This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa File: 8394f08e-3416-326e-ab35-e7b55f42ec58.roa (raw, json) Hash identifier: DIYv8BHCEBn01HfzYsy7fxOMK6bBsSiFKh2p1gov84w= Subject key identifier: A7:72:B6:34:2B:EC:A9:F5:8D:01:4E:66:B6:B0:12:1F:BB:3D:79:1D Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584C109B713673D192D963D791C0 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 397666 IP address blocks: 23.157.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:71:36:73:d1:92:d9:63:d7:91:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=ec4da209-1be8-4b6f-8878-aeabad8b0060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:25:9b:5c:12:57:75:93:40:6a:d2:9f:d5:2f: c2:78:57:92:c1:ac:77:2d:e4:fd:09:2c:22:fd:f2: 7e:7c:ff:35:44:e2:2c:a9:c6:91:75:f7:b7:41:fb: e0:c2:ec:95:f8:90:e0:fd:c0:28:b9:f2:89:8d:45: 35:d1:61:20:0c:fb:cb:f1:46:8a:58:ff:b2:fc:d4: 84:fa:5d:d1:f3:b7:2b:a9:eb:92:74:f1:c9:b3:83: 3d:4d:27:24:b6:87:1f:fb:4e:97:54:24:40:17:41: 25:e6:49:48:8f:fa:be:00:10:b6:8a:36:58:36:1f: 40:1b:89:e9:f5:b8:2b:f6:c3:da:3f:98:9e:ca:15: cf:33:ff:15:22:36:62:13:b8:bf:73:be:78:74:fc: 44:45:22:e3:28:4c:9e:6f:74:21:ae:f3:10:10:92: a4:7e:f1:31:e5:3c:51:c7:da:c4:59:01:3b:1b:9d: d8:ab:96:dd:96:02:c4:22:18:02:d1:a9:40:20:ec: f3:85:e7:f6:8a:cf:5c:b6:43:10:c7:fa:11:ed:03: 4f:d7:b3:01:6b:17:eb:63:ed:2c:8a:5b:82:00:18: 42:4b:c4:3b:27:65:36:c1:46:f8:5d:29:ec:13:82: 87:02:ee:4e:f3:ed:e6:26:3f:e6:5e:f3:57:d9:16: 8f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:72:B6:34:2B:EC:A9:F5:8D:01:4E:66:B6:B0:12:1F:BB:3D:79:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8394f08e-3416-326e-ab35-e7b55f42ec58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 23.157.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:f4:a4:36:3b:b0:35:77:f9:20:05:a8:c3:b5:9d:8f:b3:b0: 99:fa:ef:f8:2a:34:49:26:ab:75:7d:8b:f2:1a:91:7b:eb:ce: 88:81:9a:cd:13:b7:b7:37:32:e8:3c:de:95:15:04:6f:ae:7c: c2:bf:22:54:0a:39:71:a9:3c:31:8d:f2:39:ab:96:18:5b:a6: eb:4b:5c:e9:5d:8b:bd:f6:93:f3:8a:ac:b3:37:37:13:ca:44: 8f:9f:6b:63:57:d9:97:0f:69:62:52:43:01:e0:5d:52:21:75: f0:9e:10:83:58:81:dd:24:be:b7:98:e3:ad:ca:51:e8:a7:92: d4:7b:fe:d6:4b:96:5a:37:7a:e0:07:ae:79:62:b3:f0:c6:28: 89:90:c0:fa:5a:d5:96:07:a2:f6:f3:b2:a9:65:8a:59:cc:6d: 03:c8:65:7d:18:c5:45:d1:d9:5c:1c:17:2b:c5:21:00:d0:6a: c6:8d:98:da:ef:34:e0:de:d2:9d:7a:5e:fb:0c:50:71:3a:65: 8e:6c:13:5c:0d:56:cd:1f:6f:b8:9e:e2:49:03:5b:4c:61:02: 1b:98:a1:f1:6f:9f:ef:e5:47:73:86:d3:36:5d:c0:71:2d:40: 4b:6f:38:3a:8e:a0:fe:3b:36:79:2d:3e:a0:99:2b:c2:26:19: fb:a1:ff:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm3E2c9GS2WPXkcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZWM0ZGEyMDktMWJlOC00YjZmLTg4NzgtYWVhYmFkOGIwMDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCWbXBJXdZNAatKf1S/CeFeSwax3LeT9CSwi /fJ+fP81ROIsqcaRdfe3QfvgwuyV+JDg/cAoufKJjUU10WEgDPvL8UaKWP+y/NSE +l3R87crqeuSdPHJs4M9TScktocf+06XVCRAF0El5klIj/q+ABC2ijZYNh9AG4np 9bgr9sPaP5ieyhXPM/8VIjZiE7i/c754dPxERSLjKEyeb3QhrvMQEJKkfvEx5TxR x9rEWQE7G53Yq5bdlgLEIhgC0alAIOzzhef2is9ctkMQx/oR7QNP17MBaxfrY+0s iluCABhCS8Q7J2U2wUb4XSnsE4KHAu5O8+3mJj/mXvNX2RaPKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdytjQr7Kn1jQFOZrawEh+7PXkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvODM5NGYwOGUtMzQxNi0z MjZlLWFiMzUtZTdiNTVmNDJlYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK70pDY7sDV3+SAFqMO1nY+zsJn67/gqNEkmq3V9i/IakXvrzoiBms0T t7c3Mug83pUVBG+ufMK/IlQKOXGpPDGN8jmrlhhbputLXOldi732k/OKrLM3NxPK RI+fa2NX2ZcPaWJSQwHgXVIhdfCeEINYgd0kvreY463KUeinktR7/tZLllo3euAH rnlis/DGKImQwPpa1ZYHovbzsqllilnMbQPIZX0YxUXR2VwcFyvFIQDQasaNmNrv NODe0p16XvsMUHE6ZY5sE1wNVs0fb7ie4kkDW0xhAhuYofFvn+/lR3OG0zZdwHEt QEtvODqOoP47NnktPqCZK8ImGfuh/xE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:56:17 2025 by rpki-client