This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa File: 3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa (raw, json) Hash identifier: o8emYtE4HwHE6xyAHawz0HBYpR2i9JYIAbfL4TUATNM= Subject key identifier: 65:7B:42:84:D0:95:16:92:88:60:AD:02:A8:BF:CD:57:94:63:A0:20 Certificate issuer: /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Certificate serial: 010D0C9F4328584C3BE12A8F4657149129D04A80 Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 203020 IP address blocks: 142.147.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2a:8f:46:57:14:91:29:d0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=0607d29b-ecf5-45ee-92c5-718c4737a625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:95:1f:b4:ea:ca:26:b9:f8:5a:f4:54:e8: 03:59:4f:d8:24:67:be:cb:23:1f:ea:50:cd:23:25: fb:e3:bd:5d:5c:0a:cf:69:bd:da:c6:0b:23:3a:80: 2a:b1:df:77:44:2b:5d:23:dd:ab:f5:7f:91:87:67: 28:2d:a9:cb:42:f3:c6:59:bc:09:7b:21:c6:c4:df: 0c:27:59:ee:a0:5b:fd:0a:09:57:8b:32:84:69:ce: 98:fe:fa:ca:80:56:f3:a7:dd:91:76:a9:68:90:9e: 27:3f:b7:a2:63:e1:5d:db:b5:29:c2:ad:9b:c5:ba: 58:fa:de:88:28:69:88:00:8c:53:c2:85:50:d5:ea: 7b:18:11:1b:fd:ae:2a:1a:f9:cc:08:63:6e:6f:f4: 55:67:25:58:4e:96:72:72:57:b4:92:8a:46:8d:5a: 03:e8:3c:67:ad:de:62:ca:23:40:29:69:ff:ba:82: 96:ca:08:03:5e:45:9c:14:c6:95:0f:7f:73:d2:61: c0:a5:09:fc:22:88:c9:ac:30:3b:15:36:f0:22:ac: d8:d3:86:8f:5b:5b:a7:4b:0e:e7:d8:61:6b:70:45: 33:d7:c9:af:f8:d1:0a:a5:00:3c:c5:52:97:17:f5: 14:bb:67:af:f8:f9:c4:db:d0:ef:be:80:bd:97:0f: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:42:84:D0:95:16:92:88:60:AD:02:A8:BF:CD:57:94:63:A0:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/3fb0398d-96a0-3e5a-bb21-6c87e5d28651.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl X509v3 Authority Key Identifier: keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer sbgp-ipAddrBlock: critical IPv4: 142.147.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:88:ef:2a:ee:15:ed:04:5c:94:75:68:7d:3f:52:7c:09:8e: 82:fa:21:8a:c3:fd:f0:b2:e1:9f:6d:08:27:45:6a:cb:ce:99: 02:92:b7:2a:9b:eb:53:86:a5:c6:e3:2b:54:d0:9d:49:d4:a6: e8:8b:34:49:cd:40:33:d2:62:f9:bf:27:d1:3c:ba:12:b6:8e: 48:7b:37:c8:90:41:1d:67:64:7e:8a:38:30:35:56:51:08:11: 06:d7:9e:9b:81:76:9e:6e:76:de:02:bb:6e:59:07:4b:6f:75: 1d:ab:01:7e:1a:64:85:05:e4:cb:a3:a3:fc:73:2c:4a:c0:0b: f1:4a:76:c1:e9:84:d3:1e:55:82:48:06:37:7a:2f:c2:3a:3f: 9b:2b:53:62:60:93:06:01:ed:0a:21:bd:25:e9:e9:b3:c2:ea: 9d:8e:79:80:2a:a4:9c:55:dd:e8:c9:d8:c3:a6:89:50:cf:d3: 7f:13:c4:ec:99:c1:9a:77:41:a9:23:2e:62:7c:b8:68:e3:96: 62:9f:ab:85:5b:bb:2b:c2:41:7b:71:ea:c9:81:11:d8:1b:4d: 30:6e:0f:fc:ac:f5:c9:a7:e2:41:48:0b:f3:2e:dd:da:6a:b1: 30:55:48:97:2e:bd:19:62:60:c9:4a:03:18:34:2d:92:46:39: e5:b0:54:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74SqPRlcUkSnQSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi ZmUyMB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk MDYwN2QyOWItZWNmNS00NWVlLTkyYzUtNzE4YzQ3MzdhNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTeVH7Tqyia5+Fr0VOgDWU/YJGe+yyMf6lDN IyX7471dXArPab3axgsjOoAqsd93RCtdI92r9X+Rh2coLanLQvPGWbwJeyHGxN8M J1nuoFv9CglXizKEac6Y/vrKgFbzp92RdqlokJ4nP7eiY+Fd27Upwq2bxbpY+t6I KGmIAIxTwoVQ1ep7GBEb/a4qGvnMCGNub/RVZyVYTpZycle0kopGjVoD6Dxnrd5i yiNAKWn/uoKWyggDXkWcFMaVD39z0mHApQn8IojJrDA7FTbwIqzY04aPW1unSw7n 2GFrcEUz18mv+NEKpQA8xVKXF/UUu2ev+PnE29DvvoC9lw+HGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV7QoTQlRaSiGCtAqi/zVeUY6AgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5 OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvM2ZiMDM5OGQtOTZhMC0z ZTVhLWJiMjEtNmM4N2U1ZDI4NjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4 YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjpOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaI7yruFe0EXJR1aH0/UnwJjoL6IYrD/fCy4Z9tCCdFasvOmQKStyqb 61OGpcbjK1TQnUnUpuiLNEnNQDPSYvm/J9E8uhK2jkh7N8iQQR1nZH6KODA1VlEI EQbXnpuBdp5udt4Cu25ZB0tvdR2rAX4aZIUF5Mujo/xzLErAC/FKdsHphNMeVYJI Bjd6L8I6P5srU2JgkwYB7QohvSXp6bPC6p2OeYAqpJxV3ejJ2MOmiVDP038TxOyZ wZp3QakjLmJ8uGjjlmKfq4VbuyvCQXtx6smBEdgbTTBuD/ys9cmn4kFIC/Mu3dpq sTBVSJcuvRliYMlKAxg0LZJGOeWwVIk= -----END CERTIFICATE-----Generated at Sat Dec 20 02:01:39 2025 by rpki-client