This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa File: 85f98e65-2751-3810-a444-50aba1a6735e.roa (raw, json) Hash identifier: RThMezPKpq8tSfc9+sm56XTZYI/POtSuA5WAsd4+c8Q= Subject key identifier: D3:DF:7C:69:0A:F1:A8:B2:73:02:D3:EF:54:66:C3:DB:F5:14:70:87 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584C1E90E78004D230615DC48200 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa Signing time: Mon 08 Dec 2025 14:00:38 +0000 ROA not before: Mon 08 Dec 2025 14:00:38 +0000 ROA not after: Sun 08 Mar 2026 13:00:38 +0000 asID: 62468 IP address blocks: 107.151.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:90:e7:80:04:d2:30:61:5d:c4:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Dec 8 14:00:38 2025 GMT Not After : Mar 8 13:00:38 2026 GMT Subject: CN=507631a4-ae5e-401a-93a3-220bb2cf7910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c0:fd:c5:0c:1e:27:7a:87:61:23:68:ad:5c: 0d:aa:5b:54:31:ab:9d:d3:f3:61:cc:1e:18:9d:06: 93:50:92:f3:5e:09:31:2d:1b:51:a1:27:e7:c9:15: 8e:d6:6a:83:a7:cc:99:39:ab:af:ab:64:c1:01:81: 32:f9:85:ed:27:d4:c2:cc:68:9a:e8:59:b8:22:86: 6d:0f:21:e5:b9:50:74:11:52:b3:c7:b2:56:ad:cf: 1b:76:14:6d:9a:46:24:5b:66:46:09:11:54:d4:75: 9c:12:ac:2d:fe:9d:44:e1:13:7e:94:77:b7:8a:8d: 3d:44:21:7f:8c:d7:b5:95:09:ea:da:87:47:ef:67: 4c:4a:ce:34:3d:65:c1:c1:aa:23:ab:3c:23:ee:40: 24:1d:59:43:6f:93:ad:26:ee:cb:e0:b2:79:64:f8: 75:02:28:f6:de:07:cc:99:c8:6a:11:80:c2:91:9e: a2:8e:da:bd:9f:55:7c:61:e3:68:8c:4d:5d:5c:7c: 77:be:0e:55:73:d3:ba:1a:3a:c4:4e:4b:9b:b4:2a: 6d:69:9f:d7:85:79:28:b9:ba:92:cb:c5:2f:f9:47: 54:f5:68:55:31:7d:30:de:d4:46:8b:d7:4d:a2:b0: 43:ff:3e:a6:45:c7:72:a1:bf:bb:e4:c5:f3:ee:b3: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DF:7C:69:0A:F1:A8:B2:73:02:D3:EF:54:66:C3:DB:F5:14:70:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85f98e65-2751-3810-a444-50aba1a6735e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6c:f7:f1:17:f1:98:01:5b:ae:d0:bf:ef:22:20:b0:48:4f: a7:ef:2a:de:b4:48:c4:c6:06:d0:da:2f:f4:5c:f9:6c:c8:37: 35:60:76:db:42:a5:5f:ae:19:4f:f2:c0:35:1a:6e:4a:2c:93: fb:d0:e4:50:52:80:df:1a:4a:07:73:2d:61:95:cb:6f:58:e1: 70:22:b9:de:9d:64:36:10:18:86:ab:7a:0f:b2:bb:a4:aa:ad: 67:87:25:e0:27:db:d9:e0:24:0a:0f:55:ae:59:89:2b:a4:96: 62:75:ce:5c:7f:3b:0c:1e:0d:7d:d6:e0:52:e0:48:08:74:a1: 47:0b:dd:d7:73:e8:c1:6f:68:2e:9a:d7:be:56:43:e7:97:4c: 9f:af:cc:cc:55:5a:1d:8b:14:34:72:ce:dd:78:ab:30:2f:99: ce:f2:ad:c7:a8:33:35:ab:f0:54:59:c1:ea:68:21:12:ab:08: 30:57:f3:b6:fa:2f:b4:da:71:e8:ee:e9:fb:dc:89:91:91:4e: b9:4e:96:5f:1d:94:f2:2a:ed:22:a2:50:0b:1f:25:64:14:d9: 89:09:e4:9f:8f:c2:0f:fc:37:22:0d:27:ab:53:09:09:ab:2a: 51:ac:23:3f:53:e7:79:4d:b4:09:ed:1b:5e:ba:54:70:80:fc: f2:f7:76:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwekOeABNIwYV3EggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTIwODE0MDAzOFoXDTI2MDMwODEzMDAzOFowLzEtMCsGA1UEAxMk NTA3NjMxYTQtYWU1ZS00MDFhLTkzYTMtMjIwYmIyY2Y3OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8D9xQweJ3qHYSNorVwNqltUMaud0/NhzB4Y nQaTUJLzXgkxLRtRoSfnyRWO1mqDp8yZOauvq2TBAYEy+YXtJ9TCzGia6Fm4IoZt DyHluVB0EVKzx7JWrc8bdhRtmkYkW2ZGCRFU1HWcEqwt/p1E4RN+lHe3io09RCF/ jNe1lQnq2odH72dMSs40PWXBwaojqzwj7kAkHVlDb5OtJu7L4LJ5ZPh1Aij23gfM mchqEYDCkZ6ijtq9n1V8YeNojE1dXHx3vg5Vc9O6GjrETkubtCptaZ/XhXkoubqS y8Uv+UdU9WhVMX0w3tRGi9dNorBD/z6mRcdyob+75MXz7rMqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPffGkK8aiycwLT71Rmw9v1FHCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODVmOThlNjUtMjc1MS0z ODEwLWE0NDQtNTBhYmExYTY3MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5fSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAts9/EX8ZgBW67Qv+8iILBIT6fvKt60SMTGBtDaL/Rc+WzINzVgdttC pV+uGU/ywDUabkosk/vQ5FBSgN8aSgdzLWGVy29Y4XAiud6dZDYQGIareg+yu6Sq rWeHJeAn29ngJAoPVa5ZiSuklmJ1zlx/OwweDX3W4FLgSAh0oUcL3ddz6MFvaC6a 175WQ+eXTJ+vzMxVWh2LFDRyzt14qzAvmc7yrceoMzWr8FRZwepoIRKrCDBX87b6 L7Taceju6fvciZGRTrlOll8dlPIq7SKiUAsfJWQU2YkJ5J+Pwg/8NyINJ6tTCQmr KlGsIz9T53lNtAntG166VHCA/PL3dvM= -----END CERTIFICATE-----Generated at Sat Dec 20 05:15:21 2025 by rpki-client