This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa File: fa58f018-8968-3e9d-b999-74498631b831.roa (raw, json) Hash identifier: xtghWZGjnm0r8g0wq/BuUminl2WRzfOyam0E9I/FyKI= Subject key identifier: 22:D8:1A:04:23:83:99:65:7D:A7:73:C4:A0:59:35:FF:B2:FF:62:EF Certificate issuer: /CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Certificate serial: 010D0C9F4328584C24269169E62BA7A7B6E9C280 Authority key identifier: D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa Signing time: Wed 10 Dec 2025 14:00:38 +0000 ROA not before: Wed 10 Dec 2025 14:00:38 +0000 ROA not after: Tue 10 Mar 2026 13:00:38 +0000 asID: 22686 IP address blocks: 142.132.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:24:26:91:69:e6:2b:a7:a7:b6:e9:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc3a2d18-b171-46fa-8693-0080d77f0579 Validity Not Before: Dec 10 14:00:38 2025 GMT Not After : Mar 10 13:00:38 2026 GMT Subject: CN=1ea98813-5491-4621-8c49-d33b43374660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:b6:ce:2c:86:fd:47:d0:d1:c4:04:a3:4b: 45:fb:81:1e:e9:a6:3f:07:d8:ef:50:85:15:7f:a6: 0b:38:8f:f4:9f:8c:3d:88:88:34:d3:c5:82:50:32: 92:41:99:57:58:c3:07:f9:73:92:d4:bd:6c:87:de: a4:ed:84:b5:df:40:88:57:47:d1:98:06:b5:4a:0a: 29:47:fe:c1:e0:25:b4:ba:38:47:f0:f7:49:64:11: 3a:c2:bc:6a:31:14:2e:42:60:a3:9f:a6:64:04:d4: 74:3a:83:cc:0e:8f:fe:79:d6:a8:e3:8f:87:07:0b: 39:3c:07:ee:de:80:7b:17:52:0a:c0:ea:80:d4:a2: c4:e4:77:e5:cb:88:3b:ea:bb:07:e8:1e:08:2b:e6: c2:71:ca:d5:8d:89:68:6e:bd:37:c4:21:3a:29:6f: 16:2d:55:6d:8a:04:48:51:76:11:a2:28:1d:8c:03: 63:71:0a:f8:31:9a:52:5b:37:3a:08:c5:b8:1c:ee: 9a:34:2a:ca:d7:48:95:af:da:76:b1:dd:73:66:87: 7f:8b:5a:e4:12:c9:82:6e:b2:16:62:8b:e8:dc:f8: 87:e4:6c:8d:46:f4:8f:b5:7f:80:82:c5:2b:80:82: 48:c4:8b:3a:99:f9:b8:58:08:65:73:98:b2:75:6c: c5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:1A:04:23:83:99:65:7D:A7:73:C4:A0:59:35:FF:B2:FF:62:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/fa58f018-8968-3e9d-b999-74498631b831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579/dc3a2d18-b171-46fa-8693-0080d77f0579.crl X509v3 Authority Key Identifier: keyid:D4:85:C6:FD:B4:5A:7B:D6:6E:E5:30:4B:42:92:C0:89:A1:6C:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dc3a2d18-b171-46fa-8693-0080d77f0579.cer sbgp-ipAddrBlock: critical IPv4: 142.132.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:20:e2:57:a2:84:9c:7c:93:37:78:ab:99:21:9d:d4:bf:f0: 33:32:6f:9a:40:42:44:df:95:81:8f:e9:8b:81:58:d5:3e:32: 33:a8:47:cf:65:04:0f:73:8f:34:03:a7:8b:c7:1f:e5:e9:64: bc:96:d7:3d:0d:a3:4e:31:fd:0c:c0:c2:85:71:63:70:5b:8a: 23:7f:3f:39:e6:72:13:23:33:7c:24:c3:fe:93:f9:8e:ea:8d: d7:3a:1b:63:5f:75:c8:a2:78:65:a3:97:6c:95:1c:8d:a9:41: c8:4c:f2:bd:22:e5:41:cd:3c:1d:14:b2:e6:6c:89:4b:6e:7d: 9d:6c:20:e7:64:17:78:86:4e:e5:9c:c1:3c:e7:0c:15:d6:d4: b9:fe:7a:d1:62:d2:30:ee:cb:6c:50:82:57:59:ea:ec:50:40: 33:c3:98:35:a9:5d:a6:4f:ff:83:a2:5c:86:d7:50:0f:07:ed: 8b:42:ea:ba:fa:3b:ec:a2:b9:29:87:b4:8d:b5:33:0e:a6:48: bd:a9:f9:2b:6a:bd:62:67:2f:61:37:cc:3e:65:c0:cb:21:8c: fc:18:30:b7:49:38:10:fd:73:64:9e:a1:40:8f:62:ad:ff:0a: 90:10:04:3f:09:59:d4:b3:78:70:79:ae:e1:50:18:b3:cc:c2: 0d:c1:33:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwkJpFp5iunp7bpwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGMzYTJkMTgtYjE3MS00NmZhLTg2OTMtMDA4MGQ3N2Yw NTc5MB4XDTI1MTIxMDE0MDAzOFoXDTI2MDMxMDEzMDAzOFowLzEtMCsGA1UEAxMk MWVhOTg4MTMtNTQ5MS00NjIxLThjNDktZDMzYjQzMzc0NjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa+2ziyG/UfQ0cQEo0tF+4Ee6aY/B9jvUIUV f6YLOI/0n4w9iIg008WCUDKSQZlXWMMH+XOS1L1sh96k7YS130CIV0fRmAa1Sgop R/7B4CW0ujhH8PdJZBE6wrxqMRQuQmCjn6ZkBNR0OoPMDo/+edao44+HBws5PAfu 3oB7F1IKwOqA1KLE5Hfly4g76rsH6B4IK+bCccrVjYlobr03xCE6KW8WLVVtigRI UXYRoigdjANjcQr4MZpSWzc6CMW4HO6aNCrK10iVr9p2sd1zZod/i1rkEsmCbrIW Yovo3PiH5GyNRvSPtX+AgsUrgIJIxIs6mfm4WAhlc5iydWzF2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLYGgQjg5llfadzxKBZNf+y/2LvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNh MmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgwZDc3ZjA1NzkvZmE1OGYwMTgtODk2OC0z ZTlkLWI5OTktNzQ0OTg2MzFiODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGMzYTJkMTgtYjE3MS00NmZhLTg2 OTMtMDA4MGQ3N2YwNTc5L2RjM2EyZDE4LWIxNzEtNDZmYS04NjkzLTAwODBkNzdm MDU3OS5jcmwwHwYDVR0jBBgwFoAU1IXG/bRae9Zu5TBLQpLAiaFsszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYzNhMmQxOC1iMTcxLTQ2ZmEtODY5My0wMDgw ZDc3ZjA1NzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjoQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwg4leihJx8kzd4q5khndS/8DMyb5pAQkTflYGP6YuBWNU+MjOoR89l BA9zjzQDp4vHH+XpZLyW1z0No04x/QzAwoVxY3BbiiN/PznmchMjM3wkw/6T+Y7q jdc6G2NfdciieGWjl2yVHI2pQchM8r0i5UHNPB0UsuZsiUtufZ1sIOdkF3iGTuWc wTznDBXW1Ln+etFi0jDuy2xQgldZ6uxQQDPDmDWpXaZP/4OiXIbXUA8H7YtC6rr6 O+yiuSmHtI21Mw6mSL2p+StqvWJnL2E3zD5lwMshjPwYMLdJOBD9c2SeoUCPYq3/ CpAQBD8JWdSzeHB5ruFQGLPMwg3BM+E= -----END CERTIFICATE-----Generated at Thu Dec 25 21:26:18 2025 by rpki-client