This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa File: f920443e-ab0e-3df1-beae-30701559a976.roa (raw, json) Hash identifier: HkyPUV7QjDbiFUTc4L6OLs6wp3gfQwjCKXrVz0Y1A0I= Subject key identifier: 0C:5C:6F:AB:E4:F8:7F:71:E2:7F:74:36:EC:70:0A:92:46:D1:82:EB Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b Certificate serial: 010D0C9F4328584BDCF5C5BAA527024CCD715680 Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa Signing time: Sat 15 Nov 2025 02:00:32 +0000 ROA not before: Sat 15 Nov 2025 02:00:32 +0000 ROA not after: Fri 13 Feb 2026 02:00:32 +0000 asID: 21949 IP address blocks: 198.98.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:dc:f5:c5:ba:a5:27:02:4c:cd:71:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b Validity Not Before: Nov 15 02:00:32 2025 GMT Not After : Feb 13 02:00:32 2026 GMT Subject: CN=55b6c67a-2b80-4d36-850b-9162459dc4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:91:f9:e1:79:2a:36:7c:b6:1c:b4:a9:5a: 1a:4a:af:18:6d:6c:27:c8:e4:eb:1f:d1:9a:32:6d: 5c:71:15:f2:cd:d3:bd:e0:08:d6:b0:c9:54:97:77: 83:b4:a4:c7:be:43:62:bc:67:df:8b:d5:4b:9a:c2: f3:b3:0a:08:d1:1a:e3:ac:8c:59:95:45:f2:97:23: e3:1e:dc:89:65:b0:e6:c2:b0:28:49:c0:65:9f:da: ce:82:fe:a7:7c:49:3b:e3:78:d7:ce:e5:6d:04:5a: 94:be:a0:fd:09:64:af:54:a3:f1:b9:0d:3d:3d:99: db:18:65:36:bc:17:86:45:a9:a8:93:f8:98:f6:08: ca:23:c6:e3:b4:dd:9b:dc:06:fd:e8:b1:9b:84:28: 36:15:0a:42:24:7d:6e:c8:d8:b6:cc:85:19:05:ca: 07:7e:3e:f8:32:b7:5d:f6:6e:f2:0f:b2:70:3c:cc: 95:39:9b:45:a5:1d:6c:63:6d:a4:c2:6a:d1:80:28: 88:3d:ce:2c:5c:cc:d2:52:40:fc:3e:71:0c:bd:38: 65:f6:cb:43:ad:30:1c:2d:d1:3c:ed:33:d2:1e:a1: 43:3d:63:22:3c:69:ee:fb:0d:20:19:eb:45:2d:42: 96:b4:ca:ae:47:32:6b:74:0f:bb:eb:cf:69:09:cb: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5C:6F:AB:E4:F8:7F:71:E2:7F:74:36:EC:70:0A:92:46:D1:82:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f920443e-ab0e-3df1-beae-30701559a976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl X509v3 Authority Key Identifier: keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer sbgp-ipAddrBlock: critical IPv4: 198.98.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:02:4a:ec:ed:c5:f2:59:84:2d:d6:e6:c0:b0:6f:31:a9:b3: b0:08:cd:3a:6b:6f:49:4b:8b:45:60:d8:8b:ca:05:22:37:13: 0c:9e:c5:9b:a0:68:47:0e:d1:6c:24:0c:12:49:42:f7:08:38: 0e:a8:7d:d7:88:ce:2e:e0:65:07:a5:bd:24:11:f3:9d:c3:4a: 06:c3:34:ac:1b:7d:eb:15:ac:76:f8:c6:72:9b:22:bf:2c:bc: 25:84:24:d2:8b:5f:64:0d:60:6a:c3:90:52:9d:db:1b:19:9f: c3:87:e9:f9:2f:dd:24:10:f9:9a:99:c7:d9:16:8c:b1:9d:2c: cb:ea:fe:38:ad:2f:f0:b7:30:25:35:03:00:b2:d2:d0:b0:a2: a3:1d:03:47:2b:ff:94:bc:f0:5d:cd:09:7a:ee:d2:b8:20:c4: 2e:ac:c0:a1:6a:ee:c5:61:a4:b3:71:87:9c:8c:5f:88:81:db: 2c:bc:72:f9:02:c5:60:be:61:fb:16:ae:76:36:bc:60:1b:12: 20:2b:d1:63:d3:74:21:9c:46:fa:b8:db:b1:e3:f2:a6:06:26: 82:06:71:3f:b4:e6:95:74:c9:2a:c1:e2:18:59:78:0c:91:95: 31:39:5f:f4:a1:bd:e2:a6:a9:81:fd:2c:3b:99:91:bd:d9:8d: 08:d6:60:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEvc9cW6pScCTM1xVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5MTQwY2EtMjc3ZS00ODcxLWExMDAtNDUxZDA2NmQx YzViMB4XDTI1MTExNTAyMDAzMloXDTI2MDIxMzAyMDAzMlowLzEtMCsGA1UEAxMk NTViNmM2N2EtMmI4MC00ZDM2LTg1MGItOTE2MjQ1OWRjNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj+R+eF5KjZ8thy0qVoaSq8YbWwnyOTrH9Ga Mm1ccRXyzdO94AjWsMlUl3eDtKTHvkNivGffi9VLmsLzswoI0RrjrIxZlUXylyPj HtyJZbDmwrAoScBln9rOgv6nfEk743jXzuVtBFqUvqD9CWSvVKPxuQ09PZnbGGU2 vBeGRamok/iY9gjKI8bjtN2b3Ab96LGbhCg2FQpCJH1uyNi2zIUZBcoHfj74Mrdd 9m7yD7JwPMyVOZtFpR1sY22kwmrRgCiIPc4sXMzSUkD8PnEMvThl9stDrTAcLdE8 7TPSHqFDPWMiPGnu+w0gGetFLUKWtMquRzJrdA+7689pCcs8pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxcb6vk+H9x4n90NuxwCpJG0YLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkx NDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFkMDY2ZDFjNWIvZjkyMDQ0M2UtYWIwZS0z ZGYxLWJlYWUtMzA3MDE1NTlhOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjQ5MTQwY2EtMjc3ZS00ODcxLWEx MDAtNDUxZDA2NmQxYzViLzI0OTE0MGNhLTI3N2UtNDg3MS1hMTAwLTQ1MWQwNjZk MWM1Yi5jcmwwHwYDVR0jBBgwFoAUcCTs3b7y+uva+LVMugLAQ4E9SMkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yNDkxNDBjYS0yNzdlLTQ4NzEtYTEwMC00NTFk MDY2ZDFjNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxmJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAACSuztxfJZhC3W5sCwbzGps7AIzTprb0lLi0Vg2IvKBSI3EwyexZug aEcO0WwkDBJJQvcIOA6ofdeIzi7gZQelvSQR853DSgbDNKwbfesVrHb4xnKbIr8s vCWEJNKLX2QNYGrDkFKd2xsZn8OH6fkv3SQQ+ZqZx9kWjLGdLMvq/jitL/C3MCU1 AwCy0tCwoqMdA0cr/5S88F3NCXru0rggxC6swKFq7sVhpLNxh5yMX4iB2yy8cvkC xWC+YfsWrnY2vGAbEiAr0WPTdCGcRvq427Hj8qYGJoIGcT+05pV0ySrB4hhZeAyR lTE5X/ShveKmqYH9LDuZkb3ZjQjWYOs= -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:43 2025 by rpki-client