This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa File: 133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa (raw, json) Hash identifier: Sr2VvzgDe7243iDDSgWTnLDyxMQUR37KKbBsrSICemc= Subject key identifier: D1:33:FA:D1:55:65:C5:DD:A4:71:42:3F:14:0A:CA:68:16:04:16:0B Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584BCF0061259100623DE7ADE800 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa Signing time: Mon 10 Nov 2025 02:00:31 +0000 ROA not before: Mon 10 Nov 2025 02:00:31 +0000 ROA not after: Sun 08 Feb 2026 02:00:31 +0000 asID: 394027 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:cf:00:61:25:91:00:62:3d:e7:ad:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Nov 10 02:00:31 2025 GMT Not After : Feb 8 02:00:31 2026 GMT Subject: CN=ff58ed4a-a90f-47ef-a245-94084c0f0c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:9a:20:d1:cc:aa:62:1b:ea:5d:4f:05:30: c2:c1:9f:5c:40:2d:08:76:80:5a:6c:e5:4b:bc:e8: bb:12:0a:f4:6b:23:14:77:70:41:b6:19:6b:a4:37: 43:3b:c5:bd:12:76:b5:a5:cb:07:d0:29:c9:74:7c: f7:ab:de:f5:dd:bd:5f:51:12:bc:7d:0e:31:57:c9: de:34:ef:06:d4:ec:d2:75:c8:0e:f3:ae:c6:cc:04: 27:34:d9:77:f5:93:6f:c4:a5:c6:c6:b0:59:8b:28: ee:5b:0e:a0:c2:50:99:0c:a3:6f:24:7c:f0:6e:ca: 16:11:c7:92:87:83:56:67:fa:d3:6e:cf:aa:01:8d: 6b:da:0f:6d:dd:a1:b1:86:30:32:2a:97:9e:c1:a4: 4c:08:dc:03:25:cf:e1:14:ee:f8:39:c3:d2:ac:1b: 82:42:eb:0f:ba:3a:a1:90:76:a5:78:78:f9:f9:3a: 62:b1:97:ec:9b:68:4f:df:6e:2c:7d:36:0b:97:5c: ad:87:7b:78:53:4b:1a:39:58:91:fd:29:cf:c1:3a: 02:75:76:12:86:ce:50:51:76:52:e7:a5:f2:04:af: b6:6e:ad:76:45:42:66:f5:f9:25:cc:9e:30:98:4a: 73:de:33:5d:41:13:66:5c:c7:23:cb:d3:81:c3:fc: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:33:FA:D1:55:65:C5:DD:A4:71:42:3F:14:0A:CA:68:16:04:16:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:37:66:ee:17:f4:4a:1f:45:8d:91:7f:4e:b9:7e:62:84:89: 4f:18:c2:72:07:05:e4:61:b7:d8:3b:08:2a:71:02:5d:ba:bc: 63:68:45:ff:f7:db:2e:b1:9d:a7:f7:b0:9b:72:19:ac:1b:19: 79:87:e4:51:29:87:d2:83:58:89:20:db:a5:93:19:60:ff:2e: 28:2f:ff:f3:88:60:89:db:ef:94:4d:76:5e:0f:0a:06:58:88: 1e:c4:b0:ce:8d:6b:f3:e0:51:d4:c9:b5:99:c6:b8:bd:ee:cc: c8:65:59:5f:0a:c3:86:b4:44:0b:a2:b0:cc:62:25:5d:bf:5a: 11:9a:18:57:f9:c5:2a:61:ac:79:96:92:28:e1:12:49:bf:8e: 8f:7c:0d:b8:ec:00:eb:a5:bd:35:46:28:7c:a5:80:63:37:0d: 51:b2:9f:20:b0:49:f2:01:9a:79:e4:04:f3:8c:8e:69:2c:8b: bd:ae:d2:8c:6e:11:d9:60:2f:f9:cd:cb:3b:67:af:20:08:c2: a0:0e:93:76:6d:20:b7:a0:2b:94:1d:6e:3e:7f:a8:62:4a:73: 7e:16:7e:00:cf:27:60:f2:cb:61:36:b6:f9:9b:47:29:df:20: 5d:cf:9c:38:2a:62:a1:e8:62:af:8e:7d:78:ee:91:b9:99:2b: 29:0d:97:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvPAGElkQBiPeet6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MTExMDAyMDAzMVoXDTI2MDIwODAyMDAzMVowLzEtMCsGA1UEAxMk ZmY1OGVkNGEtYTkwZi00N2VmLWEyNDUtOTQwODRjMGYwYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgyaINHMqmIb6l1PBTDCwZ9cQC0IdoBabOVL vOi7Egr0ayMUd3BBthlrpDdDO8W9Ena1pcsH0CnJdHz3q9713b1fURK8fQ4xV8ne NO8G1OzSdcgO867GzAQnNNl39ZNvxKXGxrBZiyjuWw6gwlCZDKNvJHzwbsoWEceS h4NWZ/rTbs+qAY1r2g9t3aGxhjAyKpeewaRMCNwDJc/hFO74OcPSrBuCQusPujqh kHaleHj5+TpisZfsm2hP324sfTYLl1yth3t4U0saOViR/SnPwToCdXYShs5QUXZS 56XyBK+2bq12RUJm9fklzJ4wmEpz3jNdQRNmXMcjy9OBw/wSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEz+tFVZcXdpHFCPxQKymgWBBYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMTMzYmRmOGItOTRjYy0z YjRiLWEyZGEtOGYwMDk0N2MwNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg3Zu4X9EofRY2Rf065fmKEiU8YwnIHBeRht9g7CCpxAl26vGNoRf/3 2y6xnaf3sJtyGawbGXmH5FEph9KDWIkg26WTGWD/Ligv//OIYInb75RNdl4PCgZY iB7EsM6Na/PgUdTJtZnGuL3uzMhlWV8Kw4a0RAuisMxiJV2/WhGaGFf5xSphrHmW kijhEkm/jo98DbjsAOulvTVGKHylgGM3DVGynyCwSfIBmnnkBPOMjmksi72u0oxu EdlgL/nNyztnryAIwqAOk3ZtILegK5Qdbj5/qGJKc34WfgDPJ2Dyy2E2tvmbRynf IF3PnDgqYqHoYq+OfXjukbmZKykNl08= -----END CERTIFICATE-----Generated at Mon Dec 8 09:21:21 2025 by rpki-client