This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa File: 4bfba0d7-8739-3f45-a18a-99f16f93e756.roa (raw, json) Hash identifier: 0BM6/ZKPG2TZ8OrHRhIP1/Dazu3sEFoYLWVsKD1pCWI= Subject key identifier: A0:91:61:89:39:2D:8B:A6:BC:DA:DF:25:49:A9:E4:B2:2F:FB:33:D7 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C0DD0BFDFF49DAEBFD6E3FE00 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 14618 IP address blocks: 149.23.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:bf:df:f4:9d:ae:bf:d6:e3:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=7cc6705b-c269-4857-80dd-683b3ee61150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8a:f4:7a:c7:e8:ee:2d:49:ca:b3:5d:df:5f: 30:78:97:cf:1b:90:ea:85:7b:9a:21:7b:4e:ac:5e: 9a:22:b5:45:89:15:f0:ef:e6:b2:17:1d:60:46:61: 5a:f9:fc:8e:f4:b7:5b:e8:1a:34:e5:80:f5:e0:0d: f2:34:c2:cc:7f:cb:19:01:53:be:c1:33:d9:a1:07: 16:42:48:33:ba:13:5f:4a:3c:dc:c9:e3:b0:2b:a3: 3f:5c:97:59:9a:b3:ea:ac:16:8d:87:6c:b1:ff:33: 4e:4a:1e:95:c0:26:fc:bb:82:a9:d1:0d:22:a8:0b: 44:1f:cf:0f:61:3e:a5:cd:4d:26:2c:55:eb:7c:e7: c3:fa:96:bd:d2:ce:d1:4e:13:2f:e6:66:92:ed:a0: 98:1f:9f:e4:43:4c:f4:98:20:f3:8b:f3:11:89:8c: ef:e5:b4:53:6d:0d:60:c4:a9:74:2c:34:08:b0:45: 5e:a6:73:f1:8a:9e:3b:64:42:a9:ce:9f:be:62:8c: ef:ff:6c:e3:68:dc:d2:f5:cc:fa:aa:a2:e4:31:01: 0f:8a:28:6e:6f:73:45:75:38:9f:9f:07:91:83:aa: 2b:c4:ab:b7:f1:13:8b:00:1b:7e:3c:a1:d3:59:dd: 00:37:b4:14:8d:60:da:47:1e:82:21:0a:11:78:df: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:91:61:89:39:2D:8B:A6:BC:DA:DF:25:49:A9:E4:B2:2F:FB:33:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/4bfba0d7-8739-3f45-a18a-99f16f93e756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:72:f4:67:92:0b:bc:95:06:b6:70:e2:cf:50:59:05:d0:03: 47:c8:5b:70:95:56:b6:2f:04:a5:8b:8f:a0:67:ad:31:31:06: ef:f4:81:b2:cc:cf:5c:36:a7:fd:8c:ec:dc:9c:52:6f:a5:0c: ed:5e:d9:0c:1f:6b:02:9e:d4:f9:73:ab:37:4c:e4:81:df:56: b2:1d:cc:ed:33:95:30:b6:b6:21:fb:56:a6:1b:d0:86:90:63: b3:1a:01:99:3b:86:7f:1d:f6:ba:fb:1f:d5:3c:8e:75:b8:9d: 8f:f1:3a:73:82:91:04:ec:7a:24:ff:9e:b4:1e:91:55:1d:de: 7f:15:c1:d4:e5:3f:94:4a:09:0e:74:ec:cc:a6:79:cf:65:8b: 1f:58:b2:f2:bf:56:35:2d:c3:85:17:5d:b5:92:6d:65:48:16: 85:d1:76:15:f3:76:4c:44:19:ab:de:72:10:a6:86:d7:3d:33: 3c:c0:41:c3:59:0f:a6:92:6b:48:b0:02:96:f8:d8:b8:23:95: a6:d5:c1:e8:8a:0d:2c:d2:ab:ff:8d:ae:83:c5:8c:75:96:10: 5c:85:65:e3:82:62:d3:97:f9:40:41:27:46:70:5b:ef:d0:e2: 5c:21:ad:8b:82:4c:98:2a:01:63:a7:06:19:b7:49:93:69:c2: 56:4d:53:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0L/f9J2uv9bj/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk N2NjNjcwNWItYzI2OS00ODU3LTgwZGQtNjgzYjNlZTYxMTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYr0esfo7i1JyrNd318weJfPG5DqhXuaIXtO rF6aIrVFiRXw7+ayFx1gRmFa+fyO9Ldb6Bo05YD14A3yNMLMf8sZAVO+wTPZoQcW QkgzuhNfSjzcyeOwK6M/XJdZmrPqrBaNh2yx/zNOSh6VwCb8u4Kp0Q0iqAtEH88P YT6lzU0mLFXrfOfD+pa90s7RThMv5maS7aCYH5/kQ0z0mCDzi/MRiYzv5bRTbQ1g xKl0LDQIsEVepnPxip47ZEKpzp++Yozv/2zjaNzS9cz6qqLkMQEPiihub3NFdTif nweRg6orxKu38ROLABt+PKHTWd0AN7QUjWDaRx6CIQoReN+/cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCRYYk5LYumvNrfJUmp5LIv+zPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNGJmYmEwZDctODczOS0z ZjQ1LWExOGEtOTlmMTZmOTNlNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRdpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVy9GeSC7yVBrZw4s9QWQXQA0fIW3CVVrYvBKWLj6BnrTExBu/0gbLM z1w2p/2M7NycUm+lDO1e2QwfawKe1PlzqzdM5IHfVrIdzO0zlTC2tiH7VqYb0IaQ Y7MaAZk7hn8d9rr7H9U8jnW4nY/xOnOCkQTseiT/nrQekVUd3n8VwdTlP5RKCQ50 7Mymec9lix9YsvK/VjUtw4UXXbWSbWVIFoXRdhXzdkxEGavechCmhtc9MzzAQcNZ D6aSa0iwApb42LgjlabVweiKDSzSq/+NroPFjHWWEFyFZeOCYtOX+UBBJ0ZwW+/Q 4lwhrYuCTJgqAWOnBhm3SZNpwlZNUw8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:53 2025 by rpki-client