This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa File: aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa (raw, json) Hash identifier: BJjlXbab4+pOTcycDMsSmO+nYTOw+ej5MiZID90TQhM= Subject key identifier: A0:A9:4B:BB:45:13:5B:B2:DB:37:87:F0:25:61:A3:6B:CC:5E:E0:F0 Certificate issuer: /CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Certificate serial: 010D0C9F4328584BE8206A7F655E9E78624CEC80 Authority key identifier: 27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa Signing time: Wed 19 Nov 2025 02:00:30 +0000 ROA not before: Wed 19 Nov 2025 02:00:30 +0000 ROA not after: Tue 17 Feb 2026 02:00:30 +0000 asID: 23154 IP address blocks: 148.164.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e8:20:6a:7f:65:5e:9e:78:62:4c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295adc45-532e-4e55-96b9-3f50cdecbbaa Validity Not Before: Nov 19 02:00:30 2025 GMT Not After : Feb 17 02:00:30 2026 GMT Subject: CN=20942eb1-d68c-4be5-8d12-300d0d59e2e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cb:1f:29:81:8b:0b:99:ce:0c:27:38:ac:d0: 6d:d3:cb:af:2f:d9:15:35:41:b7:5f:78:b1:df:53: ce:28:a9:a2:c4:3c:3e:52:03:f2:4f:fb:e5:78:a2: 32:4a:7a:9b:6d:0b:e3:dc:f3:fc:86:82:bc:bd:af: d2:6c:a6:15:16:c1:03:7d:6b:f2:fa:dd:27:b1:d9: c5:f3:65:b0:7e:d3:8e:14:80:e6:a5:d3:18:52:0d: 7a:03:39:52:f2:d0:be:50:35:e9:df:0d:87:03:b5: fe:40:76:f3:46:52:87:cc:c0:db:9f:32:9f:05:74: 60:0c:67:c4:7d:03:7f:a8:fc:10:80:e5:fb:bf:76: 99:ab:15:46:78:71:b7:e3:77:57:e8:5d:9e:5b:59: a3:87:1d:f5:15:6d:b1:13:2f:4d:8f:14:d0:c6:e1: 81:66:97:51:9f:61:05:f3:9c:5b:d3:b0:76:1e:77: 96:f5:a3:a8:77:37:47:8a:7b:88:5d:90:10:b3:7b: ae:7a:8b:dc:bd:db:e7:b3:33:8b:50:88:e7:d0:da: aa:ac:7b:f0:7a:93:3c:11:96:07:f8:94:dd:2e:5f: 42:55:5a:b4:c3:b0:06:3a:53:e1:c7:6f:c7:4c:74: 28:3d:4b:14:de:44:7c:56:a7:a6:5a:06:b0:f1:31: 2b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A9:4B:BB:45:13:5B:B2:DB:37:87:F0:25:61:A3:6B:CC:5E:E0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/aadc2c48-1b68-3c3d-83ca-b8784e1df8d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa/295adc45-532e-4e55-96b9-3f50cdecbbaa.crl X509v3 Authority Key Identifier: keyid:27:EE:56:C9:B9:8D:AD:99:F3:D8:D4:A8:EE:B8:CB:74:DD:BF:F9:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/295adc45-532e-4e55-96b9-3f50cdecbbaa.cer sbgp-ipAddrBlock: critical IPv4: 148.164.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:70:c3:ba:12:9c:a9:a6:5c:8d:43:e6:22:c0:d9:fd:25:2d: 79:4c:9c:58:6b:72:05:13:ba:73:6b:b6:56:c6:8f:85:7e:1b: 33:08:d5:d5:2d:5e:fc:18:8a:6b:bf:71:09:b6:41:9e:54:4d: c0:be:0b:37:4d:09:0f:c3:ae:7d:2e:07:99:db:4b:92:c2:ad: d7:13:9d:ba:23:27:92:5d:36:aa:c1:6f:ce:50:0c:c7:d0:e5: 59:05:08:9f:75:90:0a:27:6b:d5:d9:de:d6:7e:37:11:26:ce: 7d:fa:11:9a:a2:09:f8:4c:ff:a8:81:ec:a2:8f:f3:0c:e6:d4: 12:1c:ff:7b:bc:4c:7f:d7:c5:d6:97:0f:dd:fe:20:d1:9a:64: 23:92:97:31:5a:f4:c9:81:0e:bc:37:a9:c9:62:53:c7:fb:9f: 58:e2:30:01:59:37:a1:95:c5:4b:d6:a0:44:56:73:19:03:89: 41:2f:05:8b:3a:fd:85:b5:84:3e:44:c4:cd:23:a2:5e:db:86: 98:aa:a4:18:ce:d7:8c:95:cb:96:4c:91:2a:de:a5:a0:73:33: 00:32:28:c1:94:4d:b2:ce:2a:f4:b7:47:0d:d3:9c:b9:89:6a: 8c:d1:66:7c:1a:90:d1:89:82:09:3e:e3:24:e2:20:5f:6f:9f: 7d:be:8f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvoIGp/ZV6eeGJM7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1YWRjNDUtNTMyZS00ZTU1LTk2YjktM2Y1MGNkZWNi YmFhMB4XDTI1MTExOTAyMDAzMFoXDTI2MDIxNzAyMDAzMFowLzEtMCsGA1UEAxMk MjA5NDJlYjEtZDY4Yy00YmU1LThkMTItMzAwZDBkNTllMmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8sfKYGLC5nODCc4rNBt08uvL9kVNUG3X3ix 31POKKmixDw+UgPyT/vleKIySnqbbQvj3PP8hoK8va/SbKYVFsEDfWvy+t0nsdnF 82WwftOOFIDmpdMYUg16AzlS8tC+UDXp3w2HA7X+QHbzRlKHzMDbnzKfBXRgDGfE fQN/qPwQgOX7v3aZqxVGeHG343dX6F2eW1mjhx31FW2xEy9NjxTQxuGBZpdRn2EF 85xb07B2HneW9aOodzdHinuIXZAQs3uueovcvdvnszOLUIjn0NqqrHvwepM8EZYH +JTdLl9CVVq0w7AGOlPhx2/HTHQoPUsU3kR8VqemWgaw8TEreQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCpS7tFE1uy2zeH8CVho2vMXuDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVh ZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUwY2RlY2JiYWEvYWFkYzJjNDgtMWI2OC0z YzNkLTgzY2EtYjg3ODRlMWRmOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjk1YWRjNDUtNTMyZS00ZTU1LTk2 YjktM2Y1MGNkZWNiYmFhLzI5NWFkYzQ1LTUzMmUtNGU1NS05NmI5LTNmNTBjZGVj YmJhYS5jcmwwHwYDVR0jBBgwFoAUJ+5WybmNrZnz2NSo7rjLdN2/+RMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yOTVhZGM0NS01MzJlLTRlNTUtOTZiOS0zZjUw Y2RlY2JiYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlKQVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChww7oSnKmmXI1D5iLA2f0lLXlMnFhrcgUTunNrtlbGj4V+GzMI1dUt XvwYimu/cQm2QZ5UTcC+CzdNCQ/Drn0uB5nbS5LCrdcTnbojJ5JdNqrBb85QDMfQ 5VkFCJ91kAona9XZ3tZ+NxEmzn36EZqiCfhM/6iB7KKP8wzm1BIc/3u8TH/XxdaX D93+INGaZCOSlzFa9MmBDrw3qcliU8f7n1jiMAFZN6GVxUvWoERWcxkDiUEvBYs6 /YW1hD5ExM0jol7bhpiqpBjO14yVy5ZMkSrepaBzMwAyKMGUTbLOKvS3Rw3TnLmJ aozRZnwakNGJggk+4yTiIF9vn32+j38= -----END CERTIFICATE-----Generated at Sun Dec 7 14:28:37 2025 by rpki-client