This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa File: 43425afd-e380-3275-b610-aa2206fe32e5.roa (raw, json) Hash identifier: 4jUtTAc7Sx5/Wyx0gH3wYFDlc5wQKNAUsGgka9zCG4Y= Subject key identifier: B9:12:78:C8:F9:AB:D2:DD:90:35:AF:68:E1:95:4D:02:E0:67:19:C2 Certificate issuer: /CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Certificate serial: 010D0C9F4328584C2DEB99B597603119D3EB0780 Authority key identifier: 7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa Signing time: Sun 14 Dec 2025 02:00:31 +0000 ROA not before: Sun 14 Dec 2025 02:00:31 +0000 ROA not after: Sat 14 Mar 2026 01:00:31 +0000 asID: 10753 IP address blocks: 192.228.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2d:eb:99:b5:97:60:31:19:d3:eb:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bcbe16b-0dde-46c3-837f-a940a0e9d4cb Validity Not Before: Dec 14 02:00:31 2025 GMT Not After : Mar 14 01:00:31 2026 GMT Subject: CN=33d2db6e-ebe8-4d65-80cf-7e4a36e794f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:65:a4:91:ec:63:2a:79:42:5b:2f:00:da: 88:39:27:27:90:75:ac:5a:2c:8e:ee:f1:f8:10:6c: 7e:8f:54:31:b2:04:58:82:62:e3:29:9b:17:41:fe: 43:05:3e:34:ec:49:74:d4:1d:22:d0:ac:60:ea:33: f3:90:71:62:56:6e:d3:78:e4:ad:08:8e:60:21:b8: 48:b0:d2:c9:03:0c:5e:59:27:5b:4b:b7:a5:e3:8b: 0c:b7:1e:ee:ca:8d:50:2a:33:10:ac:89:e5:af:76: 38:79:24:f9:71:3c:55:e3:1a:ba:d8:c7:3b:4f:02: 6e:6d:13:2c:f6:7e:59:3c:71:ce:4b:96:4a:e4:f4: 13:64:c7:57:88:f6:bc:ad:65:37:99:54:bd:89:e5: 03:e6:18:19:93:2a:f0:89:ad:85:8f:56:03:d7:be: c5:58:10:e3:96:20:96:f8:b8:47:b8:ba:14:78:98: ea:fc:24:53:88:61:9f:59:fd:47:39:27:ea:1b:1b: 9b:4d:ff:52:eb:12:a3:f0:73:b5:e6:18:43:08:8b: e8:8b:b8:2c:a7:3c:ad:39:1b:bf:7d:38:ed:cd:44: e7:e8:d1:59:83:ba:de:90:a0:ed:35:54:55:00:ea: 6a:a3:37:c4:f0:73:f4:24:40:cd:01:ac:b1:87:3e: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:78:C8:F9:AB:D2:DD:90:35:AF:68:E1:95:4D:02:E0:67:19:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/43425afd-e380-3275-b610-aa2206fe32e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.crl X509v3 Authority Key Identifier: keyid:7E:A7:29:61:89:AE:48:BE:BA:26:38:81:C2:93:FC:85:AB:0B:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7bcbe16b-0dde-46c3-837f-a940a0e9d4cb.cer sbgp-ipAddrBlock: critical IPv4: 192.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:1c:33:c1:50:eb:81:48:b0:7f:2c:67:23:cc:c7:58:2d:1b: b6:e9:4a:de:27:55:cc:66:20:8e:c4:a6:53:d3:8e:61:5d:75: a9:4d:e5:5c:ac:20:12:7d:93:b8:86:4e:5d:7c:98:e3:12:ed: 9a:85:19:78:d4:b1:c1:ad:33:87:d0:61:0a:b4:81:52:69:6b: 64:d1:ad:a1:5d:d8:31:e9:8d:26:40:a6:50:13:10:57:b2:2e: 2f:cb:3c:ef:10:bf:8f:7b:e6:72:6c:47:9b:e1:d8:11:f2:74: 41:cd:1f:36:63:6b:75:dc:de:36:ae:ec:de:61:dd:de:01:7d: 48:a4:a7:7e:1e:13:75:d5:aa:4a:a8:62:52:42:59:10:89:b7: 7a:a1:ca:56:40:2f:46:ae:72:b4:04:5a:fb:71:e1:27:a3:65: c0:4b:60:84:f3:d5:48:93:2a:86:08:48:3d:4e:a2:7b:b9:28: eb:5d:82:99:d3:df:45:1c:91:cc:7c:e5:8d:d0:38:44:44:3f: 4d:ec:b7:14:36:e3:1a:af:bb:50:35:80:be:e6:62:bc:56:5a: b4:aa:e7:68:13:05:cc:c8:d3:ba:eb:38:10:86:c1:ba:88:8f: ac:33:ba:8c:b1:e5:8b:dd:2a:05:a5:73:15:cd:cb:3d:e6:23: 5c:2d:98:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwt65m1l2AxGdPrB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JjYmUxNmItMGRkZS00NmMzLTgzN2YtYTk0MGEwZTlk NGNiMB4XDTI1MTIxNDAyMDAzMVoXDTI2MDMxNDAxMDAzMVowLzEtMCsGA1UEAxMk MzNkMmRiNmUtZWJlOC00ZDY1LTgwY2YtN2U0YTM2ZTc5NGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVJlpJHsYyp5QlsvANqIOScnkHWsWiyO7vH4 EGx+j1QxsgRYgmLjKZsXQf5DBT407El01B0i0Kxg6jPzkHFiVm7TeOStCI5gIbhI sNLJAwxeWSdbS7el44sMtx7uyo1QKjMQrInlr3Y4eST5cTxV4xq62Mc7TwJubRMs 9n5ZPHHOS5ZK5PQTZMdXiPa8rWU3mVS9ieUD5hgZkyrwia2Fj1YD177FWBDjliCW +LhHuLoUeJjq/CRTiGGfWf1HOSfqGxubTf9S6xKj8HO15hhDCIvoi7gspzytORu/ fTjtzUTn6NFZg7rekKDtNVRVAOpqozfE8HP0JEDNAayxhz6ioQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkSeMj5q9LdkDWvaOGVTQLgZxnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83YmNi ZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQwYTBlOWQ0Y2IvNDM0MjVhZmQtZTM4MC0z Mjc1LWI2MTAtYWEyMjA2ZmUzMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2JjYmUxNmItMGRkZS00NmMzLTgz N2YtYTk0MGEwZTlkNGNiLzdiY2JlMTZiLTBkZGUtNDZjMy04MzdmLWE5NDBhMGU5 ZDRjYi5jcmwwHwYDVR0jBBgwFoAUfqcpYYmuSL66JjiBwpP8hasLXKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83YmNiZTE2Yi0wZGRlLTQ2YzMtODM3Zi1hOTQw YTBlOWQ0Y2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkcM8FQ64FIsH8sZyPMx1gtG7bpSt4nVcxmII7EplPTjmFddalN5Vys IBJ9k7iGTl18mOMS7ZqFGXjUscGtM4fQYQq0gVJpa2TRraFd2DHpjSZAplATEFey Li/LPO8Qv4975nJsR5vh2BHydEHNHzZja3Xc3jau7N5h3d4BfUikp34eE3XVqkqo YlJCWRCJt3qhylZAL0aucrQEWvtx4SejZcBLYITz1UiTKoYISD1Oonu5KOtdgpnT 30Uckcx85Y3QOEREP03stxQ24xqvu1A1gL7mYrxWWrSq52gTBczI07rrOBCGwbqI j6wzuoyx5YvdKgWlcxXNyz3mI1wtmAs= -----END CERTIFICATE-----Generated at Sat Dec 20 06:40:30 2025 by rpki-client