This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa File: 2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa (raw, json) Hash identifier: MPWSn/ZT2gKOOpimHq0QUMh0n0d3l/Z0FK9cooCadxg= Subject key identifier: 81:07:66:74:F3:47:C9:A3:C5:1D:C9:39:20:AB:D1:2C:A2:FE:D7:6F Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Certificate serial: 010D0C9F4328584C30B63B6EA699C3F64EC62000 Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa Signing time: Mon 15 Dec 2025 02:00:31 +0000 ROA not before: Mon 15 Dec 2025 02:00:31 +0000 ROA not after: Sun 15 Mar 2026 01:00:31 +0000 asID: 16509 IP address blocks: 152.38.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:30:b6:3b:6e:a6:99:c3:f6:4e:c6:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Validity Not Before: Dec 15 02:00:31 2025 GMT Not After : Mar 15 01:00:31 2026 GMT Subject: CN=c871fba3-16a1-49c3-8e64-d6f4a0775770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:0b:56:7b:b3:a9:96:a7:c5:e3:eb:5f:74: ab:77:47:88:a0:1e:9e:26:4b:dd:20:ed:63:b4:4b: ec:89:5c:c5:ba:5d:d3:f9:8f:fc:5e:4b:c2:8f:98: 49:70:98:21:d1:9b:8c:ef:80:16:d4:33:ba:d0:54: 7e:e3:48:08:73:7e:ea:25:29:fa:15:f9:97:54:da: 01:ba:d7:30:7d:7b:88:e3:9b:e8:67:43:97:55:1f: 87:e9:a7:8a:20:c8:8b:7c:af:aa:80:b8:26:ec:cc: 4d:a0:65:b5:9a:05:3a:d7:aa:7c:d4:26:91:17:6e: 00:cb:bd:0d:32:55:c5:f8:0e:77:37:f7:22:58:52: 56:af:9d:ac:dc:6e:bf:ac:1c:5e:88:1b:1f:92:2a: 05:bf:b4:dd:c2:ad:a3:b6:a7:ab:b6:6b:d8:a3:a4: 60:45:53:d6:38:e8:7a:0f:e0:ff:4a:be:8f:07:82: dc:a5:5e:37:12:83:04:22:a3:73:61:72:ae:c7:44: f0:d3:1b:7e:46:61:03:da:22:d5:a5:d1:07:b7:4c: 8b:8c:98:ed:40:89:e2:8b:1a:b3:87:57:bd:04:c5: 5f:0d:c1:33:d4:ab:47:b2:63:24:22:6b:72:25:40: f2:a2:05:40:71:f7:88:b6:ff:f3:43:e5:95:33:ef: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:07:66:74:F3:47:C9:A3:C5:1D:C9:39:20:AB:D1:2C:A2:FE:D7:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/2b4e6b70-39dd-3fd3-91da-87d4c96c9f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl X509v3 Authority Key Identifier: keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:92:0b:25:fd:cd:6d:22:52:26:f8:eb:d5:bb:da:d1:c9:86: 5f:b5:e1:e9:60:3a:4f:d4:27:13:be:e2:cd:6b:9d:11:18:fe: 89:d3:60:2c:40:d0:6f:c9:05:cc:fe:47:ad:ce:53:be:83:1e: f7:61:ff:dd:d0:de:9a:b6:52:a9:a8:8d:8b:c1:dc:8f:e6:22: ed:e4:45:1d:86:e7:d5:9a:85:fa:12:32:da:ac:0d:e3:b5:72: c8:ee:58:16:87:a7:22:2a:d6:c4:43:02:9c:6d:c2:4f:17:a2: d4:5a:75:82:2d:78:c1:db:73:74:76:11:fc:3d:d1:8f:d9:b0: 0b:b3:f2:f1:7e:50:df:e8:6f:1d:8e:70:ef:03:60:38:1f:58: 3e:63:76:bc:8d:34:49:74:60:34:58:0a:60:c9:ce:dd:47:e4: 5d:a1:78:c7:25:c3:dd:f2:8f:b3:15:33:31:50:f5:93:1c:aa: f0:87:e7:f2:08:8e:76:89:49:6e:c3:1f:15:24:b6:06:90:e7: 42:d2:7d:e2:bf:fc:b3:06:4f:72:36:24:83:cb:34:5d:6c:c3: 11:32:98:5e:d2:2b:66:eb:e4:fd:3d:a9:e7:dd:45:0e:85:68: 38:d1:dc:dd:64:d7:43:e0:d4:20:74:22:1b:0b:9a:4e:78:6e: 02:8b:d8:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwwtjtuppnD9k7GIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2 ZjIyMB4XDTI1MTIxNTAyMDAzMVoXDTI2MDMxNTAxMDAzMVowLzEtMCsGA1UEAxMk Yzg3MWZiYTMtMTZhMS00OWMzLThlNjQtZDZmNGEwNzc1NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNELVnuzqZanxePrX3Srd0eIoB6eJkvdIO1j tEvsiVzFul3T+Y/8XkvCj5hJcJgh0ZuM74AW1DO60FR+40gIc37qJSn6FfmXVNoB utcwfXuI45voZ0OXVR+H6aeKIMiLfK+qgLgm7MxNoGW1mgU616p81CaRF24Ay70N MlXF+A53N/ciWFJWr52s3G6/rBxeiBsfkioFv7Tdwq2jtqertmvYo6RgRVPWOOh6 D+D/Sr6PB4LcpV43EoMEIqNzYXKux0Tw0xt+RmED2iLVpdEHt0yLjJjtQIniixqz h1e9BMVfDcEz1KtHsmMkImtyJUDyogVAcfeItv/zQ+WVM+9YsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEHZnTzR8mjxR3JOSCr0Syi/tdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMjEx NDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMmI0ZTZiNzAtMzlkZC0z ZmQzLTkxZGEtODdkNGM5NmM5ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDIxMTQ5Y2EtYmZlYi00MDljLWFk YmItZTg2ZTc1MWI2ZjIyL2QyMTE0OWNhLWJmZWItNDA5Yy1hZGJiLWU4NmU3NTFi NmYyMi5jcmwwHwYDVR0jBBgwFoAUQ+v3rKxFVwtEYCni9TRQ59KCMP8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZl NzUxYjZmMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGSCyX9zW0iUib469W72tHJhl+14elgOk/UJxO+4s1rnREY/onTYCxA 0G/JBcz+R63OU76DHvdh/93Q3pq2UqmojYvB3I/mIu3kRR2G59WahfoSMtqsDeO1 csjuWBaHpyIq1sRDApxtwk8XotRadYIteMHbc3R2Efw90Y/ZsAuz8vF+UN/obx2O cO8DYDgfWD5jdryNNEl0YDRYCmDJzt1H5F2heMclw93yj7MVMzFQ9ZMcqvCH5/II jnaJSW7DHxUktgaQ50LSfeK//LMGT3I2JIPLNF1swxEymF7SK2br5P09qefdRQ6F aDjR3N1k10Pg1CB0IhsLmk54bgKL2Jo= -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:19 2025 by rpki-client