This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa File: db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa (raw, json) Hash identifier: swNqJX5LbONwIIK7R/huMjXl0wDXfJ6m0+OOc3hUojc= Subject key identifier: 3A:6F:55:24:EB:30:BD:20:AB:FA:F1:DE:B4:4E:EB:FD:A0:35:71:97 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C391651B26A9E525C1717CC40 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 396596 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:51:b2:6a:9e:52:5c:17:17:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=316945d8-b76e-49ab-aa91-a811bb0f2264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:f8:ce:35:16:f9:b9:8e:1d:4c:02:a9:2e: 4f:0e:7a:f3:15:a6:ad:37:a3:13:fd:d3:93:66:b8: dd:99:c8:a3:20:0c:ce:51:a8:75:c9:cc:e9:b8:f6: 72:c9:19:2b:cb:41:2f:91:c4:fb:37:b9:08:c0:d4: 59:c0:d8:7c:78:cd:57:04:f2:98:5d:04:b2:f5:00: 29:f4:25:47:70:41:c0:6f:ef:1c:42:39:42:5a:bc: e7:0c:d3:ec:d6:57:3c:b7:33:c0:93:2c:0b:f3:fa: 14:68:4c:21:2a:b6:d8:28:76:b4:83:3f:d6:ab:20: 21:0a:44:ac:1a:d0:31:78:88:47:cc:ee:b3:ad:b4: d8:ae:a3:9f:ae:1a:d1:10:b1:61:4b:be:24:06:da: 3f:5d:55:e5:8a:3d:13:c6:b1:df:58:8c:33:59:f8: 68:2f:c8:dd:d4:78:6b:8b:e7:e1:80:6f:94:da:0d: a8:62:b4:bc:0a:53:42:f2:7d:09:63:f1:b1:bb:42: 30:e0:0e:51:6d:86:d6:24:74:bc:32:1b:2f:ee:53: 07:98:ad:a8:f0:5c:14:ee:70:2e:b9:cd:4e:c1:09: 52:fc:92:33:f7:27:6c:76:1d:ef:e7:32:03:2b:60: da:70:af:48:8f:da:f8:47:d1:0b:0c:5b:16:45:38: ee:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6F:55:24:EB:30:BD:20:AB:FA:F1:DE:B4:4E:EB:FD:A0:35:71:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/db4907d4-5102-3d7b-ae8d-36027fe4ea0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:65:95:f7:b9:fc:54:ab:1b:13:a6:3e:53:71:92:50:7f:48: a4:44:ab:2d:27:13:20:ad:3f:e9:14:aa:05:96:e4:cc:08:7d: dd:df:71:2d:a2:85:c3:19:b3:e9:d3:c0:fb:f1:94:d8:b3:dd: 5f:e3:a7:84:d3:e2:08:60:93:1d:45:a1:60:64:41:bd:a5:79: 62:c4:78:8f:09:81:1d:00:ec:4c:77:ee:51:ae:43:bb:55:f5: 3e:f8:17:d8:eb:62:ea:9d:21:e2:d5:66:02:8f:a1:1b:88:80: 45:f4:9e:4f:dc:05:eb:9d:98:17:7f:67:c8:ab:fb:ab:ca:cc: 8e:9d:72:80:45:cf:cf:0d:89:b5:53:1c:b8:38:3e:9c:ad:8d: eb:5f:8e:f2:d4:4f:41:32:bc:25:03:d5:04:f4:8a:cb:22:75: 5b:56:f8:5e:18:bd:18:79:44:6c:41:f0:ef:2b:c1:70:ff:83: 71:d7:af:03:2d:7a:36:c6:f4:db:9e:82:27:8f:de:a9:a6:72: f7:57:0e:2d:a5:b1:cb:86:77:29:e6:94:e2:db:68:5f:09:3c: 83:ba:29:f4:8f:f5:48:57:b0:78:db:d1:12:f1:5c:b0:29:1e: 06:b2:8a:02:ba:91:c3:6d:ec:28:94:1f:b0:be:f2:c6:ad:58: 74:51:97:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FlGyap5SXBcXzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk MzE2OTQ1ZDgtYjc2ZS00OWFiLWFhOTEtYTgxMWJiMGYyMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fn4zjUW+bmOHUwCqS5PDnrzFaatN6MT/dOT ZrjdmcijIAzOUah1yczpuPZyyRkry0EvkcT7N7kIwNRZwNh8eM1XBPKYXQSy9QAp 9CVHcEHAb+8cQjlCWrznDNPs1lc8tzPAkywL8/oUaEwhKrbYKHa0gz/WqyAhCkSs GtAxeIhHzO6zrbTYrqOfrhrRELFhS74kBto/XVXlij0TxrHfWIwzWfhoL8jd1Hhr i+fhgG+U2g2oYrS8ClNC8n0JY/Gxu0Iw4A5RbYbWJHS8Mhsv7lMHmK2o8FwU7nAu uc1OwQlS/JIz9ydsdh3v5zIDK2DacK9Ij9r4R9ELDFsWRTjuGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpvVSTrML0gq/rx3rRO6/2gNXGXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGI0OTA3ZDQtNTEwMi0z ZDdiLWFlOGQtMzYwMjdmZTRlYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVllfe5/FSrGxOmPlNxklB/SKREqy0nEyCtP+kUqgWW5MwIfd3fcS2i hcMZs+nTwPvxlNiz3V/jp4TT4ghgkx1FoWBkQb2leWLEeI8JgR0A7Ex37lGuQ7tV 9T74F9jrYuqdIeLVZgKPoRuIgEX0nk/cBeudmBd/Z8ir+6vKzI6dcoBFz88NibVT HLg4PpytjetfjvLUT0EyvCUD1QT0issidVtW+F4YvRh5RGxB8O8rwXD/g3HXrwMt ejbG9NuegieP3qmmcvdXDi2lscuGdynmlOLbaF8JPIO6KfSP9UhXsHjb0RLxXLAp HgayigK6kcNt7CiUH7C+8satWHRRl4A= -----END CERTIFICATE-----Generated at Sat Dec 20 20:08:26 2025 by rpki-client