This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa File: a47ff330-10a8-3414-b09a-6537f240b5b7.roa (raw, json) Hash identifier: WuV6vfjUoZGBPHNHFtL/hGVXXRqXDqbE9MAIKc6XscA= Subject key identifier: 39:2E:48:B2:48:F9:B3:C5:D0:74:AB:23:DC:19:24:25:91:F7:2F:32 Certificate issuer: /CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Certificate serial: 010D0C9F4328584C21ACBDD1295012F9ABE99160 Authority key identifier: F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa Signing time: Tue 09 Dec 2025 16:44:22 +0000 ROA not before: Tue 09 Dec 2025 16:44:22 +0000 ROA not after: Mon 09 Mar 2026 15:44:22 +0000 asID: 202 IP address blocks: 142.249.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:21:ac:bd:d1:29:50:12:f9:ab:e9:91:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b08b04c4-3d5d-41d5-8263-cd575f4bd2da Validity Not Before: Dec 9 16:44:22 2025 GMT Not After : Mar 9 15:44:22 2026 GMT Subject: CN=267a9f51-fffc-4e61-a842-219bc0c10a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2f:3d:e6:91:28:34:f7:1a:56:78:46:a3:92: 58:1e:de:53:bb:36:97:81:af:4d:01:b9:84:d4:3c: 5c:ab:9a:3c:d4:f2:23:eb:3d:e9:b4:cb:3c:f5:e6: 33:8f:c3:8f:c1:58:4e:3d:9a:18:c2:59:b5:e0:ba: fa:41:f7:7f:99:d4:3d:e2:a6:7e:5d:e6:10:c0:f6: 62:87:84:d7:85:ea:50:18:ee:60:41:5b:73:13:9f: 7b:a0:f0:0a:4b:01:17:4d:3d:8d:34:04:44:04:cb: d5:22:7c:57:5b:60:66:51:ee:63:b5:ab:13:87:85: 23:1b:df:a6:60:09:b3:31:0b:01:66:9e:c6:43:73: 51:8e:07:e7:62:23:62:fa:77:d3:11:a4:14:f2:0a: 62:23:eb:89:63:9c:e7:b3:b7:ba:68:a3:02:2c:3b: 99:e3:f4:72:62:bb:b3:2c:fa:a4:a5:93:42:a0:83: dd:44:c2:bb:46:e0:75:f2:ac:e1:37:0e:bb:35:df: d0:5e:50:57:28:dc:e5:1d:d4:1f:0c:2d:28:0a:6a: 02:8a:9a:a5:41:b7:89:c2:9f:95:03:de:62:c1:49: 64:c2:fa:a4:48:82:0f:c0:f5:14:bd:3d:2e:3e:c8: 62:af:db:e0:17:b3:1d:3c:09:d0:aa:7d:b4:d5:da: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:48:B2:48:F9:B3:C5:D0:74:AB:23:DC:19:24:25:91:F7:2F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/a47ff330-10a8-3414-b09a-6537f240b5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.crl X509v3 Authority Key Identifier: keyid:F6:82:89:44:D0:3B:CE:E1:4A:25:94:4D:E9:67:6A:8F:2C:51:21:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b08b04c4-3d5d-41d5-8263-cd575f4bd2da.cer sbgp-ipAddrBlock: critical IPv4: 142.249.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:17:e4:16:cc:54:db:d8:46:d4:36:01:97:6c:41:53:44:e2: d2:f7:a8:28:c0:93:c3:69:0b:8d:f8:b6:72:50:fa:e9:52:96: e0:64:9a:06:55:20:1f:87:74:bf:48:e4:77:13:b8:14:6c:b7: 7b:5f:ea:24:ad:59:04:8f:43:a8:83:a8:20:c5:d1:82:d0:00: 17:69:a2:31:78:35:e4:96:21:46:f9:c4:27:86:af:b8:69:49: 60:5e:f2:2a:a4:77:e1:af:53:5b:4d:46:1b:ac:07:c7:a7:28: 0f:c1:4b:4f:0d:86:30:f4:75:96:0b:9a:c7:8e:5b:3a:1c:f9: 77:94:fe:75:9b:df:87:cd:47:66:92:e0:8b:f1:cd:f6:b9:39: d4:8c:93:fe:43:da:2b:c3:c7:17:cc:34:22:43:6c:e5:66:96: f0:33:a4:8f:cf:84:e3:3d:a4:41:01:1c:57:f4:f6:31:a5:ee: 65:f5:42:78:aa:a7:07:11:08:63:d9:b8:67:03:00:62:ba:6e: c3:63:c5:22:88:d6:cf:7c:95:04:e8:6e:5d:16:38:6d:09:8a: 7d:54:96:fb:f7:e7:02:5a:ca:85:c2:24:01:bd:a3:58:5f:5a: b3:8e:69:ae:cd:b0:55:e9:a3:15:34:04:d6:2b:38:9d:1c:71: e7:c9:33:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwhrL3RKVAS+avpkWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA4YjA0YzQtM2Q1ZC00MWQ1LTgyNjMtY2Q1NzVmNGJk MmRhMB4XDTI1MTIwOTE2NDQyMloXDTI2MDMwOTE1NDQyMlowLzEtMCsGA1UEAxMk MjY3YTlmNTEtZmZmYy00ZTYxLWE4NDItMjE5YmMwYzEwYTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS895pEoNPcaVnhGo5JYHt5TuzaXga9NAbmE 1Dxcq5o81PIj6z3ptMs89eYzj8OPwVhOPZoYwlm14Lr6Qfd/mdQ94qZ+XeYQwPZi h4TXhepQGO5gQVtzE597oPAKSwEXTT2NNAREBMvVInxXW2BmUe5jtasTh4UjG9+m YAmzMQsBZp7GQ3NRjgfnYiNi+nfTEaQU8gpiI+uJY5zns7e6aKMCLDuZ4/RyYruz LPqkpZNCoIPdRMK7RuB18qzhNw67Nd/QXlBXKNzlHdQfDC0oCmoCipqlQbeJwp+V A95iwUlkwvqkSIIPwPUUvT0uPshir9vgF7MdPAnQqn201drSQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkuSLJI+bPF0HSrI9wZJCWR9y8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhi MDRjNC0zZDVkLTQxZDUtODI2My1jZDU3NWY0YmQyZGEvYTQ3ZmYzMzAtMTBhOC0z NDE0LWIwOWEtNjUzN2YyNDBiNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA4YjA0YzQtM2Q1ZC00MWQ1LTgy NjMtY2Q1NzVmNGJkMmRhL2IwOGIwNGM0LTNkNWQtNDFkNS04MjYzLWNkNTc1ZjRi ZDJkYS5jcmwwHwYDVR0jBBgwFoAU9oKJRNA7zuFKJZRN6WdqjyxRIc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iMDhiMDRjNC0zZDVkLTQxZDUtODI2My1jZDU3 NWY0YmQyZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwX5BbMVNvYRtQ2AZdsQVNE4tL3qCjAk8NpC434tnJQ+ulSluBkmgZV IB+HdL9I5HcTuBRst3tf6iStWQSPQ6iDqCDF0YLQABdpojF4NeSWIUb5xCeGr7hp SWBe8iqkd+GvU1tNRhusB8enKA/BS08NhjD0dZYLmseOWzoc+XeU/nWb34fNR2aS 4Ivxzfa5OdSMk/5D2ivDxxfMNCJDbOVmlvAzpI/PhOM9pEEBHFf09jGl7mX1Qniq pwcRCGPZuGcDAGK6bsNjxSKI1s98lQTobl0WOG0Jin1Ulvv35wJayoXCJAG9o1hf WrOOaa7NsFXpoxU0BNYrOJ0ccefJM+w= -----END CERTIFICATE-----Generated at Sat Dec 20 02:52:10 2025 by rpki-client