This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41c8016-550a-36e0-9c58-975a757666bc.roa File: a41c8016-550a-36e0-9c58-975a757666bc.roa (raw, json) Hash identifier: JRIHct6gKVYjAtADWCy1FMNoa+lOvgdYfA0gQR2ffKg= Subject key identifier: 2F:2F:DD:06:85:97:69:7F:99:AA:F1:90:8E:E6:8D:D4:7E:88:5C:67 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584C41767DA55DF88B6AF7D3D600 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41c8016-550a-36e0-9c58-975a757666bc.roa Signing time: Sun 21 Dec 2025 02:00:30 +0000 ROA not before: Sun 21 Dec 2025 02:00:30 +0000 ROA not after: Sat 21 Mar 2026 01:00:30 +0000 asID: 393632 IP address blocks: 154.38.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:76:7d:a5:5d:f8:8b:6a:f7:d3:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Mar 21 01:00:30 2026 GMT Subject: CN=3f62acc1-aadc-491c-9d88-cb27dc6e3592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:05:04:4a:27:86:fc:56:0c:9b:87:5d:32:b0: 89:1d:a1:06:de:b3:c6:db:c7:d3:85:0e:0c:2d:ea: bf:dc:11:81:24:d2:72:a3:1b:9e:2e:94:2d:c8:d7: 63:52:d4:47:48:29:a4:5b:db:f1:62:ed:86:8e:47: e0:7b:38:0d:cb:23:b5:28:66:e2:1c:34:e6:a8:3b: 9b:6e:a6:70:d1:05:b9:19:15:72:ea:f8:93:31:22: 14:4b:ad:66:9e:2f:76:04:52:01:aa:ab:08:18:eb: 92:6f:76:80:a8:2e:9e:57:6d:b9:a5:6e:dc:41:72: 4c:54:4b:47:ca:0d:68:9b:5e:71:40:7c:c2:1a:8c: 78:8d:cf:d2:7d:b5:68:b1:7b:03:14:50:fc:23:15: b0:5b:d5:13:9d:be:60:83:70:f9:49:68:a1:ef:08: 15:2b:0b:57:05:f1:a4:ec:e4:c5:3d:53:68:da:35: 70:f0:49:e0:a2:16:db:71:e7:22:b5:1b:6d:1e:63: 2a:07:c9:f5:b7:fd:6a:88:c9:79:22:cf:49:05:58: 14:1c:d1:a0:0f:24:d7:d1:e8:8c:da:4f:e9:9a:f2: 67:d5:7d:04:9a:79:ba:24:a6:5c:56:10:ec:6c:72: 45:b4:c0:ae:fb:4b:cc:06:82:73:e9:9c:c5:ef:02: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2F:DD:06:85:97:69:7F:99:AA:F1:90:8E:E6:8D:D4:7E:88:5C:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/a41c8016-550a-36e0-9c58-975a757666bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.38.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:73:d0:9c:35:a8:52:cf:06:e7:47:86:a2:7e:cb:35:61:16: c1:e1:15:e0:24:3b:c6:21:6b:96:4b:c5:e1:08:36:8d:0c:84: de:ca:61:04:71:dd:02:df:07:42:d2:cd:02:6b:3e:61:80:5e: 7e:47:ab:71:27:bb:44:75:2b:e3:45:12:ed:5d:8a:8c:82:4d: 06:c6:53:f7:42:59:03:0e:20:dd:db:61:8e:03:ce:fa:0c:28: 47:6e:24:cd:c1:e6:90:90:09:81:d8:da:f6:dd:44:ec:9f:8e: 0a:ca:b1:14:55:6f:56:fd:27:c8:4c:b9:b8:39:ce:59:6d:cc: e0:5c:6f:db:4d:8d:50:1b:3b:a7:10:dd:af:8e:34:79:40:86: 1b:de:a2:3a:00:f6:20:b1:11:da:61:51:79:a3:df:f5:66:c5: c7:98:ff:86:d9:b2:42:77:2b:9f:25:cb:78:83:d0:f3:4a:d5: 2c:70:c0:4c:5c:ff:41:f1:68:f2:bf:15:1b:74:53:2e:27:7b: 79:d2:10:5a:57:80:82:8a:dc:d4:fb:49:c3:4a:40:ed:3f:8e: 13:17:38:69:8e:d7:ff:76:92:3f:9a:6d:ef:80:e7:de:53:f1: b8:5f:5c:c1:80:2b:ed:e5:56:a8:e6:84:b3:aa:f4:c9:24:ea: 1c:17:bc:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExBdn2lXfiLavfT1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI1MTIyMTAyMDAzMFoXDTI2MDMyMTAxMDAzMFowLzEtMCsGA1UEAxMk M2Y2MmFjYzEtYWFkYy00OTFjLTlkODgtY2IyN2RjNmUzNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgUESieG/FYMm4ddMrCJHaEG3rPG28fThQ4M Leq/3BGBJNJyoxueLpQtyNdjUtRHSCmkW9vxYu2GjkfgezgNyyO1KGbiHDTmqDub bqZw0QW5GRVy6viTMSIUS61mni92BFIBqqsIGOuSb3aAqC6eV225pW7cQXJMVEtH yg1om15xQHzCGox4jc/SfbVosXsDFFD8IxWwW9UTnb5gg3D5SWih7wgVKwtXBfGk 7OTFPVNo2jVw8EngohbbcecitRttHmMqB8n1t/1qiMl5Is9JBVgUHNGgDyTX0eiM 2k/pmvJn1X0Emnm6JKZcVhDsbHJFtMCu+0vMBoJz6ZzF7wK2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8v3QaFl2l/marxkI7mjdR+iFxnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYTQxYzgwMTYtNTUwYS0z NmUwLTljNTgtOTc1YTc1NzY2NmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmiaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZz0Jw1qFLPBudHhqJ+yzVhFsHhFeAkO8Yha5ZLxeEINo0MhN7KYQRx 3QLfB0LSzQJrPmGAXn5Hq3Enu0R1K+NFEu1dioyCTQbGU/dCWQMOIN3bYY4DzvoM KEduJM3B5pCQCYHY2vbdROyfjgrKsRRVb1b9J8hMubg5zlltzOBcb9tNjVAbO6cQ 3a+ONHlAhhveojoA9iCxEdphUXmj3/VmxceY/4bZskJ3K58ly3iD0PNK1SxwwExc /0HxaPK/FRt0Uy4ne3nSEFpXgIKK3NT7ScNKQO0/jhMXOGmO1/92kj+abe+A595T 8bhfXMGAK+3lVqjmhLOq9Mkk6hwXvDA= -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:29 2025 by rpki-client