This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa File: 430e50a7-91f5-304d-9b3f-69a68efcd530.roa (raw, json) Hash identifier: U8lV47rakxpR+hkQhv6b5yhGN1HPAXpxMqDHQzwofJE= Subject key identifier: 6C:DD:16:B0:56:E4:97:71:00:6C:5A:3C:E5:7D:17:18:F9:85:75:9B Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584BE6BB234EE523E0F123B5D600 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa Signing time: Tue 18 Nov 2025 14:00:38 +0000 ROA not before: Tue 18 Nov 2025 14:00:38 +0000 ROA not after: Mon 16 Feb 2026 14:00:38 +0000 asID: 197730 IP address blocks: 107.151.224.0/21 maxlen: 21 107.151.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:bb:23:4e:e5:23:e0:f1:23:b5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Nov 18 14:00:38 2025 GMT Not After : Feb 16 14:00:38 2026 GMT Subject: CN=869d56f1-3a8e-4099-a4b5-52027ce899c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ab:2f:21:5a:2b:92:3a:13:e8:55:f4:0b:90: 49:01:31:81:e0:a8:4d:7a:e0:01:5a:53:a1:26:77: 79:c2:dc:0a:30:bc:0b:4b:5b:fc:83:66:3d:47:e9: f5:b5:c1:f3:06:fb:76:64:9a:f6:91:0d:88:89:7d: 8f:a1:04:11:70:62:eb:2b:0c:b4:e0:6a:42:4a:5d: ce:90:51:8e:26:23:f5:e2:54:90:e0:bd:c9:c9:cd: 84:ab:5a:60:fb:bf:5a:23:5c:6f:56:1f:4b:89:d1: fe:59:1e:30:74:97:51:f0:cb:7e:67:94:a4:86:03: 87:f2:2f:11:04:21:33:f2:e5:c8:2b:a9:23:d0:9a: 48:92:e9:ba:09:df:7a:b4:63:dc:52:ca:bf:1b:46: b0:e4:a2:74:d0:62:ab:5b:63:64:5d:a6:8f:14:c7: 8a:25:22:70:f7:d7:4f:97:6e:48:b2:cf:ba:ca:f3: b7:b7:c7:db:dc:25:bb:05:fa:68:f4:4b:e1:9e:0d: 96:ee:1e:45:51:55:e5:e6:94:00:d7:b5:34:4d:24: 35:cb:72:7d:3b:3d:47:52:41:4d:67:1f:3f:29:4b: 33:2a:30:38:22:9f:e5:45:c2:f6:a0:b4:a5:b1:99: 33:f7:98:76:a4:93:f5:f3:90:f5:35:16:91:de:71: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DD:16:B0:56:E4:97:71:00:6C:5A:3C:E5:7D:17:18:F9:85:75:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/430e50a7-91f5-304d-9b3f-69a68efcd530.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 107.151.224.0-107.151.233.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:b2:e6:55:e7:7a:92:b2:12:df:ed:aa:b1:bf:c2:69:e0:0f: f1:ff:67:e1:34:17:db:35:90:df:a6:57:ef:19:1c:3f:96:11: f5:df:a4:8e:35:ad:e9:d0:68:7a:b4:80:41:40:71:30:9f:47: 4d:7c:4d:d0:7e:3a:7e:44:30:98:e5:7d:b9:99:64:3c:30:13: 83:35:e4:7a:7a:db:1e:da:0a:0b:b0:f7:a5:4f:f6:5b:46:f9: c4:b3:30:38:fe:a1:0a:b0:13:2c:91:b8:f3:77:9c:11:d3:bf: 41:e0:b8:8d:99:78:1d:5d:0f:05:0e:c3:76:67:1f:bf:5d:78: ff:ee:b5:7f:f1:27:4f:14:79:58:f2:a3:49:4a:77:37:e0:e1: ba:dc:c8:75:4d:2a:a9:f9:89:3b:b6:a9:18:d2:a8:96:3e:cd: b1:69:2f:a6:b3:c7:f9:cc:c2:9a:d4:c7:ab:63:e7:42:8d:12: ba:17:d2:19:c6:80:26:9f:b7:c3:92:d6:ba:3a:12:5a:e8:e3: 1f:50:57:2d:2c:cb:b3:ee:a9:91:b9:dc:04:82:36:38:fa:0c: 88:77:00:21:84:85:b5:a5:32:44:54:c6:1c:e3:e5:bf:92:47: 95:89:dc:78:b2:d9:dd:16:0d:16:82:8f:55:bb:e4:14:97:01: 0f:e2:8e:08 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEvmuyNO5SPg8SO11gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI1MTExODE0MDAzOFoXDTI2MDIxNjE0MDAzOFowLzEtMCsGA1UEAxMk ODY5ZDU2ZjEtM2E4ZS00MDk5LWE0YjUtNTIwMjdjZTg5OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKsvIVorkjoT6FX0C5BJATGB4KhNeuABWlOh Jnd5wtwKMLwLS1v8g2Y9R+n1tcHzBvt2ZJr2kQ2IiX2PoQQRcGLrKwy04GpCSl3O kFGOJiP14lSQ4L3Jyc2Eq1pg+79aI1xvVh9LidH+WR4wdJdR8Mt+Z5SkhgOH8i8R BCEz8uXIK6kj0JpIkum6Cd96tGPcUsq/G0aw5KJ00GKrW2NkXaaPFMeKJSJw99dP l25Iss+6yvO3t8fb3CW7Bfpo9Evhng2W7h5FUVXl5pQA17U0TSQ1y3J9Oz1HUkFN Zx8/KUszKjA4Ip/lRcL2oLSlsZkz95h2pJP185D1NRaR3nHI/QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGzdFrBW5JdxAGxaPOV9Fxj5hXWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvNDMwZTUwYTctOTFmNS0z MDRkLTliM2YtNjlhNjhlZmNkNTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEANLLmVed6krIS3+2qsb/CaeAP8f9n4TQX2zWQ36ZX7xkc P5YR9d+kjjWt6dBoerSAQUBxMJ9HTXxN0H46fkQwmOV9uZlkPDATgzXkenrbHtoK C7D3pU/2W0b5xLMwOP6hCrATLJG483ecEdO/QeC4jZl4HV0PBQ7Ddmcfv114/+61 f/EnTxR5WPKjSUp3N+DhutzIdU0qqfmJO7apGNKolj7NsWkvprPH+czCmtTHq2Pn Qo0SuhfSGcaAJp+3w5LWujoSWujjH1BXLSzLs+6pkbncBII2OPoMiHcAIYSFtaUy RFTGHOPlv5JHlYnceLLZ3RYNFoKPVbvkFJcBD+KOCA== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:29 2025 by rpki-client