This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa File: 08d94185-ad52-3fcc-85c6-05879b3a374e.roa (raw, json) Hash identifier: 1DZUvcSV+UwpDekaLvdSFK7GdXO0g5/01zrDB/BNzEc= Subject key identifier: 71:3A:AB:3E:CB:AC:11:EA:20:DF:3C:D8:8E:09:69:24:85:A9:3C:19 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C109B96D33948CAA8E4CCBDFC Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa Signing time: Wed 03 Dec 2025 14:00:38 +0000 ROA not before: Wed 03 Dec 2025 14:00:38 +0000 ROA not after: Tue 03 Mar 2026 14:00:38 +0000 asID: 3949 IP address blocks: 157.238.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:10:9b:96:d3:39:48:ca:a8:e4:cc:bd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 3 14:00:38 2025 GMT Not After : Mar 3 14:00:38 2026 GMT Subject: CN=90775230-902e-4c46-90d6-7fbd65f500c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:db:5b:19:6e:c0:18:8e:f2:1b:d9:54:b6: f6:1c:f5:68:61:ab:5e:86:f3:80:56:09:70:9b:55: 4c:2e:28:14:00:d1:c7:d3:62:16:1d:f2:9d:53:bc: 83:0a:76:9e:84:84:0a:ba:eb:18:17:39:5a:ba:d1: 16:1b:ef:29:81:38:fa:66:39:18:05:c5:06:cb:e9: 49:ac:59:21:ca:9e:65:20:3f:e2:4d:88:c4:25:1f: 80:bd:aa:a0:d0:7d:6c:cb:a0:1a:c7:86:e4:9d:7e: 19:a0:eb:97:5a:75:f2:bb:d5:81:61:c7:1c:39:5f: fa:2b:98:43:92:24:fc:e5:2e:64:f6:b1:1c:5e:a0: 58:80:d8:2b:44:36:d9:17:52:8e:6f:de:f8:48:1a: ae:8b:ac:c9:5b:de:20:ea:59:a9:2a:7a:b6:08:de: a6:43:c7:66:a4:c2:a9:65:9b:c8:90:07:da:67:85: 3b:cb:e9:4a:86:96:41:8d:e1:05:ea:07:dc:c8:e1: e6:d7:95:7d:b5:22:3d:88:de:0b:61:27:b1:53:45: 2d:82:b5:39:7c:64:bd:c2:d4:63:73:85:2a:e1:64: f5:9e:ae:2b:8a:7e:7a:a9:94:c1:aa:54:9c:61:6f: 6a:43:9e:04:de:14:b0:c0:8b:08:89:b1:ac:19:1f: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3A:AB:3E:CB:AC:11:EA:20:DF:3C:D8:8E:09:69:24:85:A9:3C:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/08d94185-ad52-3fcc-85c6-05879b3a374e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 157.238.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:15:d4:20:32:8f:c0:d1:b2:06:89:7c:b2:dc:4a:1a:6a:d4: 52:8c:67:90:b3:d5:be:f2:04:bd:52:d2:41:bc:d6:eb:b0:23: df:6a:98:4c:9f:7b:a6:80:6b:d2:ab:b1:e8:4d:2e:28:eb:aa: 41:ed:67:5c:16:1d:4d:db:35:d3:4f:ba:fa:60:e7:43:79:6c: 7c:c9:7b:d7:e0:5c:b5:b4:1c:1c:34:aa:49:94:09:08:46:f0: 84:1a:80:24:92:78:a8:94:0d:bf:9e:79:51:d5:0b:7c:4b:b3: 34:21:f1:8c:14:1d:26:f7:57:2f:0d:db:aa:cf:9a:d8:eb:ea: ab:ee:af:85:65:46:28:d3:b6:49:d0:03:1a:3b:39:f8:ff:b4: 27:ae:fb:58:dc:ae:70:14:50:8a:04:3f:2b:e6:21:c9:af:70: 8b:9d:93:cc:17:8c:df:5a:70:8c:f9:71:d8:04:d0:85:a3:b3: bf:d1:1c:4d:d0:c5:30:25:8b:91:36:45:83:15:7e:c1:04:dd: 66:8e:0a:28:7f:2b:93:75:ed:06:14:26:bf:33:5a:d2:d3:6a: 0a:8c:75:91:a8:db:e1:4f:7f:ef:b8:30:67:66:1b:f7:c0:5a: 1c:8d:29:11:57:4c:29:3c:3b:8b:a9:d8:07:e7:d5:c2:fb:d9: 60:39:11:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEwQm5bTOUjKqOTMvfwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIwMzE0MDAzOFoXDTI2MDMwMzE0MDAzOFowLzEtMCsGA1UEAxMk OTA3NzUyMzAtOTAyZS00YzQ2LTkwZDYtN2ZiZDY1ZjUwMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzbWxluwBiO8hvZVLb2HPVoYatehvOAVglw m1VMLigUANHH02IWHfKdU7yDCnaehIQKuusYFzlautEWG+8pgTj6ZjkYBcUGy+lJ rFkhyp5lID/iTYjEJR+Avaqg0H1sy6Aax4bknX4ZoOuXWnXyu9WBYcccOV/6K5hD kiT85S5k9rEcXqBYgNgrRDbZF1KOb974SBqui6zJW94g6lmpKnq2CN6mQ8dmpMKp ZZvIkAfaZ4U7y+lKhpZBjeEF6gfcyOHm15V9tSI9iN4LYSexU0UtgrU5fGS9wtRj c4Uq4WT1nq4rin56qZTBqlScYW9qQ54E3hSwwIsIibGsGR/FowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE6qz7LrBHqIN882I4JaSSFqTwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMDhkOTQxODUtYWQ1Mi0z ZmNjLTg1YzYtMDU4NzliM2EzNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsV1CAyj8DRsgaJfLLcShpq1FKMZ5Cz1b7yBL1S0kG81uuwI99qmEyf e6aAa9KrsehNLijrqkHtZ1wWHU3bNdNPuvpg50N5bHzJe9fgXLW0HBw0qkmUCQhG 8IQagCSSeKiUDb+eeVHVC3xLszQh8YwUHSb3Vy8N26rPmtjr6qvur4VlRijTtknQ Axo7Ofj/tCeu+1jcrnAUUIoEPyvmIcmvcIudk8wXjN9acIz5cdgE0IWjs7/RHE3Q xTAli5E2RYMVfsEE3WaOCih/K5N17QYUJr8zWtLTagqMdZGo2+FPf++4MGdmG/fA WhyNKRFXTCk8O4up2Afn1cL72WA5Ee4= -----END CERTIFICATE-----Generated at Sat Dec 6 06:46:27 2025 by rpki-client