This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa File: 2239a84b-7e10-3429-b4a8-09f38898bb31.roa (raw, json) Hash identifier: s1h0A2ZmVFK1Zv3mwzUZiOybEA04Lh4rSO1j4GRzuQE= Subject key identifier: 43:EF:04:B5:15:27:4A:6E:4D:D4:72:36:67:DA:1F:CB:8E:A3:9E:10 Certificate issuer: /CN=45718731-be33-4e2d-a8ff-5c444109d0ad Certificate serial: 010D0C9F4328584C2B20FD4594865C957A45D8E0 Authority key identifier: DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa Signing time: Sat 13 Dec 2025 02:00:30 +0000 ROA not before: Sat 13 Dec 2025 02:00:30 +0000 ROA not after: Fri 13 Mar 2026 01:00:30 +0000 asID: 16509 IP address blocks: 149.28.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2b:20:fd:45:94:86:5c:95:7a:45:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45718731-be33-4e2d-a8ff-5c444109d0ad Validity Not Before: Dec 13 02:00:30 2025 GMT Not After : Mar 13 01:00:30 2026 GMT Subject: CN=d7f90cf9-14da-4bdb-81f3-fcda4eefdf9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:b2:df:9d:e3:7e:89:3e:ff:a9:30:6a:20: 03:89:24:be:9b:f0:10:ce:79:89:20:d7:d4:05:ed: ad:5a:3f:c4:bb:2e:ae:0e:58:36:01:8b:9d:bd:ee: 04:f1:74:23:65:ad:53:64:a7:a1:43:c5:a4:2a:de: b5:f8:a1:42:c2:3b:4d:37:f4:5d:82:0f:fe:11:0f: fe:3d:ee:09:0c:07:5c:cf:1a:99:e7:93:f3:b1:31: 72:17:56:63:53:0d:7b:8c:0e:e8:78:81:ae:25:a5: e3:cd:cf:b2:b4:3c:e2:9f:99:f9:e8:48:c1:05:20: da:eb:a0:d1:66:dd:da:a0:2c:e8:a9:72:93:09:0e: 3b:72:37:d8:64:3d:ac:86:a3:63:61:ff:a4:b0:34: 91:c5:64:14:7c:35:0d:1d:a8:7c:fe:9b:f9:97:80: 7a:9f:9e:ec:52:54:2a:47:13:4c:83:b1:27:c5:d6: 5a:0f:18:db:2a:bf:c5:f6:54:3f:67:83:57:d2:ba: 2f:ea:a7:b0:34:07:6f:6f:b2:0d:1f:61:b8:fe:73: ba:fc:a4:74:6e:bb:52:a0:b7:ea:94:ce:68:76:e4: 60:69:d7:66:e2:b6:e1:42:45:ff:a8:23:8b:b1:62: d9:27:d9:c1:d6:4f:04:19:4b:42:54:f2:15:78:97: 13:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EF:04:B5:15:27:4A:6E:4D:D4:72:36:67:DA:1F:CB:8E:A3:9E:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/2239a84b-7e10-3429-b4a8-09f38898bb31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad/45718731-be33-4e2d-a8ff-5c444109d0ad.crl X509v3 Authority Key Identifier: keyid:DE:FC:A3:E3:70:DE:21:38:63:3E:2E:10:1F:B8:F1:BB:AF:5A:AF:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/45718731-be33-4e2d-a8ff-5c444109d0ad.cer sbgp-ipAddrBlock: critical IPv4: 149.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b1:1a:0f:b6:f3:87:e2:b6:8e:8d:c5:c0:b5:d8:08:82:4a: 9f:f6:95:83:32:cf:5c:95:ad:40:c8:95:32:fc:db:23:a0:b6: f3:09:dd:f6:bc:61:ee:1c:a2:b5:92:82:0b:1f:bf:34:54:2e: ff:d2:59:31:22:16:94:3b:a0:dd:e4:e8:bb:b7:8d:35:05:15: 0c:3e:5d:f1:e0:e0:4b:ab:f1:53:f7:10:fa:1a:05:f8:17:33: 0b:e0:aa:4f:bd:ca:0d:4c:fe:7e:63:1e:05:7a:84:c1:d3:d5: c2:4e:eb:5d:24:f2:77:05:f2:05:fc:1a:30:c0:cd:66:c1:4b: 9d:64:0d:6b:00:33:31:8c:9d:01:f3:7e:01:3c:28:7c:2c:63: 2d:9e:b9:5a:5f:99:e5:af:c6:eb:31:cc:9d:8b:f7:cf:4e:9e: 71:45:89:3c:95:82:78:05:12:e7:ab:6b:b0:2b:48:c8:f2:d2: 30:f6:c5:42:40:79:72:e9:84:2c:88:c2:b7:4e:f2:d3:5e:bf: 01:08:4a:c6:4e:15:70:5d:dd:04:d5:e5:3a:aa:09:0b:56:d5: dd:3b:eb:69:2f:5e:ff:69:aa:07:a1:36:6a:fe:f3:f3:8e:d1: a8:57:56:a8:d2:4a:de:90:93:e5:67:3c:22:65:39:bd:5c:dd: ce:64:01:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwrIP1FlIZclXpF2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU3MTg3MzEtYmUzMy00ZTJkLWE4ZmYtNWM0NDQxMDlk MGFkMB4XDTI1MTIxMzAyMDAzMFoXDTI2MDMxMzAxMDAzMFowLzEtMCsGA1UEAxMk ZDdmOTBjZjktMTRkYS00YmRiLTgxZjMtZmNkYTRlZWZkZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphmy353jfok+/6kwaiADiSS+m/AQznmJINfU Be2tWj/Euy6uDlg2AYudve4E8XQjZa1TZKehQ8WkKt61+KFCwjtNN/Rdgg/+EQ/+ Pe4JDAdczxqZ55PzsTFyF1ZjUw17jA7oeIGuJaXjzc+ytDzin5n56EjBBSDa66DR Zt3aoCzoqXKTCQ47cjfYZD2shqNjYf+ksDSRxWQUfDUNHah8/pv5l4B6n57sUlQq RxNMg7EnxdZaDxjbKr/F9lQ/Z4NX0rov6qewNAdvb7INH2G4/nO6/KR0brtSoLfq lM5oduRgaddm4rbhQkX/qCOLsWLZJ9nB1k8EGUtCVPIVeJcTcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPvBLUVJ0puTdRyNmfaH8uOo54QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80NTcx ODczMS1iZTMzLTRlMmQtYThmZi01YzQ0NDEwOWQwYWQvMjIzOWE4NGItN2UxMC0z NDI5LWI0YTgtMDlmMzg4OThiYjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDU3MTg3MzEtYmUzMy00ZTJkLWE4 ZmYtNWM0NDQxMDlkMGFkLzQ1NzE4NzMxLWJlMzMtNGUyZC1hOGZmLTVjNDQ0MTA5 ZDBhZC5jcmwwHwYDVR0jBBgwFoAU3vyj43DeIThjPi4QH7jxu69ar2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80NTcxODczMS1iZTMzLTRlMmQtYThmZi01YzQ0 NDEwOWQwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmxGg+284fito6NxcC12AiCSp/2lYMyz1yVrUDIlTL82yOgtvMJ3fa8 Ye4corWSggsfvzRULv/SWTEiFpQ7oN3k6Lu3jTUFFQw+XfHg4Eur8VP3EPoaBfgX Mwvgqk+9yg1M/n5jHgV6hMHT1cJO610k8ncF8gX8GjDAzWbBS51kDWsAMzGMnQHz fgE8KHwsYy2euVpfmeWvxusxzJ2L989OnnFFiTyVgngFEuera7ArSMjy0jD2xUJA eXLphCyIwrdO8tNevwEISsZOFXBd3QTV5TqqCQtW1d0762kvXv9pqgehNmr+8/OO 0ahXVqjSSt6Qk+VnPCJlOb1c3c5kAZ4= -----END CERTIFICATE-----Generated at Fri Jan 9 18:10:03 2026 by rpki-client