This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa File: 76c44b00-989e-36fc-900c-bd70d2bf1e52.roa (raw, json) Hash identifier: OjKNvBLDGdUlXbScAiy5xWfRVkHEZVs3e1ztb33gVvE= Subject key identifier: 4E:A8:81:E4:12:0F:F3:DD:C0:DF:77:21:89:FE:16:6C:6E:F7:22:26 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584C0DD0B8E7DF052704AC9AB4C0 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa Signing time: Tue 02 Dec 2025 14:00:39 +0000 ROA not before: Tue 02 Dec 2025 14:00:39 +0000 ROA not after: Mon 02 Mar 2026 14:00:39 +0000 asID: 33442 IP address blocks: 149.23.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:0d:d0:b8:e7:df:05:27:04:ac:9a:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Dec 2 14:00:39 2025 GMT Not After : Mar 2 14:00:39 2026 GMT Subject: CN=a2b52566-e82a-4204-8c8a-7fbdf707643d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:e6:d8:88:39:0a:bc:f2:7a:8f:b2:bc:dd: f4:e3:29:46:91:22:e5:71:ec:21:6f:0d:06:d8:27: 18:2f:b1:db:3a:e7:f6:18:fd:1e:db:80:0e:db:c0: 65:70:30:95:43:19:1a:22:c2:ae:3a:1d:68:fa:3d: 0b:a2:4a:cb:4c:3d:bc:f9:fe:f6:63:fb:da:f5:f6: 3d:f7:b0:71:cc:fc:0c:7d:e1:7e:dd:e8:48:11:d9: 56:87:b3:51:07:43:a5:eb:9d:81:4d:99:83:da:5a: d8:c4:6b:0a:63:75:1b:4e:a9:63:e6:5d:9c:86:9e: 88:d9:4f:05:ff:fd:59:5c:ab:de:e5:3d:c6:cc:64: 59:c4:4a:dd:a3:ef:b8:65:98:25:b7:af:2e:51:97: 2d:cc:dd:58:5e:12:d3:84:c8:4d:05:b4:ea:e5:01: e3:21:97:7b:4a:46:ab:81:06:7c:81:ea:6b:ae:23: 8c:3c:c2:15:00:1e:92:b3:2d:11:a5:46:3e:e3:31: 77:10:77:4a:a1:1b:65:a2:8b:f3:22:f3:f3:b7:a2: 1e:d4:8c:90:c8:cf:8c:57:48:89:4f:ee:82:6b:ca: 92:13:29:0e:ac:4d:2c:33:7a:46:aa:bf:1a:b1:4e: 0b:60:86:4b:7e:1f:85:d0:4c:36:64:3d:2c:4d:94: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:81:E4:12:0F:F3:DD:C0:DF:77:21:89:FE:16:6C:6E:F7:22:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/76c44b00-989e-36fc-900c-bd70d2bf1e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 149.23.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f3:9c:70:b2:9e:75:7d:b9:09:ea:56:da:47:3a:2b:8a:92: be:65:51:8f:06:f4:97:9a:85:c6:f2:64:5d:08:7d:62:74:bc: 5f:f0:02:6b:07:6f:a0:e6:d6:2b:39:87:c6:bf:91:fe:2d:cf: 04:60:49:c9:4d:94:4b:4d:4e:15:6f:7c:2d:42:c5:73:50:e2: e3:ff:be:73:de:f1:5e:50:79:05:cf:6d:86:8b:d9:b2:9d:31: 13:92:69:d2:d3:39:65:0e:fc:b6:f6:0c:50:6d:c9:ce:f8:fc: d3:29:90:ee:60:33:83:b1:e2:b0:72:32:f5:3b:7b:c4:57:91: 89:7a:0b:76:f6:18:23:3d:39:59:04:fa:7c:1e:18:08:ad:16: 5f:f1:b5:bc:b1:36:fb:9e:2e:b0:12:2d:bc:64:4f:f7:74:78: e4:75:9f:36:89:8e:96:a8:70:a4:eb:a0:01:a8:eb:dd:35:22: 29:c4:6a:04:b0:fa:57:ab:40:d8:d4:21:c6:55:50:3e:00:03: cc:93:1d:20:d7:89:80:c5:d1:88:e3:be:f7:7e:c9:5b:9c:a7: c3:d7:c0:74:83:15:f7:26:f7:47:81:77:98:f4:ab:ba:0f:82: ec:23:30:ad:2c:1b:f5:49:3d:55:cd:be:c2:2c:44:7c:98:36: ae:20:17:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwN0Ljn3wUnBKyatMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI1MTIwMjE0MDAzOVoXDTI2MDMwMjE0MDAzOVowLzEtMCsGA1UEAxMk YTJiNTI1NjYtZTgyYS00MjA0LThjOGEtN2ZiZGY3MDc2NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGvm2Ig5Crzyeo+yvN304ylGkSLlcewhbw0G 2CcYL7HbOuf2GP0e24AO28BlcDCVQxkaIsKuOh1o+j0LokrLTD28+f72Y/va9fY9 97BxzPwMfeF+3ehIEdlWh7NRB0Ol652BTZmD2lrYxGsKY3UbTqlj5l2chp6I2U8F //1ZXKve5T3GzGRZxErdo++4ZZglt68uUZctzN1YXhLThMhNBbTq5QHjIZd7Skar gQZ8geprriOMPMIVAB6Ssy0RpUY+4zF3EHdKoRtloovzIvPzt6Ie1IyQyM+MV0iJ T+6Ca8qSEykOrE0sM3pGqr8asU4LYIZLfh+F0Ew2ZD0sTZQZjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6ogeQSD/PdwN93IYn+Fmxu9yImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNzZjNDRiMDAtOTg5ZS0z NmZjLTkwMGMtYmQ3MGQyYmYxZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3znHCynnV9uQnqVtpHOiuKkr5lUY8G9JeahcbyZF0IfWJ0vF/wAmsH b6Dm1is5h8a/kf4tzwRgSclNlEtNThVvfC1CxXNQ4uP/vnPe8V5QeQXPbYaL2bKd MROSadLTOWUO/Lb2DFBtyc74/NMpkO5gM4Ox4rByMvU7e8RXkYl6C3b2GCM9OVkE +nweGAitFl/xtbyxNvueLrASLbxkT/d0eOR1nzaJjpaocKTroAGo6901IinEagSw +lerQNjUIcZVUD4AA8yTHSDXiYDF0Yjjvvd+yVucp8PXwHSDFfcm90eBd5j0q7oP guwjMK0sG/VJPVXNvsIsRHyYNq4gF7M= -----END CERTIFICATE-----Generated at Sun Dec 7 01:44:50 2025 by rpki-client