This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa File: 1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json) Hash identifier: ks417qOeeBoWdCavQ30wiKKblzf5sMC7Aq5mNegZeYE= Subject key identifier: DB:10:D3:1E:EE:54:C0:30:F2:40:BF:22:5C:C6:D9:05:B6:FB:7F:0F Certificate issuer: /CN=943895ce-649a-4937-9d38-a57b20ee748f Certificate serial: 010D0C9F4328584BEAEB342CCBF4E7D3813114C0 Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa Signing time: Thu 20 Nov 2025 02:00:30 +0000 ROA not before: Thu 20 Nov 2025 02:00:30 +0000 ROA not after: Wed 18 Feb 2026 02:00:30 +0000 asID: 16824 IP address blocks: 149.20.232.0/24 maxlen: 24 149.20.233.0/24 maxlen: 24 149.20.234.0/24 maxlen: 24 149.20.235.0/24 maxlen: 24 149.20.236.0/24 maxlen: 24 149.20.237.0/24 maxlen: 24 149.20.238.0/24 maxlen: 24 149.20.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ea:eb:34:2c:cb:f4:e7:d3:81:31:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f Validity Not Before: Nov 20 02:00:30 2025 GMT Not After : Feb 18 02:00:30 2026 GMT Subject: CN=a58edfbd-54d3-45bd-8b8a-288b058409ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:12:b5:90:09:89:e7:3b:c1:a1:8d:a6:11:67: 9e:d2:33:15:18:51:05:f0:d8:7a:a1:cd:83:93:38: 8f:e6:46:85:49:e7:9e:3e:83:fc:78:38:35:43:6c: 36:96:fd:ab:02:02:30:93:fc:63:5b:bb:6f:81:fa: 9c:a3:4d:02:50:96:dc:44:8b:44:73:3c:44:fa:02: 0f:bd:28:ae:2e:1b:93:72:f8:b5:2b:b6:cb:14:25: c1:a5:72:80:2b:1d:32:7f:89:4e:f9:f2:d9:29:bd: bf:f1:af:b2:bc:08:92:64:e0:cb:b0:be:8a:fb:02: 7d:6d:95:d6:55:e7:09:bd:b7:b6:b4:db:78:39:90: 3d:14:fd:36:db:1d:7d:59:27:a3:1b:39:70:f4:21: 6b:ba:8b:65:22:0d:ed:4d:2b:2c:07:37:ca:ee:20: 74:55:f1:49:10:b6:e7:48:15:4f:3c:80:e0:16:15: 7a:4b:37:7c:0b:b8:48:19:64:cf:fa:c0:71:59:b6: fa:1a:79:1b:a8:5d:d6:46:1a:19:71:04:8d:a8:87: 1d:41:ce:7d:d8:c5:78:60:49:03:ea:b8:83:f2:5b: 60:32:a3:d1:55:ac:84:96:fa:9f:0b:f9:a6:dc:ed: a1:62:91:22:68:2e:c7:e2:11:27:ee:1d:8b:26:df: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:10:D3:1E:EE:54:C0:30:F2:40:BF:22:5C:C6:D9:05:B6:FB:7F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl X509v3 Authority Key Identifier: keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer sbgp-ipAddrBlock: critical IPv4: 149.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:da:91:4a:05:0b:1d:6e:f5:db:68:3d:05:a9:ec:be:a0:f9: 4c:fc:e3:1f:a2:b8:8a:d9:52:0c:d4:82:28:4f:eb:8e:24:5c: d5:2d:16:55:ab:b5:7f:05:16:8d:b6:f1:cc:ac:98:7f:1b:4d: 6c:fa:36:7f:5c:69:7d:28:28:27:65:1a:f1:3c:5a:23:74:d8: c6:63:ed:9d:ad:b7:d6:6f:16:07:34:74:ee:e4:c4:d7:90:fc: 75:b3:df:3d:94:e0:ce:55:28:16:e4:0e:df:8b:1f:37:14:15: 6f:c7:5c:a1:69:a1:9f:56:1d:a0:3b:4b:f0:cb:24:2b:15:9a: 7c:99:7a:81:a1:c2:04:98:6b:83:fa:9b:b4:a2:1a:9c:dc:39: 2c:f6:1b:24:70:9c:a8:4e:9e:ba:da:22:51:5d:16:2e:2e:5a: fb:4c:30:f1:b0:f1:62:47:1a:5f:df:d9:66:2b:73:d5:a3:8c: 6f:30:b4:2c:73:72:79:e3:11:9f:5d:22:a0:8f:e8:a1:24:e9: bb:b6:dc:56:dd:de:d6:3c:e7:74:db:a6:2c:ea:11:cb:d5:d2: 13:8e:7d:99:b7:6a:3f:b3:5f:f9:40:ac:a5:f1:6b:3d:df:bb: 15:a5:c3:52:97:4f:3d:8c:b6:ac:ce:24:11:73:65:fd:48:87: 2e:d1:c0:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvq6zQsy/Tn04ExFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQzODk1Y2UtNjQ5YS00OTM3LTlkMzgtYTU3YjIwZWU3 NDhmMB4XDTI1MTEyMDAyMDAzMFoXDTI2MDIxODAyMDAzMFowLzEtMCsGA1UEAxMk YTU4ZWRmYmQtNTRkMy00NWJkLThiOGEtMjg4YjA1ODQwOWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBK1kAmJ5zvBoY2mEWee0jMVGFEF8Nh6oc2D kziP5kaFSeeePoP8eDg1Q2w2lv2rAgIwk/xjW7tvgfqco00CUJbcRItEczxE+gIP vSiuLhuTcvi1K7bLFCXBpXKAKx0yf4lO+fLZKb2/8a+yvAiSZODLsL6K+wJ9bZXW VecJvbe2tNt4OZA9FP022x19WSejGzlw9CFruotlIg3tTSssBzfK7iB0VfFJELbn SBVPPIDgFhV6Szd8C7hIGWTP+sBxWbb6GnkbqF3WRhoZcQSNqIcdQc592MV4YEkD 6riD8ltgMqPRVayElvqfC/mm3O2hYpEiaC7H4hEn7h2LJt9xmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsQ0x7uVMAw8kC/IlzG2QW2+38PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4 OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdiMjBlZTc0OGYvMWEyNGViOGMtNzYzZS0z ZmU1LTk4NTQtNGM3NTU2NzdkZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTQzODk1Y2UtNjQ5YS00OTM3LTlk MzgtYTU3YjIwZWU3NDhmLzk0Mzg5NWNlLTY0OWEtNDkzNy05ZDM4LWE1N2IyMGVl NzQ4Zi5jcmwwHwYDVR0jBBgwFoAU6SQM4RQvHB0Xd/sQjKTKGzJNiQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NDM4OTVjZS02NDlhLTQ5MzctOWQzOC1hNTdi MjBlZTc0OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJXakUoFCx1u9dtoPQWp7L6g+Uz84x+iuIrZUgzUgihP644kXNUtFlWr tX8FFo228cysmH8bTWz6Nn9caX0oKCdlGvE8WiN02MZj7Z2tt9ZvFgc0dO7kxNeQ /HWz3z2U4M5VKBbkDt+LHzcUFW/HXKFpoZ9WHaA7S/DLJCsVmnyZeoGhwgSYa4P6 m7SiGpzcOSz2GyRwnKhOnrraIlFdFi4uWvtMMPGw8WJHGl/f2WYrc9WjjG8wtCxz cnnjEZ9dIqCP6KEk6bu23Fbd3tY853TbpizqEcvV0hOOfZm3aj+zX/lArKXxaz3f uxWlw1KXTz2MtqzOJBFzZf1Ihy7RwMU= -----END CERTIFICATE-----Generated at Sat Nov 22 21:21:12 2025 by rpki-client