This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa File: 659f45f4-1930-35f3-bd28-8eec0ba978f8.roa (raw, json) Hash identifier: zZw1dcWMXHy8+6C7eRZwKMXEj6iFVcgQb7786pff4Rw= Subject key identifier: B7:8F:F2:5B:2E:3C:7A:F9:6C:B0:DA:66:A7:A1:D1:00:E0:59:EF:79 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C39167649608E946ADC431AA0 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 397202 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:76:49:60:8e:94:6a:dc:43:1a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=870fbba7-a5a6-4754-89f6-1c77010e6272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:55:63:fd:d4:aa:c7:29:0f:3a:5d:45:44:18: fe:e4:9b:6a:d6:d5:50:0e:51:df:c8:86:eb:99:8f: d1:32:7f:6e:a9:71:30:84:c6:68:7c:e8:f2:a5:8b: 3b:09:fa:74:45:68:03:d5:da:1e:13:53:e5:1f:da: d5:fd:42:c7:9e:7c:6b:8d:ea:39:85:c0:29:56:96: dc:89:d6:54:79:f7:09:19:3f:6a:a7:b0:e4:39:a3: 98:c4:b1:4b:46:6f:b2:8f:da:54:5c:ec:74:8f:1c: c2:e4:d7:0d:54:08:57:65:e3:61:12:3a:8a:ce:65: 0a:e7:d2:78:e6:3f:a4:09:ea:24:9d:04:53:dc:19: 7d:98:e6:55:6f:e4:08:cf:66:04:fd:1e:d5:99:71: ca:85:a2:17:0f:eb:07:7d:cc:d3:38:35:c5:15:7c: 94:68:8f:fa:a2:ff:51:aa:86:da:93:47:d6:fd:89: 3f:59:fe:ca:9b:80:79:e4:52:3b:d7:09:d6:e1:b3: 93:45:81:86:f4:2e:54:7d:05:c0:0a:f1:48:88:12: e0:6f:49:35:f9:0e:55:72:0a:49:33:92:cc:41:9d: ac:84:f8:a0:d2:df:c9:54:77:e3:13:1c:8b:f5:bb: 43:6b:44:12:c7:23:49:24:25:c3:c3:85:d4:31:46: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:F2:5B:2E:3C:7A:F9:6C:B0:DA:66:A7:A1:D1:00:E0:59:EF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/659f45f4-1930-35f3-bd28-8eec0ba978f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:49:8a:8b:0d:7e:60:8b:fd:d1:da:c1:9d:05:49:1d:0a:4d: af:1b:dc:0d:c9:c0:d1:52:22:19:b0:a3:50:0a:0f:3e:e3:8b: 2c:6c:8e:85:13:d5:c6:fe:a3:e5:86:b9:ff:ce:b8:74:e3:11: 79:67:8e:18:b4:e2:5a:0b:4b:e1:29:e3:13:85:94:a2:e5:9e: f4:70:1e:31:5b:8a:ef:2a:72:55:c0:c9:64:3d:a3:58:95:3c: e6:20:b2:f1:90:54:af:3e:be:c0:92:c6:fa:e1:81:36:77:f9: b7:30:29:15:89:65:db:4a:54:cc:60:a2:86:23:76:7f:80:6e: af:ad:35:16:ea:f1:6e:76:79:5f:c8:7d:66:db:d3:cc:75:21: 51:69:82:db:0a:49:96:67:15:83:27:62:91:cd:87:53:57:33: 2c:03:73:59:f3:e8:34:93:0c:ea:89:f4:6c:d9:35:64:2b:06: 27:a9:a3:d6:99:4e:84:87:83:54:4d:e4:9a:2d:6b:9b:b1:2e: 52:cf:b8:0a:f6:29:be:e6:40:c7:93:4b:73:6e:b8:b6:4f:0b: 63:c6:e6:11:ad:7b:58:8d:f4:bd:bc:1b:7a:61:ee:74:71:32: 33:57:d7:e5:a1:07:ce:82:6e:d3:01:51:de:0e:c9:9c:f8:e9: 4f:b8:c5:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FnZJYI6UatxDGqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk ODcwZmJiYTctYTVhNi00NzU0LTg5ZjYtMWM3NzAxMGU2MjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFVj/dSqxykPOl1FRBj+5Jtq1tVQDlHfyIbr mY/RMn9uqXEwhMZofOjypYs7Cfp0RWgD1doeE1PlH9rV/ULHnnxrjeo5hcApVpbc idZUefcJGT9qp7DkOaOYxLFLRm+yj9pUXOx0jxzC5NcNVAhXZeNhEjqKzmUK59J4 5j+kCeoknQRT3Bl9mOZVb+QIz2YE/R7VmXHKhaIXD+sHfczTODXFFXyUaI/6ov9R qobak0fW/Yk/Wf7Km4B55FI71wnW4bOTRYGG9C5UfQXACvFIiBLgb0k1+Q5VcgpJ M5LMQZ2shPig0t/JVHfjExyL9btDa0QSxyNJJCXDw4XUMUZDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeP8lsuPHr5bLDaZqeh0QDgWe95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNjU5ZjQ1ZjQtMTkzMC0z NWYzLWJkMjgtOGVlYzBiYTk3OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlJiosNfmCL/dHawZ0FSR0KTa8b3A3JwNFSIhmwo1AKDz7jiyxsjoUT 1cb+o+WGuf/OuHTjEXlnjhi04loLS+Ep4xOFlKLlnvRwHjFbiu8qclXAyWQ9o1iV POYgsvGQVK8+vsCSxvrhgTZ3+bcwKRWJZdtKVMxgooYjdn+Abq+tNRbq8W52eV/I fWbb08x1IVFpgtsKSZZnFYMnYpHNh1NXMywDc1nz6DSTDOqJ9GzZNWQrBiepo9aZ ToSHg1RN5Jota5uxLlLPuAr2Kb7mQMeTS3NuuLZPC2PG5hGte1iN9L28G3ph7nRx MjNX1+WhB86CbtMBUd4OyZz46U+4xSU= -----END CERTIFICATE-----Generated at Sat Dec 20 18:46:06 2025 by rpki-client