This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa File: 20ed8e04-a83d-3139-937f-62183b6e5173.roa (raw, json) Hash identifier: 3+UjsdguM8LZkk+oTWAkPngPbvE4xr5t8Yp1qbOYkiE= Subject key identifier: 16:DF:4B:73:42:26:78:7B:B0:49:21:48:6B:16:58:FC:7D:64:3D:48 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C0DD0B8A051AEC0FDD4F31C40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 33442 IP address blocks: 149.23.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:b8:a0:51:ae:c0:fd:d4:f3:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=109be1f0-656c-43ab-b2b4-a11c7fc88853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7e:89:cb:75:e2:95:84:f5:52:f2:9b:09:e8: 6b:35:c7:6b:39:c5:60:bf:d3:7d:ed:1f:b6:9b:58: 71:65:66:fb:ad:d9:80:c6:96:a0:90:52:70:00:51: 30:cd:76:c9:01:3c:66:50:fe:f9:2c:d9:4f:0a:2b: 91:ca:88:25:ea:5f:e7:18:0b:54:17:dc:28:f6:1e: 99:53:27:73:b2:84:1e:16:a5:59:67:8f:d1:a2:ab: 7f:b6:18:fe:2c:6c:b0:06:ad:46:34:c1:72:5d:98: 3e:6c:47:fc:a7:51:19:73:86:96:dd:b0:59:ba:26: d0:f0:1a:e7:62:be:84:ea:ea:fd:c0:57:51:e8:ae: 0c:78:17:2d:fc:4b:de:96:f9:fa:3f:7e:46:8c:dc: 0c:37:bb:d3:b4:17:db:64:d2:86:1f:75:e5:8b:d2: 49:ff:80:21:29:8b:d1:3f:5e:d2:41:1e:3f:d2:c3: 8f:55:15:39:98:9f:47:cc:d1:96:2d:cb:d4:4b:32: f6:be:2d:f6:12:58:f4:07:72:1b:62:29:19:65:5d: e9:cc:6c:f5:c1:9b:99:35:bc:51:f0:1e:da:0b:b4: 39:d6:2a:3e:e0:1c:24:84:0a:76:97:eb:db:3c:e9: 30:9d:ed:e4:7c:1b:c4:6c:80:55:33:05:a3:90:db: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DF:4B:73:42:26:78:7B:B0:49:21:48:6B:16:58:FC:7D:64:3D:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/20ed8e04-a83d-3139-937f-62183b6e5173.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c6:5d:a1:d1:09:0f:c1:8f:d9:41:43:da:0b:0d:e1:0a:62: b7:14:96:82:dc:e8:04:b6:e4:a4:b6:7f:73:83:78:3a:9d:c8: a3:d2:3a:fb:f8:6d:d2:f6:db:2f:c1:e8:ae:b8:46:af:b9:40: 06:f7:da:1c:83:c0:c1:63:39:7d:a9:64:fb:4c:ea:1d:68:5a: 40:0b:d8:4e:5a:d1:77:11:b7:94:34:79:07:7c:f7:0d:97:e5: ca:20:45:ef:b0:8d:ae:40:ef:7b:41:85:f3:80:de:34:fb:99: c1:5a:6d:7c:91:d0:ed:5d:83:3c:84:45:78:22:11:62:65:4e: c0:e6:71:46:79:ac:c3:9d:79:16:ac:75:55:e6:92:e2:dc:5d: 70:6d:ee:dd:60:1d:5f:df:7e:d6:b7:bb:ef:2c:cd:d5:3d:2c: 73:06:21:d6:11:d3:19:2b:06:ab:fb:58:24:6b:f1:b5:bf:51: 5a:32:e4:9c:9a:3a:29:bf:72:39:39:bc:af:ed:56:fb:c2:cb: be:a2:67:ed:92:7b:93:2a:1c:89:65:79:87:5d:2f:70:1f:60: ef:0d:83:34:8d:d2:f9:d8:fc:ce:39:d9:54:bb:9e:55:d3:2e: 0b:07:80:54:ca:6b:79:28:ba:6e:d8:32:5d:4e:56:d4:dc:e9: bb:28:bd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0LigUa7A/dTzHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk MTA5YmUxZjAtNjU2Yy00M2FiLWIyYjQtYTExYzdmYzg4ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp36Jy3XilYT1UvKbCehrNcdrOcVgv9N97R+2 m1hxZWb7rdmAxpagkFJwAFEwzXbJATxmUP75LNlPCiuRyogl6l/nGAtUF9wo9h6Z UydzsoQeFqVZZ4/Roqt/thj+LGywBq1GNMFyXZg+bEf8p1EZc4aW3bBZuibQ8Brn Yr6E6ur9wFdR6K4MeBct/Evelvn6P35GjNwMN7vTtBfbZNKGH3Xli9JJ/4AhKYvR P17SQR4/0sOPVRU5mJ9HzNGWLcvUSzL2vi32Elj0B3IbYikZZV3pzGz1wZuZNbxR 8B7aC7Q51io+4BwkhAp2l+vbPOkwne3kfBvEbIBVMwWjkNu0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbfS3NCJnh7sEkhSGsWWPx9ZD1IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMjBlZDhlMDQtYTgzZC0z MTM5LTkzN2YtNjIxODNiNmU1MTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALGXaHRCQ/Bj9lBQ9oLDeEKYrcUloLc6AS25KS2f3ODeDqdyKPSOvv4 bdL22y/B6K64Rq+5QAb32hyDwMFjOX2pZPtM6h1oWkAL2E5a0XcRt5Q0eQd89w2X 5cogRe+wja5A73tBhfOA3jT7mcFabXyR0O1dgzyERXgiEWJlTsDmcUZ5rMOdeRas dVXmkuLcXXBt7t1gHV/ffta3u+8szdU9LHMGIdYR0xkrBqv7WCRr8bW/UVoy5Jya Oim/cjk5vK/tVvvCy76iZ+2Se5MqHIlleYddL3AfYO8NgzSN0vnY/M452VS7nlXT LgsHgFTKa3koum7YMl1OVtTc6bsovb8= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:25 2025 by rpki-client