This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa File: 08701de5-6e7f-35ea-94a1-468c45f69919.roa (raw, json) Hash identifier: cV27eogNtgC2CwBd87ILCnVkTJrcxmaoUAQVnGR+mIs= Subject key identifier: 74:C1:6C:67:52:A2:EC:67:AB:D6:3D:09:2C:9F:F0:A5:5E:C7:05:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C45A66B7435222FD24D39F790 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 30036 IP address blocks: 150.195.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:6b:74:35:22:2f:d2:4d:39:f7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=0c5615f8-1352-4561-8930-cee9ce34bbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:57:a5:60:94:ec:24:e3:6e:ef:68:46:ef: fe:ff:3a:d9:65:36:35:d8:e1:17:60:2d:3f:4d:ef: df:55:f8:b0:da:23:d9:47:05:d2:d8:cc:c2:84:59: 13:85:d0:53:d2:35:91:82:48:84:43:6d:98:7f:48: ff:26:e9:2a:8f:a0:c4:66:6b:cb:15:24:dc:af:20: f9:63:d8:81:4b:bf:ab:fa:64:6c:78:12:be:c5:63: f0:94:23:94:b8:1e:be:7b:d5:c1:aa:59:88:39:87: 18:22:2d:ab:99:a0:9e:a7:f2:57:e3:7a:b4:20:e4: 9b:87:2f:99:d2:11:93:4b:39:bf:d2:a6:1e:7c:72: 93:07:47:39:2c:a9:7d:11:82:12:9b:dd:15:61:0f: fb:eb:82:dc:49:2e:ae:16:99:00:08:9b:27:67:98: 51:1e:ab:51:97:96:81:57:ee:f7:75:7d:cb:9d:5c: c9:68:33:8f:3c:40:54:ea:e5:47:08:c7:74:31:4f: 1f:ed:25:9c:db:cb:b4:a8:ba:1c:37:d1:47:48:cd: 93:da:bc:1a:38:25:47:48:e0:ff:11:61:ef:b6:24: 19:ea:99:0d:0a:d0:97:aa:86:5b:dd:d5:25:54:f5: 6d:3f:6e:dc:e0:e1:13:15:13:17:be:61:86:56:ba: 16:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C1:6C:67:52:A2:EC:67:AB:D6:3D:09:2C:9F:F0:A5:5E:C7:05:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/08701de5-6e7f-35ea-94a1-468c45f69919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:b5:c2:46:cc:b9:3c:f9:08:bd:eb:d1:93:ce:2a:1e:79:ba: 9b:de:4a:dd:5c:6b:e6:50:92:e7:45:39:be:7e:c3:ea:2f:e2: ea:95:5e:55:c3:a6:a6:88:f5:41:1f:02:40:5c:3d:f8:b3:bb: 89:8b:d3:e2:97:80:0b:0c:c7:92:1c:1f:fe:73:72:6c:b1:64: 5f:45:f4:ad:75:68:1c:bd:0e:2a:31:5a:e6:e0:8a:b7:1e:19: a7:d4:48:47:d4:44:5b:c9:4a:4b:8d:ba:fc:29:47:b2:4a:60: 7f:e5:13:b0:15:48:75:7f:a5:ef:f8:87:1e:61:5a:18:89:24: a2:70:66:6c:ac:33:8b:34:fb:d7:cd:63:93:0a:ac:53:95:81: 8f:79:b4:54:80:c9:1f:54:6c:5a:28:45:2c:b6:f8:23:69:e6: f2:c6:ac:2a:5e:6d:82:82:d4:db:80:6e:f7:9d:d0:cc:cb:61: e9:87:d2:13:8d:2f:8f:cf:1a:f4:e2:a3:6e:35:b5:1f:e3:2b: 20:2c:34:e5:06:57:9e:5d:7a:94:87:54:69:c2:c0:a7:4d:6f: b7:c4:6e:6e:4b:cb:de:40:c6:b3:d6:4f:7b:bb:d0:cc:df:b9: 66:41:2e:13:39:02:28:62:3b:4c:fa:76:4c:76:e0:d3:09:aa: d7:3e:bc:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpmt0NSIv0k0595AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk MGM1NjE1ZjgtMTM1Mi00NTYxLTg5MzAtY2VlOWNlMzRiYmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvElXpWCU7CTjbu9oRu/+/zrZZTY12OEXYC0/ Te/fVfiw2iPZRwXS2MzChFkThdBT0jWRgkiEQ22Yf0j/Jukqj6DEZmvLFSTcryD5 Y9iBS7+r+mRseBK+xWPwlCOUuB6+e9XBqlmIOYcYIi2rmaCep/JX43q0IOSbhy+Z 0hGTSzm/0qYefHKTB0c5LKl9EYISm90VYQ/764LcSS6uFpkACJsnZ5hRHqtRl5aB V+73dX3LnVzJaDOPPEBU6uVHCMd0MU8f7SWc28u0qLocN9FHSM2T2rwaOCVHSOD/ EWHvtiQZ6pkNCtCXqoZb3dUlVPVtP27c4OETFRMXvmGGVroWPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTBbGdSouxnq9Y9CSyf8KVexwUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg3MDFkZTUtNmU3Zi0z NWVhLTk0YTEtNDY4YzQ1ZjY5OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH21wkbMuTz5CL3r0ZPOKh55upveSt1ca+ZQkudFOb5+w+ov4uqVXlXD pqaI9UEfAkBcPfizu4mL0+KXgAsMx5IcH/5zcmyxZF9F9K11aBy9DioxWubgirce GafUSEfURFvJSkuNuvwpR7JKYH/lE7AVSHV/pe/4hx5hWhiJJKJwZmysM4s0+9fN Y5MKrFOVgY95tFSAyR9UbFooRSy2+CNp5vLGrCpebYKC1NuAbved0MzLYemH0hON L4/PGvTio241tR/jKyAsNOUGV55depSHVGnCwKdNb7fEbm5Ly95AxrPWT3u70Mzf uWZBLhM5AihiO0z6dkx24NMJqtc+vBo= -----END CERTIFICATE-----Generated at Wed Dec 24 08:49:49 2025 by rpki-client