This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa File: 72be6899-0a9c-3151-8e0d-f784d1f56c09.roa (raw, json) Hash identifier: AQYuX5FRpBEiRkLFB7a1nW7rvTgZVcH2YDMWPrZcbE8= Subject key identifier: 65:C5:DF:26:79:3B:3A:7E:38:9E:50:1A:B2:33:47:C9:CB:95:76:36 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584BFBAB3C646D4AF6D85825AF78 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa Signing time: Wed 26 Nov 2025 02:00:31 +0000 ROA not before: Wed 26 Nov 2025 02:00:31 +0000 ROA not after: Tue 24 Feb 2026 02:00:31 +0000 asID: 1239 IP address blocks: 149.143.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fb:ab:3c:64:6d:4a:f6:d8:58:25:af:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 26 02:00:31 2025 GMT Not After : Feb 24 02:00:31 2026 GMT Subject: CN=12523e5d-b925-4139-ac5c-a113217a3841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:fb:fb:d0:60:ad:69:14:82:18:f4:00:2e: 6b:7f:7f:3f:db:13:ca:18:7d:dc:da:18:d9:bb:69: b3:d4:e7:1f:af:80:23:8f:d2:ac:d1:81:1a:f1:fe: b2:2c:d8:d1:7d:11:82:9b:df:ab:e8:46:26:28:12: 8b:8e:6e:79:84:ce:f1:fb:31:b3:4e:f1:10:70:19: f9:4b:07:0b:86:38:a7:f6:86:d8:04:80:26:19:4b: 45:ff:4e:44:ee:be:cc:3f:b6:1e:38:47:1c:8e:ca: 0b:22:93:c4:ad:cc:d0:bf:ee:b3:d8:f3:df:31:e6: 3a:e9:fa:04:25:7e:96:54:4e:c4:cb:5e:d1:21:6e: 54:bb:16:91:e9:01:21:11:f4:9d:77:45:3c:1b:af: 97:6f:61:f4:5f:dd:ad:c0:0e:a4:df:72:11:30:aa: 25:36:a3:53:fa:cd:7a:8f:5d:7e:cd:b9:e7:d8:fc: b8:7d:56:8f:75:eb:5c:9c:da:eb:a7:2d:26:05:dc: d1:96:22:8f:07:3f:e7:b1:7a:3c:2a:2f:f4:b3:f9: ad:70:e2:45:ca:aa:0d:69:1b:63:47:4b:bf:c3:68: 6f:f9:dc:42:29:49:25:eb:13:93:a2:b1:a5:bc:45: 51:e9:75:2b:a1:23:98:f5:25:88:24:15:ba:55:0a: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:DF:26:79:3B:3A:7E:38:9E:50:1A:B2:33:47:C9:CB:95:76:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/72be6899-0a9c-3151-8e0d-f784d1f56c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:66:be:80:33:98:3f:48:f1:34:44:e0:8d:7d:50:32:78:7e: f4:bb:be:4b:4f:cd:5d:9c:32:53:e2:79:7c:c3:52:ae:94:68: fc:c4:f6:19:74:18:8c:15:90:23:38:4b:54:38:31:43:3a:2e: f2:c3:93:08:57:bf:f6:d1:4a:42:26:32:35:5a:d2:f7:5e:c0: ea:77:60:97:d5:b7:5d:e1:6a:e6:67:fc:46:31:fe:50:20:9b: 17:1f:09:72:a7:70:23:bb:58:e1:16:65:ff:d6:6d:21:6f:72: 38:90:ed:cb:ff:72:a6:87:c0:fd:a7:b5:f2:ab:3f:7a:95:0d: 41:92:c7:83:f9:60:4b:03:af:a7:36:f1:4e:60:99:d4:4c:32: 55:16:99:80:32:51:8f:17:4e:a7:1a:83:ad:6d:60:1b:3d:6a: d8:0d:aa:cc:90:03:d1:66:1b:4e:7c:78:eb:1e:a3:26:2a:2a: cc:d5:6a:fd:e5:42:a4:07:ab:c5:d3:39:a9:57:52:a8:e1:09: 15:ec:93:7a:cc:57:4c:8d:c1:70:ad:d0:5a:08:02:d7:0e:97: 9d:46:53:f9:54:ca:e7:03:d4:8d:be:e7:18:a4:1d:e0:92:cd: 41:52:ee:15:aa:5b:cf:9a:e8:33:0b:c8:32:86:e1:73:d0:e1: 4c:08:62:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEv7qzxkbUr22Fglr3gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTEyNjAyMDAzMVoXDTI2MDIyNDAyMDAzMVowLzEtMCsGA1UEAxMk MTI1MjNlNWQtYjkyNS00MTM5LWFjNWMtYTExMzIxN2EzODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUr7+9BgrWkUghj0AC5rf38/2xPKGH3c2hjZ u2mz1Ocfr4Ajj9Ks0YEa8f6yLNjRfRGCm9+r6EYmKBKLjm55hM7x+zGzTvEQcBn5 SwcLhjin9obYBIAmGUtF/05E7r7MP7YeOEccjsoLIpPErczQv+6z2PPfMeY66foE JX6WVE7Ey17RIW5UuxaR6QEhEfSdd0U8G6+Xb2H0X92twA6k33IRMKolNqNT+s16 j11+zbnn2Py4fVaPdetcnNrrpy0mBdzRliKPBz/nsXo8Ki/0s/mtcOJFyqoNaRtj R0u/w2hv+dxCKUkl6xOTorGlvEVR6XUroSOY9SWIJBW6VQpmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXF3yZ5Ozp+OJ5QGrIzR8nLlXY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNzJiZTY4OTktMGE5Yy0z MTUxLThlMGQtZjc4NGQxZjU2YzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClY+IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxmvoAzmD9I8TRE4I19UDJ4fvS7vktPzV2cMlPieXzDUq6UaPzE9hl0 GIwVkCM4S1Q4MUM6LvLDkwhXv/bRSkImMjVa0vdewOp3YJfVt13hauZn/EYx/lAg mxcfCXKncCO7WOEWZf/WbSFvcjiQ7cv/cqaHwP2ntfKrP3qVDUGSx4P5YEsDr6c2 8U5gmdRMMlUWmYAyUY8XTqcag61tYBs9atgNqsyQA9FmG058eOseoyYqKszVav3l QqQHq8XTOalXUqjhCRXsk3rMV0yNwXCt0FoIAtcOl51GU/lUyucD1I2+5xikHeCS zUFS7hWqW8+a6DMLyDKG4XPQ4UwIYr0= -----END CERTIFICATE-----Generated at Sun Dec 7 15:59:37 2025 by rpki-client