This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa File: cb90c805-a9ab-3bdd-afdc-0a026851da93.roa (raw, json) Hash identifier: /aqs17XqDJHZnGbyyC5terVzR66AraAkAz2oIiksgRs= Subject key identifier: 12:D1:7A:33:D1:F7:63:05:4F:22:E2:35:C4:C3:9B:16:95:97:6E:C4 Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584C2C8647DFF4B1037AFD85A500 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa Signing time: Sat 13 Dec 2025 14:00:38 +0000 ROA not before: Sat 13 Dec 2025 14:00:38 +0000 ROA not after: Fri 13 Mar 2026 13:00:38 +0000 asID: 32934 IP address blocks: 69.171.239.0/24 maxlen: 24 69.171.250.0/24 maxlen: 24 69.171.255.0/24 maxlen: 24 129.134.25.0/24 maxlen: 24 129.134.26.0/24 maxlen: 24 129.134.27.0/24 maxlen: 24 129.134.28.0/24 maxlen: 24 129.134.29.0/24 maxlen: 24 129.134.127.0/24 maxlen: 24 157.240.0.0/24 maxlen: 24 157.240.1.0/24 maxlen: 24 157.240.3.0/24 maxlen: 24 157.240.5.0/24 maxlen: 24 157.240.7.0/24 maxlen: 24 157.240.8.0/24 maxlen: 24 157.240.9.0/24 maxlen: 24 157.240.11.0/24 maxlen: 24 157.240.12.0/24 maxlen: 24 157.240.13.0/24 maxlen: 24 157.240.14.0/24 maxlen: 24 157.240.15.0/24 maxlen: 24 157.240.16.0/24 maxlen: 24 157.240.17.0/24 maxlen: 24 157.240.19.0/24 maxlen: 24 157.240.22.0/24 maxlen: 24 157.240.23.0/24 maxlen: 24 157.240.24.0/24 maxlen: 24 157.240.25.0/24 maxlen: 24 157.240.26.0/24 maxlen: 24 157.240.27.0/24 maxlen: 24 157.240.29.0/24 maxlen: 24 157.240.30.0/24 maxlen: 24 157.240.31.0/24 maxlen: 24 157.240.192.0/24 maxlen: 24 157.240.195.0/24 maxlen: 24 157.240.196.0/24 maxlen: 24 157.240.197.0/24 maxlen: 24 157.240.198.0/24 maxlen: 24 157.240.199.0/24 maxlen: 24 157.240.200.0/24 maxlen: 24 157.240.201.0/24 maxlen: 24 157.240.202.0/24 maxlen: 24 157.240.203.0/24 maxlen: 24 157.240.204.0/24 maxlen: 24 157.240.205.0/24 maxlen: 24 157.240.207.0/24 maxlen: 24 157.240.208.0/24 maxlen: 24 157.240.209.0/24 maxlen: 24 157.240.210.0/24 maxlen: 24 157.240.211.0/24 maxlen: 24 157.240.212.0/24 maxlen: 24 157.240.214.0/24 maxlen: 24 157.240.215.0/24 maxlen: 24 157.240.216.0/24 maxlen: 24 157.240.217.0/24 maxlen: 24 157.240.218.0/24 maxlen: 24 157.240.221.0/24 maxlen: 24 157.240.222.0/24 maxlen: 24 157.240.223.0/24 maxlen: 24 157.240.224.0/24 maxlen: 24 157.240.225.0/24 maxlen: 24 157.240.226.0/24 maxlen: 24 157.240.227.0/24 maxlen: 24 157.240.229.0/24 maxlen: 24 157.240.231.0/24 maxlen: 24 157.240.233.0/24 maxlen: 24 157.240.234.0/24 maxlen: 24 157.240.235.0/24 maxlen: 24 157.240.236.0/24 maxlen: 24 157.240.237.0/24 maxlen: 24 157.240.238.0/24 maxlen: 24 157.240.239.0/24 maxlen: 24 157.240.241.0/24 maxlen: 24 157.240.242.0/24 maxlen: 24 157.240.243.0/24 maxlen: 24 157.240.244.0/24 maxlen: 24 157.240.245.0/24 maxlen: 24 157.240.247.0/24 maxlen: 24 157.240.249.0/24 maxlen: 24 157.240.251.0/24 maxlen: 24 157.240.252.0/24 maxlen: 24 157.240.253.0/24 maxlen: 24 157.240.254.0/24 maxlen: 24 2620:0:1cfa::/48 maxlen: 48 2620:0:1cff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:86:47:df:f4:b1:03:7a:fd:85:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Dec 13 14:00:38 2025 GMT Not After : Mar 13 13:00:38 2026 GMT Subject: CN=41860348-c16d-47ee-9856-26ba7757cacc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:4d:88:d3:d8:f3:5c:bf:3b:32:c4:c9:fb: e8:b1:d3:2f:0c:16:fe:0f:5e:2d:63:49:35:d3:6d: 3d:48:77:66:53:b0:3b:1e:d2:da:51:ee:bf:71:03: 53:a7:e4:33:1c:9d:29:98:56:f1:13:a1:4a:75:cb: 87:77:5a:4f:a3:0d:41:be:c1:d8:a1:4c:63:39:83: 7b:53:97:2a:96:0f:33:e1:e5:c5:77:7f:c6:ac:26: 24:ff:6b:00:3f:9a:e1:36:c4:fb:c5:d1:c3:3a:bf: 65:a7:aa:4e:db:ac:22:ed:70:8b:91:26:0a:e6:f1: 6f:ff:26:93:d7:48:cf:fe:65:f1:84:30:3a:fe:ba: 07:7c:52:3d:c6:f6:4d:5f:22:08:75:c8:4b:dd:b6: 30:ae:b0:44:46:0f:32:9d:b0:cc:11:84:83:15:a3: 85:e7:f6:b1:07:23:c9:68:9d:9b:d3:68:ca:51:76: 1e:1b:b3:f7:bf:63:b4:a5:29:42:43:09:6e:f9:ae: b7:0f:cf:6e:a5:73:4d:d4:6b:c4:53:1d:ab:fc:2b: 46:36:6c:b5:33:d6:ee:bd:bb:e5:82:d2:1c:95:38: a9:5a:ef:ed:a9:32:94:92:a0:94:99:17:6c:0a:50: ae:39:59:2a:b1:ba:95:06:b8:31:1a:8d:17:15:44: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D1:7A:33:D1:F7:63:05:4F:22:E2:35:C4:C3:9B:16:95:97:6E:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/cb90c805-a9ab-3bdd-afdc-0a026851da93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 69.171.239.0/24 69.171.250.0/24 69.171.255.0/24 129.134.25.0-129.134.29.255 129.134.127.0/24 157.240.0.0/23 157.240.3.0/24 157.240.5.0/24 157.240.7.0-157.240.9.255 157.240.11.0-157.240.17.255 157.240.19.0/24 157.240.22.0-157.240.27.255 157.240.29.0-157.240.31.255 157.240.192.0/24 157.240.195.0-157.240.205.255 157.240.207.0-157.240.212.255 157.240.214.0-157.240.218.255 157.240.221.0-157.240.227.255 157.240.229.0/24 157.240.231.0/24 157.240.233.0-157.240.239.255 157.240.241.0-157.240.245.255 157.240.247.0/24 157.240.249.0/24 157.240.251.0-157.240.254.255 IPv6: 2620:0:1cfa::/48 2620:0:1cff::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:74:92:90:82:95:dd:6e:92:e4:84:f1:3d:6b:6b:8b:f2:9e: eb:dc:ae:1a:3a:ef:96:9a:78:66:da:bb:69:3b:84:18:69:7a: f9:ab:08:12:9e:27:fa:aa:26:07:7d:80:5c:21:17:48:ef:f2: 7e:d4:7a:ba:5f:e0:ce:ad:10:37:11:bb:eb:73:41:be:40:dd: 01:64:3f:59:58:64:25:d3:a9:1c:f6:4b:56:1e:54:f7:82:1b: 0e:93:86:7b:b0:bb:e9:ef:c8:72:22:c2:7c:92:f8:86:51:f1: be:ec:93:78:00:fd:96:93:a4:c9:d4:9b:3c:48:62:bf:36:28: a6:43:a9:b8:fc:f0:fa:e9:97:d3:d8:5b:20:8f:ee:99:d2:58: ec:e2:98:b6:0b:5d:1f:bb:8e:62:31:56:5d:19:92:33:d7:0a: 96:f5:b8:85:7a:88:36:f2:91:ac:6d:7e:53:f2:3a:24:76:5c: e0:48:12:5c:7e:53:6f:9b:67:fd:f5:5f:9b:87:ea:83:da:aa: b2:a2:d1:62:b3:1e:70:6b:cf:6e:4c:b0:a1:ef:23:59:d2:1a: 52:a6:90:4c:19:e9:b4:a3:0a:75:0f:00:69:e3:2c:74:6e:6c: 8e:e1:ef:e3:7c:92:4f:32:71:17:9d:b4:aa:70:0e:c1:ac:1e: b6:81:ba:0b -----BEGIN CERTIFICATE----- MIIHVTCCBj2gAwIBAgIUAQ0Mn0MoWEwshkff9LEDev2FpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MTIxMzE0MDAzOFoXDTI2MDMxMzEzMDAzOFowLzEtMCsGA1UEAxMk NDE4NjAzNDgtYzE2ZC00N2VlLTk4NTYtMjZiYTc3NTdjYWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApddNiNPY81y/OzLEyfvosdMvDBb+D14tY0k1 0209SHdmU7A7HtLaUe6/cQNTp+QzHJ0pmFbxE6FKdcuHd1pPow1BvsHYoUxjOYN7 U5cqlg8z4eXFd3/GrCYk/2sAP5rhNsT7xdHDOr9lp6pO26wi7XCLkSYK5vFv/yaT 10jP/mXxhDA6/roHfFI9xvZNXyIIdchL3bYwrrBERg8ynbDMEYSDFaOF5/axByPJ aJ2b02jKUXYeG7P3v2O0pSlCQwlu+a63D89upXNN1GvEUx2r/CtGNmy1M9buvbvl gtIclTipWu/tqTKUkqCUmRdsClCuOVkqsbqVBrgxGo0XFUQNCwIDAQABo4IEZzCC BGMwHQYDVR0OBBYEFBLRejPR92MFTyLiNcTDmxaVl27EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvY2I5MGM4MDUtYTlhYi0z YmRkLWFmZGMtMGEwMjY4NTFkYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMIIBLwYIKwYBBQUHAQcBAf8EggEeMIIBGjCB/QQCAAEwgfYD BABFq+8DBABFq/oDBABFq/8wDAMEAIGGGQMEAYGGHAMEAIGGfwMEAZ3wAAMEAJ3w AwMEAJ3wBTAMAwQAnfAHAwQBnfAIMAwDBACd8AsDBAGd8BADBACd8BMwDAMEAZ3w FgMEAp3wGDAMAwQAnfAdAwQFnfAAAwQAnfDAMAwDBACd8MMDBAGd8MwwDAMEAJ3w zwMEAJ3w1DAMAwQBnfDWAwQAnfDaMAwDBACd8N0DBAKd8OADBACd8OUDBACd8Ocw DAMEAJ3w6QMEBJ3w4DAMAwQAnfDxAwQBnfD0AwQAnfD3AwQAnfD5MAwDBACd8PsD BACd8P4wGAQCAAIwEgMHACYgAAAc+gMHACYgAAAc/zBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPdJKQgpXd bpLkhPE9a2uL8p7r3K4aOu+Wmnhm2rtpO4QYaXr5qwgSnif6qiYHfYBcIRdI7/J+ 1Hq6X+DOrRA3Ebvrc0G+QN0BZD9ZWGQl06kc9ktWHlT3ghsOk4Z7sLvp78hyIsJ8 kviGUfG+7JN4AP2Wk6TJ1Js8SGK/NiimQ6m4/PD66ZfT2Fsgj+6Z0ljs4pi2C10f u45iMVZdGZIz1wqW9biFeog28pGsbX5T8jokdlzgSBJcflNvm2f99V+bh+qD2qqy otFisx5wa89uTLCh7yNZ0hpSppBMGem0owp1DwBp4yx0bmyO4e/jfJJPMnEXnbSq cA7BrB62gboL -----END CERTIFICATE-----Generated at Tue Dec 16 00:27:49 2025 by rpki-client