This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa File: 84a611c4-8da6-3344-b367-ecd628352675.roa (raw, json) Hash identifier: uhXc2KAKsUpparCCsjtkk+/IqzdkbrirSC5NBuTGadg= Subject key identifier: 15:33:44:3C:1B:49:1A:07:AC:23:0B:93:E6:5C:7D:68:52:FE:C1:21 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C383F04B556F5A5F42EC7C400 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa Signing time: Wed 17 Dec 2025 18:46:53 +0000 ROA not before: Wed 17 Dec 2025 18:46:53 +0000 ROA not after: Tue 17 Mar 2026 17:46:53 +0000 asID: 150161 IP address blocks: 38.175.0.0/19 maxlen: 24 149.71.176.0/20 maxlen: 24 154.40.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:38:3f:04:b5:56:f5:a5:f4:2e:c7:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 17 18:46:53 2025 GMT Not After : Mar 17 17:46:53 2026 GMT Subject: CN=dfbc65a3-454c-4e56-84e7-29ce1e90adde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:e8:1d:9e:c0:0e:a8:c8:3e:e0:7b:95:b5: 16:c5:d2:66:c2:cc:5b:dc:53:05:8d:cb:17:4b:ef: db:ae:30:46:5b:1d:0c:26:89:b6:4a:98:c8:46:31: 43:37:1f:43:9f:6f:7d:14:de:d2:5a:3e:06:9a:a1: 6d:a6:3f:95:ca:fd:ab:5b:d8:fb:cd:ef:b0:af:35: b7:5e:17:a1:aa:a3:ac:eb:c9:8f:63:f0:67:c9:f4: 47:4f:fb:9e:44:54:35:0e:ae:1a:d7:05:bd:2b:20: d7:e0:9d:f6:09:d5:bd:60:8c:18:1f:a2:71:97:28: cf:fc:aa:14:d8:8b:e5:85:03:1d:2c:33:92:72:74: ed:ec:7f:c9:47:99:fb:ba:3d:e0:ec:4b:a1:7b:2d: d4:54:f3:55:38:56:c7:0c:4a:65:d0:5c:b7:00:85: 54:28:eb:47:9c:4d:5f:70:ff:f8:58:fa:33:30:15: a5:cf:e5:6f:62:46:a1:8e:a7:70:4c:fe:77:fa:37: 4e:16:dd:70:77:87:92:b3:b4:f4:6c:dd:e2:dd:e7: 8f:d8:03:73:75:1d:c7:0a:85:12:73:72:10:51:dc: 6a:e3:1f:5b:0a:ca:2c:b2:d7:34:e8:30:13:a8:a3: 39:ed:b9:e9:09:1e:c3:2a:15:4a:4d:76:fb:d5:aa: 0b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:33:44:3C:1B:49:1A:07:AC:23:0B:93:E6:5C:7D:68:52:FE:C1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/84a611c4-8da6-3344-b367-ecd628352675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 38.175.0.0/19 149.71.176.0/20 154.40.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c3:16:c0:f9:6b:b1:15:d9:88:12:0a:1f:8c:d2:0f:24:82: d7:6a:c0:f7:04:11:cd:9f:e2:69:d3:52:57:58:00:fd:47:3e: f4:1a:9b:0b:c0:01:39:c9:c8:02:7b:3f:05:7c:80:6b:d8:93: 09:4c:b9:e0:45:29:6a:fa:96:2b:2d:de:51:38:43:63:c9:25: 9d:e6:c1:b7:ba:b3:9d:c4:08:c8:70:1d:a3:89:7f:4c:95:41: 52:07:e5:cd:9c:10:c1:36:a7:bb:6f:0b:6e:bf:19:19:f2:c4: 2d:c2:55:3c:89:75:3f:53:7c:bb:87:88:4d:97:51:c2:9c:c5: 86:93:ca:a3:af:c2:62:5e:80:98:3a:21:0f:d2:3a:e3:14:72: db:c0:b7:9a:f1:81:16:08:c3:42:35:45:ca:6a:32:c5:bb:fa: 13:b8:82:37:8e:86:61:9f:71:1a:ed:9f:97:ac:6e:2f:62:42: 6b:ab:e1:15:32:8c:96:ab:b3:a9:1d:32:70:fc:65:e8:2b:66: e9:d8:66:91:17:e8:fe:78:46:a6:9f:59:33:34:51:32:d0:ca: 5c:01:ed:9a:8e:28:c1:0a:8c:e9:11:3d:83:58:a5:2b:2a:d4: 54:22:29:4a:4b:07:b9:c0:ed:69:de:3f:4b:4b:c6:8b:e5:9a: 68:9c:b9:ec -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEw4PwS1VvWl9C7HxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIxNzE4NDY1M1oXDTI2MDMxNzE3NDY1M1owLzEtMCsGA1UEAxMk ZGZiYzY1YTMtNDU0Yy00ZTU2LTg0ZTctMjljZTFlOTBhZGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ozoHZ7ADqjIPuB7lbUWxdJmwsxb3FMFjcsX S+/brjBGWx0MJom2SpjIRjFDNx9Dn299FN7SWj4GmqFtpj+Vyv2rW9j7ze+wrzW3 XhehqqOs68mPY/BnyfRHT/ueRFQ1Dq4a1wW9KyDX4J32CdW9YIwYH6JxlyjP/KoU 2IvlhQMdLDOScnTt7H/JR5n7uj3g7Euhey3UVPNVOFbHDEpl0Fy3AIVUKOtHnE1f cP/4WPozMBWlz+VvYkahjqdwTP53+jdOFt1wd4eSs7T0bN3i3eeP2ANzdR3HCoUS c3IQUdxq4x9bCsosstc06DATqKM57bnpCR7DKhVKTXb71aoLBwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBUzRDwbSRoHrCMLk+ZcfWhS/sEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODRhNjExYzQtOGRhNi0z MzQ0LWIzNjctZWNkNjI4MzUyNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFJq8AAwQE lUewAwQEmiiQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA3DFsD5a7EV2YgSCh+M0g8kgtdqwPcEEc2f4mnT UldYAP1HPvQamwvAATnJyAJ7PwV8gGvYkwlMueBFKWr6list3lE4Q2PJJZ3mwbe6 s53ECMhwHaOJf0yVQVIH5c2cEME2p7tvC26/GRnyxC3CVTyJdT9TfLuHiE2XUcKc xYaTyqOvwmJegJg6IQ/SOuMUctvAt5rxgRYIw0I1RcpqMsW7+hO4gjeOhmGfcRrt n5esbi9iQmur4RUyjJars6kdMnD8ZegrZunYZpEX6P54RqafWTM0UTLQylwB7ZqO KMEKjOkRPYNYpSsq1FQiKUpLB7nA7WneP0tLxovlmmicuew= -----END CERTIFICATE-----Generated at Sun Dec 21 05:36:54 2025 by rpki-client