This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa File: c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa (raw, json) Hash identifier: 5iTZWCD5qQLF44IhV8709cdIuniinBNUn8/CfgzDERM= Subject key identifier: 9D:44:B2:5D:32:1C:39:3F:A7:9B:24:00:85:7F:4B:51:5C:F6:58:F0 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C39164226E20813DDCBD03000 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 20172 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:42:26:e2:08:13:dd:cb:d0:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=0455552b-bd83-4f89-b042-5d011fb65445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:92:53:59:7e:42:80:f9:5f:27:b4:5d:d9:2c: 46:1a:93:73:3b:06:a5:30:3a:5c:44:82:a1:4e:87: 8e:65:77:0e:38:f6:30:be:0b:59:1c:42:6f:93:43: 97:9a:2f:2b:0c:42:23:70:77:8a:dd:e1:1e:c6:a9: b6:11:55:89:8c:b2:79:af:f6:ac:b2:13:eb:0c:23: ef:0c:a7:b6:45:63:19:d9:a3:d5:cc:2b:86:70:e0: d7:fd:a1:1f:09:7f:15:be:e4:fc:0a:ef:57:b8:af: 12:fe:18:96:83:f5:38:3a:30:c7:a5:a9:52:56:0a: 06:d4:f8:d3:7e:35:7f:7d:4a:8f:a0:06:77:9d:10: 8b:3a:70:65:f9:33:06:53:b6:97:21:7c:06:b2:04: 72:07:6a:3e:20:ee:9c:fb:19:eb:d2:94:ba:1c:98: db:81:ed:c4:8a:a3:24:56:95:32:dd:e0:48:8c:11: 5b:16:47:03:94:ed:2a:8c:c9:29:67:02:43:c3:2b: 89:22:82:2d:96:cc:15:d1:fd:e5:88:65:2e:14:f4: 89:7d:30:ac:4e:a5:db:cd:fd:ef:6b:e7:52:57:1c: 58:6e:50:19:a3:ed:47:54:f7:7c:a0:a7:69:1f:5b: cc:6a:5e:8b:36:db:cd:7d:fd:ba:d7:62:cc:88:55: 0b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:44:B2:5D:32:1C:39:3F:A7:9B:24:00:85:7F:4B:51:5C:F6:58:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/c67b084b-5f8a-3a4f-b2ab-49180e621a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:15:6c:7d:f2:80:17:19:ef:bb:0a:ee:79:58:1e:9a:f0:e3: db:b2:c6:97:07:d8:8f:90:9e:1d:d6:a5:47:a3:c1:ef:ab:5f: f2:d1:4e:a3:a9:4b:7b:3d:86:dc:78:84:b4:7e:3e:e7:7d:e3: db:ad:ee:69:0c:df:5c:fa:45:0e:a1:7b:d4:3f:66:4f:15:2e: 9b:fb:02:eb:b7:23:78:9f:7e:f4:f7:6c:b5:98:97:48:df:4a: 50:29:03:8f:b5:0f:2c:80:d0:58:7b:fa:73:dc:72:52:fc:47: 56:58:35:21:f5:58:df:80:1e:fe:0a:f5:4a:80:eb:b2:33:66: f5:aa:3a:9b:a4:fc:a6:18:1a:96:33:cf:98:9c:71:d9:c6:3f: 91:a3:2b:73:d3:2f:09:9d:3e:8c:3b:03:fd:e3:b4:ac:9f:33: d8:36:ba:dd:bd:83:21:02:82:2e:3a:87:31:97:dc:ef:dd:29: 28:8c:4d:cb:ff:1d:d8:36:6c:ee:d7:a6:58:cf:67:b3:a3:10: 2e:57:c6:e2:e8:a2:b8:23:e1:20:4e:87:4c:04:88:0a:c8:12: 98:2c:4d:61:2e:4e:f5:d0:57:47:f3:f2:56:6d:29:a7:db:78: 3e:87:70:6e:b9:08:71:cb:d5:75:ae:42:89:d7:e4:50:79:2d: 21:90:2d:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FkIm4ggT3cvQMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MDQ1NTU1MmItYmQ4My00Zjg5LWIwNDItNWQwMTFmYjY1NDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJJTWX5CgPlfJ7Rd2SxGGpNzOwalMDpcRIKh ToeOZXcOOPYwvgtZHEJvk0OXmi8rDEIjcHeK3eEexqm2EVWJjLJ5r/asshPrDCPv DKe2RWMZ2aPVzCuGcODX/aEfCX8VvuT8Cu9XuK8S/hiWg/U4OjDHpalSVgoG1PjT fjV/fUqPoAZ3nRCLOnBl+TMGU7aXIXwGsgRyB2o+IO6c+xnr0pS6HJjbge3EiqMk VpUy3eBIjBFbFkcDlO0qjMkpZwJDwyuJIoItlswV0f3liGUuFPSJfTCsTqXbzf3v a+dSVxxYblAZo+1HVPd8oKdpH1vMal6LNtvNff2612LMiFULKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1Esl0yHDk/p5skAIV/S1Fc9ljwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYzY3YjA4NGItNWY4YS0z YTRmLWIyYWItNDkxODBlNjIxYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwVbH3ygBcZ77sK7nlYHprw49uyxpcH2I+Qnh3WpUejwe+rX/LRTqOp S3s9htx4hLR+Pud949ut7mkM31z6RQ6he9Q/Zk8VLpv7Auu3I3iffvT3bLWYl0jf SlApA4+1DyyA0Fh7+nPcclL8R1ZYNSH1WN+AHv4K9UqA67IzZvWqOpuk/KYYGpYz z5iccdnGP5GjK3PTLwmdPow7A/3jtKyfM9g2ut29gyECgi46hzGX3O/dKSiMTcv/ Hdg2bO7XpljPZ7OjEC5XxuLoorgj4SBOh0wEiArIEpgsTWEuTvXQV0fz8lZtKafb eD6HcG65CHHL1XWuQonX5FB5LSGQLRQ= -----END CERTIFICATE-----Generated at Sat Dec 20 02:41:15 2025 by rpki-client