This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa File: ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa (raw, json) Hash identifier: tcya/69vU3B+J02dAL6p6oGWlcSXLFq+fY3efOwHWlc= Subject key identifier: 54:04:5C:A3:4B:8A:22:72:F7:5D:05:7E:A0:2A:0C:75:F8:85:89:94 Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F4328584C42DBC467C232576984045288 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 12041 IP address blocks: 161.232.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:c4:67:c2:32:57:69:84:04:52:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=a3e84cde-55d9-4876-a91b-33103116f054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5c:fe:b1:53:e8:5e:68:cd:80:f4:65:19:8c: d2:89:ed:3e:97:70:00:99:94:55:3b:c2:ab:da:7a: fc:35:ed:fc:aa:e4:0c:2b:61:73:1a:61:33:d5:ee: 79:b4:52:77:79:f7:7a:10:b0:cd:d9:65:eb:cb:93: ca:c7:90:5b:dd:d2:1d:e1:bf:cc:f2:1d:9a:4c:5e: 89:0e:e9:a5:89:09:f3:c8:4e:2e:6a:06:56:7a:c6: a0:2f:47:24:45:57:46:8d:fb:32:b9:75:e1:68:22: 26:c6:44:7e:4e:65:22:9b:54:ea:4b:f9:4d:b4:ee: ba:1f:f4:55:e7:a7:bb:77:47:4a:c8:79:64:8f:8d: 0f:95:70:8f:a0:29:ec:14:15:50:d3:19:bd:1f:d0: 5f:e0:28:bf:b5:78:ac:90:fb:b2:de:4b:06:89:a0: e4:e5:57:46:61:d2:60:11:1d:2b:ed:90:25:a9:f4: ca:2c:c7:77:c4:7b:84:b7:83:8a:98:1d:cc:00:c7: 3a:e8:5f:56:90:fb:78:85:98:03:8d:cc:f6:91:48: ad:c8:32:fa:a9:fe:25:51:e2:93:79:ad:c5:d0:a2: 62:ca:52:9f:d5:28:73:94:1b:ec:40:27:86:ad:6d: 0e:a1:0a:0f:d0:08:1b:58:1f:a9:00:10:a2:9c:17: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:04:5C:A3:4B:8A:22:72:F7:5D:05:7E:A0:2A:0C:75:F8:85:89:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/ca76f5e1-f589-3b90-8213-ba45f067a3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 161.232.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:24:67:c4:ae:a5:8d:5e:60:b2:e1:b2:3f:35:74:9d:24:8a: 12:69:e6:01:c2:11:bd:f6:b9:7c:ea:3a:c3:f3:0c:c6:8a:39: ea:74:0d:02:4a:10:cb:a3:75:9f:d1:ea:39:06:c7:9e:d7:09: 30:07:b4:32:f9:d4:4f:a4:20:b5:6a:94:ec:82:3c:d9:ff:b8: bf:7f:e0:ca:98:ac:f3:e2:17:94:77:c0:2c:42:58:32:e9:de: e4:4a:b0:f6:8e:48:e5:80:b6:da:af:51:74:ff:f0:a7:78:f2: 94:fe:af:f0:f6:45:fc:4c:09:ca:73:28:c6:63:d1:78:b2:a4: f2:f6:1e:f5:ff:c5:8b:c2:7c:b2:6c:b8:35:6e:d0:03:ef:2a: 09:db:11:b3:55:1e:c3:66:90:57:50:03:7a:36:20:75:97:e7: 8b:3f:9d:e4:9d:79:47:c5:5e:9d:1d:40:c7:8d:28:49:18:8c: 03:c8:b6:78:99:6b:cd:2f:e0:4b:77:58:4b:98:d8:38:d6:cc: be:79:68:89:a9:d9:2d:ee:a9:11:0c:da:2a:7e:a7:99:1a:fd: 7d:f8:ce:ef:05:6b:1f:81:3b:a0:91:f4:ce:df:9e:e7:54:9f: 11:95:89:dc:7a:b5:02:be:cb:eb:8d:c6:95:dd:a7:55:63:4a: 66:ac:2d:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC28RnwjJXaYQEUogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YTNlODRjZGUtNTVkOS00ODc2LWE5MWItMzMxMDMxMTZmMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lz+sVPoXmjNgPRlGYzSie0+l3AAmZRVO8Kr 2nr8Ne38quQMK2FzGmEz1e55tFJ3efd6ELDN2WXry5PKx5Bb3dId4b/M8h2aTF6J DumliQnzyE4uagZWesagL0ckRVdGjfsyuXXhaCImxkR+TmUim1TqS/lNtO66H/RV 56e7d0dKyHlkj40PlXCPoCnsFBVQ0xm9H9Bf4Ci/tXiskPuy3ksGiaDk5VdGYdJg ER0r7ZAlqfTKLMd3xHuEt4OKmB3MAMc66F9WkPt4hZgDjcz2kUityDL6qf4lUeKT ea3F0KJiylKf1ShzlBvsQCeGrW0OoQoP0AgbWB+pABCinBdnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQEXKNLiiJy910FfqAqDHX4hYmUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvY2E3NmY1ZTEtZjU4OS0z YjkwLTgyMTMtYmE0NWYwNjdhM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoegYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQkZ8SupY1eYLLhsj81dJ0kihJp5gHCEb32uXzqOsPzDMaKOep0DQJK EMujdZ/R6jkGx57XCTAHtDL51E+kILVqlOyCPNn/uL9/4MqYrPPiF5R3wCxCWDLp 3uRKsPaOSOWAttqvUXT/8Kd48pT+r/D2RfxMCcpzKMZj0XiypPL2HvX/xYvCfLJs uDVu0APvKgnbEbNVHsNmkFdQA3o2IHWX54s/neSdeUfFXp0dQMeNKEkYjAPItniZ a80v4Et3WEuY2DjWzL55aImp2S3uqREM2ip+p5ka/X34zu8Fax+BO6CR9M7fnudU nxGVidx6tQK+y+uNxpXdp1VjSmasLWc= -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:43 2025 by rpki-client