This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa File: 890f82b4-9a88-3384-8b10-1f2bab75f976.roa (raw, json) Hash identifier: AQwL81A1mWCMXwoMe/XYmgEHLfR9skcYNPxvtBuFvqI= Subject key identifier: D8:67:A0:12:E1:59:15:F8:0F:B5:1D:5B:48:DC:BF:D8:23:65:80:80 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C3916423B7DEDAB6873971080 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 396571 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:42:3b:7d:ed:ab:68:73:97:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=7a1aa359-4515-4ebc-88a0-4c3708dd1ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:f7:5c:84:f5:10:56:0f:ec:81:d6:db:36: f6:34:00:1a:57:c6:31:88:14:df:7a:65:ef:6f:52: 5c:7d:2b:1a:57:d5:09:2d:49:de:9c:25:cf:35:43: 5d:64:07:8f:72:70:d4:bf:f7:2e:65:13:21:f3:42: 42:26:03:a7:8a:52:91:1e:6d:70:33:ee:3b:b0:4b: e5:db:e1:22:a2:fc:60:31:3d:b9:4c:34:0e:30:82: 22:41:86:ee:04:74:36:e1:b6:f2:fb:37:4f:d3:57: 59:22:ba:e8:dd:15:4a:8f:1b:aa:65:2f:ef:15:9f: 16:c7:9d:08:8c:57:c4:77:2d:e2:37:d5:a6:b7:16: 61:1e:ec:79:94:c9:cf:7a:9c:3c:38:56:a4:4e:44: 79:ee:bc:c1:83:2a:9f:8a:da:ca:9f:ce:11:55:c3: d2:22:28:3b:dc:ec:b3:a4:fe:12:64:48:f4:be:cf: 01:73:5e:bf:9a:00:ba:df:fc:3e:7c:26:22:62:72: 34:0c:a7:2e:6f:93:5f:8b:91:56:ea:9f:83:33:6f: 88:0e:f8:c7:f7:34:e8:56:78:41:20:bb:14:c1:35: de:5f:93:3e:11:b5:d3:15:00:c2:70:47:fe:66:24: 30:70:78:7b:f8:24:75:64:d6:19:a8:73:18:20:1a: 96:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:67:A0:12:E1:59:15:F8:0F:B5:1D:5B:48:DC:BF:D8:23:65:80:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/890f82b4-9a88-3384-8b10-1f2bab75f976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:bf:ea:51:f8:27:83:61:71:ce:df:7a:ee:17:3f:d1:33:02: 2f:ee:b8:88:e1:79:81:37:26:38:49:7f:5b:d1:97:67:6f:2c: f0:be:0b:81:d9:70:37:d7:40:0b:dd:5e:e9:e6:4c:44:e3:f0: e5:b5:e6:5e:40:e9:a1:cf:aa:79:8d:b3:b3:c4:d0:e8:a1:7f: 8d:85:76:30:29:ec:a0:ab:a1:ed:a8:22:fb:b9:12:4a:7f:b1: 9e:7b:4d:f6:10:ee:14:fb:16:89:3c:ac:2e:7e:fc:20:ec:87: b6:cb:d5:7f:ef:42:07:6c:b2:cb:4c:57:63:c1:3b:79:7d:9f: 75:5c:11:2d:9b:06:54:71:4b:5d:13:19:0d:02:d8:cd:4f:f2: b4:de:c0:94:47:50:1f:e8:45:8b:16:23:6f:bf:cf:0d:a6:b5: 12:b1:2d:0f:5b:92:f7:c0:29:fb:7c:ec:68:b0:15:00:ac:67: 7f:7d:eb:62:3c:ce:8b:69:e8:bb:92:de:14:9c:5e:11:76:7c: ad:e4:4d:60:35:03:49:a2:60:7d:dc:57:42:50:6d:18:82:0f: b7:ce:5d:63:dd:50:78:ce:ad:30:17:53:6f:e6:4e:fb:0f:bb: 8f:d9:b5:c3:87:76:ef:11:26:03:4e:42:02:f9:6e:1a:b7:b0: d4:2e:ba:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FkI7fe2raHOXEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk N2ExYWEzNTktNDUxNS00ZWJjLTg4YTAtNGMzNzA4ZGQxYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwb3XIT1EFYP7IHW2zb2NAAaV8YxiBTfemXv b1JcfSsaV9UJLUnenCXPNUNdZAePcnDUv/cuZRMh80JCJgOnilKRHm1wM+47sEvl 2+EiovxgMT25TDQOMIIiQYbuBHQ24bby+zdP01dZIrro3RVKjxuqZS/vFZ8Wx50I jFfEdy3iN9WmtxZhHux5lMnPepw8OFakTkR57rzBgyqfitrKn84RVcPSIig73Oyz pP4SZEj0vs8Bc16/mgC63/w+fCYiYnI0DKcub5Nfi5FW6p+DM2+IDvjH9zToVnhB ILsUwTXeX5M+EbXTFQDCcEf+ZiQwcHh7+CR1ZNYZqHMYIBqWIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhnoBLhWRX4D7UdW0jcv9gjZYCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvODkwZjgyYjQtOWE4OC0z Mzg0LThiMTAtMWYyYmFiNzVmOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW/6lH4J4Nhcc7feu4XP9EzAi/uuIjheYE3JjhJf1vRl2dvLPC+C4HZ cDfXQAvdXunmTETj8OW15l5A6aHPqnmNs7PE0Oihf42FdjAp7KCroe2oIvu5Ekp/ sZ57TfYQ7hT7Fok8rC5+/CDsh7bL1X/vQgdssstMV2PBO3l9n3VcES2bBlRxS10T GQ0C2M1P8rTewJRHUB/oRYsWI2+/zw2mtRKxLQ9bkvfAKft87GiwFQCsZ39962I8 zotp6LuS3hScXhF2fK3kTWA1A0miYH3cV0JQbRiCD7fOXWPdUHjOrTAXU2/mTvsP u4/ZtcOHdu8RJgNOQgL5bhq3sNQuulA= -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:30 2025 by rpki-client