This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa File: d833a937-fd68-3b12-a552-2d99af1447a0.roa (raw, json) Hash identifier: aWaEsl7XugUAHOmwQk2EGtVPx6o6ibFffOpKUE3C+I8= Subject key identifier: 4F:20:84:F5:7F:EE:CD:B4:D9:4B:B1:3C:67:FD:7C:E9:DB:87:11:6D Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Certificate serial: 010D0C9F4328584BEC50848F1A9DBE07BF27B300 Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa Signing time: Thu 20 Nov 2025 14:00:39 +0000 ROA not before: Thu 20 Nov 2025 14:00:39 +0000 ROA not after: Wed 18 Feb 2026 14:00:39 +0000 asID: 198949 IP address blocks: 198.180.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ec:50:84:8f:1a:9d:be:07:bf:27:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc Validity Not Before: Nov 20 14:00:39 2025 GMT Not After : Feb 18 14:00:39 2026 GMT Subject: CN=69556bc2-39df-4b97-bbfe-97a8f63b08dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:78:fe:c9:e6:b6:11:6a:b9:f7:56:db:71: de:61:a1:bd:ba:8b:57:44:c1:f6:e6:ea:cb:9b:8d: f0:07:f7:0a:a6:ae:ca:6b:ff:d5:df:c5:2d:f0:ce: 79:d7:be:f7:40:1f:ba:b4:1b:0e:42:86:80:2f:d1: 69:74:07:d4:d7:3c:9d:64:30:1c:96:50:36:f1:e7: 25:e3:cd:79:70:61:46:b4:b0:f1:e1:a7:b0:a5:70: f4:f2:31:34:2d:8c:fd:97:06:36:2a:99:d7:cc:c2: 65:93:54:7d:94:06:e8:c7:a2:d5:63:5f:e9:8e:80: 64:41:1c:69:a1:0e:7e:09:c0:c2:82:f3:4c:c8:b2: d4:81:8c:b2:87:99:a7:79:23:20:0c:76:95:38:63: 0f:70:42:b1:a1:de:61:93:da:b1:d7:8f:a2:f5:3c: 56:27:a5:6d:73:8d:84:29:a9:56:37:58:11:aa:3a: 9e:fc:0a:b9:01:b5:6b:9a:52:10:82:42:a1:b7:13: 40:5d:45:f3:9b:f6:29:75:37:4f:1d:b4:9f:e2:71: 60:70:83:bf:ee:8d:de:45:b1:bb:bc:47:8a:ad:8f: b2:2f:76:b6:28:78:37:86:75:6c:3b:1b:d5:cb:c2: 5c:b9:82:9d:3b:b0:1c:70:c0:eb:02:ea:9d:2b:c0: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:20:84:F5:7F:EE:CD:B4:D9:4B:B1:3C:67:FD:7C:E9:DB:87:11:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl X509v3 Authority Key Identifier: keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer sbgp-ipAddrBlock: critical IPv4: 198.180.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:db:b8:75:03:e6:ea:b8:a3:53:67:e8:de:b7:8b:a8:bd:c6: 80:bd:e2:c4:c8:4f:d4:b5:c0:4f:f9:a7:0c:79:a2:88:ff:34: 14:c4:44:5f:62:d8:5d:35:56:a3:84:ad:e7:d0:70:c8:ae:f2: 14:8a:0c:cb:aa:c3:1d:f9:06:d1:d8:f6:ee:ad:7f:52:5b:f4: 1a:d0:7a:4c:1b:30:01:69:0b:fe:30:05:4b:86:7e:b7:53:84: 21:ba:b0:4f:3d:c4:a5:73:12:dc:ad:6f:ac:87:5f:1c:b3:26: d7:2d:35:3c:4e:a2:81:d9:6b:79:70:34:c5:00:9e:22:df:82: f8:66:96:c4:10:06:b9:9c:dc:80:f1:51:5c:7e:8d:77:fb:bf: 56:6c:fc:82:f8:9d:a0:7e:1c:b0:76:7b:ca:31:c7:c8:97:93: d9:3e:f7:21:0a:63:bc:4d:16:9f:a8:65:fb:86:ea:eb:05:67: 90:7f:7c:2c:52:9d:41:07:6b:f2:1b:f4:66:d4:1d:54:b5:15: 1b:d3:85:1c:f8:fa:ed:48:9b:b1:c8:0e:44:6a:6f:67:ca:c9: 42:97:92:c4:54:c1:bf:1b:2a:73:ea:92:ba:30:d5:37:4f:12: d2:43:27:ca:d5:4d:a6:bc:8b:94:47:d5:c9:3b:d6:82:f3:04: 07:b8:45:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvsUISPGp2+B78nswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTUzYjFiMjAtMDg1OS00YjFiLTlmZmUtMzdlOTAwNDFh OGNjMB4XDTI1MTEyMDE0MDAzOVoXDTI2MDIxODE0MDAzOVowLzEtMCsGA1UEAxMk Njk1NTZiYzItMzlkZi00Yjk3LWJiZmUtOTdhOGY2M2IwOGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkh4/snmthFqufdW23HeYaG9uotXRMH25urL m43wB/cKpq7Ka//V38Ut8M551773QB+6tBsOQoaAL9FpdAfU1zydZDAcllA28ecl 4815cGFGtLDx4aewpXD08jE0LYz9lwY2KpnXzMJlk1R9lAbox6LVY1/pjoBkQRxp oQ5+CcDCgvNMyLLUgYyyh5mneSMgDHaVOGMPcEKxod5hk9qx14+i9TxWJ6Vtc42E KalWN1gRqjqe/Aq5AbVrmlIQgkKhtxNAXUXzm/YpdTdPHbSf4nFgcIO/7o3eRbG7 vEeKrY+yL3a2KHg3hnVsOxvVy8JcuYKdO7AccMDrAuqdK8B2HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8ghPV/7s202UuxPGf9fOnbhxFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNi MWIyMC0wODU5LTRiMWItOWZmZS0zN2U5MDA0MWE4Y2MvZDgzM2E5MzctZmQ2OC0z YjEyLWE1NTItMmQ5OWFmMTQ0N2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTUzYjFiMjAtMDg1OS00YjFiLTlm ZmUtMzdlOTAwNDFhOGNjLzE1M2IxYjIwLTA4NTktNGIxYi05ZmZlLTM3ZTkwMDQx YThjYy5jcmwwHwYDVR0jBBgwFoAUpfwsrNFV8Pf+yRnJtvPfULKMdvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xNTNiMWIyMC0wODU5LTRiMWItOWZmZS0zN2U5 MDA0MWE4Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrTlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfbuHUD5uq4o1Nn6N63i6i9xoC94sTIT9S1wE/5pwx5ooj/NBTERF9i 2F01VqOErefQcMiu8hSKDMuqwx35BtHY9u6tf1Jb9BrQekwbMAFpC/4wBUuGfrdT hCG6sE89xKVzEtytb6yHXxyzJtctNTxOooHZa3lwNMUAniLfgvhmlsQQBrmc3IDx UVx+jXf7v1Zs/IL4naB+HLB2e8oxx8iXk9k+9yEKY7xNFp+oZfuG6usFZ5B/fCxS nUEHa/Ib9GbUHVS1FRvThRz4+u1Im7HIDkRqb2fKyUKXksRUwb8bKnPqkrow1TdP EtJDJ8rVTaa8i5RH1ck71oLzBAe4RWE= -----END CERTIFICATE-----Generated at Sun Dec 7 14:16:04 2025 by rpki-client