This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa File: 8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa (raw, json) Hash identifier: WVqiRTA1WdVgzH1rAs2vfNFvyietVv8FPIiWeM4CxIU= Subject key identifier: 68:DE:BF:D0:A7:22:0D:16:D9:CD:12:D1:B4:B4:34:5B:25:D5:B5:AE Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71 Certificate serial: 010D0C9F4328584C52366BDF407C1DE0C8E3EAC0 Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa Signing time: Sat 27 Dec 2025 02:00:30 +0000 ROA not before: Sat 27 Dec 2025 02:00:30 +0000 ROA not after: Fri 27 Mar 2026 01:00:30 +0000 asID: 210645 IP address blocks: 131.143.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:52:36:6b:df:40:7c:1d:e0:c8:e3:ea:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d5f15-a892-4134-840b-026e68357d71 Validity Not Before: Dec 27 02:00:30 2025 GMT Not After : Mar 27 01:00:30 2026 GMT Subject: CN=d5aebcaf-db52-4174-8593-2b4350cb5128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:db:66:1b:07:da:15:9e:40:de:28:22:fc: fb:b1:72:d6:3b:f4:de:e5:eb:be:bb:36:b7:c3:25: 77:a1:d2:e6:e8:13:14:44:14:01:75:21:9b:9d:9b: f5:0d:b6:4a:ee:2a:99:fb:02:1e:5a:ed:85:06:b3: 58:66:6c:c0:82:21:98:b6:ad:cc:a6:47:c4:52:d3: 50:d3:4d:ba:07:37:cf:88:b3:99:99:79:b1:7d:15: a5:4a:30:d7:38:1f:d8:3b:83:41:fd:a2:ff:d6:95: d9:78:42:ed:eb:b4:6b:4d:e4:91:cf:7b:b3:0f:04: 6a:39:89:93:80:71:7b:55:0c:d6:37:1a:54:c1:61: f8:a2:7c:00:52:c8:83:f0:06:c9:ab:73:0d:ba:67: 9d:ce:e8:b9:57:4d:54:2b:8a:fa:2c:fc:86:a3:34: 72:10:d2:61:ce:95:e9:52:9b:a6:47:70:97:6a:e6: fa:c5:1a:8a:f0:78:d0:17:db:d6:65:39:c6:df:1b: 54:40:10:f9:db:f7:90:ad:75:c5:8a:4a:0e:8e:fd: ca:68:37:58:7d:29:e4:3a:63:8c:6c:2a:c4:79:58: 70:46:76:d6:93:e6:3b:12:c3:a9:b5:1b:2d:3f:6c: ed:5f:78:ca:92:fb:e4:7f:6a:a6:36:20:70:6d:d1: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DE:BF:D0:A7:22:0D:16:D9:CD:12:D1:B4:B4:34:5B:25:D5:B5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/8f49e6b2-7887-3aa8-b64e-9de0e2071621.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl X509v3 Authority Key Identifier: keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer sbgp-ipAddrBlock: critical IPv4: 131.143.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:f6:2f:88:a0:3c:0f:7e:99:63:74:1d:3e:db:9f:46:a2:4b: 88:04:8b:6f:95:8d:3d:b4:66:c6:44:f0:83:58:0f:35:7d:d3: 2e:33:0d:2e:3b:53:64:b5:31:72:e4:62:6e:1d:3c:99:70:f8: 19:97:d0:e0:eb:85:e5:b6:ce:d5:4c:f2:8f:6c:42:5d:2e:88: bf:8e:12:78:00:54:fb:52:fe:01:c2:ce:26:f8:a5:6d:e4:65: 32:d5:cc:a9:aa:42:95:2b:c9:ff:f9:92:cf:98:8c:7b:1c:d6: 03:94:df:d5:ed:48:e1:06:f1:6b:33:d9:61:b5:49:c1:0a:8a: a4:2f:96:83:db:4b:5a:d7:51:db:0b:18:12:76:7a:fc:bd:de: 90:dd:65:60:ef:72:b4:b2:07:dd:70:fa:82:9a:09:5b:38:36: 50:ae:ec:cd:64:ca:1f:26:6e:a2:69:de:09:24:58:16:21:f7: 10:cd:fe:ea:bb:32:d9:3d:12:40:34:16:20:34:3f:20:93:6e: d4:57:66:c8:de:c6:8e:8d:d5:5f:94:f8:f1:d7:bc:95:7c:42: 25:2a:a2:30:85:de:15:88:65:ca:77:0f:d0:8d:4c:d5:e2:ee: 10:ac:7d:60:2e:c6:8b:fb:6a:60:a0:64:d7:07:85:0b:73:5a: 26:01:9a:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExSNmvfQHwd4Mjj6sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3 ZDcxMB4XDTI1MTIyNzAyMDAzMFoXDTI2MDMyNzAxMDAzMFowLzEtMCsGA1UEAxMk ZDVhZWJjYWYtZGI1Mi00MTc0LTg1OTMtMmI0MzUwY2I1MTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPrbZhsH2hWeQN4oIvz7sXLWO/Te5eu+uza3 wyV3odLm6BMURBQBdSGbnZv1DbZK7iqZ+wIeWu2FBrNYZmzAgiGYtq3MpkfEUtNQ 0026BzfPiLOZmXmxfRWlSjDXOB/YO4NB/aL/1pXZeELt67RrTeSRz3uzDwRqOYmT gHF7VQzWNxpUwWH4onwAUsiD8AbJq3MNumedzui5V01UK4r6LPyGozRyENJhzpXp UpumR3CXaub6xRqK8HjQF9vWZTnG3xtUQBD52/eQrXXFikoOjv3KaDdYfSnkOmOM bCrEeVhwRnbWk+Y7EsOptRstP2ztX3jKkvvkf2qmNiBwbdHwNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjev9CnIg0W2c0S0bS0NFsl1bWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvOGY0OWU2YjItNzg4Ny0z YWE4LWI2NGUtOWRlMGUyMDcxNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0 MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1 N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl NjgzNTdkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg48fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/2L4igPA9+mWN0HT7bn0aiS4gEi2+VjT20ZsZE8INYDzV90y4zDS47 U2S1MXLkYm4dPJlw+BmX0ODrheW2ztVM8o9sQl0uiL+OEngAVPtS/gHCzib4pW3k ZTLVzKmqQpUryf/5ks+YjHsc1gOU39XtSOEG8Wsz2WG1ScEKiqQvloPbS1rXUdsL GBJ2evy93pDdZWDvcrSyB91w+oKaCVs4NlCu7M1kyh8mbqJp3gkkWBYh9xDN/uq7 Mtk9EkA0FiA0PyCTbtRXZsjexo6N1V+U+PHXvJV8QiUqojCF3hWIZcp3D9CNTNXi 7hCsfWAuxov7amCgZNcHhQtzWiYBmlA= -----END CERTIFICATE-----Generated at Wed Jan 21 17:21:07 2026 by rpki-client