9HmQjrn1AjvvV3Ck BUvuQFTmz8XETmzu/OjE4AW+BZrGmPKv8DorCyeccQb7X2yft826IVbcPw9WbrJf uTLslivgLkh8hD6DaQ/tucOvQHqzSId7+gAZH3VKmlfTRrCQAMTKTxCmAkiKtIaK 7YXOoY2LvrbnB0vMkULxRXYs0Wug47oLBy6xuMl+b5A0SVXnvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp1qTOl9Ap4liWQK8XdxioBNYxSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvNjczZjRhMmEtNTY1Ni0z ZGJkLWE4NTUtZjMwY2FkZjQ4NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGhY+IOWFZ1wL4BPVvMbVlx/r9xqDNud9vUQghMwphbI96fJC0xipHu Q05d6oJyUFU9auxX67RP/kgje7+yQrtmpYFZ7+rrDE90OBWKAi2CHX6sOgLo3aaB 5L+CO40mNbIeoaueWSm+ZqO2ixkoIKQfat+KmpaCzwcdoz9k0dmy5e/6BYjvpvRi +cPSco6C+mxT9NHJtbcZYLDC/FbUDrjsJzZI7Yi0Bj+vVnOBpS+rpriqCOlX4rr7 tpvjZOnPB4vcKgvmIamsV5YjFNcnvSvu3TbwD6chg9Ozu0OANqlflVBcBKXg2jLw /NonFxnH9PtQpXsBLzEeGXHtpoG3OCY= -----END CERTIFICATE-----Generated at Fri Jan 9 18:24:35 2026 by rpki-client