This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa File: cef15028-7434-3d03-b64d-cb9105f2f885.roa (raw, json) Hash identifier: l2heecdQ06H6Ib6wwpZZLlSHufzZZWie1QfEtxn+2rk= Subject key identifier: C0:F8:70:64:A2:0F:15:EB:43:91:0A:28:9E:59:D4:2A:5E:75:BE:D2 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584BD760574D7FA76D07798A5300 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa Signing time: Thu 13 Nov 2025 02:00:31 +0000 ROA not before: Thu 13 Nov 2025 02:00:31 +0000 ROA not after: Wed 11 Feb 2026 02:00:31 +0000 asID: 34119 IP address blocks: 149.143.150.0/23 maxlen: 23 149.143.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d7:60:57:4d:7f:a7:6d:07:79:8a:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Nov 13 02:00:31 2025 GMT Not After : Feb 11 02:00:31 2026 GMT Subject: CN=4eaac154-9a45-41a6-b453-481203ee8738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:2e:cf:31:1c:aa:6f:13:3d:ce:8b:f5:94: f1:ce:fd:67:fc:c9:ae:7c:72:e9:4b:f3:0b:0b:4d: 7b:fe:9a:e2:a3:22:00:cd:91:c9:5e:3c:24:49:00: 7d:72:ec:00:77:6e:b3:da:51:0b:12:77:47:85:ed: f3:ba:51:2e:7c:f1:b6:93:9a:99:e6:c4:53:c2:02: a3:7d:26:20:95:27:82:2b:d2:f9:e9:c8:0c:88:86: 8e:30:f3:d6:11:89:d4:fa:97:c1:59:1b:5e:45:d8: ca:fc:70:a7:be:31:8b:f2:83:a2:4b:37:0f:7d:dc: 11:cd:c2:ee:42:43:56:81:34:44:13:c1:e7:e1:b1: 0b:ca:cd:89:97:03:13:c8:16:35:50:d8:64:2d:43: fd:94:be:06:ea:31:72:fb:0d:4d:11:31:05:be:e0: 39:6b:2b:df:69:f1:76:b4:9f:33:85:24:5c:3f:f0: e2:73:67:f7:b6:28:55:2f:74:c8:11:62:e3:c8:6b: 3a:03:90:d9:60:64:b1:82:11:5d:38:fe:bb:63:fc: ad:85:42:95:4d:ca:6a:09:8c:10:b7:b3:c7:c3:38: 2d:01:91:2d:37:50:ff:db:93:0e:17:fe:a1:3c:cc: 31:3e:28:c1:10:37:2b:4f:90:19:32:d1:25:35:19: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F8:70:64:A2:0F:15:EB:43:91:0A:28:9E:59:D4:2A:5E:75:BE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/cef15028-7434-3d03-b64d-cb9105f2f885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 149.143.150.0/23 149.143.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:a4:1a:e3:37:58:6d:b7:5b:42:dd:d4:47:38:4e:90:8b:29: 5e:dd:f8:8d:20:6e:6b:4d:e2:b8:e5:b4:66:9f:a3:61:16:3f: 89:47:fa:4f:0f:18:fd:0b:09:64:7f:b7:a7:ab:01:ef:21:7f: 82:28:36:39:bd:65:40:14:de:33:40:38:84:9e:33:ab:f7:3f: 3c:42:2a:eb:ae:cb:86:6d:46:54:ce:37:6f:ee:db:6d:f8:76: 64:22:c0:a3:5e:ed:f8:c6:f5:ae:8e:86:f3:f6:65:18:04:ec: 65:27:9f:07:a7:21:98:03:42:2f:ff:8e:f8:03:84:4d:1b:3a: 34:fb:5d:3d:18:67:7f:80:90:b3:a2:fa:84:1c:84:1d:f6:dd: b1:60:46:93:91:88:63:c3:4c:8b:3a:54:74:e5:7c:0e:3d:19: 1c:3d:ff:d5:f6:20:31:b2:0b:0d:c6:1c:d1:15:e6:77:72:d6: 22:ba:6d:53:bd:01:8a:1b:1a:ed:7b:68:b6:e8:7d:97:b2:67: 5c:69:c5:fa:1e:b1:23:e7:a8:8c:e2:4d:df:d2:6e:c9:f9:5c: 9f:9e:f1:80:ab:bc:07:a7:fa:c8:ec:73:51:90:7b:77:19:d1: d9:82:a9:b1:d0:45:33:b8:93:ee:5a:36:5d:75:1c:19:d7:1f: 25:c3:ef:3c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEvXYFdNf6dtB3mKUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI1MTExMzAyMDAzMVoXDTI2MDIxMTAyMDAzMVowLzEtMCsGA1UEAxMk NGVhYWMxNTQtOWE0NS00MWE2LWI0NTMtNDgxMjAzZWU4NzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpEuzzEcqm8TPc6L9ZTxzv1n/MmufHLpS/ML C017/prioyIAzZHJXjwkSQB9cuwAd26z2lELEndHhe3zulEufPG2k5qZ5sRTwgKj fSYglSeCK9L56cgMiIaOMPPWEYnU+pfBWRteRdjK/HCnvjGL8oOiSzcPfdwRzcLu QkNWgTREE8Hn4bELys2JlwMTyBY1UNhkLUP9lL4G6jFy+w1NETEFvuA5ayvfafF2 tJ8zhSRcP/Dic2f3tihVL3TIEWLjyGs6A5DZYGSxghFdOP67Y/ythUKVTcpqCYwQ t7PHwzgtAZEtN1D/25MOF/6hPMwxPijBEDcrT5AZMtElNRnLgwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMD4cGSiDxXrQ5EKKJ5Z1Cpedb7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvY2VmMTUwMjgtNzQzNC0z ZDAzLWI2NGQtY2I5MTA1ZjJmODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBlY+WAwQC lY+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC6kGuM3WG23W0Ld1Ec4TpCLKV7d+I0gbmtN4rjltGafo2EW P4lH+k8PGP0LCWR/t6erAe8hf4IoNjm9ZUAU3jNAOISeM6v3PzxCKuuuy4ZtRlTO N2/u2234dmQiwKNe7fjG9a6OhvP2ZRgE7GUnnwenIZgDQi//jvgDhE0bOjT7XT0Y Z3+AkLOi+oQchB323bFgRpORiGPDTIs6VHTlfA49GRw9/9X2IDGyCw3GHNEV5ndy 1iK6bVO9AYobGu17aLbofZeyZ1xpxfoesSPnqIziTd/Sbsn5XJ+e8YCrvAen+sjs c1GQe3cZ0dmCqbHQRTO4k+5aNl11HBnXHyXD7zw= -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:48 2025 by rpki-client