This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa File: b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa (raw, json) Hash identifier: evzk7NoSZpyHZ+6qP4gXq1/BNB/UsREqr7/EXLM5c8E= Subject key identifier: B0:37:53:97:B1:AF:E0:D0:4D:B4:A5:66:00:9E:8F:AD:0C:60:ED:5E Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584C30B6344CCF83D85C8B5DE390 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa Signing time: Mon 15 Dec 2025 02:00:31 +0000 ROA not before: Mon 15 Dec 2025 02:00:31 +0000 ROA not after: Sun 15 Mar 2026 01:00:31 +0000 asID: 400653 IP address blocks: 165.123.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:30:b6:34:4c:cf:83:d8:5c:8b:5d:e3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Dec 15 02:00:31 2025 GMT Not After : Mar 15 01:00:31 2026 GMT Subject: CN=4d974213-2a6d-4724-8c3c-9e07ac9bcb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d0:8c:a1:b2:58:4a:c4:e9:1a:a8:82:d6:79: 84:2c:8b:64:1b:f9:07:b7:57:2f:2b:fc:d4:68:5a: 63:eb:9f:35:1d:4f:3d:33:9f:86:4e:df:3d:17:1e: 1f:13:65:c9:86:69:ad:39:71:66:02:6f:46:f8:5b: bf:8e:ed:cb:30:28:b6:02:28:ad:31:0e:76:fb:c4: 80:ae:85:7a:95:33:be:fd:4b:e5:14:a9:eb:29:c8: c3:8c:96:61:d7:a9:48:63:47:04:de:77:30:41:cd: cf:1e:28:d3:75:f5:51:52:a5:5e:fe:dc:15:84:fa: f7:0d:8e:97:ee:ef:be:ac:ae:a3:a1:6b:92:89:e3: 75:d2:14:07:5b:8f:f3:97:4e:f5:46:26:5d:d6:c1: 30:89:f9:8b:d3:78:be:1c:c8:a3:57:67:9b:c9:bb: 01:66:19:ce:48:91:fd:ed:b1:72:03:23:9d:d8:f6: da:73:23:18:ce:75:b0:92:d7:62:50:40:f4:69:31: 95:fa:d2:fa:0c:5c:e4:41:d2:0b:c7:6f:85:80:67: db:8c:d1:9e:03:74:dc:21:2f:6d:51:f3:13:e4:9f: eb:d2:62:98:be:da:88:47:07:f8:be:a5:f3:e0:98: b2:c8:fb:e1:d9:de:5c:73:69:b0:c0:44:d8:b2:33: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:53:97:B1:AF:E0:D0:4D:B4:A5:66:00:9E:8F:AD:0C:60:ED:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/b8e396cb-a097-3eb0-b748-3116f4ce7c67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 165.123.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:b5:6a:e0:a3:ea:9f:ee:b1:30:23:4c:48:98:46:62:62:bb: cb:4e:ff:af:10:c1:87:75:e0:39:a2:1d:4d:64:a7:82:a7:2f: 94:97:11:e8:6d:6a:5f:81:88:b1:79:9b:dd:a3:7d:b8:ab:ef: a4:bb:7e:b1:82:cb:a8:5e:0a:dc:fb:7c:46:7a:83:b5:4f:0a: 52:7b:fb:9d:b1:79:39:13:69:a1:9e:ec:62:fa:be:36:1e:8f: 38:eb:5b:81:32:fe:f4:b4:2f:af:97:6a:1c:c8:6e:1a:1c:ca: e8:bb:37:b4:d4:16:1c:c8:2a:dd:3e:63:74:69:72:44:81:75: 23:e0:d1:b3:ce:ae:b2:e0:b7:0e:fe:e7:62:6d:cb:cb:40:49: 67:82:83:cc:1d:bd:5d:3a:61:e2:27:40:23:a2:b1:aa:b7:25: 7d:68:fe:d7:3c:57:e7:f3:14:4c:81:ef:f3:7e:22:ea:ba:ae: 73:52:1b:2e:9a:6a:ec:a0:82:1c:c3:2a:45:ad:10:ae:2f:b6: 6b:92:c0:3a:b6:7c:ac:89:6e:58:ac:90:d6:68:0d:ed:16:87: dc:40:b3:fc:e8:9e:91:e4:a2:ef:46:25:78:3b:b1:72:08:a8: 8b:98:5a:c3:f3:a4:d7:c5:ed:5f:be:bb:56:c7:23:c3:4f:7c: 99:56:0b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwwtjRMz4PYXItd45AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI1MTIxNTAyMDAzMVoXDTI2MDMxNTAxMDAzMVowLzEtMCsGA1UEAxMk NGQ5NzQyMTMtMmE2ZC00NzI0LThjM2MtOWUwN2FjOWJjYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdCMobJYSsTpGqiC1nmELItkG/kHt1cvK/zU aFpj6581HU89M5+GTt89Fx4fE2XJhmmtOXFmAm9G+Fu/ju3LMCi2AiitMQ52+8SA roV6lTO+/UvlFKnrKcjDjJZh16lIY0cE3ncwQc3PHijTdfVRUqVe/twVhPr3DY6X 7u++rK6joWuSieN10hQHW4/zl071RiZd1sEwifmL03i+HMijV2ebybsBZhnOSJH9 7bFyAyOd2PbacyMYznWwktdiUED0aTGV+tL6DFzkQdILx2+FgGfbjNGeA3TcIS9t UfMT5J/r0mKYvtqIRwf4vqXz4JiyyPvh2d5cc2mwwETYsjOsVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA3U5exr+DQTbSlZgCej60MYO1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvYjhlMzk2Y2ItYTA5Ny0z ZWIwLWI3NDgtMzExNmY0Y2U3YzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpXvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFS1auCj6p/usTAjTEiYRmJiu8tO/68QwYd14DmiHU1kp4KnL5SXEeht al+BiLF5m92jfbir76S7frGCy6heCtz7fEZ6g7VPClJ7+52xeTkTaaGe7GL6vjYe jzjrW4Ey/vS0L6+XahzIbhocyui7N7TUFhzIKt0+Y3RpckSBdSPg0bPOrrLgtw7+ 52Jty8tASWeCg8wdvV06YeInQCOisaq3JX1o/tc8V+fzFEyB7/N+Iuq6rnNSGy6a auygghzDKkWtEK4vtmuSwDq2fKyJbliskNZoDe0Wh9xAs/zonpHkou9GJXg7sXII qIuYWsPzpNfF7V++u1bHI8NPfJlWC4o= -----END CERTIFICATE-----Generated at Thu Dec 25 09:29:21 2025 by rpki-client