This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa File: 33b25462-3f2f-33b4-ab16-bb27bccd452c.roa (raw, json) Hash identifier: wwJO2dxBtlrM2D7k9Hho74MpdoRNdmwZa0lE/yBKVXE= Subject key identifier: F7:B5:B5:80:B8:6F:7B:D7:C7:DF:E3:61:14:D7:C1:29:2D:C4:17:7F Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584C45A688D219D98AA856307000 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa Signing time: Mon 22 Dec 2025 14:00:39 +0000 ROA not before: Mon 22 Dec 2025 14:00:39 +0000 ROA not after: Sun 22 Mar 2026 13:00:39 +0000 asID: 21949 IP address blocks: 198.22.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:a6:88:d2:19:d9:8a:a8:56:30:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Dec 22 14:00:39 2025 GMT Not After : Mar 22 13:00:39 2026 GMT Subject: CN=9a074272-6550-481d-9db6-202e710e11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:d2:b2:fb:85:c6:21:c8:eb:95:3e:d3:cc: 9b:bb:5b:5d:e7:fb:dd:d9:67:3c:bc:d1:2e:22:57: 78:5d:03:dc:8c:37:21:d1:a0:17:49:bd:28:a1:94: b0:84:21:e0:35:10:d1:a6:b3:28:b6:17:bd:ff:af: 43:68:5e:9c:8e:68:57:d0:59:fd:1c:87:fb:5a:c9: 2b:19:c2:08:b5:5f:bf:86:82:f1:f6:5f:20:64:db: 44:31:de:a8:16:6d:d3:2f:4b:5c:db:c3:f3:1f:34: 73:87:d3:e9:e6:29:bf:03:71:6b:cc:f7:f8:d5:75: 77:0c:70:c0:90:28:df:5f:c0:a2:c1:79:98:a1:70: bf:b9:08:91:f6:95:2c:c5:b6:23:41:56:d7:27:4a: 22:5f:6c:d7:ee:5b:e8:d1:6b:e9:05:60:48:87:0b: d5:d0:32:88:c5:44:df:a7:65:9f:19:b3:0e:a2:40: d2:5a:af:ec:ed:b2:92:57:cf:07:d0:2a:5e:33:b6: ef:da:1c:c4:cd:63:e0:97:db:31:34:69:69:54:09: 3b:1c:8b:8e:05:ce:f8:c8:af:d0:04:74:9e:7b:15: 10:0d:41:73:35:14:11:a8:93:85:cd:f3:72:b7:f3: c2:f2:2d:27:cd:12:a6:1c:b5:23:01:ff:f9:2f:fb: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B5:B5:80:B8:6F:7B:D7:C7:DF:E3:61:14:D7:C1:29:2D:C4:17:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/33b25462-3f2f-33b4-ab16-bb27bccd452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.22.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:08:27:38:29:02:8b:d4:f1:d8:58:06:3d:81:c0:0d:dc:63: 1e:ee:e1:39:7a:79:ef:f8:ce:f3:6e:86:9c:fb:ac:70:f2:6d: 5c:97:1d:e5:aa:4f:ce:d4:13:69:c7:52:94:d5:48:dd:38:1d: 51:10:0b:93:f4:62:1d:fb:24:e6:f9:34:00:54:2d:0c:21:5f: 77:d3:46:c3:f0:41:60:76:5d:a9:27:81:71:51:22:d5:8f:eb: b2:2e:d6:c9:5f:bf:1b:82:11:0b:ee:b4:18:f1:da:89:2b:3f: b9:d7:09:7f:d7:fb:8d:57:4c:59:cd:64:44:52:1b:9b:46:80: 97:23:c7:44:df:08:67:9b:03:1e:e6:6d:7d:0a:32:60:1c:19: 00:51:6b:b4:36:e4:a9:3b:9d:61:5a:85:9d:f1:b1:05:e4:db: 07:56:68:e8:38:e4:ea:fa:c5:31:24:aa:85:dd:2d:ca:42:61: 76:98:f9:14:2a:26:7c:2a:86:86:3d:31:4d:a9:f8:3a:ee:1b: e4:4a:64:7f:bc:fc:e8:d7:23:70:2c:f8:eb:33:4e:46:0b:94: 63:fc:2a:b5:39:24:ce:ba:8a:c9:43:18:f2:55:ab:39:56:98: c3:5a:d7:aa:a6:d1:28:b3:e4:06:b0:32:a9:1d:a4:a6:57:b9: db:5c:63:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExFpojSGdmKqFYwcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTIyMjE0MDAzOVoXDTI2MDMyMjEzMDAzOVowLzEtMCsGA1UEAxMk OWEwNzQyNzItNjU1MC00ODFkLTlkYjYtMjAyZTcxMGUxMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6nSsvuFxiHI65U+08ybu1td5/vd2Wc8vNEu Ild4XQPcjDch0aAXSb0ooZSwhCHgNRDRprMothe9/69DaF6cjmhX0Fn9HIf7Wskr GcIItV+/hoLx9l8gZNtEMd6oFm3TL0tc28PzHzRzh9Pp5im/A3FrzPf41XV3DHDA kCjfX8CiwXmYoXC/uQiR9pUsxbYjQVbXJ0oiX2zX7lvo0WvpBWBIhwvV0DKIxUTf p2WfGbMOokDSWq/s7bKSV88H0CpeM7bv2hzEzWPgl9sxNGlpVAk7HIuOBc74yK/Q BHSeexUQDUFzNRQRqJOFzfNyt/PC8i0nzRKmHLUjAf/5L/sKzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe1tYC4b3vXx9/jYRTXwSktxBd/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvMzNiMjU0NjItM2YyZi0z M2I0LWFiMTYtYmIyN2JjY2Q0NTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYIJzgpAovU8dhYBj2BwA3cYx7u4Tl6ee/4zvNuhpz7rHDybVyXHeWq T87UE2nHUpTVSN04HVEQC5P0Yh37JOb5NABULQwhX3fTRsPwQWB2XakngXFRItWP 67Iu1slfvxuCEQvutBjx2okrP7nXCX/X+41XTFnNZERSG5tGgJcjx0TfCGebAx7m bX0KMmAcGQBRa7Q25Kk7nWFahZ3xsQXk2wdWaOg45Or6xTEkqoXdLcpCYXaY+RQq JnwqhoY9MU2p+DruG+RKZH+8/OjXI3As+OszTkYLlGP8KrU5JM66islDGPJVqzlW mMNa16qm0Siz5AawMqkdpKZXudtcY8g= -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:52 2025 by rpki-client