This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa File: 3d7f35df-c1ad-31e7-a176-395b54aa0986.roa (raw, json) Hash identifier: Xlu6TZVMlTtidGi1ppKS9HnaE3C7SNi+3Er0hrioGwQ= Subject key identifier: 97:F4:B5:04:91:37:8E:DB:CC:62:55:30:50:CA:CE:BB:6A:03:2C:F7 Certificate issuer: /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Certificate serial: 010D0C9F4328584C29BBD59ACD0D6F837F51AF48 Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 397214 IP address blocks: 156.154.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:d5:9a:cd:0d:6f:83:7f:51:af:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=45fa8a13-4b86-417d-bb75-965a968dc151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:b7:fd:ef:23:74:7a:ae:79:3b:d7:b7:37: 0c:68:5b:1d:f8:57:76:95:22:08:b1:36:33:ea:44: 9b:df:e8:0d:57:d5:f3:b6:20:12:4c:00:4c:02:04: f3:8c:62:aa:e4:c7:2b:03:92:37:96:42:fa:09:a3: 24:d1:60:d8:55:b7:5e:75:29:aa:57:82:99:cc:0d: 30:c4:aa:e3:8c:14:3b:7d:fb:61:1b:a7:1f:36:11: 2b:7c:bf:43:f0:46:76:ac:52:e9:d8:d0:89:ab:99: 7d:34:a2:92:24:36:db:d0:16:d0:df:c8:17:ac:f7: b4:06:4d:1d:b6:ee:0b:f7:a5:64:74:3b:02:0c:1d: 60:7f:23:bb:af:00:0e:9a:d6:e3:e2:13:24:fc:a3: 73:c7:fb:43:e9:4d:52:5c:a3:0a:16:a6:e9:5b:56: 20:1a:e2:76:b4:09:41:36:4b:41:45:22:89:96:0c: 9f:75:67:a9:83:56:30:c4:53:86:3d:00:37:e4:2a: 3d:24:79:19:52:34:b8:f7:19:6f:30:ec:82:3e:d7: b8:57:7c:c7:d0:3a:51:a9:45:e1:88:98:77:3c:c4: ab:3f:e8:c8:f3:89:ce:b4:bc:d7:ad:8c:b5:2f:1e: dd:fb:70:48:8d:2a:d7:bb:c8:55:9c:b9:56:36:16: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F4:B5:04:91:37:8E:DB:CC:62:55:30:50:CA:CE:BB:6A:03:2C:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/3d7f35df-c1ad-31e7-a176-395b54aa0986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl X509v3 Authority Key Identifier: keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer sbgp-ipAddrBlock: critical IPv4: 156.154.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8f:76:1a:e9:9b:27:a0:1a:15:db:8b:6c:eb:6c:a0:42:dc: d1:a2:48:0a:c5:15:c3:c5:e5:bf:3f:e1:14:3d:90:c2:3c:b1: ce:1e:82:14:a8:d5:8d:b2:d6:2f:ca:91:36:79:b1:2f:67:49: 74:81:24:e0:85:08:91:b9:12:a1:6f:e6:b7:e6:79:7a:3d:dd: 19:31:47:37:6f:8e:2c:19:4f:ec:d9:58:06:11:98:94:a2:08: 56:68:d5:af:01:29:00:b4:d8:b0:4a:29:42:0e:f7:b4:20:c0: 24:4a:3d:d5:0d:50:ac:64:36:f2:62:2c:45:97:2a:f1:22:b7: 3d:74:a5:26:f6:01:20:1a:08:9b:41:98:7d:98:5e:d5:7b:f0: d8:3c:4e:c6:c2:16:86:9d:fb:02:99:41:99:d8:b1:f8:40:12: 2e:53:87:d3:eb:65:76:17:52:0f:b5:da:63:5a:89:33:ee:5e: c7:b4:33:8f:75:36:ae:dc:4e:d2:a6:ea:80:2b:0f:0a:7f:ca: e5:f2:d8:1f:df:a2:8e:84:90:f7:d5:e5:eb:2e:17:28:b8:24: 6f:ab:f9:96:2c:ad:e2:02:36:c6:7c:09:18:0b:f4:cd:59:57: f8:98:5b:ff:61:99:e3:56:f3:4d:8d:f1:b1:86:89:c2:9f:a1: b3:1d:22:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwpu9WazQ1vg39Rr0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4 MjQzMB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk NDVmYThhMTMtNGI4Ni00MTdkLWJiNzUtOTY1YTk2OGRjMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEm3/e8jdHqueTvXtzcMaFsd+Fd2lSIIsTYz 6kSb3+gNV9XztiASTABMAgTzjGKq5McrA5I3lkL6CaMk0WDYVbdedSmqV4KZzA0w xKrjjBQ7ffthG6cfNhErfL9D8EZ2rFLp2NCJq5l9NKKSJDbb0BbQ38gXrPe0Bk0d tu4L96VkdDsCDB1gfyO7rwAOmtbj4hMk/KNzx/tD6U1SXKMKFqbpW1YgGuJ2tAlB NktBRSKJlgyfdWepg1YwxFOGPQA35Co9JHkZUjS49xlvMOyCPte4V3zH0DpRqUXh iJh3PMSrP+jI84nOtLzXrYy1Lx7d+3BIjSrXu8hVnLlWNhZ6RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJf0tQSRN47bzGJVMFDKzrtqAyz3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0 MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvM2Q3ZjM1ZGYtYzFhZC0z MWU3LWExNzYtMzk1YjU0YWEwOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1 ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0 YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJqdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2PdhrpmyegGhXbi2zrbKBC3NGiSArFFcPF5b8/4RQ9kMI8sc4eghSo 1Y2y1i/KkTZ5sS9nSXSBJOCFCJG5EqFv5rfmeXo93RkxRzdvjiwZT+zZWAYRmJSi CFZo1a8BKQC02LBKKUIO97QgwCRKPdUNUKxkNvJiLEWXKvEitz10pSb2ASAaCJtB mH2YXtV78Ng8TsbCFoad+wKZQZnYsfhAEi5Th9PrZXYXUg+12mNaiTPuXse0M491 Nq7cTtKm6oArDwp/yuXy2B/foo6EkPfV5esuFyi4JG+r+ZYsreICNsZ8CRgL9M1Z V/iYW/9hmeNW802N8bGGicKfobMdIiQ= -----END CERTIFICATE-----Generated at Fri Dec 19 10:24:04 2025 by rpki-client