This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa File: f040b20c-a806-35b2-ae4a-b52c865f43c4.roa (raw, json) Hash identifier: PALV0nzLTOws5p22j6wUsxlVWxI6Z8hUoJtzZnQMK1g= Subject key identifier: 5A:7A:48:06:E9:AA:18:59:CC:F4:DD:16:43:DA:1F:6E:98:8A:6C:1D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584C242645188A0834ADBD746D40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 16591 IP address blocks: 136.49.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:45:18:8a:08:34:ad:bd:74:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=10c684c7-bff4-4d1f-a545-bb90ffb9ce8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:37:b0:cc:f1:14:b9:9f:bd:06:92:9e:0a:04: e6:74:86:19:76:4b:01:ff:91:23:16:26:a8:71:ae: d2:2a:17:1f:d2:61:bd:c5:7d:f4:0d:39:bf:a4:30: 09:f7:f3:d2:ff:e1:24:5b:00:ca:3d:a3:ca:43:08: ad:ff:67:dc:95:a0:9a:c6:0d:bd:fa:b6:34:a9:f1: 82:ab:2f:9e:98:46:a6:9a:03:e7:db:bc:5a:5d:6c: 89:fb:71:5a:62:f9:9c:5d:db:51:d3:ae:93:3e:f3: a8:21:fb:05:19:ca:32:15:13:be:23:3c:c4:83:d0: f4:89:c5:bc:01:29:df:d4:cb:25:f1:b1:4d:8e:64: 4d:7d:78:7d:1c:fb:d1:7b:4d:7a:59:cd:b9:b7:5f: 06:f9:4a:d7:7d:89:eb:9a:4d:d6:96:1e:8e:2a:96: 4e:13:dd:aa:2f:fa:f7:e6:34:e8:9c:1e:b1:da:2e: 28:4f:c0:b5:16:04:f9:5b:22:83:71:5b:54:36:f1: 1f:79:88:d9:fb:0a:2a:72:b3:f0:8b:8d:7a:53:63: b3:2d:63:27:af:c2:9c:5e:97:81:96:3d:87:98:7e: 25:bc:9b:c9:ce:7d:5b:33:11:00:4c:27:04:c4:7b: 1d:fa:99:83:63:b4:b0:23:67:11:7a:1c:08:ad:c0: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7A:48:06:E9:AA:18:59:CC:F4:DD:16:43:DA:1F:6E:98:8A:6C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:dc:7b:a4:b0:22:d4:e0:96:8e:d8:56:7b:0e:ef:05:46:16: 4c:e7:86:d6:c9:b0:06:93:8f:39:d2:d3:dd:87:6d:d0:5c:ef: 88:e4:6c:4b:74:da:c4:48:49:6f:91:b9:89:4e:8d:bf:66:aa: 72:f6:5c:4b:52:e5:e6:41:06:53:f8:23:d4:06:84:2a:e3:26: 1b:60:2e:ff:05:ee:ac:1a:1f:94:86:06:3c:7a:b5:32:ff:d9: 07:1b:2b:e1:f8:82:32:0e:37:0a:5f:38:5f:8c:f7:39:3b:25: 84:da:65:2d:58:00:9b:43:26:50:56:63:33:4e:7b:3b:5d:61: ea:b4:0e:65:a3:25:28:60:6c:30:9d:fe:60:43:3e:2c:47:24: 6f:58:e7:bf:11:de:c4:ce:db:d5:a8:79:9c:72:d8:28:e5:22: 2b:72:e3:07:85:80:0f:67:b8:04:9d:6a:c2:05:1c:3d:6c:81: 75:a2:1c:61:de:46:60:d6:7d:71:64:11:0a:f6:1c:16:27:8a: 5b:b7:22:f8:93:3c:03:a7:84:30:03:cb:40:de:4f:ad:f9:3b: 75:b3:ca:b5:b3:3b:d9:a8:c1:e0:c4:31:9f:14:1f:3a:1c:e1: ac:c6:67:82:b8:b2:3b:88:42:18:84:d2:a9:07:47:25:5e:d2: 4c:b2:13:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJkUYigg0rb10bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MTBjNjg0YzctYmZmNC00ZDFmLWE1NDUtYmI5MGZmYjljZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijewzPEUuZ+9BpKeCgTmdIYZdksB/5EjFiao ca7SKhcf0mG9xX30DTm/pDAJ9/PS/+EkWwDKPaPKQwit/2fclaCaxg29+rY0qfGC qy+emEammgPn27xaXWyJ+3FaYvmcXdtR066TPvOoIfsFGcoyFRO+IzzEg9D0icW8 ASnf1Msl8bFNjmRNfXh9HPvRe016Wc25t18G+UrXfYnrmk3Wlh6OKpZOE92qL/r3 5jTonB6x2i4oT8C1FgT5WyKDcVtUNvEfeYjZ+woqcrPwi416U2OzLWMnr8KcXpeB lj2HmH4lvJvJzn1bMxEATCcExHsd+pmDY7SwI2cRehwIrcBNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp6SAbpqhhZzPTdFkPaH26YimwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjA0MGIyMGMtYTgwNi0z NWIyLWFlNGEtYjUyYzg2NWY0M2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrce6SwItTglo7YVnsO7wVGFkznhtbJsAaTjznS092HbdBc74jkbEt0 2sRISW+RuYlOjb9mqnL2XEtS5eZBBlP4I9QGhCrjJhtgLv8F7qwaH5SGBjx6tTL/ 2QcbK+H4gjIONwpfOF+M9zk7JYTaZS1YAJtDJlBWYzNOeztdYeq0DmWjJShgbDCd /mBDPixHJG9Y578R3sTO29WoeZxy2CjlIity4weFgA9nuASdasIFHD1sgXWiHGHe RmDWfXFkEQr2HBYnilu3IviTPAOnhDADy0DeT635O3WzyrWzO9moweDEMZ8UHzoc 4azGZ4K4sjuIQhiE0qkHRyVe0kyyExY= -----END CERTIFICATE-----Generated at Sun Dec 14 11:32:10 2025 by rpki-client