This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa File: a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (raw, json) Hash identifier: IdiuqR5qXLXDGOlsUitrK3CLFddIGQU0V7N9E8tdamI= Subject key identifier: F4:2E:7F:CA:B8:7B:44:8B:4E:F9:FA:32:5F:D4:EE:09:65:DB:11:2C Certificate issuer: /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Certificate serial: 010D0C9F4328584C3BE12AA3DEDE3FA424D3CB80 Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa Signing time: Fri 19 Dec 2025 02:00:31 +0000 ROA not before: Fri 19 Dec 2025 02:00:31 +0000 ROA not after: Thu 19 Mar 2026 01:00:31 +0000 asID: 397041 IP address blocks: 198.136.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:e1:2a:a3:de:de:3f:a4:24:d3:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5 Validity Not Before: Dec 19 02:00:31 2025 GMT Not After : Mar 19 01:00:31 2026 GMT Subject: CN=db4e8aa9-94a5-414e-8fc6-b788575b40a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:bb:be:41:bf:53:ca:6f:44:d2:6d:3f:70: 54:87:f9:5e:35:49:3e:7d:fe:0c:cd:ee:2f:9e:2d: 45:4e:c4:d5:ce:bc:f1:e2:88:19:a3:58:b7:f2:28: f6:c3:41:8c:73:50:68:e8:94:95:1e:f0:a8:05:69: b2:b4:b2:52:97:bb:94:b6:5b:a1:2b:b9:4f:62:bd: 7b:2b:4d:89:68:9f:d5:a0:2e:db:cb:1f:78:41:7e: b0:4b:c3:a2:fb:04:ba:b1:ea:3d:f9:d4:63:8f:d4: e9:8c:bb:a2:96:7d:e5:aa:96:c6:a0:6c:5d:4a:e9: c8:c2:18:77:be:1f:e9:b3:c5:4e:a8:8f:ff:45:3e: 35:2d:78:47:c5:83:f4:bc:5a:c3:d5:be:b8:17:d0: c3:81:d1:af:11:84:72:46:79:02:eb:2e:6f:70:ab: 5d:c0:9b:22:bc:43:da:52:1d:00:7b:ce:ef:0f:67: d5:a6:d0:69:98:4f:3e:7f:b3:79:e5:69:42:78:a3: 8a:c4:70:26:2f:9e:13:de:ed:b7:55:aa:4a:0a:ba: 2e:2e:4e:9c:c7:56:8d:87:af:a7:e8:aa:6d:c6:1d: c5:c4:3f:63:03:c4:95:fb:8c:05:59:83:19:86:9e: e1:06:48:96:d7:1f:c4:d9:8d:49:ff:67:2e:e9:f8: 1c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:7F:CA:B8:7B:44:8B:4E:F9:FA:32:5F:D4:EE:09:65:DB:11:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl X509v3 Authority Key Identifier: keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer sbgp-ipAddrBlock: critical IPv4: 198.136.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:af:0c:a8:1f:28:94:cf:40:b4:63:5f:66:b6:2c:9f:c3:3f: 0d:70:48:b5:af:08:70:bb:13:10:5d:4b:55:a5:69:cd:76:32: e2:6f:12:6b:ca:f8:ef:c1:c1:cb:d0:70:6c:7f:8d:c5:dc:07: 94:d3:90:b8:6c:6c:da:b4:4d:46:fa:cd:1e:77:3b:e2:55:9d: 84:7c:4e:1c:54:e1:b4:10:e1:34:f7:38:ed:62:97:f4:2d:97: a9:3e:e6:39:d3:1a:95:28:57:c2:87:52:99:7d:75:c0:15:6e: de:21:b0:37:f3:62:01:05:77:3b:28:e7:f5:63:be:d4:b2:c0: 7c:c4:04:6f:06:e9:e4:9a:c7:76:37:28:6f:6a:7e:e7:1d:48: c3:eb:a8:4b:62:8f:ba:84:d7:5d:83:3d:70:fe:bd:0c:b8:73: 42:39:49:e4:df:82:e9:85:21:a0:36:df:ff:43:c8:b9:eb:08: 76:5a:0c:5b:3e:5c:16:94:12:a8:1d:a4:08:9c:71:71:50:0f: 23:5c:29:cf:cb:ce:e9:a1:ae:19:1b:02:48:2f:0d:ec:18:d8: 8d:23:3d:29:a1:a2:7d:ab:40:da:01:40:75:0c:b1:32:67:48: 75:ef:9c:1a:ff:e3:54:be:bc:86:5e:70:fe:24:61:12:6a:92: c5:13:be:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEw74Sqj3t4/pCTTy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMzQ3YTAtYTM4Ni00NDI0LTg4ODctZmIxNzZjNWNm MGI1MB4XDTI1MTIxOTAyMDAzMVoXDTI2MDMxOTAxMDAzMVowLzEtMCsGA1UEAxMk ZGI0ZThhYTktOTRhNS00MTRlLThmYzYtYjc4ODU3NWI0MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2i7vkG/U8pvRNJtP3BUh/leNUk+ff4Mze4v ni1FTsTVzrzx4ogZo1i38ij2w0GMc1Bo6JSVHvCoBWmytLJSl7uUtluhK7lPYr17 K02JaJ/VoC7byx94QX6wS8Oi+wS6seo9+dRjj9TpjLuiln3lqpbGoGxdSunIwhh3 vh/ps8VOqI//RT41LXhHxYP0vFrD1b64F9DDgdGvEYRyRnkC6y5vcKtdwJsivEPa Uh0Ae87vD2fVptBpmE8+f7N55WlCeKOKxHAmL54T3u23VapKCrouLk6cx1aNh6+n 6Kptxh3FxD9jA8SV+4wFWYMZhp7hBkiW1x/E2Y1J/2cu6fgc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQuf8q4e0SLTvn6Ml/U7gll2xEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80YTIz NDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3NmM1Y2YwYjUvYTdiNjRhZWUtMGUxZi0z ZTliLWFlNDItYTI1YTAwYjlkN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNGEyMzQ3YTAtYTM4Ni00NDI0LTg4 ODctZmIxNzZjNWNmMGI1LzRhMjM0N2EwLWEzODYtNDQyNC04ODg3LWZiMTc2YzVj ZjBiNS5jcmwwHwYDVR0jBBgwFoAUuMRj9lLGaxQjn2qJJGnzlk952P0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80YTIzNDdhMC1hMzg2LTQ0MjQtODg4Ny1mYjE3 NmM1Y2YwYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABavDKgfKJTPQLRjX2a2LJ/DPw1wSLWvCHC7ExBdS1Wlac12MuJvEmvK +O/BwcvQcGx/jcXcB5TTkLhsbNq0TUb6zR53O+JVnYR8ThxU4bQQ4TT3OO1il/Qt l6k+5jnTGpUoV8KHUpl9dcAVbt4hsDfzYgEFdzso5/VjvtSywHzEBG8G6eSax3Y3 KG9qfucdSMPrqEtij7qE112DPXD+vQy4c0I5SeTfgumFIaA23/9DyLnrCHZaDFs+ XBaUEqgdpAiccXFQDyNcKc/LzumhrhkbAkgvDewY2I0jPSmhon2rQNoBQHUMsTJn SHXvnBr/41S+vIZecP4kYRJqksUTvnA= -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:12 2025 by rpki-client