This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa File: 693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa (raw, json) Hash identifier: O/DuVs5zik0DHYcTwP0Jtc0aFEcQA6Q+40kdhAZ4ADs= Subject key identifier: 10:25:86:89:B7:9C:21:EC:85:4F:6B:15:EA:F2:9E:F0:B4:6E:A8:CA Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DC12C9AC33D6D6D4677600 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 161.232.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:dc:12:c9:ac:33:d6:d6:d4:67:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=9332cc56-5575-4f06-a7a7-f187ecf852c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:fa:9c:dd:40:a0:3f:f3:5e:64:c4:99:44: 62:02:31:e7:5d:c9:1c:83:a0:b4:64:13:1f:80:e0: ea:74:02:a8:60:4d:af:62:81:f3:0b:87:1d:32:c9: 7f:9d:24:ff:2f:5c:93:c8:23:77:b4:25:89:9f:30: 55:5a:ff:05:ff:66:47:8d:ac:a3:8d:26:f2:35:77: 00:d2:f0:21:01:61:75:4e:5a:25:3a:fe:8c:22:ec: c2:df:43:87:b1:db:e5:31:df:f4:62:f3:16:59:b1: 4a:a8:24:20:a9:7f:95:29:bf:cf:11:a7:3a:bd:2c: 96:99:18:18:e1:df:57:54:7f:61:13:e8:58:8a:8b: 25:ff:b6:2f:71:18:2c:97:5b:d3:f5:29:f6:51:1a: 67:a7:2b:2a:61:be:c4:7c:7e:f4:b9:14:3a:74:61: ab:9c:f0:9f:27:c1:4e:be:45:c3:30:68:18:6d:43: f3:96:ec:03:e9:c3:10:e7:49:e1:e1:0f:5f:50:22: ea:a8:b6:5c:08:5b:f0:4b:4a:93:de:5a:6d:f7:d8: e4:14:20:9a:08:a7:c4:c8:1b:df:ec:f6:a5:17:e0: 10:b4:2f:fc:90:6c:8f:48:32:45:84:6b:3e:b5:86: a0:a2:c1:47:15:f0:cb:ef:d4:5e:cc:50:ff:1f:2f: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:86:89:B7:9C:21:EC:85:4F:6B:15:EA:F2:9E:F0:B4:6E:A8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/693c258b-6507-3d87-bbbb-fb3ebd6abe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:90:3a:68:15:a9:9b:9d:0e:52:b9:c9:11:74:99:10:fa:8f: db:51:43:56:00:4a:9e:7a:ab:01:0a:75:16:f9:96:c3:42:7c: 77:3f:d0:b1:15:07:3b:87:1f:f7:e0:f3:ec:55:76:02:7c:84: 6d:dc:2f:09:da:3d:a3:3b:3d:d5:be:ec:89:b5:04:b2:4a:aa: e0:9b:da:c5:47:f6:6c:43:16:70:b2:e2:bb:72:55:5c:b0:b6: 43:e7:06:a0:c4:95:0b:59:b8:98:b1:01:21:49:0a:c1:ca:ec: 62:5d:f8:eb:56:ad:78:b7:a4:54:67:dd:a6:e1:ff:54:d4:a3: 55:9d:86:43:c6:f4:94:4b:e0:bc:52:fb:33:9a:d4:03:4c:4c: 52:3a:67:a8:da:03:8a:0d:62:35:66:9f:d2:11:8d:ff:13:1a: f1:4b:87:77:88:56:6f:23:43:a9:1b:48:c3:6f:b4:c9:5f:4a: a2:2a:30:04:4d:e9:61:c8:ed:21:6f:65:7d:f9:c1:20:5b:42: c5:b1:06:6f:ac:45:33:ca:1c:29:22:d0:21:c8:6d:f7:80:01: 7d:2d:fb:db:2c:6d:27:b4:5a:d1:78:b4:02:81:ce:1d:77:1a: a4:42:9d:96:c8:8e:a1:1b:4c:b7:8a:3b:e6:c3:db:26:d9:95: 09:4a:bf:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC3BLJrDPW1tRndgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk OTMzMmNjNTYtNTU3NS00ZjA2LWE3YTctZjE4N2VjZjg1MmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9r6nN1AoD/zXmTEmURiAjHnXckcg6C0ZBMf gODqdAKoYE2vYoHzC4cdMsl/nST/L1yTyCN3tCWJnzBVWv8F/2ZHjayjjSbyNXcA 0vAhAWF1TlolOv6MIuzC30OHsdvlMd/0YvMWWbFKqCQgqX+VKb/PEac6vSyWmRgY 4d9XVH9hE+hYiosl/7YvcRgsl1vT9Sn2URpnpysqYb7EfH70uRQ6dGGrnPCfJ8FO vkXDMGgYbUPzluwD6cMQ50nh4Q9fUCLqqLZcCFvwS0qT3lpt99jkFCCaCKfEyBvf 7PalF+AQtC/8kGyPSDJFhGs+tYagosFHFfDL79RezFD/Hy/5CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBAlhom3nCHshU9rFerynvC0bqjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNjkzYzI1OGItNjUwNy0z ZDg3LWJiYmItZmIzZWJkNmFiZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeQOmgVqZudDlK5yRF0mRD6j9tRQ1YASp56qwEKdRb5lsNCfHc/0LEV BzuHH/fg8+xVdgJ8hG3cLwnaPaM7PdW+7Im1BLJKquCb2sVH9mxDFnCy4rtyVVyw tkPnBqDElQtZuJixASFJCsHK7GJd+OtWrXi3pFRn3abh/1TUo1WdhkPG9JRL4LxS +zOa1ANMTFI6Z6jaA4oNYjVmn9IRjf8TGvFLh3eIVm8jQ6kbSMNvtMlfSqIqMARN 6WHI7SFvZX35wSBbQsWxBm+sRTPKHCki0CHIbfeAAX0t+9ssbSe0WtF4tAKBzh13 GqRCnZbIjqEbTLeKO+bD2ybZlQlKv6I= -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:57 2025 by rpki-client