This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa File: 40e3f322-a216-3c3f-b94f-271c6ddb1492.roa (raw, json) Hash identifier: gz8Puazsd1fKKI7JTaNq+G3gz1wnKhqoHac8UItt9UQ= Subject key identifier: D2:4B:34:19:8A:B8:F3:B5:12:52:F8:F4:51:96:40:D1:C4:35:75:C9 Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65 Certificate serial: 010D0C9F4328584C0B062DCBECD8D80C74265A80 Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa Signing time: Mon 01 Dec 2025 14:00:39 +0000 ROA not before: Mon 01 Dec 2025 14:00:39 +0000 ROA not after: Sun 01 Mar 2026 14:00:39 +0000 asID: 30103 IP address blocks: 161.199.138.0/23 maxlen: 24 198.251.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0b:06:2d:cb:ec:d8:d8:0c:74:26:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65 Validity Not Before: Dec 1 14:00:39 2025 GMT Not After : Mar 1 14:00:39 2026 GMT Subject: CN=4e1d7acd-4894-4eb9-a298-f7475e4c3f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:05:a0:01:07:79:9c:aa:27:ab:88:c1:69:7a: f7:d4:37:f1:22:c8:af:af:65:c6:32:4f:50:7b:d6: 72:68:0b:94:9c:93:66:f0:89:44:3e:4d:69:64:eb: ed:53:20:ce:38:02:d2:05:28:aa:49:10:0f:bd:26: 2e:b2:a1:fe:16:34:e6:fc:b5:5e:f9:e6:66:13:bb: 42:e3:c8:e1:2d:65:4d:6d:ee:64:26:b5:8f:96:56: 78:57:e8:72:3d:c9:26:2e:02:5c:1f:38:28:93:2e: 1d:32:fb:f8:8a:c0:a1:09:db:11:08:c9:49:b2:b9: 37:6a:63:e8:80:ac:ba:03:5b:2c:11:e8:00:a9:ec: 99:84:f7:1f:20:af:0d:60:e4:50:e1:eb:47:5b:6c: 98:55:18:ac:83:e5:10:79:da:6e:9a:c5:c3:a7:b4: d7:93:d4:71:4e:cc:e7:e4:50:57:fd:c8:d2:bc:18: 19:54:71:80:b7:01:02:a4:2a:bf:88:d3:cb:80:e4: 87:6d:b8:c2:cd:91:31:fe:ea:cd:69:ee:88:94:d6: 8f:e7:f5:46:7d:f3:62:e4:0c:44:23:f9:00:53:8d: 97:d3:c4:b7:58:1e:66:8d:c9:9a:21:5f:3c:54:ac: a4:1a:e9:a1:77:1e:3e:7a:d3:6e:f0:c3:ed:ab:01: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:34:19:8A:B8:F3:B5:12:52:F8:F4:51:96:40:D1:C4:35:75:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/40e3f322-a216-3c3f-b94f-271c6ddb1492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl X509v3 Authority Key Identifier: keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer sbgp-ipAddrBlock: critical IPv4: 161.199.138.0/23 198.251.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2c:e3:4a:70:d2:07:75:4b:44:b3:bd:38:a8:7d:23:0c:a0: 64:cc:d8:a7:0d:19:78:e8:dc:e6:be:d1:c0:2c:14:bb:3e:98: a8:ed:ed:1d:67:34:95:fe:9d:55:56:82:78:d3:85:e8:9e:4b: 73:47:d1:b9:bb:8a:a1:5c:e0:58:65:d0:3b:87:b3:38:29:7a: c1:91:cc:37:79:5a:0d:8c:59:29:2a:41:84:5b:8e:0e:e3:94: 18:ce:13:7c:f9:31:41:45:5c:4e:62:ac:b7:02:b1:1a:6c:e3: 30:a4:31:ae:f5:1e:30:f6:bf:c3:e0:ac:8c:36:d0:18:63:d4: 85:f9:56:a9:b4:e9:13:9b:82:70:4d:e5:e5:ba:b9:71:f8:ba: c3:11:3c:5e:72:9b:27:48:1f:8d:d5:d4:db:15:78:bb:b2:d9: 4e:7d:53:25:52:83:95:5f:e6:c1:93:d5:1c:27:b9:e9:5c:0b: e7:22:f4:f4:75:7b:f0:28:78:f3:5b:1b:cb:aa:e7:b1:7a:c1: 49:4a:e2:06:40:02:66:2f:64:16:a7:98:18:df:ec:b0:59:48: a2:14:8e:aa:74:53:ef:c5:5b:d3:ff:e4:76:e2:71:ea:de:d2: 37:5b:2b:48:9e:ea:90:a9:9f:14:06:92:35:44:55:c1:ea:ed: 8d:3c:08:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEwLBi3L7NjYDHQmWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx YzY1MB4XDTI1MTIwMTE0MDAzOVoXDTI2MDMwMTE0MDAzOVowLzEtMCsGA1UEAxMk NGUxZDdhY2QtNDg5NC00ZWI5LWEyOTgtZjc0NzVlNGMzZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggWgAQd5nKonq4jBaXr31DfxIsivr2XGMk9Q e9ZyaAuUnJNm8IlEPk1pZOvtUyDOOALSBSiqSRAPvSYusqH+FjTm/LVe+eZmE7tC 48jhLWVNbe5kJrWPllZ4V+hyPckmLgJcHzgoky4dMvv4isChCdsRCMlJsrk3amPo gKy6A1ssEegAqeyZhPcfIK8NYORQ4etHW2yYVRisg+UQedpumsXDp7TXk9RxTszn 5FBX/cjSvBgZVHGAtwECpCq/iNPLgOSHbbjCzZEx/urNae6IlNaP5/VGffNi5AxE I/kAU42X08S3WB5mjcmaIV88VKykGumhdx4+etNu8MPtqwHA7QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNJLNBmKuPO1ElL49FGWQNHENXXJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1 NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDBlM2YzMjItYTIxNi0z YzNmLWI5NGYtMjcxYzZkZGIxNDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4 MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5 NjVhMjFjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBoceKAwQD xvv4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEYs40pw0gd1S0SzvTiofSMMoGTM2KcNGXjo3Oa+0cAsFLs+ mKjt7R1nNJX+nVVWgnjTheieS3NH0bm7iqFc4Fhl0DuHszgpesGRzDd5Wg2MWSkq QYRbjg7jlBjOE3z5MUFFXE5irLcCsRps4zCkMa71HjD2v8PgrIw20Bhj1IX5Vqm0 6RObgnBN5eW6uXH4usMRPF5ymydIH43V1NsVeLuy2U59UyVSg5Vf5sGT1Rwnuelc C+ci9PR1e/AoePNbG8uq57F6wUlK4gZAAmYvZBanmBjf7LBZSKIUjqp0U+/FW9P/ 5Hbicere0jdbK0ie6pCpnxQGkjVEVcHq7Y08CKE= -----END CERTIFICATE-----Generated at Fri Dec 5 10:23:50 2025 by rpki-client