This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: NQGa/mxiZUYrPjMEtpKGdvAsKtew1Nn1QH7vPdfpTVU= Subject key identifier: 05:3B:1A:48:FF:52:52:D3:2B:3A:09:A1:56:70:51:5F:58:AE:B8:1A Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584C215B8EF2F085120240ECDF80 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:8e:f2:f0:85:12:02:40:ec:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=5e3aa7cd-e000-4c36-8b6c-69ecd710785a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:26:0d:b1:42:d5:05:a9:27:17:80:c0:d0: 78:82:bc:a4:b0:1c:a6:7b:fb:a2:0d:a2:2e:74:ea: cf:4a:59:16:3e:90:a9:97:e9:63:92:cf:eb:35:c6: d5:12:31:1a:e2:5f:15:39:d2:be:72:82:25:4d:72: 1e:0b:9d:d5:34:e7:39:96:f0:9a:35:e8:45:83:bd: 4e:f7:8e:dc:56:ce:f9:f7:fd:0a:f1:8c:ff:b7:bb: fd:cf:41:1b:bd:6d:59:32:0b:ec:4c:13:b3:f3:73: af:81:44:e8:23:a2:63:7b:ce:74:a3:2d:26:9b:ee: 97:9c:14:e7:8f:22:de:65:b2:ce:f1:c8:3c:8f:86: 15:10:93:4b:78:e4:78:12:4f:c9:4d:50:f9:f2:0d: 13:b8:79:5d:44:3e:f0:e9:20:5b:82:79:76:64:6a: c1:bf:4b:f6:5d:2e:76:02:7c:0b:15:ae:d7:7a:b7: be:87:75:40:1b:e1:c1:5d:42:c4:de:da:04:4e:96: f9:02:97:10:9f:48:78:28:1d:bb:80:2b:83:d3:31: 3b:1c:df:a4:b8:91:6d:9a:0c:9b:72:73:2a:3d:bb: a3:08:4e:6a:2b:09:85:a6:7c:78:ae:b0:82:c0:cb: a8:53:64:b2:d1:cb:01:ae:9c:5d:79:58:14:cc:35: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:1A:48:FF:52:52:D3:2B:3A:09:A1:56:70:51:5F:58:AE:B8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:7c:0c:51:d0:bc:bb:3a:18:7b:af:0d:fe:da:be:64:17:2b: ed:d2:db:b7:30:1a:3f:6f:ec:15:fa:e2:16:9b:ab:88:70:c6: 1c:71:79:c7:57:65:65:22:b3:3e:b1:f7:18:f5:90:fa:d1:2f: 28:78:8b:0e:3d:b0:73:f2:33:34:d4:6b:d5:5f:90:7a:3a:f1: 5b:6b:65:76:e0:a3:0f:78:39:6a:46:03:cc:1d:32:de:70:64: cf:73:44:6f:0b:a0:d2:ff:fc:cc:45:40:fb:d2:40:cc:07:4e: db:ba:4a:03:07:4b:cc:45:76:89:ce:5e:ac:d2:48:67:1c:93: ba:f4:ff:10:18:be:cf:4d:f5:c0:d3:64:11:4c:b8:4f:1b:8c: 0e:37:64:a8:b6:49:d7:0c:a7:db:b2:7c:52:30:09:be:4a:a1: 51:ae:04:6c:46:ca:8e:9d:aa:3d:e1:b2:d2:30:61:24:1b:37: cf:cc:1a:10:d6:86:e0:37:8f:a1:c2:a9:63:09:04:1c:6f:78: e4:52:ca:dc:14:45:25:a1:cf:3d:1a:d9:45:7f:47:89:b6:8a: 86:b7:fa:ab:45:bd:a4:fd:be:88:0a:f4:d0:8d:03:c5:bd:8f: b6:f3:19:2a:a5:f2:89:40:68:32:f5:74:f1:15:ad:90:7e:10: 69:cd:6a:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW47y8IUSAkDs34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk NWUzYWE3Y2QtZTAwMC00YzM2LThiNmMtNjllY2Q3MTA3ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GEmDbFC1QWpJxeAwNB4gryksByme/uiDaIu dOrPSlkWPpCpl+ljks/rNcbVEjEa4l8VOdK+coIlTXIeC53VNOc5lvCaNehFg71O 947cVs759/0K8Yz/t7v9z0EbvW1ZMgvsTBOz83OvgUToI6Jje850oy0mm+6XnBTn jyLeZbLO8cg8j4YVEJNLeOR4Ek/JTVD58g0TuHldRD7w6SBbgnl2ZGrBv0v2XS52 AnwLFa7Xere+h3VAG+HBXULE3toETpb5ApcQn0h4KB27gCuD0zE7HN+kuJFtmgyb cnMqPbujCE5qKwmFpnx4rrCCwMuoU2Sy0csBrpxdeVgUzDXJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAU7Gkj/UlLTKzoJoVZwUV9YrrgaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG18DFHQvLs6GHuvDf7avmQXK+3S27cwGj9v7BX64habq4hwxhxxecdX ZWUisz6x9xj1kPrRLyh4iw49sHPyMzTUa9VfkHo68VtrZXbgow94OWpGA8wdMt5w ZM9zRG8LoNL//MxFQPvSQMwHTtu6SgMHS8xFdonOXqzSSGcck7r0/xAYvs9N9cDT ZBFMuE8bjA43ZKi2SdcMp9uyfFIwCb5KoVGuBGxGyo6dqj3hstIwYSQbN8/MGhDW huA3j6HCqWMJBBxveORSytwURSWhzz0a2UV/R4m2ioa3+qtFvaT9vogK9NCNA8W9 j7bzGSql8olAaDL1dPEVrZB+EGnNamc= -----END CERTIFICATE-----Generated at Sun Dec 14 14:36:37 2025 by rpki-client