This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2bca4ea-031d-3798-bd19-6f99438bc283.roa File: d2bca4ea-031d-3798-bd19-6f99438bc283.roa (raw, json) Hash identifier: PkPcHyijdkeOu39NPbZxKnGApxM4qzIXrqg6Ebv5fes= Subject key identifier: 79:0B:00:41:E9:30:13:3C:42:31:D5:47:44:FD:BD:D8:05:04:F4:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C215B8773E3B1DCD908A29400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2bca4ea-031d-3798-bd19-6f99438bc283.roa Signing time: Tue 09 Dec 2025 14:00:38 +0000 ROA not before: Tue 09 Dec 2025 14:00:38 +0000 ROA not after: Mon 09 Mar 2026 13:00:38 +0000 asID: 63949 IP address blocks: 143.42.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:5b:87:73:e3:b1:dc:d9:08:a2:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 9 14:00:38 2025 GMT Not After : Mar 9 13:00:38 2026 GMT Subject: CN=d00515da-b88b-4053-873f-72639374db85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:8a:67:fd:27:35:cb:7d:a8:78:dd:1f:88: 1f:ae:f7:75:db:68:eb:cd:59:be:aa:87:4c:c9:aa: 5e:6c:17:c8:8b:eb:99:7d:c3:aa:52:00:04:b0:8c: 91:a6:c0:de:29:d0:8d:ea:65:fa:4b:57:54:67:f5: 7a:ba:8f:b7:db:e2:a7:16:b3:dc:62:0f:16:1a:a4: 38:57:fb:84:98:28:53:44:a2:33:40:5d:84:d1:fc: 2a:12:14:0b:cf:e2:69:7a:05:1c:77:1e:2d:e0:2f: 5a:ff:2f:1f:84:17:9c:42:ee:da:c4:ce:9f:d3:a0: 7a:ad:49:1f:7b:4a:b8:f8:b6:8b:5a:7a:aa:8c:44: 99:de:f1:33:02:37:e5:61:6e:bb:f0:ff:63:07:f1: 2c:a9:c7:31:83:42:37:26:c4:db:da:37:1f:51:5a: a7:98:5b:bc:7c:33:6f:38:32:85:35:61:ee:2c:ff: 77:cb:94:d4:74:22:5f:78:66:c0:d1:62:cd:c1:db: 23:e5:39:ac:d2:34:aa:d5:a0:5e:03:1e:be:2c:38: 6d:45:91:13:fc:85:51:20:00:b7:30:1f:a0:d6:e4: 24:4c:b9:99:a6:c6:24:02:44:56:07:16:d8:52:48: 1e:81:d7:f9:94:6f:6a:f3:11:75:b3:5e:ad:65:e0: 74:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0B:00:41:E9:30:13:3C:42:31:D5:47:44:FD:BD:D8:05:04:F4:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d2bca4ea-031d-3798-bd19-6f99438bc283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 143.42.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:90:cd:64:b4:08:e6:9f:35:28:e1:1e:9f:b0:9e:6b:f3:7f: 66:d2:d5:63:81:5a:83:76:6b:20:df:db:e9:45:48:35:e5:51: f8:a1:2f:ae:41:4d:c9:79:3f:04:62:8a:4d:73:0b:a2:98:6f: 0c:3e:2a:8a:2c:16:39:52:67:6c:5a:f8:7c:55:4c:89:3a:02: 1e:e1:ee:ff:7d:29:b4:af:a0:2b:60:a8:85:24:6e:80:72:72: cc:f4:24:53:a8:a6:6a:2e:91:bf:50:c5:c2:c7:0c:30:ec:4f: d5:ee:e8:dc:d9:8b:ab:03:b1:04:ac:de:dd:70:f5:de:d5:a0: 16:5d:02:db:53:47:25:da:3b:d0:1c:0f:2e:bd:47:dc:a2:4f: d6:74:24:af:a5:e6:62:38:ef:d6:a1:b8:0a:07:01:b6:de:c7: 2e:61:aa:25:5c:57:40:32:cd:2a:99:22:22:01:89:4c:e7:f1: 83:48:f9:24:71:c6:fe:ee:74:96:35:8a:6c:0b:2c:85:99:41: c9:e1:89:40:52:dc:df:fe:40:07:3d:b3:88:8b:47:e8:af:10: 02:4f:e6:68:bb:30:1d:dd:53:50:7c:74:82:53:bb:38:17:35: f5:00:ef:f3:87:31:98:9b:43:ac:22:b0:f6:75:20:40:db:bc: 2f:d4:fe:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhW4dz47Hc2QiilAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIwOTE0MDAzOFoXDTI2MDMwOTEzMDAzOFowLzEtMCsGA1UEAxMk ZDAwNTE1ZGEtYjg4Yi00MDUzLTg3M2YtNzI2MzkzNzRkYjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueOKZ/0nNct9qHjdH4gfrvd122jrzVm+qodM yapebBfIi+uZfcOqUgAEsIyRpsDeKdCN6mX6S1dUZ/V6uo+32+KnFrPcYg8WGqQ4 V/uEmChTRKIzQF2E0fwqEhQLz+JpegUcdx4t4C9a/y8fhBecQu7axM6f06B6rUkf e0q4+LaLWnqqjESZ3vEzAjflYW678P9jB/Esqccxg0I3JsTb2jcfUVqnmFu8fDNv ODKFNWHuLP93y5TUdCJfeGbA0WLNwdsj5Tms0jSq1aBeAx6+LDhtRZET/IVRIAC3 MB+g1uQkTLmZpsYkAkRWBxbYUkgegdf5lG9q8xF1s16tZeB0rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkLAEHpMBM8QjHVR0T9vdgFBPRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDJiY2E0ZWEtMDMxZC0z Nzk4LWJkMTktNmY5OTQzOGJjMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjyoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmQzWS0COafNSjhHp+wnmvzf2bS1WOBWoN2ayDf2+lFSDXlUfihL65B Tcl5PwRiik1zC6KYbww+KoosFjlSZ2xa+HxVTIk6Ah7h7v99KbSvoCtgqIUkboBy csz0JFOopmoukb9QxcLHDDDsT9Xu6NzZi6sDsQSs3t1w9d7VoBZdAttTRyXaO9Ac Dy69R9yiT9Z0JK+l5mI479ahuAoHAbbexy5hqiVcV0AyzSqZIiIBiUzn8YNI+SRx xv7udJY1imwLLIWZQcnhiUBS3N/+QAc9s4iLR+ivEAJP5mi7MB3dU1B8dIJTuzgX NfUA7/OHMZibQ6wisPZ1IEDbvC/U/tg= -----END CERTIFICATE-----Generated at Sat Dec 20 06:04:58 2025 by rpki-client