This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa File: dd8e30c6-1320-3420-b794-8332e5c08297.roa (raw, json) Hash identifier: xmuuHO7n1gg4xTsWR/33RuZg2ikPbx2NRoB8zZ8UfO4= Subject key identifier: A2:97:C5:7B:6A:0E:54:C3:89:E6:E9:07:26:27:8C:E1:F9:EE:BF:93 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C5122429EED4C23E00854AB80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa Signing time: Fri 26 Dec 2025 16:44:09 +0000 ROA not before: Fri 26 Dec 2025 16:44:09 +0000 ROA not after: Thu 26 Mar 2026 15:44:09 +0000 asID: 396443 IP address blocks: 149.120.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:51:22:42:9e:ed:4c:23:e0:08:54:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 26 16:44:09 2025 GMT Not After : Mar 26 15:44:09 2026 GMT Subject: CN=548d01da-06cd-4106-8e29-db0cdc887853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:32:44:a0:33:87:d1:5b:d3:a1:f5:cf:fd:9e: f8:92:15:b4:4a:4b:30:f9:21:1c:52:c0:60:6b:2e: 4a:a4:30:4c:71:f8:f1:fe:1d:8a:10:9e:02:95:d5: 29:f9:4e:f2:fa:44:a3:57:71:f4:ce:cd:ff:30:24: 9a:04:6e:81:cb:dd:48:92:8d:bc:a7:38:ba:ae:7c: 15:9d:d6:1d:95:2d:13:4a:6e:3b:e8:9e:c2:10:b2: e6:b8:fb:f0:db:44:0f:9f:48:a1:32:ac:49:9f:b7: 18:8c:3e:52:80:ea:a4:f6:b9:ad:1c:dd:7a:41:54: f8:37:4b:cd:4e:de:60:d2:1c:87:0e:c2:f8:25:ef: 7d:8a:c9:b8:e7:97:80:ed:4a:d2:06:f1:e7:20:56: b8:b7:56:94:95:d4:6d:58:bf:2d:e1:56:45:7d:16: cd:c5:72:8e:b1:76:74:f1:9f:e9:e6:ed:1f:a9:ed: 02:50:6b:d7:13:21:a0:3b:93:c7:b6:9d:1f:cf:b2: 89:2e:ed:a3:ee:83:af:e7:a3:ab:6b:34:82:b7:8a: dc:b7:37:ad:76:2d:ac:84:01:f7:8f:2f:91:7b:43: 3a:61:c3:6e:36:81:f7:62:00:fe:4f:b5:40:c3:3c: 76:cd:24:c5:e3:64:ef:3d:e4:67:88:bb:a5:a1:55: 8f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:C5:7B:6A:0E:54:C3:89:E6:E9:07:26:27:8C:E1:F9:EE:BF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd8e30c6-1320-3420-b794-8332e5c08297.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 149.120.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:3a:a1:09:ac:bf:7a:53:2e:5a:e5:6f:7c:c7:90:57:a5:27: 08:fe:d2:d5:71:b2:ba:30:83:2a:3b:61:1a:45:ff:0a:33:35: 0e:e0:da:df:5d:0d:98:88:fa:49:df:a3:7f:a4:12:13:03:7d: 0c:3d:a9:ab:cb:fa:31:1f:4b:f4:92:aa:b6:51:cb:52:6d:5c: 10:53:77:47:4d:f6:d0:eb:94:ea:7b:69:91:ad:b2:10:56:79: c9:e9:34:ff:a8:69:4d:b3:90:6c:48:51:38:d9:ff:2d:10:bb: d7:e8:f8:7a:50:fb:e6:d4:49:f0:3b:b2:bc:07:61:09:44:1e: 71:e1:cf:db:f3:d0:21:45:e8:c2:a1:b5:7c:3f:0b:53:9a:3d: 99:4c:de:e4:41:d3:38:c3:d8:7a:2e:b3:88:de:e2:d9:85:5c: 92:73:ed:8c:81:aa:c7:39:92:e3:20:5e:2b:c6:7d:fc:77:15: 9e:f3:32:84:d2:b8:80:22:0f:c4:69:dd:78:2e:82:0a:5a:d5: 80:cd:dd:c9:15:f8:50:e9:21:f0:36:c2:77:8f:4b:b4:ff:29: e3:63:46:a5:5d:72:ba:1f:20:11:08:85:22:c3:38:d4:0f:b4: 20:e8:df:48:09:28:47:d8:26:1e:be:76:f7:8b:fc:ed:c6:de: f6:df:d8:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExRIkKe7Uwj4AhUq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyNjE2NDQwOVoXDTI2MDMyNjE1NDQwOVowLzEtMCsGA1UEAxMk NTQ4ZDAxZGEtMDZjZC00MTA2LThlMjktZGIwY2RjODg3ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zJEoDOH0VvTofXP/Z74khW0Sksw+SEcUsBg ay5KpDBMcfjx/h2KEJ4CldUp+U7y+kSjV3H0zs3/MCSaBG6By91Iko28pzi6rnwV ndYdlS0TSm476J7CELLmuPvw20QPn0ihMqxJn7cYjD5SgOqk9rmtHN16QVT4N0vN Tt5g0hyHDsL4Je99ism455eA7UrSBvHnIFa4t1aUldRtWL8t4VZFfRbNxXKOsXZ0 8Z/p5u0fqe0CUGvXEyGgO5PHtp0fz7KJLu2j7oOv56OrazSCt4rctzetdi2shAH3 jy+Re0M6YcNuNoH3YgD+T7VAwzx2zSTF42TvPeRniLuloVWPjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKXxXtqDlTDiebpByYnjOH57r+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQ4ZTMwYzYtMTMyMC0z NDIwLWI3OTQtODMzMmU1YzA4Mjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQElXgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEM6oQmsv3pTLlrlb3zHkFelJwj+0tVxsrowgyo7YRpF/wozNQ7g2t9d DZiI+knfo3+kEhMDfQw9qavL+jEfS/SSqrZRy1JtXBBTd0dN9tDrlOp7aZGtshBW ecnpNP+oaU2zkGxIUTjZ/y0Qu9fo+HpQ++bUSfA7srwHYQlEHnHhz9vz0CFF6MKh tXw/C1OaPZlM3uRB0zjD2Hous4je4tmFXJJz7YyBqsc5kuMgXivGffx3FZ7zMoTS uIAiD8Rp3Xguggpa1YDN3ckV+FDpIfA2wnePS7T/KeNjRqVdcrofIBEIhSLDONQP tCDo30gJKEfYJh6+dveL/O3G3vbf2Hs= -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:44 2026 by rpki-client