This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa File: 3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa (raw, json) Hash identifier: F+UM1BNcqUSl1ngcfb027N9MNzk+quXwGhhWO8nmMVw= Subject key identifier: 01:5B:67:AF:93:3B:55:F6:F0:3E:63:7D:78:99:6D:82:99:41:D7:46 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C0DD0C001889392020D075A40 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 33442 IP address blocks: 149.23.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:c0:01:88:93:92:02:0d:07:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=9afb5ea4-45fb-4821-9ee2-f02083cefe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:f8:6d:68:64:51:eb:b4:3b:eb:3d:ed:38: b3:e1:8b:34:b6:cb:2e:a8:1e:fe:7d:dc:c0:bf:36: eb:a9:b1:5e:5c:80:1c:74:9a:de:14:4b:1e:00:4c: dc:a7:a9:41:47:95:cf:24:d2:96:4b:4d:ec:ce:11: 2c:0a:c3:0e:54:00:fd:2f:1e:ee:d1:51:4c:8f:83: 3e:c7:d7:66:65:4a:87:db:ea:d7:47:d7:4c:4f:a1: be:93:ac:ff:5d:e8:f8:c8:f5:8a:a2:c2:93:73:ac: a1:58:20:43:f8:66:ee:c7:93:82:d6:35:8e:b8:53: ee:82:c3:79:a2:0c:0e:95:af:6d:52:19:df:00:92: bf:10:26:e8:c7:18:ee:4e:26:eb:84:34:2d:9b:44: ec:f2:00:0e:86:81:43:5d:f5:a5:07:32:0f:1c:b0: d9:9c:be:4a:c3:c9:3e:24:dd:10:3b:2b:b5:b9:2b: b6:bf:a6:de:11:dc:fb:69:29:d8:8f:7c:a8:73:c0: 1d:8d:e4:29:de:ce:a0:40:28:59:df:cd:f9:4a:b0: 4f:f2:7d:af:7f:2e:c1:1d:7a:8a:96:e0:c6:73:27: 06:da:22:b6:7d:5b:57:89:3d:87:a1:95:cb:0c:5b: 6d:1d:90:6f:f1:dd:bb:78:88:63:3f:46:c1:ed:1b: e0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5B:67:AF:93:3B:55:F6:F0:3E:63:7D:78:99:6D:82:99:41:D7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3d20ffca-28cc-3da3-9daa-32ebcb7b038b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:89:d5:90:ac:54:72:72:14:86:cb:73:34:86:80:b8:08:ad: 44:73:49:07:b6:ea:62:23:be:22:1f:0b:05:e3:d5:26:18:27: 1c:4f:b7:56:22:bb:a4:17:8b:ba:39:c7:c7:a2:01:04:8c:0f: b1:ea:44:9b:8d:8c:b3:e1:67:55:76:60:7a:22:ed:99:92:18: 65:23:95:ce:a1:d9:18:57:c6:84:2f:ed:4a:a1:90:e5:71:ed: 39:7d:21:6f:9f:83:f7:5c:06:cd:20:3f:28:88:6f:03:5e:ce: 62:00:6a:26:34:96:99:af:99:8a:3f:6a:44:a5:17:ec:83:2e: 65:f5:f8:78:67:49:71:eb:01:68:0d:9a:f4:d0:de:44:2d:e5: 6f:dd:59:d0:27:e9:01:bd:28:15:dd:cc:f4:fb:c4:f0:ed:3c: 69:b6:84:54:db:3b:2e:0d:18:90:6d:12:fd:8c:8f:92:28:34: 81:e9:57:95:01:c8:28:45:65:2f:69:23:cf:c8:c4:ed:50:ac: eb:3f:35:33:95:d7:6c:93:69:d8:76:68:f1:44:a6:9a:84:e6: 1d:ae:9b:cd:54:3b:ad:69:91:23:68:c6:31:cc:1a:ee:f5:d8: 5c:b1:66:d6:6a:8b:07:1b:a1:86:10:1c:4c:b6:cd:ed:52:93: 2c:ae:8f:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0MABiJOSAg0HWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk OWFmYjVlYTQtNDVmYi00ODIxLTllZTItZjAyMDgzY2VmZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N/4bWhkUeu0O+s97Tiz4Ys0tssuqB7+fdzA vzbrqbFeXIAcdJreFEseAEzcp6lBR5XPJNKWS03szhEsCsMOVAD9Lx7u0VFMj4M+ x9dmZUqH2+rXR9dMT6G+k6z/Xej4yPWKosKTc6yhWCBD+Gbux5OC1jWOuFPugsN5 ogwOla9tUhnfAJK/ECboxxjuTibrhDQtm0Ts8gAOhoFDXfWlBzIPHLDZnL5Kw8k+ JN0QOyu1uSu2v6beEdz7aSnYj3yoc8AdjeQp3s6gQChZ3835SrBP8n2vfy7BHXqK luDGcycG2iK2fVtXiT2HoZXLDFttHZBv8d27eIhjP0bB7RvgRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFbZ6+TO1X28D5jfXiZbYKZQddGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvM2QyMGZmY2EtMjhjYy0z ZGEzLTlkYWEtMzJlYmNiN2IwMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWJ1ZCsVHJyFIbLczSGgLgIrURzSQe26mIjviIfCwXj1SYYJxxPt1Yi u6QXi7o5x8eiAQSMD7HqRJuNjLPhZ1V2YHoi7ZmSGGUjlc6h2RhXxoQv7UqhkOVx 7Tl9IW+fg/dcBs0gPyiIbwNezmIAaiY0lpmvmYo/akSlF+yDLmX1+HhnSXHrAWgN mvTQ3kQt5W/dWdAn6QG9KBXdzPT7xPDtPGm2hFTbOy4NGJBtEv2Mj5IoNIHpV5UB yChFZS9pI8/IxO1QrOs/NTOV12yTadh2aPFEppqE5h2um81UO61pkSNoxjHMGu71 2FyxZtZqiwcboYYQHEy2ze1Skyyuj3w= -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:17 2025 by rpki-client