This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa File: 625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa (raw, json) Hash identifier: WhRSBlCdWXAlRe/Cg3oHxc6Fu8xCE9EtuUCnwcRhiPg= Subject key identifier: 36:21:69:E8:AA:96:53:3A:8A:36:D1:E1:E0:E3:BB:1D:78:9A:81:E5 Certificate issuer: /CN=75fee2d3-6e8d-43c2-9ea5-5793ea941503 Certificate serial: 010D0C9F4328584C539BD275FE58E92BA1FBD540 Authority key identifier: 7A:E2:14:B6:24:CE:02:38:2C:55:2B:F0:12:DC:9C:3C:30:89:44:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa Signing time: Sat 27 Dec 2025 14:00:38 +0000 ROA not before: Sat 27 Dec 2025 14:00:38 +0000 ROA not after: Fri 27 Mar 2026 13:00:38 +0000 asID: 399393 IP address blocks: 198.140.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:53:9b:d2:75:fe:58:e9:2b:a1:fb:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75fee2d3-6e8d-43c2-9ea5-5793ea941503 Validity Not Before: Dec 27 14:00:38 2025 GMT Not After : Mar 27 13:00:38 2026 GMT Subject: CN=f2891f0b-5e63-461d-8039-a1762eb9d4df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f7:b1:f9:4d:5a:f2:a6:9b:50:1b:82:29:f2: a4:92:61:2b:b4:70:a8:d4:18:7e:83:5a:ff:93:b2: 1a:14:9e:ea:91:e7:36:e6:60:68:ea:3f:4e:84:ba: 21:64:d8:95:f1:4b:b3:61:2b:93:71:7c:f2:24:59: 59:c0:81:af:41:6a:21:f8:c5:c4:d3:68:49:0c:81: 9c:35:8c:6e:14:b1:7a:39:97:ec:7d:e1:35:e7:69: b0:6b:43:ff:5b:d6:c5:81:84:f2:f8:90:93:65:90: aa:bb:ff:eb:c5:f1:5f:11:50:41:6d:3c:46:38:28: 1d:8d:fd:33:f2:55:1d:c7:32:55:cb:e2:fa:8a:80: be:9c:43:f4:37:d0:9f:56:bc:d6:5d:b8:2c:86:d0: 72:a2:e3:02:c9:ed:39:38:8f:46:94:79:10:42:6b: e6:f0:a9:b8:fe:10:e6:b1:e1:97:49:b2:73:78:6a: 7f:ec:76:4b:a2:46:cc:34:3a:64:ef:a4:31:88:a0: 92:0f:6d:05:c7:25:23:c2:9c:ff:84:ca:9d:79:72: 40:4d:c7:03:51:eb:fd:05:63:c6:bb:f0:e8:97:98: 11:da:3d:cf:38:4d:cb:c2:47:5d:17:01:58:c7:35: 6f:07:2d:83:c2:24:a0:48:79:d4:40:c5:42:c8:eb: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:21:69:E8:AA:96:53:3A:8A:36:D1:E1:E0:E3:BB:1D:78:9A:81:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.crl X509v3 Authority Key Identifier: keyid:7A:E2:14:B6:24:CE:02:38:2C:55:2B:F0:12:DC:9C:3C:30:89:44:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer sbgp-ipAddrBlock: critical IPv4: 198.140.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:38:72:2b:b7:f4:33:37:aa:60:ac:98:92:e1:94:46:cd:49: cc:cd:7d:79:bb:0a:5b:46:70:ac:cf:d2:16:f8:76:6c:07:1a: 29:75:c5:6f:a9:d0:1d:ac:31:c5:e1:cb:31:8d:a0:e8:04:5c: db:48:55:d1:8f:27:e6:35:20:b7:84:98:9e:bc:6c:e1:ae:06: c6:4e:3e:6d:86:ac:98:b7:35:1b:97:8c:60:05:0a:53:1b:9c: d8:28:f1:1a:bf:01:00:2b:f6:88:ad:27:d3:4d:e6:d4:04:de: 20:a1:71:ec:51:9b:e0:68:1c:fc:55:07:e5:2d:83:ad:73:4b: 64:11:47:92:a6:a2:a7:b9:92:4a:86:b8:81:03:c6:60:ab:1e: 1d:76:4f:04:c8:0b:b3:ca:98:82:9c:cf:2a:78:f5:5a:a3:c9: be:bd:44:92:ef:16:87:8e:17:4c:4e:c8:a8:a4:75:f7:b3:ba: 63:cc:88:4d:90:32:a7:d7:1e:e6:fd:39:90:85:81:e3:79:1b: 11:d8:16:ea:34:3e:ab:c9:78:c9:bd:46:41:45:a1:d6:48:9a: e4:0f:c5:ef:11:58:ba:cc:6d:40:60:dd:0e:e9:94:b8:d3:a5: a4:0d:c1:c5:dd:f5:22:fd:83:2d:3d:97:39:0b:07:4f:6c:82: 34:a9:e3:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExTm9J1/ljpK6H71UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVmZWUyZDMtNmU4ZC00M2MyLTllYTUtNTc5M2VhOTQx NTAzMB4XDTI1MTIyNzE0MDAzOFoXDTI2MDMyNzEzMDAzOFowLzEtMCsGA1UEAxMk ZjI4OTFmMGItNWU2My00NjFkLTgwMzktYTE3NjJlYjlkNGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfex+U1a8qabUBuCKfKkkmErtHCo1Bh+g1r/ k7IaFJ7qkec25mBo6j9OhLohZNiV8UuzYSuTcXzyJFlZwIGvQWoh+MXE02hJDIGc NYxuFLF6OZfsfeE152mwa0P/W9bFgYTy+JCTZZCqu//rxfFfEVBBbTxGOCgdjf0z 8lUdxzJVy+L6ioC+nEP0N9CfVrzWXbgshtByouMCye05OI9GlHkQQmvm8Km4/hDm seGXSbJzeGp/7HZLokbMNDpk76QxiKCSD20FxyUjwpz/hMqdeXJATccDUev9BWPG u/Dol5gR2j3POE3LwkddFwFYxzVvBy2DwiSgSHnUQMVCyOtRZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYhaeiqllM6ijbR4eDjux14moHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NWZl ZTJkMy02ZThkLTQzYzItOWVhNS01NzkzZWE5NDE1MDMvNjI1ZGMwMmEtMzNkOS0z Y2NjLWE4Y2ItNmNjNmMwZmE2ZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzVmZWUyZDMtNmU4ZC00M2MyLTll YTUtNTc5M2VhOTQxNTAzLzc1ZmVlMmQzLTZlOGQtNDNjMi05ZWE1LTU3OTNlYTk0 MTUwMy5jcmwwHwYDVR0jBBgwFoAUeuIUtiTOAjgsVSvwEtycPDCJROMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83NWZlZTJkMy02ZThkLTQzYzItOWVhNS01Nzkz ZWE5NDE1MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxozmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB04ciu39DM3qmCsmJLhlEbNSczNfXm7CltGcKzP0hb4dmwHGil1xW+p 0B2sMcXhyzGNoOgEXNtIVdGPJ+Y1ILeEmJ68bOGuBsZOPm2GrJi3NRuXjGAFClMb nNgo8Rq/AQAr9oitJ9NN5tQE3iChcexRm+BoHPxVB+Utg61zS2QRR5Kmoqe5kkqG uIEDxmCrHh12TwTIC7PKmIKczyp49Vqjyb69RJLvFoeOF0xOyKikdfezumPMiE2Q MqfXHub9OZCFgeN5GxHYFuo0PqvJeMm9RkFFodZImuQPxe8RWLrMbUBg3Q7plLjT paQNwcXd9SL9gy09lzkLB09sgjSp44k= -----END CERTIFICATE-----Generated at Sat Jan 10 14:26:29 2026 by rpki-client