This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa File: f150fec7-3078-3cd8-8458-add28adfb037.roa (raw, json) Hash identifier: bnzzaMnYuFM4Gms/Jkf3i3xodWOeO2Y2R4hh3l761PQ= Subject key identifier: 8F:FA:10:85:67:C7:61:E2:4A:94:FB:21:D1:31:08:3A:B1:4E:C7:F6 Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C391652924E27F3D73C3DEE20 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa Signing time: Thu 18 Dec 2025 02:00:31 +0000 ROA not before: Thu 18 Dec 2025 02:00:31 +0000 ROA not after: Wed 18 Mar 2026 01:00:31 +0000 asID: 396582 IP address blocks: 198.41.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:52:92:4e:27:f3:d7:3c:3d:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 18 02:00:31 2025 GMT Not After : Mar 18 01:00:31 2026 GMT Subject: CN=d9eb89c4-5c20-436b-89f8-b00b43562699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:a8:cf:f7:dd:55:5e:fb:79:13:8f:56:19: 95:0e:29:77:48:1e:9f:dc:23:47:87:12:8b:b6:4c: 55:aa:d6:cb:76:f7:a7:4d:cc:ea:e4:64:21:06:9d: 22:ae:2b:b1:c7:95:af:7f:8c:13:a6:4f:8e:3b:22: 71:b2:63:ab:da:b6:a6:1d:63:1b:4c:50:08:a8:0e: 35:82:c2:01:fa:dc:b5:12:a0:a7:3c:b9:e6:3b:4c: 89:78:4a:e2:f7:ea:a7:42:49:82:c4:d6:b6:04:c2: a1:13:91:44:08:e4:94:c8:cf:c5:df:d5:b0:a7:7c: 72:8f:19:ab:22:09:a6:52:80:13:fb:81:5f:ec:65: 1e:98:56:a7:53:70:0b:09:15:0d:b9:11:fe:6b:00: a9:f7:3a:d5:c8:a6:17:6e:d4:83:b5:35:08:e8:c9: bd:22:a3:e5:ae:a6:71:f4:30:cf:cf:11:9f:5c:9c: 28:16:c0:92:69:f3:e4:16:e8:d0:33:00:16:15:54: 6c:b0:87:01:88:a6:54:e1:fe:7c:c3:dc:5f:7e:b4: 44:70:63:f4:92:69:6d:eb:88:ee:57:f8:09:5f:75: 03:91:2b:58:9e:5d:61:27:e5:df:53:15:30:99:0f: dc:58:7d:ef:d6:71:68:5c:77:e6:21:f9:e6:13:14: a0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FA:10:85:67:C7:61:E2:4A:94:FB:21:D1:31:08:3A:B1:4E:C7:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/f150fec7-3078-3cd8-8458-add28adfb037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bd:d8:0c:ef:03:bc:c2:be:a6:77:83:f9:86:53:03:4e:b6: dc:33:39:62:a8:6d:51:f2:1c:a0:0e:7a:6b:6c:53:f8:73:b7: 12:a7:ae:8e:51:d1:c7:7b:38:ce:ae:40:3d:3c:2d:1d:14:01: bc:46:0c:74:16:9c:b3:5f:38:8c:6b:2e:7e:d3:bc:1e:cc:fd: 8a:d4:37:fe:fe:d9:bf:a2:b4:bf:3d:40:6a:b4:60:3a:b4:3b: 31:6f:de:30:1c:2c:93:cb:6a:9c:82:19:bb:89:c1:70:c9:d6: c5:cb:12:26:5a:95:c7:1a:2c:4a:c0:43:d8:95:67:10:27:80: fd:ac:4b:6a:b8:5c:1b:ff:3b:55:9f:47:3c:6a:87:c4:3e:de: e0:f7:bf:34:81:da:41:ac:e7:ea:38:00:df:71:00:93:7c:40: bf:d6:ee:cf:54:31:a9:f7:d3:ab:28:fd:b5:d0:49:40:30:2e: ed:1c:83:7a:d2:54:4d:f2:c9:76:c8:01:d8:0a:dd:32:c1:21: bd:cd:3d:f3:23:61:65:d2:f3:d8:9b:7d:50:19:ad:23:e2:8f: 84:32:6a:f2:fc:82:8a:28:07:5a:98:c6:51:28:00:c8:53:77: 48:73:20:3a:d1:ac:6f:e2:c5:70:74:a7:0d:8d:b9:9d:e9:ca: 52:33:06:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw5FlKSTifz1zw97iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxODAyMDAzMVoXDTI2MDMxODAxMDAzMVowLzEtMCsGA1UEAxMk ZDllYjg5YzQtNWMyMC00MzZiLTg5ZjgtYjAwYjQzNTYyNjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE+oz/fdVV77eROPVhmVDil3SB6f3CNHhxKL tkxVqtbLdvenTczq5GQhBp0iriuxx5Wvf4wTpk+OOyJxsmOr2ramHWMbTFAIqA41 gsIB+ty1EqCnPLnmO0yJeEri9+qnQkmCxNa2BMKhE5FECOSUyM/F39Wwp3xyjxmr IgmmUoAT+4Ff7GUemFanU3ALCRUNuRH+awCp9zrVyKYXbtSDtTUI6Mm9IqPlrqZx 9DDPzxGfXJwoFsCSafPkFujQMwAWFVRssIcBiKZU4f58w9xffrREcGP0kmlt64ju V/gJX3UDkStYnl1hJ+XfUxUwmQ/cWH3v1nFoXHfmIfnmExSgfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/6EIVnx2HiSpT7IdExCDqxTsf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZjE1MGZlYzctMzA3OC0z Y2Q4LTg0NTgtYWRkMjhhZGZiMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADG92AzvA7zCvqZ3g/mGUwNOttwzOWKobVHyHKAOemtsU/hztxKnro5R 0cd7OM6uQD08LR0UAbxGDHQWnLNfOIxrLn7TvB7M/YrUN/7+2b+itL89QGq0YDq0 OzFv3jAcLJPLapyCGbuJwXDJ1sXLEiZalccaLErAQ9iVZxAngP2sS2q4XBv/O1Wf Rzxqh8Q+3uD3vzSB2kGs5+o4AN9xAJN8QL/W7s9UMan306so/bXQSUAwLu0cg3rS VE3yyXbIAdgK3TLBIb3NPfMjYWXS89ibfVAZrSPij4QyavL8goooB1qYxlEoAMhT d0hzIDrRrG/ixXB0pw2NuZ3pylIzBmA= -----END CERTIFICATE-----Generated at Sat Dec 20 21:46:17 2025 by rpki-client