This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa File: ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa (raw, json) Hash identifier: iMS9pfigDj51UXqsoltFsAwN0R4JnbXpXdUzDHCZ4+8= Subject key identifier: 20:2C:E0:47:C9:B1:BA:F0:A0:FC:FB:EC:21:59:BD:F3:39:0D:AC:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584C338131F1F906988C35C52280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa Signing time: Tue 16 Dec 2025 02:00:31 +0000 ROA not before: Tue 16 Dec 2025 02:00:31 +0000 ROA not after: Mon 16 Mar 2026 01:00:31 +0000 asID: 33651 IP address blocks: 24.7.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:81:31:f1:f9:06:98:8c:35:c5:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Mar 16 01:00:31 2026 GMT Subject: CN=6bdd2338-df3b-403b-bedc-03da0a855b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:aa:54:ed:dd:8d:8f:2f:23:c3:82:1f:e8:a3: 98:09:2a:a5:25:b3:be:0c:be:2d:1b:c1:bd:e3:2c: 03:4b:29:19:8c:e3:f1:b7:fc:4e:60:ad:4d:b2:02: bb:c5:ae:26:b5:55:71:08:47:ee:47:d2:4f:ff:a7: 75:23:ee:20:96:91:b5:48:5b:4a:ff:c8:21:86:1e: 05:a8:95:b8:a7:1b:7d:81:73:5a:bf:18:8a:13:87: b0:1c:ae:ec:52:50:2c:96:ee:bc:bc:12:20:09:5d: 6f:ab:9f:f9:b9:7a:85:29:92:9a:27:b1:3e:a3:6b: be:bd:aa:20:dc:36:24:66:84:d0:27:42:bc:34:ca: cc:5b:1d:d0:a4:18:e0:87:a0:9f:71:1f:68:a0:ed: 1e:dc:cc:7e:ed:b1:07:bb:f3:03:83:5c:5f:b4:e4: db:74:b6:9c:00:2f:43:9d:f8:45:4b:9d:47:f3:e8: 4d:b8:1d:cc:54:8f:d2:86:36:97:ff:60:7c:05:eb: 09:74:f6:12:8d:53:9c:74:d9:e5:5f:38:f9:8c:e8: 07:5b:3f:17:19:52:48:6e:58:7b:e7:ab:7f:25:60: 99:7b:17:79:1d:35:25:ca:79:5a:4c:a3:b7:43:47: 84:2d:c6:33:0c:40:23:c9:76:45:6c:b9:c9:d1:95: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2C:E0:47:C9:B1:BA:F0:A0:FC:FB:EC:21:59:BD:F3:39:0D:AC:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce8f4ab5-204c-3e32-a923-b8780e1dd302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 24.7.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:88:62:03:81:71:31:18:7c:1d:5a:de:6e:ad:a9:d7:82:ff: 72:c6:d2:9e:10:ad:ff:b3:7c:27:d5:b6:36:c6:67:65:fc:37: c1:24:e2:f9:3d:46:54:df:82:4a:22:b8:9e:f9:c2:3a:99:7d: d8:49:7e:29:95:a4:22:21:bb:44:d6:e7:6b:ac:27:9f:a4:ff: c0:e0:b5:c9:60:5a:d2:c8:a9:ce:b3:e6:ff:a1:52:73:f7:bd: 20:76:45:b8:26:69:be:a2:ba:15:79:7c:a5:56:82:ae:f1:7d: e0:c4:76:42:5b:7c:b1:ce:db:8a:b8:f1:f7:ed:73:1e:45:f0: 59:c4:e9:fc:47:48:cd:ef:49:e1:d3:13:d4:f6:be:68:6b:f0: 54:75:85:3d:27:91:ef:c0:4c:99:bf:f5:03:f3:b5:ed:65:82: 52:7b:b3:43:f7:b5:fb:7a:09:ae:36:44:18:31:5a:f8:cf:10: 16:dc:b7:f4:e9:5d:b9:27:b2:c9:f7:2e:55:d3:4c:21:0c:f5: 76:bb:89:a3:2d:d0:3f:1a:fe:d6:21:01:d5:c8:7d:fa:d6:5b: 60:dc:73:50:9f:c8:39:63:fe:00:8a:f4:c2:a1:05:bf:46:27: ea:71:c8:6d:3a:5a:36:8c:9e:74:e1:72:b9:fc:07:e8:92:74: ff:3c:8c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwzgTHx+QaYjDXFIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTIxNjAyMDAzMVoXDTI2MDMxNjAxMDAzMVowLzEtMCsGA1UEAxMk NmJkZDIzMzgtZGYzYi00MDNiLWJlZGMtMDNkYTBhODU1YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoapU7d2Njy8jw4If6KOYCSqlJbO+DL4tG8G9 4ywDSykZjOPxt/xOYK1NsgK7xa4mtVVxCEfuR9JP/6d1I+4glpG1SFtK/8ghhh4F qJW4pxt9gXNavxiKE4ewHK7sUlAslu68vBIgCV1vq5/5uXqFKZKaJ7E+o2u+vaog 3DYkZoTQJ0K8NMrMWx3QpBjgh6CfcR9ooO0e3Mx+7bEHu/MDg1xftOTbdLacAC9D nfhFS51H8+hNuB3MVI/ShjaX/2B8BesJdPYSjVOcdNnlXzj5jOgHWz8XGVJIblh7 56t/JWCZexd5HTUlynlaTKO3Q0eELcYzDEAjyXZFbLnJ0ZUGkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAs4EfJsbrwoPz77CFZvfM5DaxCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2U4ZjRhYjUtMjA0Yy0z ZTMyLWE5MjMtYjg3ODBlMWRkMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGAcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyIYgOBcTEYfB1a3m6tqdeC/3LG0p4Qrf+zfCfVtjbGZ2X8N8Ek4vk9 RlTfgkoiuJ75wjqZfdhJfimVpCIhu0TW52usJ5+k/8DgtclgWtLIqc6z5v+hUnP3 vSB2Rbgmab6iuhV5fKVWgq7xfeDEdkJbfLHO24q48fftcx5F8FnE6fxHSM3vSeHT E9T2vmhr8FR1hT0nke/ATJm/9QPzte1lglJ7s0P3tft6Ca42RBgxWvjPEBbct/Tp Xbknssn3LlXTTCEM9Xa7iaMt0D8a/tYhAdXIffrWW2Dcc1CfyDlj/gCK9MKhBb9G J+pxyG06WjaMnnThcrn8B+iSdP88jDg= -----END CERTIFICATE-----Generated at Thu Dec 18 20:34:25 2025 by rpki-client